Prosím o kontrolu logu RSIT

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Prosím o kontrolu logu RSIT

#1 Příspěvek od gazebo »

Log je rozdelen do dvou casti protoze jsem pry presahl mozny pocet pismen v prispevku...60000


Logfile of random's system information tool 1.08 (written by random/random)
Run by Petr at 2010-07-30 13:10:12
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 101 GB (66%) free of 153 GB
Total RAM: 2047 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:10:54, on 30.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~1\MediaKey\MMKeybd.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Kalendar\kalendar.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\DU Meter\DUMeterSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\365dni\365dniNET.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\JetAudio\JetAudio.exe
C:\Program Files\Java\jre6\launch4j-tmp\frd.exe
C:\WINDOWS\Explorer.EXE
C:\Staženo\hijackthis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Petr\Plocha\RSIT\RSIT.exe
C:\Program Files\trend micro\Petr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [Kalendar] C:\Program Files\Kalendar\kalendar.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

--
End of file - 10724 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-05-19 1117976]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"CTSysVol"=C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe [2003-09-17 57344]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2010-07-04 17408]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"MediaKey"=C:\PROGRA~1\MediaKey\MMKeybd.EXE [2003-01-17 172032]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-05-03 344064]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"PSUNMain"=C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe [2010-05-14 406848]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-06-01 2039240]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-01-31 385024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2010-05-19 462104]
"DU Meter"=C:\Program Files\DU Meter\DUMeter.exe [2010-07-24 2645528]
"Kalendar"=C:\Program Files\Kalendar\kalendar.exe [2005-11-09 580608]
"SkinClock"=C:\Program Files\Free Desktop Clock\DesktopClock.exe [2006-10-01 334848]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-08-08 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\Participatory Culture Foundation\Miro\Miro_Downloader.exe"="C:\Program Files\Participatory Culture Foundation\Miro\Miro_Downloader.exe:*:Enabled:Miro_Downloader"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-07-30 13:10:17 ----D---- C:\Program Files\trend micro
2010-07-30 13:10:12 ----D---- C:\rsit
2010-07-30 10:55:57 ----D---- C:\Documents and Settings\Petr\Data aplikací\PCF-VLC
2010-07-30 10:55:21 ----D---- C:\WINDOWS\Sun
2010-07-30 10:52:06 ----D---- C:\Documents and Settings\Petr\Data aplikací\Participatory Culture Foundation
2010-07-29 12:57:05 ----D---- C:\Program Files\QIP 2010
2010-07-29 12:45:31 ----D---- C:\Program Files\Safari
2010-07-29 12:45:17 ----D---- C:\Program Files\Bonjour
2010-07-29 12:44:54 ----D---- C:\Program Files\Common Files\Apple
2010-07-29 12:44:25 ----D---- C:\Program Files\Apple Software Update
2010-07-29 12:44:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2010-07-29 10:40:46 ----D---- C:\Program Files\Free WMA to MP3 Converter
2010-07-29 00:18:43 ----D---- C:\Program Files\Yamicsoft
2010-07-29 00:03:16 ----D---- C:\Program Files\Samurize
2010-07-28 23:33:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\COMODO
2010-07-28 16:01:36 ----D---- C:\Program Files\COMODO
2010-07-28 15:54:22 ----D---- C:\Documents and Settings\Petr\Data aplikací\Panda Security
2010-07-28 15:50:53 ----D---- C:\Program Files\Panda Security
2010-07-28 15:50:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Panda Security
2010-07-28 15:46:58 ----D---- C:\WINDOWS\system32\appmgmt
2010-07-28 11:19:28 ----D---- C:\Program Files\Cyklotrasy
2010-07-28 07:53:39 ----D---- C:\Program Files\Nexus Radio
2010-07-28 07:53:39 ----D---- C:\My Saved Files
2010-07-28 07:53:39 ----D---- C:\My Recorded Files
2010-07-28 07:53:39 ----D---- C:\My Plugins
2010-07-28 07:47:03 ----D---- C:\Documents and Settings\Petr\Data aplikací\RaimaRadioPro
2010-07-28 07:47:00 ----D---- C:\Program Files\RarmaRadio
2010-07-27 16:33:35 ----D---- C:\Program Files\GuerillaSoft
2010-07-27 16:25:11 ----HD---- C:\Program Files\InstallJammer Registry
2010-07-27 16:24:40 ----D---- C:\Program Files\Esmska
2010-07-27 08:33:43 ----D---- C:\Documents and Settings\Petr\Data aplikací\365dni
2010-07-27 08:33:35 ----D---- C:\Program Files\365dni
2010-07-27 08:27:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Readon
2010-07-27 08:18:40 ----D---- C:\Program Files\Readon Technology
2010-07-27 07:29:23 ----D---- C:\Program Files\Ashampoo
2010-07-27 07:20:00 ----D---- C:\Program Files\FLAC
2010-07-26 16:08:02 ----D---- C:\Documents and Settings\Petr\Data aplikací\VitySoft
2010-07-26 15:42:31 ----D---- C:\Documents and Settings\Petr\Data aplikací\ArcticLine
2010-07-26 15:42:09 ----D---- C:\Program Files\Folder Marker
2010-07-26 01:16:10 ----A---- C:\WINDOWS\WTRDCTM.INI
2010-07-26 01:15:16 ----D---- C:\Program Files\Translator
2010-07-26 01:14:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\LangSoft
2010-07-25 21:57:57 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-07-25 20:41:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2010-07-25 20:41:23 ----D---- C:\Program Files\DVD Shrink
2010-07-25 02:28:47 ----D---- C:\Documents and Settings\Petr\Data aplikací\Apple Computer
2010-07-25 02:25:01 ----D---- C:\Program Files\QuickTime
2010-07-25 02:25:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2010-07-25 01:18:37 ----D---- C:\Documents and Settings\Petr\Data aplikací\ATI
2010-07-25 01:10:31 ----D---- C:\WINDOWS\system32\URTTEMP
2010-07-25 00:32:58 ----D---- C:\Documents and Settings\Petr\Data aplikací\IDOS
2010-07-25 00:32:44 ----D---- C:\Program Files\IDOS
2010-07-25 00:05:29 ----A---- C:\Documents and Settings\All Users\Data aplikací\Microsoft.SqlServer.Compact.351.32.bc
2010-07-25 00:04:08 ----A---- C:\WINDOWS\system32\drivers\wdcsam.sys
2010-07-25 00:03:34 ----D---- C:\Program Files\Western Digital
2010-07-25 00:01:29 ----D---- C:\Documents and Settings\Petr\Data aplikací\Western DigitalTemp
2010-07-24 23:45:49 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-07-24 23:45:47 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-07-24 23:38:25 ----D---- C:\WINDOWS\system32\XPSViewer
2010-07-24 23:37:57 ----D---- C:\Program Files\Reference Assemblies
2010-07-24 23:36:24 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-07-24 23:36:23 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-07-24 23:36:23 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-07-24 23:36:22 ----D---- C:\970dfc9078ce5a25c33f5cd05ed52d65
2010-07-24 23:28:12 ----D---- C:\ATI
2010-07-24 23:11:51 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-07-24 23:11:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-07-24 22:52:49 ----D---- C:\Program Files\DCoder Image Source
2010-07-24 22:52:47 ----D---- C:\Program Files\7-Zip
2010-07-24 22:52:42 ----D---- C:\Program Files\FFMPEG Core Files
2010-07-24 22:52:34 ----D---- C:\Program Files\SHOUTcast Source
2010-07-24 22:52:33 ----D---- C:\Program Files\MONOGRAM AMR SplitterDecoder
2010-07-24 22:52:32 ----D---- C:\Program Files\CD Audio Reader Filter
2010-07-24 22:52:30 ----D---- C:\Program Files\OpenSource AVI Splitter
2010-07-24 22:52:29 ----D---- C:\Program Files\Gabest MPEG Splitter
2010-07-24 22:52:28 ----D---- C:\Program Files\OpenSource DTSAC3DD+ Source Filter
2010-07-24 22:52:24 ----D---- C:\Program Files\RealMedia
2010-07-24 22:52:10 ----D---- C:\Program Files\DScaler5
2010-07-24 22:52:03 ----D---- C:\Program Files\AC3Filter
2010-07-24 22:51:55 ----D---- C:\Program Files\OpenSource Flash Video Splitter
2010-07-24 22:51:53 ----D---- C:\Program Files\DirectVobSub
2010-07-24 22:51:46 ----D---- C:\Program Files\Bass Audio Decoder
2010-07-24 22:51:39 ----D---- C:\Program Files\ffdshow
2010-07-24 22:51:02 ----D---- C:\Program Files\Zoom Player
2010-07-24 22:51:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Zoom Player
2010-07-24 22:42:16 ----D---- C:\WINDOWS\system32\en-US
2010-07-24 22:42:09 ----D---- C:\Program Files\Microsoft.NET
2010-07-24 22:28:16 ----D---- C:\Documents and Settings\Petr\Data aplikací\Western Digital
2010-07-24 22:28:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Western Digital
2010-07-24 22:27:54 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-07-24 22:24:57 ----RSD---- C:\WINDOWS\assembly
2010-07-24 22:24:10 ----D---- C:\WINDOWS\Microsoft.NET
2010-07-24 22:23:03 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-07-24 22:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-07-24 11:05:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Temp
2010-07-24 10:55:32 ----D---- C:\Documents and Settings\Petr\Data aplikací\Media Player Classic
2010-07-24 10:21:47 ----D---- C:\Program Files\Kodek CZ
2010-07-24 10:19:35 ----D---- C:\Documents and Settings\Petr\Data aplikací\dvdcss
2010-07-24 10:15:16 ----A---- C:\WINDOWS\iun6002.exe
2010-07-24 10:15:13 ----D---- C:\Program Files\Codec Pack - All In 1
2010-07-24 09:56:43 ----A---- C:\WINDOWS\NeroDigital.ini
2010-07-24 09:47:08 ----N---- C:\WINDOWS\Ctregrun.exe
2010-07-24 09:37:57 ----D---- C:\Documents and Settings\Petr\Data aplikací\Help
2010-07-24 09:37:13 ----D---- C:\WINDOWS\Minidump
2010-07-24 09:30:35 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-07-24 09:30:26 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2010-07-24 09:30:12 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-07-24 09:25:25 ----D---- C:\Program Files\ATI Technologies
2010-07-24 09:24:12 ----RA---- C:\WINDOWS\system32\drivers\GVCplDrv.sys
2010-07-24 09:23:18 ----RA---- C:\WINDOWS\THKB_E.ini
2010-07-24 09:23:10 ----A---- C:\WINDOWS\SelSet.INI
2010-07-24 09:23:00 ----D---- C:\Program Files\MediaKey
2010-07-24 09:21:34 ----D---- C:\Program Files\HD Tune
2010-07-24 09:06:38 ----D---- C:\Program Files\QIP Infium
2010-07-24 09:00:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-07-24 09:00:22 ----D---- C:\Program Files\Common Files\Java
2010-07-24 09:00:22 ----D---- C:\Documents and Settings\Petr\Data aplikací\esmska
2010-07-24 08:59:45 ----A---- C:\WINDOWS\system32\javaws.exe
2010-07-24 08:59:45 ----A---- C:\WINDOWS\system32\javaw.exe
2010-07-24 08:59:45 ----A---- C:\WINDOWS\system32\java.exe
2010-07-24 08:59:45 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-07-24 08:59:29 ----D---- C:\Program Files\Java
2010-07-24 08:59:03 ----D---- C:\Documents and Settings\Petr\Data aplikací\Sun
2010-07-24 08:57:57 ----D---- C:\BOX
2010-07-24 08:50:54 ----HD---- C:\WINDOWS\Icons
2010-07-24 08:47:58 ----A---- C:\WINDOWS\system32\TUKernel.exe
2010-07-24 08:35:57 ----A---- C:\WINDOWS\system32\TURegOpt.exe
2010-07-24 08:35:56 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-07-24 08:35:41 ----D---- C:\Documents and Settings\Petr\Data aplikací\TuneUp Software
2010-07-24 08:35:34 ----D---- C:\Program Files\TuneUp Utilities 2010
2010-07-24 08:35:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2010-07-24 08:35:24 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-07-24 08:33:04 ----D---- C:\Program Files\CCleaner
2010-07-24 08:30:02 ----D---- C:\Documents and Settings\Petr\Data aplikací\vlc
2010-07-24 08:29:10 ----D---- C:\Program Files\VideoLAN
2010-07-24 08:27:58 ----D---- C:\Program Files\uTorrent
2010-07-24 08:27:31 ----D---- C:\Documents and Settings\Petr\Data aplikací\uTorrent
2010-07-24 08:15:04 ----D---- C:\Program Files\Photo Art Studio
2010-07-24 08:12:44 ----A---- C:\WINDOWS\avisplitter.ini
2010-07-24 08:12:42 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-07-24 08:12:41 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-07-24 08:12:41 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-07-24 08:12:41 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-07-24 08:12:41 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-07-24 08:12:40 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-07-24 08:12:36 ----D---- C:\Program Files\K-Lite Codec Pack
2010-07-24 08:08:33 ----D---- C:\Program Files\Free Desktop Clock
2010-07-24 08:05:33 ----D---- C:\Program Files\Kalendar
2010-07-24 07:54:39 ----D---- C:\Documents and Settings\Petr\Data aplikací\skypePM
2010-07-24 07:53:53 ----D---- C:\Documents and Settings\Petr\Data aplikací\Skype
2010-07-24 07:53:34 ----D---- C:\Program Files\Common Files\Skype
2010-07-24 07:53:33 ----RD---- C:\Program Files\Skype
2010-07-24 07:53:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-07-24 07:45:55 ----D---- C:\Documents and Settings\Petr\Data aplikací\ICQ
2010-07-24 07:45:01 ----D---- C:\Program Files\ICQ6.5
2010-07-24 07:35:25 ----D---- C:\Documents and Settings\Petr\Data aplikací\Zoner
2010-07-24 07:34:27 ----D---- C:\Program Files\Zoner
2010-07-24 07:09:07 ----D---- C:\Documents and Settings\Petr\Data aplikací\BSplayer PRO
2010-07-24 07:09:06 ----D---- C:\Program Files\Webteh
2010-07-24 07:02:12 ----D---- C:\Program Files\Unlocker
2010-07-24 06:56:45 ----D---- C:\Program Files\Elaborate Bytes
2010-07-24 06:52:55 ----D---- C:\Documents and Settings\Petr\Data aplikací\COWON
2010-07-24 06:51:34 ----D---- C:\Program Files\Common Files\COWON
2010-07-24 06:51:14 ----D---- C:\Documents and Settings\Petr\Data aplikací\InstallShield
2010-07-24 06:39:44 ----A---- C:\WINDOWS\UC.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\RAR.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\PKZIP.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\PKUNZIP.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\NOCLOSE.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\LHA.PIF
2010-07-24 06:39:44 ----A---- C:\WINDOWS\ARJ.PIF
2010-07-24 06:39:43 ----D---- C:\Program Files\totalcmd
2010-07-24 06:39:43 ----D---- C:\Documents and Settings\Petr\Data aplikací\GHISLER
2010-07-24 06:35:16 ----D---- C:\Documents and Settings\Petr\Data aplikací\Creative
2010-07-24 06:23:02 ----N---- C:\WINDOWS\Updreg.EXE
2010-07-24 06:22:51 ----N---- C:\WINDOWS\system32\AC3API.DLL
2010-07-24 06:22:51 ----N---- C:\WINDOWS\CTRES.DLL
2010-07-24 06:22:51 ----N---- C:\WINDOWS\CTCCW.DLL
2010-07-24 06:22:51 ----N---- C:\WINDOWS\AC3API.INI
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\SFCVRT32.DLL
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\MFCUIA32.DLL
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\MFCANS32.DLL
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\INETWH32.DLL
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\CTWFLT32.DLL
2010-07-24 06:22:47 ----N---- C:\WINDOWS\system32\CTL3D.DLL
2010-07-24 06:22:45 ----D---- C:\WINDOWS\system32\Defaults
2010-07-24 06:21:36 ----D---- C:\WINDOWS\system32\Data
2010-07-24 06:21:36 ----A---- C:\WINDOWS\system32\sfms32.dll
2010-07-24 06:21:36 ----A---- C:\WINDOWS\system32\LudaP17.ini
2010-07-24 06:21:36 ----A---- C:\WINDOWS\system32\ctzapxx.ini
2010-07-24 06:21:36 ----A---- C:\WINDOWS\INRES.DLL
2010-07-24 06:21:35 ----A---- C:\WINDOWS\system32\sfman32.dll
2010-07-24 06:21:35 ----A---- C:\WINDOWS\system32\P17res.dll
2010-07-24 06:21:35 ----A---- C:\WINDOWS\system32\P17CPI.dll
2010-07-24 06:21:35 ----A---- C:\WINDOWS\system32\drivers\P17.sys
2010-07-24 06:21:33 ----A---- C:\WINDOWS\system32\P17.dll
2010-07-24 06:21:33 ----A---- C:\WINDOWS\system32\drivers\ctsfm2k.sys
2010-07-24 06:21:33 ----A---- C:\WINDOWS\system32\drivers\CTOSS9X.SYS
2010-07-24 06:21:32 ----A---- C:\WINDOWS\system32\drivers\ctoss2k.sys
2010-07-24 06:21:32 ----A---- C:\WINDOWS\system32\CtDvInst.dll
2010-07-24 06:21:30 ----A---- C:\WINDOWS\system32\a3d.dll
2010-07-24 06:21:30 ----A---- C:\WINDOWS\P17DEF.EXE
2010-07-24 06:21:29 ----A---- C:\WINDOWS\system32\OPENAL32.DLL
2010-07-24 06:21:29 ----A---- C:\WINDOWS\system32\EAX.DLL
2010-07-24 06:21:29 ----A---- C:\WINDOWS\MIDIDEF.EXE
2010-07-24 06:21:11 ----A---- C:\WINDOWS\SBWIN.INI
2010-07-24 06:20:52 ----A---- C:\WINDOWS\system32\CTDetres.dll
2010-07-24 06:20:41 ----N---- C:\WINDOWS\system32\CTSVCCTL.EXE
2010-07-24 06:20:41 ----N---- C:\WINDOWS\system32\CTSVCCDA.EXE
2010-07-24 06:20:34 ----N---- C:\WINDOWS\system32\CTMEDENG.DLL
2010-07-24 06:20:32 ----A---- C:\WINDOWS\system32\CTMERes.DLL
2010-07-24 06:17:46 ----D---- C:\Program Files\Creative
2010-07-24 06:17:46 ----A---- C:\WINDOWS\system32\drivers\PfModNT.sys
2010-07-24 06:17:21 ----D---- C:\Program Files\Common Files\InstallShield
2010-07-24 06:11:53 ----D---- C:\Documents and Settings\Petr\Data aplikací\Ahead
2010-07-24 06:10:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-07-24 06:10:38 ----A---- C:\WINDOWS\system32\TwnLib4.dll
2010-07-24 06:10:38 ----A---- C:\WINDOWS\system32\imagXRA7.dll
2010-07-24 06:10:38 ----A---- C:\WINDOWS\system32\imagXR7.dll
2010-07-24 06:10:38 ----A---- C:\WINDOWS\system32\imagXpr7.dll
2010-07-24 06:10:38 ----A---- C:\WINDOWS\system32\imagX7.dll
2010-07-24 06:10:34 ----D---- C:\Program Files\Nero
2010-07-24 06:10:34 ----D---- C:\Program Files\Common Files\Ahead
2010-07-24 06:10:34 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-07-24 06:10:34 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-07-24 06:10:34 ----A---- C:\WINDOWS\system32\mfc71u.dll
2010-07-24 06:10:34 ----A---- C:\WINDOWS\system32\mfc71.dll
2010-07-24 06:08:15 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-24 06:08:15 ----D---- C:\Program Files\JetAudio
2010-07-24 05:59:04 ----D---- C:\Program Files\Lavalys
2010-07-24 03:26:26 ----D---- C:\Program Files\Common Files\Adobe
2010-07-24 03:25:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-07-24 03:25:29 ----D---- C:\Program Files\Adobe
2010-07-24 03:25:20 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-07-24 03:25:14 ----D---- C:\Documents and Settings\Petr\Data aplikací\Macromedia
2010-07-24 03:25:12 ----D---- C:\Documents and Settings\Petr\Data aplikací\Adobe
2010-07-24 03:24:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2010-07-24 03:24:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-07-24 03:15:11 ----D---- C:\Documents and Settings\Petr\Data aplikací\Opera
2010-07-24 03:15:02 ----D---- C:\Program Files\Opera
2010-07-24 03:08:01 ----D---- C:\Documents and Settings\Petr\Data aplikací\WinRAR
2010-07-24 03:07:09 ----D---- C:\Program Files\WinRAR
2010-07-24 03:02:52 ----D---- C:\WINDOWS\SoftwareDistribution
2010-07-24 03:02:43 ----D---- C:\WINDOWS\Prefetch
2010-07-24 03:02:42 ----SD---- C:\WINDOWS\system32\Microsoft
2010-07-24 03:02:42 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-07-24 02:59:17 ----D---- C:\WINDOWS\system32\xircom
2010-07-24 02:59:17 ----D---- C:\Program Files\xerox
2010-07-24 02:59:17 ----D---- C:\Program Files\microsoft frontpage
2010-07-24 02:58:50 ----RASH---- C:\MSDOS.SYS
2010-07-24 02:58:50 ----RASH---- C:\IO.SYS
2010-07-24 02:58:50 ----A---- C:\WINDOWS\control.ini
2010-07-24 02:58:50 ----A---- C:\CONFIG.SYS
2010-07-24 02:58:50 ----A---- C:\AUTOEXEC.BAT
2010-07-24 02:58:35 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-07-24 02:57:34 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-07-24 02:57:30 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-07-24 02:57:22 ----D---- C:\Program Files\Online Services
2010-07-24 02:57:07 ----D---- C:\WINDOWS\system32\DirectX
2010-07-24 02:57:00 ----A---- C:\WINDOWS\system32\atrace.dll
2010-07-24 02:56:57 ----A---- C:\WINDOWS\system32\desktop.ini
2010-07-24 02:56:57 ----A---- C:\WINDOWS\desktop.ini
2010-07-24 02:56:51 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-07-24 02:56:50 ----A---- C:\WINDOWS\system32\acctres.dll
2010-07-24 02:56:49 ----D---- C:\Program Files\Common Files\Services
2010-07-24 02:56:47 ----SD---- C:\WINDOWS\Tasks
2010-07-24 02:56:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-07-24 02:56:46 ----D---- C:\Program Files\Common Files\MSSoap
2010-07-24 02:56:41 ----D---- C:\WINDOWS\system32\Macromed
2010-07-24 02:56:41 ----D---- C:\WINDOWS\srchasst
2010-07-24 02:56:39 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-07-24 02:56:39 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-07-24 02:56:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-07-24 02:56:39 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\wups.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-07-24 02:56:38 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-07-24 02:56:37 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-07-24 02:56:37 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-07-24 02:56:34 ----D---- C:\Program Files\Movie Maker
2010-07-24 02:56:17 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-07-24 02:56:17 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-07-24 02:56:17 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-07-24 02:56:17 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-07-24 02:56:13 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-07-24 02:56:13 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-07-24 02:56:13 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-07-24 02:56:12 ----D---- C:\WINDOWS\system32\Restore
2010-07-24 02:56:12 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-07-24 02:56:12 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-07-24 02:56:12 ----A---- C:\WINDOWS\system32\srclient.dll
2010-07-24 02:56:12 ----A---- C:\WINDOWS\system32\ils.dll
2010-07-24 02:56:12 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-07-24 02:56:11 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-07-24 02:56:11 ----A---- C:\WINDOWS\system32\msconf.dll
2010-07-24 02:56:11 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-07-24 02:56:11 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-07-24 02:56:11 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-07-24 02:56:08 ----D---- C:\Program Files\NetMeeting
2010-07-24 02:56:08 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-07-24 02:56:08 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-07-24 02:56:07 ----A---- C:\WINDOWS\system32\inetres.dll
2010-07-24 02:56:07 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-07-24 02:56:05 ----D---- C:\Program Files\Outlook Express
2010-07-24 02:56:05 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-07-24 02:56:05 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-07-24 02:56:05 ----A---- C:\WINDOWS\system32\mstask.dll
2010-07-24 02:56:04 ----A---- C:\WINDOWS\system32\isign32.dll
2010-07-24 02:56:04 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-07-24 02:56:04 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-07-24 02:56:04 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-07-24 02:55:59 ----D---- C:\Program Files\Common Files\System
2010-07-24 02:55:58 ----D---- C:\Program Files\Internet Explorer
2010-07-24 02:55:18 ----A---- C:\WINDOWS\vbaddin.ini
2010-07-24 02:55:18 ----A---- C:\WINDOWS\vb.ini
2010-07-24 02:55:15 ----D---- C:\WINDOWS\Registration
2010-07-24 02:54:59 ----D---- C:\Program Files\Windows Media Connect 2
2010-07-24 02:54:58 ----D---- C:\Program Files\Windows Media Player
2010-07-24 02:54:56 ----D---- C:\Program Files\Messenger
2010-07-24 02:54:53 ----D---- C:\Program Files\MSN Gaming Zone
2010-07-24 02:54:53 ----A---- C:\WINDOWS\system32\write.exe
2010-07-24 02:54:44 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-07-24 02:54:44 ----A---- C:\WINDOWS\system32\hticons.dll
2010-07-24 02:54:44 ----A---- C:\WINDOWS\system32\avwav.dll
2010-07-24 02:54:44 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-07-24 02:54:44 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-07-24 02:54:43 ----A---- C:\WINDOWS\system32\winchat.exe
2010-07-24 02:54:37 ----A---- C:\WINDOWS\system32\charmap.exe
2010-07-24 02:54:37 ----A---- C:\WINDOWS\system32\getuname.dll
2010-07-24 02:54:37 ----A---- C:\WINDOWS\system32\calc.exe
2010-07-24 02:54:36 ----A---- C:\WINDOWS\system32\winmine.exe
2010-07-24 02:54:36 ----A---- C:\WINDOWS\system32\sol.exe
2010-07-24 02:54:36 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\tskill.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\tscon.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\shadow.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\reset.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\regini.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-07-24 02:54:35 ----A---- C:\WINDOWS\system32\freecell.exe
2010-07-24 02:54:34 ----A---- C:\WINDOWS\system32\msg.exe
2010-07-24 02:54:34 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-07-24 02:54:34 ----A---- C:\WINDOWS\system32\logoff.exe
2010-07-24 02:54:34 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-07-24 02:54:29 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-07-24 02:54:28 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-07-24 02:54:27 ----D---- C:\Program Files\Windows NT
2010-07-24 02:54:27 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-07-24 02:54:27 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-07-24 02:54:27 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-07-24 02:54:27 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-07-24 02:54:26 ----A---- C:\WINDOWS\system32\spider.exe
2010-07-24 02:54:26 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-07-24 02:54:25 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-07-24 02:54:24 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-07-24 02:54:24 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-07-24 02:54:24 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-07-24 02:54:24 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-07-24 02:54:23 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-07-24 02:54:22 ----D---- C:\WINDOWS\system32\MsDtc
2010-07-24 02:54:22 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-07-24 02:54:22 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-07-24 02:54:22 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-07-24 02:54:22 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-07-24 02:54:22 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-07-24 02:54:21 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-07-24 02:54:21 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-07-24 02:54:21 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-07-24 02:54:20 ----D---- C:\WINDOWS\system32\Com
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\stclient.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\colbact.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-07-24 02:54:20 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-07-24 02:54:19 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-07-24 02:54:19 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-07-24 02:54:19 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-07-24 02:54:18 ----A---- C:\WINDOWS\system32\comuid.dll
2010-07-24 02:54:18 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-07-24 02:54:18 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-07-24 02:54:12 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-07-24 02:54:12 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-07-24 02:54:12 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-07-24 02:54:12 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-07-24 02:54:08 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-07-24 02:54:08 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-07-24 02:51:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Hagel Technologies
2010-07-24 02:51:48 ----D---- C:\Program Files\DU Meter
2010-07-24 02:47:09 ----HD---- C:\VritualRoot
2010-07-24 02:43:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Comodo Downloader
2010-07-24 02:42:16 ----D---- C:\Staženo
2010-07-24 02:42:06 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-07-24 02:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-07-24 02:41:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-07-24 02:41:53 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-07-24 02:41:49 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-07-24 02:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-07-24 02:41:40 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-07-24 02:41:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-07-24 02:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-07-24 02:41:25 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-07-24 02:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-07-24 02:41:15 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-07-24 02:41:08 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-07-24 02:41:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-07-24 02:40:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-07-24 02:40:54 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-07-24 02:40:50 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-07-24 02:40:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-07-24 02:40:13 ----D---- C:\WINDOWS\ie8updates
2010-07-24 02:38:44 ----HDC---- C:\WINDOWS\ie8
2010-07-24 02:37:26 ----D---- C:\Program Files\Seznam.cz
2010-07-24 02:37:13 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-07-24 02:37:08 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-07-24 02:37:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-07-24 02:36:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-07-24 02:36:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-07-24 02:36:47 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-07-24 02:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-07-24 02:36:38 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-07-24 02:36:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-07-24 02:35:43 ----A---- C:\WINDOWS\system32\MRT.exe
2010-07-24 02:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-07-24 02:35:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-07-24 02:35:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-07-24 02:35:19 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-07-24 02:35:14 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-07-24 02:35:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-07-24 02:35:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-07-24 02:34:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-07-24 02:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-07-24 02:34:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-07-24 02:34:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-07-24 02:34:40 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-07-24 02:34:32 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-07-24 02:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-07-24 02:34:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-07-24 02:34:19 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-07-24 02:34:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-07-24 02:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-07-24 02:34:08 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-07-24 02:34:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-07-24 02:33:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-07-24 02:33:53 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-07-24 02:33:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-07-24 02:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-07-24 02:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-07-24 02:33:31 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-07-24 02:33:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-07-24 02:33:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-07-24 02:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-07-24 02:33:11 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-07-24 02:33:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-07-24 02:33:02 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-07-24 02:32:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-07-24 02:32:54 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-07-24 02:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-07-24 02:32:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-07-24 02:32:41 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-07-24 02:32:37 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-07-24 02:32:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-07-24 02:32:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-07-24 02:32:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-07-24 02:32:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-07-24 02:32:01 ----D---- C:\WINDOWS\ie7updates
2010-07-24 02:31:51 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-07-24 02:31:44 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-07-24 02:31:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-07-24 02:31:36 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-07-24 02:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-07-24 02:29:07 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-07-24 02:27:19 ----D---- C:\Program Files\Microsoft Works
2010-07-24 02:27:07 ----D---- C:\Program Files\MSBuild
2010-07-24 02:26:40 ----D---- C:\Program Files\Microsoft Visual Studio
2010-07-24 02:26:40 ----D---- C:\Program Files\Common Files\DESIGNER
2010-07-24 02:26:28 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-07-24 02:23:07 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-07-24 02:22:39 ----D---- C:\WINDOWS\SHELLNEW
2010-07-24 02:22:17 ----D---- C:\Program Files\Microsoft Office
2010-07-24 02:22:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-07-24 02:21:55 ----RHD---- C:\MSOCache
2010-07-24 02:19:37 ----D---- C:\WINDOWS\system32\PreInstall
2010-07-24 02:19:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-07-24 02:19:36 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-07-24 02:19:35 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-07-24 02:19:35 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-24 02:16:26 ----D---- C:\Full HD Wallpapers
2010-07-24 02:14:08 ----D---- C:\Documents and Settings\Petr\Data aplikací\LangSoft
2010-07-24 02:10:37 ----SHD---- C:\RECYCLER
2010-07-24 02:10:34 ----D---- C:\Documents and Settings\Petr\Data aplikací\Mozilla
2010-07-24 02:10:30 ----D---- C:\Program Files\Mozilla Firefox
2010-07-24 02:07:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-07-24 02:05:55 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-07-24 02:05:10 ----D---- C:\Documents and Settings\Petr\Data aplikací\Identities
2010-07-24 02:05:01 ----ASH---- C:\Documents and Settings\Petr\Data aplikací\desktop.ini
2010-07-24 02:05:00 ----SD---- C:\Documents and Settings\Petr\Data aplikací\Microsoft
2010-07-24 02:04:59 ----ASH---- C:\hiberfil.sys
2010-07-24 02:04:23 ----D---- C:\WINDOWS\system32\SoftwareDistribution

======List of files/folders modified in the last 1 months======

2010-07-30 13:10:17 ----RD---- C:\Program Files
2010-07-30 10:55:21 ----D---- C:\WINDOWS
2010-07-30 10:47:58 ----D---- C:\WINDOWS\Temp
2010-07-30 10:19:05 ----D---- C:\WINDOWS\system32\drivers
2010-07-30 10:18:00 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-29 21:44:54 ----D---- C:\WINDOWS\system32
2010-07-29 12:45:44 ----SHD---- C:\WINDOWS\Installer
2010-07-29 12:44:54 ----D---- C:\Program Files\Common Files
2010-07-29 00:13:11 ----D---- C:\WINDOWS\WinSxS
2010-07-29 00:12:51 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-07-29 00:12:20 ----RSD---- C:\WINDOWS\Fonts
2010-07-28 15:51:11 ----D---- C:\WINDOWS\system32\config
2010-07-26 10:56:25 ----HD---- C:\WINDOWS\inf
2010-07-26 10:52:48 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-25 22:02:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-25 21:58:09 ----D---- C:\WINDOWS\system32\CatRoot
2010-07-24 23:44:51 ----D---- C:\WINDOWS\system32\cs-cz
2010-07-24 23:44:01 ----D---- C:\WINDOWS\system32\mui
2010-07-24 23:37:07 ----D---- C:\WINDOWS\system32\spool
2010-07-24 23:16:24 ----D---- C:\WINDOWS\system32\drivers\etc
2010-07-24 23:10:25 ----RSH---- C:\boot.ini
2010-07-24 10:22:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-07-24 10:04:55 ----A---- C:\WINDOWS\win.ini
2010-07-24 09:31:56 ----RD---- C:\WINDOWS\Web
2010-07-24 08:33:43 ----D---- C:\WINDOWS\Debug
2010-07-24 03:02:52 ----SHD---- C:\System Volume Information
2010-07-24 02:59:17 ----D---- C:\WINDOWS\security
2010-07-24 02:59:17 ----D---- C:\WINDOWS\ime
2010-07-24 02:58:35 ----A---- C:\WINDOWS\ODBCINST.INI
2010-07-24 02:58:23 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-07-24 02:58:21 ----D---- C:\WINDOWS\system32\ias
2010-07-24 02:56:30 ----D---- C:\WINDOWS\system32\oobe
2010-07-24 02:54:50 ----D---- C:\WINDOWS\Cursors
2010-07-24 02:46:28 ----D---- C:\WINDOWS\Media
2010-07-24 02:46:28 ----D---- C:\WINDOWS\Help
2010-07-24 02:46:28 ----D---- C:\WINDOWS\AppPatch
2010-07-24 02:46:27 ----D---- C:\WINDOWS\system32\wbem
2010-07-24 02:25:50 ----D---- C:\WINDOWS\pchealth
2010-07-24 02:05:00 ----D---- C:\Documents and Settings

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2010-06-01 87824]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-06-04 229312]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-06-01 25240]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 PSINKNC;PSINKNC; C:\WINDOWS\system32\DRIVERS\psinknc.sys [2010-05-04 129928]
R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
R2 PSINAflt;PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [2010-05-27 141384]
R2 PSINFile;PSINFile; C:\WINDOWS\system32\DRIVERS\PSINFile.sys [2010-04-30 97032]
R2 PSINProc;PSINProc; C:\WINDOWS\system32\DRIVERS\PSINProc.sys [2010-04-30 111624]
R2 PSINProt;PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [2010-05-12 110920]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2003-09-22 130192]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\DKbFltr.sys [2003-01-17 17071]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2003-09-22 178672]
R3 P17;Sound Blaster Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2004-06-04 840960]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-14 20992]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys []
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 ivusb;Initio Driver for USB Default Controller; C:\WINDOWS\system32\DRIVERS\ivusb.sys [2010-03-10 24216]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-08-08 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-08-08 82944]
gaz

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#2 Příspěvek od gazebo »

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-02-12 345376]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-06-01 1778480]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 DUMeterSvc;DU Meter Service; C:\Program Files\DU Meter\DUMeterSvc.exe [2008-06-09 1386008]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-24 153376]
R2 NanoServiceMain;Panda Cloud Antivirus Service; C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe [2010-04-30 136448]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-05-07 1051976]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-05-10 110592]
R2 WDFME;WD File Management Engine; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe [2010-05-10 1858048]
R2 WDSC;WD File Management Shadow Engine; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe [2010-05-10 482304]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-07-24 435016]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
gaz

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Prosím o kontrolu logu RSIT a Hijackthis

#3 Příspěvek od gazebo »

Pridavam jeste log Hijackthis...dekuji.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:05:51, on 30.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~1\MediaKey\MMKeybd.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Kalendar\kalendar.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\DU Meter\DUMeterSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\365dni\365dniNET.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\JetAudio\JetAudio.exe
C:\Program Files\Java\jre6\launch4j-tmp\frd.exe
C:\WINDOWS\Explorer.EXE
C:\Staženo\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MMKeybd.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [Kalendar] C:\Program Files\Kalendar\kalendar.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD File Management Engine (WDFME) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDFME\WDFME.exe
O23 - Service: WD File Management Shadow Engine (WDSC) - Unknown owner - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSC.exe

--
End of file - 10335 bytes
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#4 Příspěvek od motji »

Dobrý večer :)
Jaké máte problémy s počítačem?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#5 Příspěvek od gazebo »

Dobrý večer,
někdy mám problémy s grafikou, po startu se mi zda byt obraz rozostreny...ale mam nainstalovany nejnovejsi drivery ke GK...zkousel jsem kde co ale sem tam se mi to stane opet.
Linky se tresou a kvalita barev je znatelne nizsi.
Nekdy taky na nekolik chvil pc zatuhne a nereaguje na nic.
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#6 Příspěvek od motji »

Mrkneme po virech a když tak sem pak pošlu kolegu na tu grafiku :) .

:arrow: Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT :!:
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#7 Příspěvek od gazebo »

Dekuju...je to docela otravny...budu radsi kdyz to bude v cajku.

Tyden nebudu pritomen....diky za pripadne rady...az budu kouknu.
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#8 Příspěvek od motji »

Dobře, až budete mít log z mbamu, tak se ozvěte :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#9 Příspěvek od gazebo »

Zdravim...uz jsem zpet...a tady je log :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4404

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

7.8.2010 20:21:53
mbam-log-2010-08-07 (20-21-53).txt

Typ skenu: Rychlý sken
Skenované objekty: 130935
Uplynulý čas: 13 minuta(y), 21 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 1
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)


Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\kalendar (Trojan.FakeAlert.H) -> No action taken.

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Program Files\Kalendar\kalendar.exe (Trojan.FakeAlert.H) -> No action taken.
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#10 Příspěvek od motji »

Ten program znáte, používáte?
Otestujte ho na www.virustotal.com
C:\Program Files\Kalendar\kalendar.exe
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#11 Příspěvek od gazebo »

motji napsal:Ten program znáte, používáte?
Otestujte ho na http://www.virustotal.com
C:\Program Files\Kalendar\kalendar.exe
Ano...program znam a pouzivam....jedna se o soft stazeny ze Slunecnice.
Autorovy stranky zde :

Kód: Vybrat vše

http://kubos.wz.cz/kalendar/
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#12 Příspěvek od motji »

Tak ho radši prověřte na www.virustotal.com.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#13 Příspěvek od gazebo »

McAfee-GW-Edition 2010.1 2010.08.05 Heuristic.BehavesLike.Win32.Backdoor.H

Nechal jsem to probehnout dle rady a tohle byl jedinej result. Mam to tedy smaznout ?
gaz

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Prosím o kontrolu logu RSIT

#14 Příspěvek od motji »

Ne, nemažte ho, falešná detekce :roll: .
Jak to vypadá s počítačem?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

gazebo
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Kvě 2007 07:00

Re: Prosím o kontrolu logu RSIT

#15 Příspěvek od gazebo »

Ja si to taky myslel...ani antivir mi nic nehlasil...takze ok. No a jak to vypada ? No porad tak nejak stejne ale ja uz to lip nesu...clovek si zvykne na vse.
A s tou grafikou mne to sem tam taky vypece....nekdy pri startu nenabehne zcela tak jak by mela. Obraz je jakoby v mensim rozliseni a lehce se trese.
Naposledy vcera. Zatim vzdy pomohl restart. Treba dnes v pohode ale prijde mi to jako loterie :-(
gaz

Odpovědět