prosim o kontrolu

Zpráva

#16 Příspěvek od **Roli** » 05 kvě 2010 16:38

No nemusíš pokud dokážeš najít v PC :

c:\program files\setup_av_free.exe
c:\program files\Alwil Software
c:\program files\Crawler

a smazat.

Přes Start >> Ovládací panely >> Přidat nebo odebrat odinstaluj ICQ6Toolbar

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Pak dej vědět jaký je stav PC.

jarka112 · #17 Příspěvek od **jarka112** » 05 kvě 2010 16:42

no nic....idem to este raz skusit.Snad sa to podari.

jarka112 · #18 Příspěvek od **jarka112** » 05 kvě 2010 17:33

ComboFix 10-05-01.04 - Jarka 05.05.2010 18:15:36.7.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.895.495 [GMT 2:00]
Running from: C:\Documents and Settings\Jarka\Desktop\PROGRAMY\ComboFix.exe
Command switches used :: C:\Documents and Settings\Jarka\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

FILE ::
"c:\program files\setup_av_free.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
c:\program files\Crawler\common_ff.dat
c:\program files\Crawler\confirm.dat
c:\program files\Crawler\ctbcomm.dll
c:\program files\Crawler\CTConf.dat
c:\program files\Crawler\CTipsDef.dll
c:\program files\Crawler\CToolbar.exe
c:\program files\Crawler\CUpdate.exe
c:\program files\Crawler\firefox\components\xcomm.dll
c:\program files\Crawler\firefox\components\xplugin.xpt
c:\program files\Crawler\firefox\components\xshared.dll
c:\program files\Crawler\firefox\components\xshared.xpt
c:\program files\Crawler\firefox\components\xsupport.dll
c:\program files\Crawler\firefox\components\xsupport.xpt
c:\program files\Crawler\firefox\components\xwsg.dll
c:\program files\Crawler\firefox\chrome.manifest
c:\program files\Crawler\firefox\chrome\common.jar
c:\program files\Crawler\firefox\chrome\stwsg.jar
c:\program files\Crawler\firefox\install.ini
c:\program files\Crawler\firefox\install.rdf
c:\program files\Crawler\firefox\stwsg_ff.ini
c:\program files\Crawler\Languages\STWSG_CS.cab
c:\program files\Crawler\Languages\STWSG_DE.cab
c:\program files\Crawler\Languages\STWSG_EN.cab
c:\program files\Crawler\Languages\STWSG_ES.cab
c:\program files\Crawler\Languages\STWSG_FF.cab
c:\program files\Crawler\Languages\STWSG_FR.cab
c:\program files\Crawler\Languages\STWSG_IT.cab
c:\program files\Crawler\Languages\STWSG_NL.cab
c:\program files\Crawler\Languages\STWSG_PT-BR.cab
c:\program files\Crawler\Languages\STWSG_PT.cab
c:\program files\Crawler\Languages\STWSG_RU.cab
c:\program files\Crawler\Languages\TBR5_CS.cab
c:\program files\Crawler\Languages\TBR5_DE.cab
c:\program files\Crawler\Languages\TBR5_EN.cab
c:\program files\Crawler\Languages\TBR5_ES.cab
c:\program files\Crawler\Languages\TBR5_FR.cab
c:\program files\Crawler\Languages\TBR5_IT.cab
c:\program files\Crawler\Languages\TBR5_NL.cab
c:\program files\Crawler\Languages\TBR5_PL.cab
c:\program files\Crawler\Languages\TBR5_PT-BR.cab
c:\program files\Crawler\Languages\TBR5_PT.cab
c:\program files\Crawler\Languages\TBR5_RU.cab
c:\program files\Crawler\lookfor.dat
c:\program files\Crawler\majorse.dat
c:\program files\Crawler\rootmenu.dat
c:\program files\Crawler\services.dat
c:\program files\Crawler\STWSG_FF.dat
c:\program files\Crawler\STWSGLanguageAct\info.ini
c:\program files\Crawler\STWSGLanguageAct\language.ini
c:\program files\Crawler\TBR5LanguageAct\info.ini
c:\program files\Crawler\TBR5LanguageAct\language.ini
c:\program files\Crawler\WebSecurityGuard.dll
c:\program files\Crawler\WSGData\domains\domains_000.dat
c:\program files\Crawler\WSGData\domains\domains_000_diff.dat
c:\program files\Crawler\WSGData\domains\domains_001.dat
c:\program files\Crawler\WSGData\domains\domains_001_diff.dat
c:\program files\Crawler\WSGData\domains\domains_002.dat
c:\program files\Crawler\WSGData\domains\domains_002_diff.dat
c:\program files\Crawler\WSGData\domains\domains_003.dat
c:\program files\Crawler\WSGData\domains\domains_003_diff.dat
c:\program files\Crawler\WSGData\domains\domains_004.dat
c:\program files\Crawler\WSGData\domains\domains_004_diff.dat
c:\program files\Crawler\WSGData\domains\domains_005.dat
c:\program files\Crawler\WSGData\domains\domains_005_diff.dat
c:\program files\Crawler\WSGData\domains\domains_006.dat
c:\program files\Crawler\WSGData\domains\domains_006_diff.dat
c:\program files\Crawler\WSGData\domains\domains_007.dat
c:\program files\Crawler\WSGData\domains\domains_007_diff.dat
c:\program files\Crawler\WSGData\domains\domains_008.dat
c:\program files\Crawler\WSGData\domains\domains_008_diff.dat
c:\program files\Crawler\WSGData\domains\domains_009.dat
c:\program files\Crawler\WSGData\domains\domains_009_diff.dat
c:\program files\Crawler\WSGData\domains\domains_010.dat
c:\program files\Crawler\WSGData\domains\domains_010_diff.dat
c:\program files\Crawler\WSGData\domains\domains_011.dat
c:\program files\Crawler\WSGData\domains\domains_011_diff.dat
c:\program files\Crawler\WSGData\domains\domains_012.dat
c:\program files\Crawler\WSGData\domains\domains_012_diff.dat
c:\program files\Crawler\WSGData\domains\domains_013.dat
c:\program files\Crawler\WSGData\domains\domains_013_diff.dat
c:\program files\Crawler\WSGData\domains\domains_014.dat
c:\program files\Crawler\WSGData\domains\domains_014_diff.dat
c:\program files\Crawler\WSGData\domains\domains_015.dat
c:\program files\Crawler\WSGData\domains\domains_015_diff.dat
c:\program files\Crawler\WSGData\domains\domains_016.dat
c:\program files\Crawler\WSGData\domains\domains_016_diff.dat
c:\program files\Crawler\WSGData\domains\domains_017.dat
c:\program files\Crawler\WSGData\domains\domains_017_diff.dat
c:\program files\Crawler\WSGData\domains\domains_018.dat
c:\program files\Crawler\WSGData\domains\domains_018_diff.dat
c:\program files\Crawler\WSGData\domains\domains_019.dat
c:\program files\Crawler\WSGData\domains\domains_019_diff.dat
c:\program files\Crawler\WSGData\domains\domains_020.dat
c:\program files\Crawler\WSGData\domains\domains_020_diff.dat
c:\program files\Crawler\WSGData\domains\domains_021.dat
c:\program files\Crawler\WSGData\domains\domains_021_diff.dat
c:\program files\Crawler\WSGData\domains\domains_022.dat
c:\program files\Crawler\WSGData\domains\domains_022_diff.dat
c:\program files\Crawler\WSGData\domains\domains_023.dat
c:\program files\Crawler\WSGData\domains\domains_023_diff.dat
c:\program files\Crawler\WSGData\domains\domains_024.dat
c:\program files\Crawler\WSGData\domains\domains_024_diff.dat
c:\program files\Crawler\WSGData\domains\domains_025.dat
c:\program files\Crawler\WSGData\domains\domains_025_diff.dat
c:\program files\Crawler\WSGData\domains\domains_026.dat
c:\program files\Crawler\WSGData\domains\domains_026_diff.dat
c:\program files\Crawler\WSGData\domains\domains_027.dat
c:\program files\Crawler\WSGData\domains\domains_027_diff.dat
c:\program files\Crawler\WSGData\domains\domains_028.dat
c:\program files\Crawler\WSGData\domains\domains_028_diff.dat
c:\program files\Crawler\WSGData\domains\domains_029.dat
c:\program files\Crawler\WSGData\domains\domains_029_diff.dat
c:\program files\Crawler\WSGData\domains\domains_030.dat
c:\program files\Crawler\WSGData\domains\domains_030_diff.dat
c:\program files\Crawler\WSGData\domains\domains_031.dat
c:\program files\Crawler\WSGData\domains\domains_031_diff.dat
c:\program files\Crawler\WSGData\domains\domains_032.dat
c:\program files\Crawler\WSGData\domains\domains_032_diff.dat
c:\program files\Crawler\WSGData\domains\domains_033.dat
c:\program files\Crawler\WSGData\domains\domains_033_diff.dat
c:\program files\Crawler\WSGData\domains\domains_034.dat
c:\program files\Crawler\WSGData\domains\domains_034_diff.dat
c:\program files\Crawler\WSGData\domains\domains_035.dat
c:\program files\Crawler\WSGData\domains\domains_035_diff.dat
c:\program files\Crawler\WSGData\domains\domains_036.dat
c:\program files\Crawler\WSGData\domains\domains_036_diff.dat
c:\program files\Crawler\WSGData\domains\domains_037.dat
c:\program files\Crawler\WSGData\domains\domains_037_diff.dat
c:\program files\Crawler\WSGData\domains\domains_038.dat
c:\program files\Crawler\WSGData\domains\domains_038_diff.dat
c:\program files\Crawler\WSGData\domains\index.dat
c:\program files\Crawler\WSGData\g_S-1-5-21-1004336348-2111687655-725345543-1003.dat
c:\program files\Crawler\WSGData\ud_S-1-5-21-1004336348-2111687655-725345543-1003.dat
c:\program files\Crawler\WSGData\w_S-1-5-21-1004336348-2111687655-725345543-1003.dat
c:\program files\Crawler\WSGData\wfilter.dat
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\setup_av_free.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ICQ_SERVICE
-------\Service_ICQ Service

((((((((((((((((((((((((( Files Created from 2010-04-05 to 2010-05-05 )))))))))))))))))))))))))))))))
.

2010-05-03 17:05:26 . 2010-05-03 17:05:26 -------- d-----w- C:\Program Files\FLV Player X
2010-05-02 17:08:55 . 2008-11-10 09:41:34 32656 ----a-w- C:\WINDOWS\system32\msonpmon.dll
2010-05-02 17:08:55 . 2006-10-26 17:56:12 33104 ----a-w- C:\WINDOWS\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-05-01 19:44:46 . 2010-05-01 19:44:46 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\BlamGames
2010-05-01 18:35:38 . 2010-05-02 17:31:04 -------- d-----w- C:\Program Files\trend micro
2010-05-01 18:35:28 . 2010-05-01 18:36:47 -------- d-----w- C:\rsit
2010-05-01 14:28:27 . 2010-05-01 14:28:27 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Malwarebytes
2010-05-01 14:28:16 . 2010-04-29 13:39:38 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-05-01 14:28:15 . 2010-05-01 14:28:15 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-01 14:28:14 . 2010-04-29 13:39:26 20952 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-05-01 14:28:13 . 2010-05-02 11:01:13 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 11:10:48 . 2010-04-28 11:10:48 -------- d-----w- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft Help
2010-04-28 11:07:45 . 2010-04-28 11:07:45 -------- d-sh--w- C:\Documents and Settings\Default User\IETldCache
2010-04-28 11:06:42 . 2010-03-26 08:33:16 43008 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-04-28 11:06:41 . 2010-03-26 08:33:16 339456 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-04-28 11:06:41 . 2010-03-26 08:32:54 346112 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-04-28 11:06:37 . 2010-03-26 08:33:34 1496064 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-04-27 15:42:40 . 2009-08-06 17:23:46 274288 ----a-w- C:\WINDOWS\system32\mucltui.dll
2010-04-27 15:42:40 . 2009-08-06 17:23:46 215920 ----a-w- C:\WINDOWS\system32\muweb.dll
2010-04-27 15:26:39 . 2010-05-03 12:55:00 -------- d-----w- C:\Program Files\Microsoft Works
2010-04-27 15:24:53 . 2010-04-27 15:24:53 -------- d-----w- C:\Program Files\Microsoft.NET
2010-04-26 16:58:54 . 2010-04-26 17:00:16 19458560 ----a-w- C:\Program Files\IE8-Setup-Full.exe
2010-04-26 14:55:40 . 2010-04-26 14:55:40 -------- d-----w- C:\WINDOWS\system32\wbem\Repository
2010-04-25 17:12:42 . 2010-04-25 17:12:42 -------- d-----r- C:\MSOCache
2010-04-25 12:50:02 . 2010-04-25 12:50:06 -------- d-----w- C:\Program Files\DAEMON Tools
2010-04-25 08:41:51 . 2010-04-25 08:41:52 -------- d-----w- C:\Program Files\Microsoft Visual Studio 8
2010-04-25 08:34:27 . 2010-04-25 08:34:27 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\Microsoft Help
2010-04-25 08:33:33 . 2010-05-05 13:44:16 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-24 13:29:23 . 2010-02-23 12:04:10 1664256 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\IEToolbar.dll
2010-04-23 20:27:37 . 2010-04-23 20:27:37 -------- d-----w- C:\Program Files\Common Files\Skype
2010-04-22 08:15:14 . 2010-04-22 08:15:14 242696 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-04-22 08:13:44 . 2010-04-22 08:13:44 1689952 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-04-19 18:35:19 . 2010-04-19 18:35:19 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\AVG Security Toolbar
2010-04-18 13:32:57 . 2010-04-18 13:32:57 1035032 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-04-18 13:29:46 . 2010-04-18 13:29:47 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 13:29:44 . 2010-04-22 08:15:05 242896 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys
2010-04-18 13:29:38 . 2010-04-18 13:29:39 216200 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys
2010-04-18 13:29:37 . 2010-04-18 13:29:38 29512 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys
2010-04-18 13:29:33 . 2010-05-05 13:26:52 -------- d-----w- C:\WINDOWS\system32\drivers\Avg
2010-04-18 13:29:31 . 2010-04-24 13:29:23 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-04-18 13:27:07 . 2010-04-18 13:27:07 -------- d-----w- C:\Program Files\AVG
2010-04-18 13:26:52 . 2010-04-18 13:27:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\avg9
2010-04-17 11:50:32 . 2004-08-03 22:56:44 21504 ----a-w- C:\WINDOWS\system32\hidserv.dll
2010-04-17 11:50:31 . 2004-08-03 20:58:36 14848 ----a-w- C:\WINDOWS\system32\drivers\kbdhid.sys
2010-04-14 05:26:56 . 2010-03-10 06:15:52 420352 -c--a-w- C:\WINDOWS\system32\dllcache\vbscript.dll
2010-04-11 09:36:14 . 2010-04-11 09:37:29 22016192 ----a-w- C:\Program Files\DragonSetup.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-04 15:19:22 . 2009-02-24 17:03:08 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Skype
2010-05-04 15:17:57 . 2009-02-24 17:05:30 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\skypePM
2010-05-04 15:08:14 . 2008-12-18 21:27:58 69296 ----a-w- C:\Documents and Settings\Jarka\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-04 14:46:35 . 2008-12-18 16:36:18 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\ICQ
2010-05-02 17:07:28 . 2009-08-06 06:58:19 -------- d-----w- C:\Program Files\MSBuild
2010-05-02 12:01:44 . 2010-03-12 06:48:14 -------- d-----w- C:\Program Files\GoQ - NetRadio
2010-05-02 10:56:24 . 2010-01-14 06:40:40 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\HPAppData
2010-05-02 08:23:08 . 2010-02-17 14:56:13 -------- d-----w- C:\Program Files\MagicISO
2010-05-02 08:16:46 . 2009-03-07 17:07:50 -------- d-----w- C:\Program Files\Alawar
2010-04-30 14:36:28 . 2009-12-19 16:29:20 -------- d-----w- C:\Program Files\TuneUp Utilities 2008
2010-04-30 14:24:25 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Merscom
2010-04-26 15:54:26 . 2009-01-22 12:40:26 5058 -c--a-w- C:\WINDOWS\Help\hhcolreg.dat
2010-04-25 14:24:43 . 2010-02-15 16:45:53 -------- d-----w- C:\Program Files\The KMPlayer
2010-04-25 12:47:07 . 2009-04-25 17:56:29 -------- d-----w- C:\Program Files\D-Tools
2010-04-25 09:15:07 . 2009-06-14 17:18:32 -------- d-----w- C:\Program Files\MSECache
2010-04-24 14:44:57 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Merscom
2010-04-18 13:11:57 . 2010-03-10 18:00:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-04-18 13:04:29 . 2009-12-09 14:45:10 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Software Informer
2010-04-05 11:44:44 . 2009-04-10 12:57:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2010-04-05 11:28:09 . 2008-12-20 17:29:21 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Vso
2010-04-05 10:33:06 . 2010-04-05 07:35:51 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Magic3
2010-04-04 17:48:26 . 2010-03-12 07:07:46 -------- d-----w- C:\Program Files\FreeRapid-0.83U1
2010-04-04 17:22:45 . 2009-04-15 09:32:13 -------- d-----w- C:\Documents and Settings\All Users\Application Data\InterAction studios
2010-04-04 14:36:08 . 2008-12-26 14:58:38 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\VSO_HWE
2010-03-31 16:15:33 . 2010-02-01 16:20:52 -------- d-----w- C:\Program Files\ICQ7.0
2010-03-29 17:24:01 . 2009-01-13 18:20:34 15 ----a-w- C:\WINDOWS\popcinfo.dat
2010-03-29 16:16:24 . 2010-02-15 15:35:19 -------- d-----w- C:\Program Files\FreeCommander
2010-03-24 18:17:47 . 2010-03-24 08:04:49 952768 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeARM.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 70584 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeExtractFiles.dll
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\ReaderUpdater.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AcrobatUpdater.exe
2010-03-14 10:11:58 . 2010-01-02 10:18:53 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Meridian93
2010-03-12 15:49:34 . 2010-03-12 15:48:38 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Trymedia
2010-03-12 13:57:18 . 2010-03-12 12:45:25 -------- d-----w- C:\Program Files\Windows_Media_Player_11.0.5721.5145_CZ
2010-03-12 12:53:21 . 2010-03-12 12:53:20 -------- d-----w- C:\Program Files\Windows Media Connect 2
2010-03-12 07:08:26 . 2010-03-12 07:08:26 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\VitySoft
2010-03-12 06:47:30 . 2010-03-12 06:46:34 -------- d-----w- C:\Program Files\Java
2010-03-12 06:47:22 . 2010-03-12 06:47:22 -------- d-----w- C:\Program Files\Common Files\Java
2010-03-12 06:47:08 . 2010-03-12 06:47:08 503808 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcp71.dll
2010-03-12 06:47:08 . 2010-03-12 06:47:08 348160 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcr71.dll
2010-03-12 06:47:07 . 2010-03-12 06:47:07 499712 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\jmc.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 61440 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-sse.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 12800 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-d3d.dll
2010-03-12 06:46:38 . 2010-03-12 06:46:57 411368 ----a-w- C:\WINDOWS\system32\deploytk.dll
2010-03-10 06:15:52 . 2004-08-03 23:56:48 420352 ----a-w- C:\WINDOWS\system32\vbscript.dll
2010-02-25 06:24:37 . 2004-08-03 23:56:48 916480 ----a-w- C:\WINDOWS\system32\wininet.dll
2010-02-24 12:31:30 . 2004-08-03 22:15:18 454016 ----a-w- C:\WINDOWS\system32\drivers\mrxsmb.sys
2010-02-23 16:28:43 . 2008-12-22 19:49:20 306432 ----a-w- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-02-16 13:17:38 . 2004-08-03 22:18:32 2137088 ----a-w- C:\WINDOWS\system32\ntoskrnl.exe
2010-02-16 12:39:04 . 2004-08-03 22:59:02 2016768 ----a-w- C:\WINDOWS\system32\ntkrnlpa.exe
2010-02-12 10:03:03 . 2010-03-05 13:43:13 293376 ------w- C:\WINDOWS\system32\browserchoice.exe
2010-02-12 04:47:05 . 2004-08-03 23:56:42 100864 ----a-w- C:\WINDOWS\system32\6to4svc.dll
2010-02-11 12:01:43 . 2004-08-03 22:07:46 226880 ----a-w- C:\WINDOWS\system32\drivers\tcpip6.sys
2010-02-07 17:21:39 . 2010-02-07 17:22:11 737280 ----a-w- C:\WINDOWS\iun6002.exe
2009-11-09 19:42:57 . 2009-11-09 19:38:49 24772640 ----a-w- C:\Program Files\AdbeRdr90_sk_SK.exe
2009-08-05 14:54:02 . 2009-08-05 14:53:53 2427454 ----a-w- C:\Program Files\save2pc_light_setup.exe
2009-06-14 17:13:54 . 2009-06-14 17:13:53 28996120 ----a-w- C:\Program Files\FileFormatConverters.exe
2009-02-08 10:15:46 . 2009-02-08 10:15:46 7840 ----a-w- C:\Program Files\1029.dll
2008-12-20 07:00:12 . 2008-12-20 07:00:05 1886800 ----a-w- C:\Program Files\install_flash_player_10_active_x.exe
.

------- Sigcheck -------

[-] 2008-04-13 18:40:30 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\atapi.sys
[-] 2004-08-03 21:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\atapi.sys
[-] 2004-08-03 21:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\drivers\atapi.sys
[-] 2004-08-03 21:59:44 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\atapi.sys

[-] 2008-04-13 18:57:27 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\asyncmac.sys
[-] 2004-08-03 22:05:04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\asyncmac.sys
[-] 2004-08-03 22:05:04 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\drivers\asyncmac.sys

[-] 2001-08-23 11:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\beep.sys
[-] 2001-08-23 11:00:00 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\beep.sys

[-] 2008-04-13 18:39:47 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\kbdclass.sys
[-] 2004-08-03 21:58:34 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\drivers\kbdclass.sys

[-] 2008-04-13 19:20:37 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ndis.sys
[-] 2004-08-03 22:14:30 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\ndis.sys
[-] 2004-08-03 22:14:30 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\drivers\ndis.sys

[-] 2001-08-23 11:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\dllcache\null.sys
[-] 2001-08-23 11:00:00 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0 (XPClient.010817-1148)] . . C:\WINDOWS\system32\drivers\null.sys

[-] 2008-06-20 11:59:02 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 11:51:12 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 10:45:13 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\system32\dllcache\tcpip.sys
[-] 2008-06-20 10:45:13 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\system32\drivers\tcpip.sys
[-] 2008-06-20 10:44:42 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394 (xpsp_sp2_qfe.080620-1259)] . . C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 19:20:16 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\tcpip.sys
[-] 2004-08-03 22:14:42 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys

[-] 2008-04-14 00:11:50 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\browser.dll
[-] 2004-08-03 23:56:42 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\browser.dll
[-] 2004-08-03 23:56:42 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\browser.dll

[-] 2008-04-14 00:12:24 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\lsass.exe
[-] 2004-08-03 23:56:52 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\lsass.exe
[-] 2004-08-03 23:56:52 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\lsass.exe

[-] 2008-04-14 00:12:03 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\qmgr.dll
[-] 2004-08-03 23:56:46 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\qmgr.dll
[-] 2004-08-03 23:56:46 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\qmgr.dll

[-] 2009-02-09 12:10:48 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 10:56:36 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 10:20:34 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\system32\rpcss.dll
[-] 2009-02-09 10:20:34 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\system32\dllcache\rpcss.dll
[-] 2009-02-09 10:01:53 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 00:12:04 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\rpcss.dll
[7] 2005-07-26 04:39:49 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726 (xpsp_sp2_gdr.050725-1528)] . . C:\WINDOWS\$NtUninstallKB956572$\rpcss.dll
[7] 2005-07-26 04:20:40 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726 (xpsp.050725-1531)] . . C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[7] 2005-04-28 19:35:01 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665 (xpsp.050427-1553)] . . C:\WINDOWS\$hf_mig$\KB894391\SP2QFE\rpcss.dll
[7] 2005-04-28 19:31:11 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665 (xpsp_sp2_gdr.050427-1553)] . . C:\WINDOWS\$NtUninstallKB902400$\rpcss.dll
[-] 2004-08-03 23:56:46 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB894391$\rpcss.dll

[-] 2009-02-06 17:14:03 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\system32\services.exe
[-] 2009-02-06 17:14:03 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520 (xpsp_sp2_gdr.090206-1233)] . . C:\WINDOWS\system32\dllcache\services.exe
[-] 2009-02-06 11:11:05 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 11:06:24 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755 (xpsp_sp3_qfe.090206-1316)] . . C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 10:22:21 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 00:12:34 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\services.exe
[-] 2004-08-03 23:56:56 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB956572$\services.exe

[-] 2008-04-14 00:12:39 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\winlogon.exe
[-] 2004-08-03 23:56:58 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\winlogon.exe
[-] 2004-08-03 23:56:58 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\winlogon.exe

[-] 2008-04-14 00:11:51 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\cryptsvc.dll
[-] 2004-08-03 23:56:42 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\cryptsvc.dll
[-] 2004-08-03 23:56:42 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\cryptsvc.dll

[-] 2008-07-07 20:32:22 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . C:\WINDOWS\system32\es.dll
[-] 2008-07-07 20:32:22 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . C:\WINDOWS\system32\dllcache\es.dll
[-] 2008-07-07 20:26:58 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:23:18 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . C:\WINDOWS\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06:43 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . C:\WINDOWS\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11:53 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\es.dll
[7] 2005-07-26 04:20:28 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . C:\WINDOWS\$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-03 23:56:44 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . C:\WINDOWS\$NtUninstallKB950974$\es.dll

[-] 2008-04-14 00:11:54 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\imm32.dll
[-] 2004-08-03 23:56:44 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\imm32.dll
[-] 2004-08-03 23:56:44 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\imm32.dll

[-] 2009-03-21 14:18:57 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541 (xpsp_sp2_gdr.090321-1320)] . . C:\WINDOWS\system32\kernel32.dll
[-] 2009-03-21 14:18:57 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541 (xpsp_sp2_gdr.090321-1320)] . . C:\WINDOWS\system32\dllcache\kernel32.dll
[-] 2009-03-21 14:06:58 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 13:59:23 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781 (xpsp_sp3_qfe.090321-1341)] . . C:\WINDOWS\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 13:54:07 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541 (xpsp_sp2_qfe.090321-1324)] . . C:\WINDOWS\$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 00:11:56 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\kernel32.dll
[7] 2007-04-16 16:07:27 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119 (xpsp_sp2_qfe.070416-1259)] . . C:\WINDOWS\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[7] 2007-04-16 15:52:53 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)] . . C:\WINDOWS\$NtUninstallKB959426$\kernel32.dll
[-] 2004-08-03 23:56:44 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB935839$\kernel32.dll

[-] 2008-04-14 00:11:56 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\lpk.dll
[-] 2004-08-03 23:56:44 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\lpk.dll
[-] 2004-08-03 23:56:44 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\lpk.dll

[-] 2010-02-25 06:24:36 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\system32\mshtml.dll
[-] 2010-02-25 06:24:36 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\system32\dllcache\mshtml.dll
[-] 2010-02-25 06:19:43 . 974772C74DA7C7A8E7C813A9908A845F . 5946880 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
[-] 2009-12-22 05:42:47 . BD1365D9400C3DB84D76AE77318E1A8D . 3063808 . . [6.00.2900.3660 (xpsp_sp2_gdr.091216-1517)] . . C:\WINDOWS\ie8\mshtml.dll
[-] 2009-12-22 05:35:08 . 5747867041C33E26DA5CC893C9532DB8 . 3071488 . . [6.00.2900.3660 (xpsp_sp2_qfe.091216-1705)] . . C:\WINDOWS\$hf_mig$\KB978207\SP2QFE\mshtml.dll
[-] 2009-12-22 05:21:00 . A758F0891A87EE005848A0BC740A5B96 . 3071488 . . [6.00.2900.5921 (xpsp_sp3_gdr.091221-1718)] . . C:\WINDOWS\$hf_mig$\KB978207\SP3GDR\mshtml.dll
[-] 2009-12-22 05:05:05 . AD17006339C1934D86449F335C241FF1 . 3073536 . . [6.00.2900.5921 (xpsp_sp3_qfe.091221-1752)] . . C:\WINDOWS\$hf_mig$\KB978207\SP3QFE\mshtml.dll
[-] 2009-12-21 19:14:04 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\mshtml.dll
[-] 2009-12-21 19:09:28 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 19:08:22 . D1CF72C34BAF70C52797D1CB78D6EE92 . 3070976 . . [6.00.2900.5897 (xpsp_sp3_gdr.091028-1650)] . . C:\WINDOWS\$hf_mig$\KB976325\SP3GDR\mshtml.dll
[-] 2009-10-29 07:45:44 . C0F9AC6FAB2C788FFEE3E69585A0E93F . 5944320 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 07:45:37 . CBB1EF54B86EDB78649909DD1699E5CA . 5940736 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\mshtml.dll
[-] 2009-10-29 05:48:03 . 6CAFAA3E8C37CDD0D7441AF82807F70C . 3063296 . . [6.00.2900.3640 (xpsp_sp2_gdr.091027-1355)] . . C:\WINDOWS\$NtUninstallKB978207$\mshtml.dll
[-] 2009-10-29 05:23:02 . DA551BFEC150760A38A9AD0C95A8A71C . 3073024 . . [6.00.2900.5897 (xpsp_sp3_qfe.091028-1717)] . . C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\mshtml.dll
[-] 2009-10-29 05:04:12 . F3A9E882DF2F155C9395979FF9D7B0A7 . 3070976 . . [6.00.2900.3640 (xpsp_sp2_qfe.091027-1402)] . . C:\WINDOWS\$hf_mig$\KB976325\SP2QFE\mshtml.dll
[-] 2009-10-20 00:08:13 . 4FDC6E7E9B2683EA263CDC9A6203D898 . 3063296 . . [6.00.2900.3636 (xpsp_sp2_gdr.091019-1505)] . . C:\WINDOWS\$NtUninstallKB976325$\mshtml.dll
[-] 2009-10-20 00:00:35 . 57B9895B3720587DE96B70FD0F15270A . 3070976 . . [6.00.2900.3636 (xpsp_sp2_qfe.091019-1518)] . . C:\WINDOWS\$hf_mig$\KB976749\SP2QFE\mshtml.dll
[-] 2009-10-19 23:53:44 . 4D1EAA7E0B845D1B2E8D711AE754D0F2 . 3070976 . . [6.00.2900.5890 (xpsp_sp3_gdr.091019-1504)] . . C:\WINDOWS\$hf_mig$\KB976749\SP3GDR\mshtml.dll
[-] 2009-10-19 23:44:39 . 6C1B3294BCD1A38FDE6D965A96612756 . 3072512 . . [6.00.2900.5890 (xpsp_sp3_qfe.091019-1531)] . . C:\WINDOWS\$hf_mig$\KB976749\SP3QFE\mshtml.dll
[-] 2009-09-25 05:56:34 . 299423DFB7E8D8E179F685371C88A6A8 . 3063296 . . [6.00.2900.3627 (xpsp_sp2_gdr.090918-1238)] . . C:\WINDOWS\$NtUninstallKB976749$\mshtml.dll
[-] 2009-09-25 05:49:01 . 431D4C38E47AE0CAC1A52A185395A5F5 . 3070976 . . [6.00.2900.3627 (xpsp_sp2_qfe.090918-1245)] . . C:\WINDOWS\$hf_mig$\KB974455\SP2QFE\mshtml.dll
[-] 2009-09-25 05:37:10 . 601E18A9A8F0D0ED39692B593212378F . 3070976 . . [6.00.2900.5880 (xpsp_sp3_gdr.090924-1438)] . . C:\WINDOWS\$hf_mig$\KB974455\SP3GDR\mshtml.dll
[-] 2009-09-25 05:32:42 . 37F578776552FA076EA6085F0365209C . 3072512 . . [6.00.2900.5880 (xpsp_sp3_qfe.090924-1448)] . . C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\mshtml.dll
[-] 2009-07-18 16:20:31 . 108F212B0E1B4439B014497EEC407981 . 3062272 . . [6.00.2900.3603 (xpsp_sp2_gdr.090718-1246)] . . C:\WINDOWS\$NtUninstallKB974455$\mshtml.dll
[-] 2009-07-18 16:05:06 . 7467941BE64DFC5F8E9F3DC1DE920806 . 3069440 . . [6.00.2900.5848 (xpsp_sp3_gdr.090718-1251)] . . C:\WINDOWS\$hf_mig$\KB972260\SP3GDR\mshtml.dll
[-] 2009-07-18 16:00:18 . 9A878C4D12BE5598B598B27BFEA1B3C2 . 3069440 . . [6.00.2900.3603 (xpsp_sp2_qfe.090718-1252)] . . C:\WINDOWS\$hf_mig$\KB972260\SP2QFE\mshtml.dll
[-] 2009-07-18 15:31:56 . F3EE47F296295D08A97CB50EF57244D9 . 3069952 . . [6.00.2900.5848 (xpsp_sp3_qfe.090718-1313)] . . C:\WINDOWS\$hf_mig$\KB972260\SP3QFE\mshtml.dll
[-] 2009-04-29 04:52:44 . 04AB92BFDDF275D50E3D42CDB4BF110E . 3060736 . . [6.00.2900.3562 (xpsp_sp2_gdr.090427-1232)] . . C:\WINDOWS\$NtUninstallKB972260$\mshtml.dll
[-] 2009-04-29 04:46:56 . ABD8093E43E53AEA5898D2214B92E9BA . 3068928 . . [6.00.2900.5803 (xpsp_sp3_gdr.090428-1325)] . . C:\WINDOWS\$hf_mig$\KB969897\SP3GDR\mshtml.dll
[-] 2009-04-29 04:31:52 . 7BB862F4CBB8361551C34674291BA5EC . 3068928 . . [6.00.2900.3562 (xpsp_sp2_qfe.090427-1240)] . . C:\WINDOWS\$hf_mig$\KB969897\SP2QFE\mshtml.dll
[-] 2009-04-29 04:21:13 . 06CF679E3D24C3DF270556456A0F1EDA . 3069440 . . [6.00.2900.5803 (xpsp_sp3_qfe.090428-1347)] . . C:\WINDOWS\$hf_mig$\KB969897\SP3QFE\mshtml.dll
[-] 2009-03-08 03:41:16 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB976325-IE8\mshtml.dll
[-] 2009-02-20 21:44:52 . 03D98EB3F7BBD1FA14C650597F1989BC . 3067904 . . [6.00.2900.3527 (xpsp_sp2_qfe.090219-1311)] . . C:\WINDOWS\$hf_mig$\KB963027\SP2QFE\mshtml.dll
[-] 2009-02-20 08:30:24 . B20FEE1734EF152AAA8D6C5A938DA902 . 3059712 . . [6.00.2900.3527 (xpsp_sp2_gdr.090219-1253)] . . C:\WINDOWS\$NtUninstallKB969897$\mshtml.dll
[-] 2009-02-20 08:11:01 . 2F70F2F74C40397D031016FA162981C2 . 3068416 . . [6.00.2900.5764 (xpsp_sp3_gdr.090219-1240)] . . C:\WINDOWS\$hf_mig$\KB963027\SP3GDR\mshtml.dll
[-] 2009-02-20 07:50:56 . 1618A4A2C5DD8164B8295190C8EA6544 . 3068416 . . [6.00.2900.5764 (xpsp_sp3_qfe.090219-1311)] . . C:\WINDOWS\$hf_mig$\KB963027\SP3QFE\mshtml.dll
[-] 2008-12-12 17:33:23 . C8169B4320AC0CB8D1ED20454322E839 . 3060224 . . [6.00.2900.3492 (xpsp_sp2_gdr.081212-1610)] . . C:\WINDOWS\$NtUninstallKB963027$\mshtml.dll
[-] 2008-12-12 17:27:54 . 6D1D493622EA050DBAABD0C4C1DFADB5 . 3067392 . . [6.00.2900.3492 (xpsp_sp2_qfe.081212-1622)] . . C:\WINDOWS\$hf_mig$\KB960714\SP2QFE\mshtml.dll
[-] 2008-12-12 17:14:50 . B6DAA74E2ED36C71B502945589A683AE . 3067904 . . [6.00.2900.5726 (xpsp_sp3_qfe.081212-1451)] . . C:\WINDOWS\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 17:01:00 . C828AA1C5469E72251F3D367005E589F . 3067904 . . [6.00.2900.5726 (xpsp_sp3_gdr.081212-1450)] . . C:\WINDOWS\$hf_mig$\KB960714\SP3GDR\mshtml.dll
[-] 2008-10-16 10:20:56 . C99D8B48FC245D98E1A2BAB6594458C9 . 3067392 . . [6.00.2900.3462 (xpsp_sp2_qfe.081015-1657)] . . C:\WINDOWS\$hf_mig$\KB958215\SP2QFE\mshtml.dll
[-] 2008-10-16 05:34:08 . CC5A2205D37AE67CE23AB7FD3E1FDACA . 3067904 . . [6.00.2900.5694 (xpsp_sp3_qfe.081015-1409)] . . C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-10-16 01:00:11 . B846C2DE341CF32B42AD297437233742 . 3067904 . . [6.00.2900.5694 (xpsp_sp3_gdr.081015-1312)] . . C:\WINDOWS\$hf_mig$\KB958215\SP3GDR\mshtml.dll
[-] 2008-04-14 00:11:59 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\mshtml.dll

[-] 2008-04-14 00:12:51 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\asms\70\msft\windows\mswincrt\msvcrt.dll
[-] 2008-04-14 00:12:01 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\msvcrt.dll
[-] 2004-08-03 23:56:44 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\msvcrt.dll
[-] 2004-08-03 23:56:44 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\msvcrt.dll

[-] 2008-06-20 17:46:57 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 17:43:05 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625 (xpsp_sp3_qfe.080620-1309)] . . C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 17:41:10 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\system32\mswsock.dll
[-] 2008-06-20 17:41:10 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394 (xpsp_sp2_gdr.080620-1245)] . . C:\WINDOWS\system32\dllcache\mswsock.dll
[-] 2008-06-20 17:36:11 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394 (xpsp_sp2_qfe.080620-1259)] . . C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 00:12:01 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\mswsock.dll
[-] 2004-08-03 23:56:46 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\$NtUninstallKB951748$\mswsock.dll

[-] 2009-02-06 18:46:09 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[-] 2009-02-06 18:46:09 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520 (xpsp_sp2_qfe.090206-1239)] . . C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[-] 2008-04-14 00:12:01 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\netlogon.dll
[-] 2004-08-03 23:56:46 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\netlogon.dll
[-] 2004-08-03 23:56:46 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\netlogon.dll

[-] 2008-04-14 00:12:03 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\powrprof.dll
[-] 2004-08-03 23:56:46 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\powrprof.dll
[-] 2004-08-03 23:56:46 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\powrprof.dll

[-] 2008-04-14 00:12:05 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\scecli.dll
[-] 2004-08-03 23:56:46 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\scecli.dll
[-] 2004-08-03 23:56:46 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\scecli.dll

jarka112 · #19 Příspěvek od **jarka112** » 05 kvě 2010 17:34

-] 2008-04-14 00:12:05 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\scecli.dll
[-] 2004-08-03 23:56:46 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\scecli.dll
[-] 2004-08-03 23:56:46 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\scecli.dll

[-] 2008-04-14 00:12:05 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\sfc.dll
[-] 2004-08-03 23:56:46 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\sfc.dll
[-] 2004-08-03 23:56:46 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\sfc.dll

[-] 2008-04-14 00:12:36 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\svchost.exe
[-] 2004-08-03 23:56:58 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\svchost.exe
[-] 2004-08-03 23:56:58 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\svchost.exe

[-] 2008-04-14 00:12:38 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\userinit.exe
[-] 2004-08-03 23:56:58 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\userinit.exe
[-] 2004-08-03 23:56:58 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\userinit.exe

[-] 2010-02-25 06:24:37 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\system32\wininet.dll
[-] 2010-02-25 06:24:37 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904 (longhorn_ie8_gdr.100222-1700)] . . C:\WINDOWS\system32\dllcache\wininet.dll
[-] 2010-02-25 06:19:44 . 4458D59F2B0369F4D3B137541D284041 . 919040 . . [8.00.6001.22995 (longhorn_ie8_ldr.100223-0100)] . . C:\WINDOWS\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
[-] 2009-12-22 05:42:49 . A59054653A2DA13132BE377A650971C9 . 662016 . . [6.00.2900.3660 (xpsp_sp2_gdr.091216-1517)] . . C:\WINDOWS\ie8\wininet.dll
[-] 2009-12-22 05:35:11 . 3E617A36A895363FBBE6D1D0405D7E12 . 668672 . . [6.00.2900.3660 (xpsp_sp2_qfe.091216-1705)] . . C:\WINDOWS\$hf_mig$\KB978207\SP2QFE\wininet.dll
[-] 2009-12-22 05:21:05 . 814C265012ED921443C515A591D5BFE1 . 667136 . . [6.00.2900.5921 (xpsp_sp3_gdr.091221-1718)] . . C:\WINDOWS\$hf_mig$\KB978207\SP3GDR\wininet.dll
[-] 2009-12-22 05:05:07 . BD27AF5C72D2FBFE491D3A3A8429B974 . 668672 . . [6.00.2900.5921 (xpsp_sp3_qfe.091221-1752)] . . C:\WINDOWS\$hf_mig$\KB978207\SP3QFE\wininet.dll
[-] 2009-12-21 19:14:05 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876 (longhorn_ie8_gdr.091218-1700)] . . C:\WINDOWS\ie8updates\KB980182-IE8\wininet.dll
[-] 2009-12-21 19:09:28 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967 (longhorn_ie8_ldr.091219-0100)] . . C:\WINDOWS\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 07:45:45 . 6AF52998B90F72FF2325D84D90EDA1CC . 916480 . . [8.00.6001.22945 (longhorn_ie8_ldr.091027-0100)] . . C:\WINDOWS\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 07:45:38 . 75240F6EDBCE7B85DF66874407D38A4F . 916480 . . [8.00.6001.18854 (longhorn_ie8_gdr.091026-1700)] . . C:\WINDOWS\ie8updates\KB978207-IE8\wininet.dll
[-] 2009-10-29 05:48:04 . 228ECFDD44D2D9234BDC6E3FA749AE99 . 662016 . . [6.00.2900.3640 (xpsp_sp2_gdr.091027-1355)] . . C:\WINDOWS\$NtUninstallKB978207$\wininet.dll
[-] 2009-10-29 05:38:23 . 3839BD07F2C693EFE995F96BAAB7F4BF . 667136 . . [6.00.2900.5897 (xpsp_sp3_gdr.091028-1650)] . . C:\WINDOWS\$hf_mig$\KB976325\SP3GDR\wininet.dll
[-] 2009-10-29 05:23:03 . 6AC4AA42CC9AAEFAB1D5E4E2AF2E3D2B . 668672 . . [6.00.2900.5897 (xpsp_sp3_qfe.091028-1717)] . . C:\WINDOWS\$hf_mig$\KB976325\SP3QFE\wininet.dll
[-] 2009-10-29 05:04:25 . DF1F2953B7983F9630CD658899826344 . 668672 . . [6.00.2900.3640 (xpsp_sp2_qfe.091027-1402)] . . C:\WINDOWS\$hf_mig$\KB976325\SP2QFE\wininet.dll
[-] 2009-09-25 05:56:36 . C48F75D1733A4725C0F90430D44F56E2 . 662016 . . [6.00.2900.3627 (xpsp_sp2_gdr.090918-1238)] . . C:\WINDOWS\$NtUninstallKB976325$\wininet.dll
[-] 2009-09-25 05:49:02 . AE710BE3F4A9F9B0948C3183D49717A0 . 668672 . . [6.00.2900.3627 (xpsp_sp2_qfe.090918-1245)] . . C:\WINDOWS\$hf_mig$\KB974455\SP2QFE\wininet.dll
[-] 2009-09-25 05:37:11 . 178CF0F58C9907633AAB633860B68973 . 667136 . . [6.00.2900.5880 (xpsp_sp3_gdr.090924-1438)] . . C:\WINDOWS\$hf_mig$\KB974455\SP3GDR\wininet.dll
[-] 2009-09-25 05:32:43 . 406D33F9B30FFC0EEFC7C55562839931 . 668672 . . [6.00.2900.5880 (xpsp_sp3_qfe.090924-1448)] . . C:\WINDOWS\$hf_mig$\KB974455\SP3QFE\wininet.dll
[-] 2009-06-26 16:50:05 . 70FFEA4793D7139A447B169CB0E500BC . 666624 . . [6.00.2900.5835 (xpsp_sp3_gdr.090626-1535)] . . C:\WINDOWS\$hf_mig$\KB972260\SP3GDR\wininet.dll
[-] 2009-06-26 16:42:25 . 8553E6D4EC1563277323E6B2D6FBB954 . 668160 . . [6.00.2900.5835 (xpsp_sp3_qfe.090626-1600)] . . C:\WINDOWS\$hf_mig$\KB972260\SP3QFE\wininet.dll
[-] 2009-06-26 16:18:54 . ED97493090DA8871F4EB76E1FF3F6A78 . 659456 . . [6.00.2900.3592 (xpsp_sp2_gdr.090622-1453)] . . C:\WINDOWS\$NtUninstallKB974455$\wininet.dll
[-] 2009-06-26 15:59:38 . CF0B7B2738BEF0EB87673393CB7EA06E . 668160 . . [6.00.2900.3592 (xpsp_sp2_qfe.090622-1503)] . . C:\WINDOWS\$hf_mig$\KB972260\SP2QFE\wininet.dll
[-] 2009-04-29 04:52:40 . 9D6E5AEB8F237E03D5892951EB3D6A7E . 659456 . . [6.00.2900.3562 (xpsp_sp2_gdr.090427-1232)] . . C:\WINDOWS\$NtUninstallKB972260$\wininet.dll
[-] 2009-04-29 04:46:53 . 6002073519FA478BF89977369CDFD156 . 666624 . . [6.00.2900.5803 (xpsp_sp3_gdr.090428-1325)] . . C:\WINDOWS\$hf_mig$\KB969897\SP3GDR\wininet.dll
[-] 2009-04-29 04:31:49 . 9E36A148748C5DE4EA1F47B9B625F412 . 668160 . . [6.00.2900.3562 (xpsp_sp2_qfe.090427-1240)] . . C:\WINDOWS\$hf_mig$\KB969897\SP2QFE\wininet.dll
[-] 2009-04-29 04:21:11 . 04BCB4F87B35502568F6CF33433543A5 . 668160 . . [6.00.2900.5803 (xpsp_sp3_qfe.090428-1347)] . . C:\WINDOWS\$hf_mig$\KB969897\SP3QFE\wininet.dll
[-] 2009-03-08 03:34:58 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)] . . C:\WINDOWS\ie8updates\KB976325-IE8\wininet.dll
[-] 2009-02-20 08:30:23 . F1DBF177AA0DB2150E626595D0EFF604 . 659456 . . [6.00.2900.3527 (xpsp_sp2_gdr.090219-1253)] . . C:\WINDOWS\$NtUninstallKB969897$\wininet.dll
[-] 2009-02-20 08:14:48 . 1EA0E6DD74199209D60991FD46CE8643 . 668160 . . [6.00.2900.3527 (xpsp_sp2_qfe.090219-1311)] . . C:\WINDOWS\$hf_mig$\KB963027\SP2QFE\wininet.dll
[-] 2009-02-20 08:10:59 . 5B6A3EB7BB2F338BC2CB9F2FA4AAEA9E . 666112 . . [6.00.2900.5764 (xpsp_sp3_gdr.090219-1240)] . . C:\WINDOWS\$hf_mig$\KB963027\SP3GDR\wininet.dll
[-] 2009-02-20 07:50:53 . 711FEABED387B29FF7ED61BC6806A06C . 667648 . . [6.00.2900.5764 (xpsp_sp3_qfe.090219-1311)] . . C:\WINDOWS\$hf_mig$\KB963027\SP3QFE\wininet.dll
[-] 2008-10-16 10:37:03 . 6F1E4BFD78C4E0D05FF3725D59B72925 . 659456 . . [6.00.2900.3462 (xpsp_sp2_gdr.081015-1244)] . . C:\WINDOWS\$NtUninstallKB963027$\wininet.dll
[-] 2008-10-16 10:20:49 . 93C9D0A216498EE14EB9B26119BB95EE . 667648 . . [6.00.2900.3462 (xpsp_sp2_qfe.081015-1657)] . . C:\WINDOWS\$hf_mig$\KB958215\SP2QFE\wininet.dll
[-] 2008-10-16 01:04:06 . E8FCE58A470999350F64C591557F9E42 . 667136 . . [6.00.2900.5694 (xpsp_sp3_qfe.081015-1409)] . . C:\WINDOWS\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 01:00:11 . 1576318BF08D28CC61D1278114AD8D5B . 666112 . . [6.00.2900.5694 (xpsp_sp3_gdr.081015-1312)] . . C:\WINDOWS\$hf_mig$\KB958215\SP3GDR\wininet.dll
[-] 2008-04-14 00:12:08 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\wininet.dll

[-] 2008-04-14 00:12:10 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ws2_32.dll
[-] 2004-08-03 23:56:48 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ws2_32.dll
[-] 2004-08-03 23:56:48 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\ws2_32.dll

[-] 2008-04-14 00:12:07 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\srsvc.dll
[-] 2004-08-03 23:56:46 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\srsvc.dll
[-] 2004-08-03 23:56:46 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\srsvc.dll

[-] 2008-04-14 00:12:41 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\wscntfy.exe
[-] 2004-08-03 23:56:58 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\wscntfy.exe
[-] 2004-08-03 23:56:58 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\wscntfy.exe

[-] 2008-04-14 00:12:11 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\xmlprov.dll
[-] 2004-08-03 23:56:48 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\xmlprov.dll
[-] 2004-08-03 23:56:48 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\xmlprov.dll

[-] 2008-04-14 00:11:53 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\eventlog.dll
[-] 2004-08-03 23:56:44 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\eventlog.dll
[-] 2004-08-03 23:56:44 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\eventlog.dll

[-] 2008-04-14 00:12:05 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\sfcfiles.dll
[-] 2004-08-03 23:56:46 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\sfcfiles.dll
[-] 2004-08-03 23:56:46 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\sfcfiles.dll

[-] 2008-04-14 00:12:16 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512 (xpsp.080413-2105)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ctfmon.exe
[-] 2004-08-03 23:56:50 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ctfmon.exe
[-] 2004-08-03 23:56:50 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\ctfmon.exe

[-] 2008-04-14 00:12:04 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\regsvc.dll
[-] 2004-08-03 23:56:46 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\regsvc.dll
[-] 2004-08-03 23:56:46 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\regsvc.dll

[-] 2008-04-14 00:12:05 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512 (xpsp.080413-2108)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\schedsvc.dll
[-] 2004-08-03 23:56:46 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\schedsvc.dll
[-] 2004-08-03 23:56:46 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\schedsvc.dll

[-] 2008-04-14 00:12:07 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ssdpsrv.dll
[-] 2004-08-03 23:56:46 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\ssdpsrv.dll
[-] 2004-08-03 23:56:46 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\ssdpsrv.dll

[-] 2008-04-14 00:12:07 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512 (xpsp.080413-2111)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\termsrv.dll
[-] 2004-08-03 23:56:48 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\termsrv.dll
[-] 2004-08-03 23:56:48 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\termsrv.dll

[-] 2008-04-14 00:11:49 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\appmgmts.dll
[-] 2004-08-03 23:56:42 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\appmgmts.dll
[-] 2004-08-03 23:56:42 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\appmgmts.dll

[-] 2001-08-23 11:00:00 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0 (xpclient.010817-1148)] . . C:\WINDOWS\system32\drivers\acpiec.sys

[-] 2008-04-13 18:53:34 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512 (xpsp.080413-0852)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ip6fw.sys
[-] 2004-08-03 22:00:08 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\ip6fw.sys
[-] 2004-08-03 22:00:08 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\drivers\ip6fw.sys

[-] 2008-04-14 00:11:59 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512 (xpsp.080413-2113)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\msgsvc.dll
[-] 2004-08-03 23:56:44 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\msgsvc.dll
[-] 2004-08-03 23:56:44 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\msgsvc.dll

[-] 2006-10-18 20:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\mspmsnsv.dll
[-] 2006-10-18 20:47:16 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . C:\WINDOWS\system32\dllcache\mspmsnsv.dll
[-] 2004-08-11 00:45:04 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . C:\WINDOWS\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-11 00:45:04 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[7] 2004-08-03 23:56:44 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . C:\WINDOWS\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2008-04-14 00:12:02 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ntmssvc.dll
[-] 2004-08-03 23:56:46 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . C:\WINDOWS\system32\ntmssvc.dll
[-] 2004-08-03 23:56:46 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . C:\WINDOWS\system32\dllcache\ntmssvc.dll

[-] 2008-04-14 00:11:52 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512 (xpsp.080413-0845)] . . C:\WINDOWS\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\dsound.dll
[-] 2004-08-03 23:56:44 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dsound.dll
[-] 2004-08-03 23:56:44 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180 (xpsp_sp2_rtm.040803-2158)] . . C:\WINDOWS\system32\dllcache\dsound.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-05-03_15.03.53 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-06-14 16:59:55 . 2010-05-03 13:03:08 40960 C:\WINDOWS\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\wrdvicon.exe
+ 2009-06-14 16:59:55 . 2010-05-05 13:39:41 40960 C:\WINDOWS\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\wrdvicon.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:42 35088 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:23 35088 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 18704 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:42 18704 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 20240 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:41 20240 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-04-27 15:27:52 . 2010-05-03 13:02:13 35088 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-04-27 15:27:52 . 2010-05-05 13:44:14 35088 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\oisicon.exe
+ 2010-04-27 15:27:52 . 2010-05-05 13:44:13 18704 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\mspicons.exe
- 2010-04-27 15:27:52 . 2010-05-03 13:02:13 18704 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\mspicons.exe
+ 2010-04-27 15:27:52 . 2010-05-05 13:44:13 20240 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\cagicon.exe
- 2010-04-27 15:27:52 . 2010-05-03 13:02:13 20240 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-04-02 12:23:48 . 2009-04-02 12:23:48 10104 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XLCALL32.DLL
+ 2009-04-03 16:01:20 . 2009-04-03 16:01:20 71504 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNVP.DLL
+ 2009-04-03 15:57:58 . 2009-04-03 15:57:58 21320 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12EXE.EXE
+ 2009-03-04 15:24:56 . 2009-03-04 15:24:56 54088 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SCANOST.EXE
+ 2009-03-04 15:24:54 . 2009-03-04 15:24:54 75608 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\RM.DLL
+ 2009-03-04 15:24:54 . 2009-03-04 15:24:54 38240 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\RECALL.DLL
+ 2009-01-06 19:31:26 . 2009-01-06 19:31:26 48512 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PUBTRAP.DLL
+ 2009-03-04 15:24:50 . 2009-03-04 15:24:50 52072 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLVBA.DLL
+ 2008-11-24 20:32:22 . 2008-11-24 20:32:22 46928 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLRPC.DLL
+ 2008-10-25 06:18:50 . 2008-10-25 06:18:50 72568 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONFILTER.DLL
+ 2008-10-25 06:18:50 . 2008-10-25 06:18:50 98696 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONENOTEM.EXE
+ 2008-10-30 19:24:06 . 2008-10-30 19:24:06 21368 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MLSHEXT.DLL
+ 2009-03-04 15:24:22 . 2009-03-04 15:24:22 34192 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\DUMPSTER.DLL
+ 2009-03-04 15:24:20 . 2009-03-04 15:24:20 87392 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\DLGSETP.DLL
+ 2006-10-26 20:58:26 . 2006-10-26 20:58:26 33080 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VPREVIEW.EXE
+ 2009-05-26 16:53:56 . 2009-05-26 16:53:56 579072 C:\WINDOWS\Installer\2946d.msp
- 2009-06-14 16:59:55 . 2010-05-03 13:03:08 135168 C:\WINDOWS\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-06-14 16:59:55 . 2010-05-05 13:39:41 135168 C:\WINDOWS\Installer\{90850409-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:42 888080 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 888080 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 272648 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:41 272648 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 922384 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:41 922384 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2010-05-02 17:08:59 . 2010-05-03 13:03:41 845584 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-05-02 17:08:59 . 2010-05-05 13:43:22 845584 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-05-02 17:09:00 . 2010-05-05 13:43:22 217864 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
- 2010-05-02 17:09:00 . 2010-05-03 13:03:41 217864 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2010-05-02 17:08:59 . 2010-05-05 13:43:21 184080 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2010-05-02 17:08:59 . 2010-05-03 13:03:41 184080 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
+ 2010-05-02 17:08:59 . 2010-05-05 13:43:21 159504 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
- 2010-05-02 17:08:59 . 2010-05-03 13:03:41 159504 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2010-04-27 15:27:52 . 2010-05-05 13:44:13 888080 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-04-27 15:27:52 . 2010-05-03 13:02:13 888080 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\wordicon.exe
- 2010-04-27 15:27:51 . 2010-05-03 13:02:13 922384 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\pptico.exe
+ 2010-04-27 15:27:51 . 2010-05-05 13:44:12 922384 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\pptico.exe
- 2010-04-27 15:27:51 . 2010-05-03 13:02:12 845584 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-04-27 15:27:51 . 2010-05-05 13:44:12 845584 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\outicon.exe
+ 2010-04-27 15:27:51 . 2010-05-05 13:44:13 217864 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\misc.exe
- 2010-04-27 15:27:51 . 2010-05-03 13:02:13 217864 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\misc.exe
+ 2009-04-03 16:11:48 . 2009-04-03 16:11:48 408424 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WINWORD.EXE
+ 2009-03-04 15:24:58 . 2009-03-04 15:24:58 282032 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SCNPST64.DLL
+ 2009-03-04 15:24:56 . 2009-03-04 15:24:56 273320 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SCNPST32.DLL
+ 2009-03-06 00:06:04 . 2009-03-06 00:06:04 407904 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\RTFHTML.DLL
+ 2009-03-06 01:41:46 . 2009-03-06 01:41:46 589704 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PUBCONV.DLL
+ 2009-01-08 08:59:58 . 2009-01-08 08:59:58 624520 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PTXT9.DLL
+ 2009-03-04 15:24:52 . 2009-03-04 15:24:52 420696 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PSTPRX32.DLL
+ 2008-10-25 04:21:30 . 2008-10-25 04:21:30 136072 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PRTF9.DLL
+ 2010-05-03 12:57:52 . 2010-05-03 12:57:52 350064 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PPTPIA.DLL
+ 2009-04-03 16:04:02 . 2009-04-03 16:04:02 521064 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\POWERPNT.EXE
+ 2008-11-20 22:49:02 . 2008-11-20 22:49:02 169360 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLPH.DLL
+ 2009-03-06 00:05:52 . 2009-03-06 00:05:52 593288 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLMIME.DLL
+ 2008-10-30 19:24:14 . 2008-10-30 19:24:14 137552 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLCTL.DLL
+ 2008-10-25 05:52:00 . 2008-10-25 05:52:00 664968 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONBTTNOL.DLL
+ 2008-10-25 05:52:00 . 2008-10-25 05:52:00 604056 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONBTTNIE.DLL
+ 2009-03-06 02:55:50 . 2009-03-06 02:55:50 194448 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OMSXP32.DLL
+ 2009-03-06 02:55:50 . 2009-03-06 02:55:50 661888 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OMSMAIN.DLL
+ 2009-03-04 15:24:32 . 2009-03-04 15:24:32 253808 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OLKFSTUB.DLL
+ 2008-11-03 22:04:40 . 2008-11-03 22:04:40 498072 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MORPH9.DLL
+ 2009-03-04 15:24:28 . 2009-03-04 15:24:28 340304 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MIMEDIR.DLL
+ 2010-05-03 12:56:29 . 2010-05-03 12:56:29 118176 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IPOMINT.DLL
+ 2009-03-04 15:24:26 . 2009-03-04 15:24:26 138072 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IMPMAIL.DLL
+ 2008-11-20 22:48:34 . 2008-11-20 22:48:34 155016 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ENVELOPE.DLL
+ 2008-11-20 22:48:32 . 2008-11-20 22:48:32 116600 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\EMABLT32.DLL
+ 2009-03-06 00:05:42 . 2009-03-06 00:05:42 127336 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\CONTAB32.DLL
+ 2010-05-05 13:29:55 . 2010-05-05 13:29:55 117144 C:\WINDOWS\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
- 2010-05-03 12:57:52 . 2010-05-03 12:57:52 350064 C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2010-05-05 13:37:12 . 2010-05-05 13:37:12 350064 C:\WINDOWS\assembly\GAC\Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.PowerPoint.dll
+ 2009-08-17 21:33:52 . 2009-08-17 21:33:52 1193832 C:\WINDOWS\system32\FM20.DLL
+ 2010-02-20 23:03:34 . 2010-02-20 23:03:34 4472832 C:\WINDOWS\Installer\2957b.msp
+ 2009-04-24 10:30:16 . 2009-04-24 10:30:16 2583552 C:\WINDOWS\Installer\2954f.msp
+ 2009-12-11 20:01:58 . 2009-12-11 20:01:58 3751424 C:\WINDOWS\Installer\29536.msp
+ 2009-08-05 05:49:32 . 2009-08-05 05:49:32 3457024 C:\WINDOWS\Installer\2951d.msp
+ 2009-04-24 10:28:00 . 2009-04-24 10:28:00 4450816 C:\WINDOWS\Installer\294f5.msp
+ 2009-07-27 02:31:24 . 2009-07-27 02:31:24 3738624 C:\WINDOWS\Installer\294cd.msp
+ 2010-02-04 15:24:30 . 2010-02-04 15:24:30 9122304 C:\WINDOWS\Installer\294a7.msp
+ 2009-08-25 08:59:58 . 2009-08-25 08:59:58 3731456 C:\WINDOWS\Installer\2948f.msp
+ 2008-10-25 07:15:10 . 2008-10-25 07:15:10 6227456 C:\WINDOWS\Installer\29485.msp
+ 2009-10-16 05:09:28 . 2009-10-16 05:09:28 2518016 C:\WINDOWS\Installer\29448.msp
+ 2010-02-20 23:00:02 . 2010-02-20 23:00:02 8480768 C:\WINDOWS\Installer\29422.msp
+ 2009-09-29 07:08:12 . 2009-09-29 07:08:12 6747648 C:\WINDOWS\Installer\2940a.msp
+ 2010-02-20 23:02:24 . 2010-02-20 23:02:24 4195840 C:\WINDOWS\Installer\29400.msp
+ 2009-08-18 11:08:34 . 2009-08-18 11:08:34 1373696 C:\WINDOWS\Installer\293d5.msp
+ 2009-04-24 10:29:02 . 2009-04-24 10:29:02 9013760 C:\WINDOWS\Installer\29364.msp
+ 2010-05-02 17:08:59 . 2010-05-05 13:43:21 1172240 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2010-05-02 17:08:59 . 2010-05-03 13:03:41 1172240 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-05-02 17:08:59 . 2010-05-05 13:43:19 1165584 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2010-05-02 17:08:59 . 2010-05-03 13:03:41 1165584 C:\WINDOWS\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2010-04-27 15:27:51 . 2010-05-03 13:02:12 1172240 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\xlicons.exe
+ 2010-04-27 15:27:51 . 2010-05-05 13:44:11 1172240 C:\WINDOWS\Installer\{90120000-0012-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-04-03 15:57:56 . 2009-04-03 15:57:56 4671320 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12CNV.DLL
+ 2008-11-21 01:12:24 . 2008-11-21 01:12:24 3750256 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VVIEWER.DLL
+ 2008-10-25 07:35:20 . 2008-10-25 07:35:20 1847160 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VVIEWDWG.DLL
+ 2009-04-03 16:04:08 . 2009-04-03 16:04:08 8468840 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\PPCORE.DLL
+ 2009-03-06 02:00:26 . 2009-03-06 02:00:26 6596472 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONMAIN.DLL
+ 2008-11-10 08:49:08 . 2008-11-10 08:49:08 1165680 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONLIBS.DLL
+ 2008-11-24 20:16:44 . 2008-11-24 20:16:44 1020776 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\ONENOTE.EXE
+ 2009-03-06 00:05:50 . 2009-03-06 00:05:50 2964336 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OLMAPI32.DLL
+ 2009-02-05 09:36:58 . 2009-02-05 09:36:58 1640800 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OGL.DLL
+ 2009-03-06 01:41:46 . 2009-03-06 01:41:46 9589096 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSPUB.EXE
+ 2009-03-06 02:26:16 . 2009-03-06 02:26:16 5291376 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\IPEDITOR.DLL
+ 2008-11-20 21:06:36 . 2008-11-20 21:06:36 1194848 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\FM20.DLL
+ 2010-03-22 14:03:14 . 2010-03-22 14:03:14 11732992 C:\WINDOWS\Installer\29592.msp
+ 2009-08-18 10:50:38 . 2009-08-18 10:50:38 12022272 C:\WINDOWS\Installer\293af.msp
+ 2009-04-03 16:01:18 . 2009-04-03 16:01:18 15108448 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNV.EXE
+ 2009-04-03 16:11:54 . 2009-04-03 16:11:54 17740136 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WWLIB.DLL
+ 2009-03-06 00:06:00 . 2009-03-06 00:06:00 12707696 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLOOK.EXE
+ 2009-04-03 16:46:34 . 2009-04-03 16:46:34 17314688 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSO.DLL
+ 2009-04-03 16:11:10 . 2009-04-03 16:11:10 18330984 C:\WINDOWS\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\EXCEL.EXE
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 12:04:10 1664256]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2009-05-20 12:36:02 177464]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]
2010-04-12 17:49:16 2349080 ----a-w- C:\Program Files\Alawar.com\tbAla1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]
2007-07-31 15:33:40 1391640 ----a-w- C:\Program Files\Absolutist_Games\tbAbso.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9565115d-c7d6-46d3-bd63-b67b481a4368}]
2010-04-12 17:49:14 2349080 ----a-w- C:\Program Files\PageRage\tbPag1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-02-23 12:04:10 1664256 ----a-w- C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-05-20 12:36:00 1258808 ----a-w- C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2009-10-13 22:55:28 195936 ------w- C:\Program Files\Yontoo Layers Client\YontooIEClient.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-05-20 12:36:00 1258808]
"{631ac2d4-57b3-42b0-a148-da33b462c1a3}"= "C:\Program Files\Absolutist_Games\tbAbso.dll" [2007-07-31 15:33:40 1391640]
"{511131f1-4629-4254-a85f-ed7b6d75dd3c}"= "C:\Program Files\Alawar.com\tbAla1.dll" [2010-04-12 17:49:16 2349080]
"{9565115d-c7d6-46d3-bd63-b67b481a4368}"= "C:\Program Files\PageRage\tbPag1.dll" [2010-04-12 17:49:14 2349080]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 12:04:10 1664256]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]

[HKEY_CLASSES_ROOT\clsid\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]

[HKEY_CLASSES_ROOT\clsid\{9565115d-c7d6-46d3-bd63-b67b481a4368}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-05-20 12:36:00 1258808]
"{631AC2D4-57B3-42B0-A148-DA33B462C1A3}"= "C:\Program Files\Absolutist_Games\tbAbso.dll" [2007-07-31 15:33:40 1391640]
"{511131F1-4629-4254-A85F-ED7B6D75DD3C}"= "C:\Program Files\Alawar.com\tbAla1.dll" [2010-04-12 17:49:16 2349080]
"{9565115D-C7D6-46D3-BD63-B67B481A4368}"= "C:\Program Files\PageRage\tbPag1.dll" [2010-04-12 17:49:14 2349080]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 12:04:10 1664256]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]

[HKEY_CLASSES_ROOT\clsid\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]

[HKEY_CLASSES_ROOT\clsid\{9565115d-c7d6-46d3-bd63-b67b481a4368}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 09:44:34 31072]

#20 Příspěvek od **Roli** » 05 kvě 2010 19:25

Sice kousek logu chybí ale nevadí, nepořádek je pryč.

Přes Start >> Spustit zkopíruj do okna:

ComboFix /Uninstall

a stiskni Enter

To odinstaluje ComboFix a smaže s ním související soubory a složky.

Pak dej vědět jaký je stav PC.

jarka112 · #21 Příspěvek od **jarka112** » 06 kvě 2010 14:41

PC fici jedna radost,neseka a nezamrza a aj rychlejsie sa nacitava.Zatial dik.Ak by bol v buducnosti nejaky problem,mozem sa ozvat?

#22 Příspěvek od **Roli** » 06 kvě 2010 17:34

Nemáš zač princezno a pokud budeš zase potřebovat klidně písni

jarka112 · #23 Příspěvek od **jarka112** » 06 kvě 2010 17:55

Dekuji princi.

#24 Příspěvek od **Roli** » 06 kvě 2010 18:03

jarka112 · #25 Příspěvek od **jarka112** » 28 kvě 2010 16:17

prosim o kontrolu.PC zas zamrza a strasne pomaly sa nacitavaju stranky.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:32:36, on 28.5.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\trend micro\Jarka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2077543
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.bing.com/search?q=%s
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
R3 - URLSearchHook: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O3 - Toolbar: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O3 - Toolbar: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Stiahnuť &všetky odkazy pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Stiahnuť odkaz &pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stiahnuť všetky v&ideá pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Righteous Kill\Images\stg_drm.ocx
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Righteous Kill\Images\armhelper.ocx
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 9481 bytes

#26 Příspěvek od **Roli** » 28 kvě 2010 21:17

Ahoj, princezno tohle fixni v HJT :

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT2077543
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
R3 - URLSearchHook: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O2 - BHO: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O3 - Toolbar: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O3 - Toolbar: (no name) - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - (no file)
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)

Fix znamená že spustíš HJT Obrázek

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.

Pak mi sem dej log z Mbam.

jarka112 · #27 Příspěvek od **jarka112** » 29 kvě 2010 08:05

Ahojky!......

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 4057

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

29.5.2010 9:04:12
mbam-log-2010-05-29 (09-04-12).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Objektov kontrolovaných: 247473
Uplynulý čas: 44 min, 54 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 4
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
HKEY_CURRENT_USER\Software\M5T8QL3YW3 (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> No action taken.

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

#28 Příspěvek od **Roli** » 29 kvě 2010 21:01

To co Mbam našel nech smazat.

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.

jarka112 · #29 Příspěvek od **jarka112** » 30 kvě 2010 10:07

omboFix 10-05-29.05 - Jarka 30.05.2010 10:56:39.9.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.895.389 [GMT 2:00]
Running from: C:\Documents and Settings\Jarka\My Documents\Downloads\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ICQ_SERVICE
-------\Service_ICQ Service
-------\Legacy_SSHNAS

((((((((((((((((((((((((( Files Created from 2010-04-28 to 2010-05-30 )))))))))))))))))))))))))))))))
.

2010-05-17 14:02:46 . 2010-05-17 14:02:46 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\ToggleEN
2010-05-17 14:02:29 . 2010-02-22 09:55:56 101376 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{631ac2d4-57b3-42b0-a148-da33b462c1a3}\components\RadioWMPCore.dll
2010-05-17 14:02:28 . 2010-02-22 09:55:56 52224 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{631ac2d4-57b3-42b0-a148-da33b462c1a3}\components\FFExternalAlert.dll
2010-05-16 07:39:08 . 2010-05-16 07:39:08 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Lazy Turtle Games
2010-05-15 18:15:40 . 2010-05-15 18:17:43 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Buried In Time
2010-05-15 18:15:40 . 2010-05-15 18:15:40 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\Buried In Time
2010-05-12 13:03:03 . 2010-05-12 13:03:03 -------- d-----w- C:\$AVG
2010-05-08 15:13:49 . 2010-05-08 15:13:49 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Big Fish Games
2010-05-08 14:36:16 . 2010-05-08 14:36:16 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\IObit
2010-05-08 14:13:03 . 2010-05-08 14:15:10 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\CloneSpy
2010-05-07 15:46:41 . 2010-05-07 15:46:56 -------- d-----w- C:\Program Files\VS Revo Group
2010-05-07 15:24:47 . 2010-05-07 15:24:57 -------- d-----w- C:\rsit
2010-05-02 17:08:55 . 2008-11-10 09:41:34 32656 ----a-w- C:\WINDOWS\system32\msonpmon.dll
2010-05-02 17:08:55 . 2006-10-26 17:56:12 33104 ----a-w- C:\WINDOWS\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-05-01 19:44:46 . 2010-05-01 19:44:46 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\BlamGames
2010-05-01 18:35:38 . 2010-05-29 06:35:42 -------- d-----w- C:\Program Files\trend micro
2010-05-01 14:28:27 . 2010-05-01 14:28:27 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Malwarebytes
2010-05-01 14:28:16 . 2010-04-29 13:39:38 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-05-01 14:28:15 . 2010-05-01 14:28:15 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-01 14:28:14 . 2010-04-29 13:39:26 20952 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-05-01 14:28:13 . 2010-05-02 11:01:13 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-30 07:30:15 . 2008-12-18 16:36:18 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\ICQ
2010-05-29 10:27:12 . 2010-01-14 06:40:40 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\HPAppData
2010-05-29 06:16:39 . 2009-10-22 05:27:06 -------- d-----w- C:\Program Files\Yontoo Layers Client
2010-05-29 06:16:39 . 2009-04-10 12:57:05 -------- d-----w- C:\Program Files\Alawar.com
2010-05-29 06:16:39 . 2009-02-06 16:43:00 -------- d-----w- C:\Program Files\Absolutist_Games
2010-05-27 16:44:36 . 2009-02-24 17:03:08 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Skype
2010-05-27 16:14:53 . 2009-02-24 17:05:30 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\skypePM
2010-05-27 15:03:09 . 2009-12-19 16:29:20 -------- d-----w- C:\Program Files\TuneUp Utilities 2008
2010-05-27 15:02:50 . 2008-12-22 19:49:20 306432 ----a-w- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-05-16 10:53:17 . 2008-12-19 13:57:58 -------- d---a-w- C:\Documents and Settings\All Users\Application Data\TEMP
2010-05-16 09:10:39 . 2009-04-15 09:32:13 -------- d-----w- C:\Documents and Settings\All Users\Application Data\InterAction studios
2010-05-14 14:18:04 . 2009-01-13 18:20:34 15 ----a-w- C:\WINDOWS\popcinfo.dat
2010-05-13 16:05:02 . 2008-12-20 17:29:21 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Vso
2010-05-13 13:03:14 . 2010-04-25 08:33:33 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-05-08 14:40:26 . 2010-02-28 09:47:16 -------- d-----w- C:\Program Files\Comodo
2010-05-07 16:56:52 . 2010-03-12 06:48:14 -------- d-----w- C:\Program Files\GoQ - NetRadio
2010-05-06 17:00:41 . 2010-04-18 13:27:07 -------- d-----w- C:\Program Files\AVG
2010-05-04 15:08:14 . 2008-12-18 21:27:58 69296 ----a-w- C:\Documents and Settings\Jarka\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-03 12:55:00 . 2010-04-27 15:26:39 -------- d-----w- C:\Program Files\Microsoft Works
2010-05-02 17:07:28 . 2009-08-06 06:58:19 -------- d-----w- C:\Program Files\MSBuild
2010-05-02 08:23:08 . 2010-02-17 14:56:13 -------- d-----w- C:\Program Files\MagicISO
2010-05-02 08:16:46 . 2009-03-07 17:07:50 -------- d-----w- C:\Program Files\Alawar
2010-04-30 14:24:25 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Merscom
2010-04-27 15:24:53 . 2010-04-27 15:24:53 -------- d-----w- C:\Program Files\Microsoft.NET
2010-04-26 15:54:26 . 2009-01-22 12:40:26 5058 -c--a-w- C:\WINDOWS\Help\hhcolreg.dat
2010-04-25 14:24:43 . 2010-02-15 16:45:53 -------- d-----w- C:\Program Files\The KMPlayer
2010-04-25 12:50:06 . 2010-04-25 12:50:02 -------- d-----w- C:\Program Files\DAEMON Tools
2010-04-25 12:47:07 . 2009-04-25 17:56:29 -------- d-----w- C:\Program Files\D-Tools
2010-04-25 09:15:07 . 2009-06-14 17:18:32 -------- d-----w- C:\Program Files\MSECache
2010-04-25 08:41:52 . 2010-04-25 08:41:51 -------- d-----w- C:\Program Files\Microsoft Visual Studio 8
2010-04-24 14:44:57 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Merscom
2010-04-24 13:29:23 . 2010-04-18 13:29:31 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-04-23 20:27:37 . 2010-04-23 20:27:37 -------- d-----w- C:\Program Files\Common Files\Skype
2010-04-22 08:15:05 . 2010-04-18 13:29:44 242896 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys
2010-04-18 13:29:47 . 2010-04-18 13:29:46 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 13:29:39 . 2010-04-18 13:29:38 216200 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys
2010-04-18 13:29:38 . 2010-04-18 13:29:37 29512 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys
2010-04-18 13:27:07 . 2010-04-18 13:26:52 -------- d-----w- C:\Documents and Settings\All Users\Application Data\avg9
2010-04-18 13:11:57 . 2010-03-10 18:00:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-04-18 13:04:29 . 2009-12-09 14:45:10 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Software Informer
2010-04-05 11:44:44 . 2009-04-10 12:57:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2010-04-05 10:33:06 . 2010-04-05 07:35:51 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Magic3
2010-04-04 17:48:26 . 2010-03-12 07:07:46 -------- d-----w- C:\Program Files\FreeRapid-0.83U1
2010-04-04 14:36:08 . 2008-12-26 14:58:38 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\VSO_HWE
2010-03-31 16:15:33 . 2010-02-01 16:20:52 -------- d-----w- C:\Program Files\ICQ7.0
2010-03-26 08:33:34 . 2010-04-28 11:06:37 1496064 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-03-26 08:33:16 . 2010-04-28 11:06:42 43008 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-03-26 08:33:16 . 2010-04-28 11:06:41 339456 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-03-26 08:32:54 . 2010-04-28 11:06:41 346112 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-03-24 18:17:47 . 2010-03-24 08:04:49 952768 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeARM.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 70584 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeExtractFiles.dll
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\ReaderUpdater.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AcrobatUpdater.exe
2010-03-12 06:47:08 . 2010-03-12 06:47:08 503808 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcp71.dll
2010-03-12 06:47:08 . 2010-03-12 06:47:08 348160 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcr71.dll
2010-03-12 06:47:07 . 2010-03-12 06:47:07 499712 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\jmc.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 61440 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-sse.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 12800 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-d3d.dll
2010-03-12 06:46:38 . 2010-03-12 06:46:57 411368 ----a-w- C:\WINDOWS\system32\deploytk.dll
2010-03-10 06:15:52 . 2004-08-03 23:56:48 420352 ----a-w- C:\WINDOWS\system32\vbscript.dll
2010-02-17 19:13:35 . 2010-02-17 19:11:38 27386256 ----a-w- C:\Program Files\AdbeRdr930_en_US.exe
2010-02-01 16:18:52 . 2010-02-01 16:18:46 12109496 ----a-w- C:\Program Files\install_icq7.exe
2010-01-24 09:11:53 . 2010-01-24 09:11:44 1924200 ----a-w- C:\Program Files\install_flash_player.exe
2009-11-09 19:42:57 . 2009-11-09 19:38:49 24772640 ----a-w- C:\Program Files\AdbeRdr90_sk_SK.exe
2009-08-05 14:54:02 . 2009-08-05 14:53:53 2427454 ----a-w- C:\Program Files\save2pc_light_setup.exe
2009-06-14 17:13:54 . 2009-06-14 17:13:53 28996120 ----a-w- C:\Program Files\FileFormatConverters.exe
2009-02-08 10:15:46 . 2009-02-08 10:15:46 7840 ----a-w- C:\Program Files\1029.dll
2008-12-20 07:00:12 . 2008-12-20 07:00:05 1886800 ----a-w- C:\Program Files\install_flash_player_10_active_x.exe
.

#30 Příspěvek od **Roli** » 30 kvě 2010 16:41

Prosím tě ten log z ComboFix bych potřeboval celý.

Je uložený na :

C:/Combofix.txt

pokud se nevejde do jedné odpovědi pečlivě ho rozděl.

VIRY.CZ

prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu

Re: prosim o kontrolu