Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Lenochod...

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Lenochod...

#1 Příspěvek od vermont23 »

Zdravím

Mám pomalej počítač,hlavně při startu.Prosím o preventivku.Díky


ComboFix 10-08-05.02 - pocitac 09.08.2010 22:47:38.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.767.493 [GMT 2:00]
Spuštěný z: c:\documents and settings\pocitac\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-07-09 do 2010-08-09 )))))))))))))))))))))))))))))))
.

2010-08-09 05:42 . 2010-08-09 05:42 -------- d-----w- c:\program files\Common Files\Java
2010-08-07 10:32 . 2010-08-09 07:13 -------- d-----w- c:\program files\SpeedyPC
2010-08-07 10:07 . 2010-08-09 06:24 17962 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2010-08-05 17:38 . 2008-04-14 06:52 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2010-08-05 10:48 . 2010-08-05 10:48 -------- d-----w- c:\program files\NetWaiting
2010-08-05 10:45 . 2010-08-05 10:45 -------- d-----w- c:\program files\MSECache
2010-08-05 09:45 . 2008-09-01 08:18 1564544 ----a-w- c:\windows\system32\drivers\VMHybr64.sys
2010-08-05 09:45 . 2008-09-01 08:05 1060224 ----a-w- c:\windows\system32\drivers\VMHybrid.sys
2010-08-05 09:43 . 2010-06-23 15:47 374048 ----a-w- c:\windows\system32\yk51x86.dll
2010-08-05 08:45 . 2010-08-05 08:44 176640 ----a-w- c:\windows\Tloxua.exe
2010-08-05 08:31 . 2010-08-05 12:37 -------- d-----w- c:\program files\BS_Player
2010-08-05 08:18 . 2010-08-05 08:20 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-08-05 07:58 . 2010-08-05 07:58 -------- d-----w- c:\program files\Software Informer
2010-08-05 07:25 . 2010-08-05 07:25 -------- d-----w- c:\program files\Uniblue

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-09 05:40 . 2008-05-27 08:06 -------- d-----w- c:\program files\Java
2010-08-06 06:32 . 2010-03-03 18:29 -------- d-----w- c:\program files\pdfforge Toolbar
2010-08-05 18:01 . 2010-07-14 18:12 217180 ----a-w- c:\windows\system32\nvdrsdb0.bin
2010-08-05 18:01 . 2010-07-14 18:12 1 ----a-w- c:\windows\system32\nvdrssel.bin
2010-08-05 18:01 . 2010-07-14 18:12 217180 ----a-w- c:\windows\system32\nvdrsdb1.bin
2010-08-05 10:57 . 2008-07-31 19:38 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-05 10:57 . 2008-07-31 19:38 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-05 10:56 . 2009-01-23 11:36 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-08-05 09:58 . 2001-10-25 13:00 98528 ----a-w- c:\windows\system32\perfc005.dat
2010-08-05 09:58 . 2001-10-25 13:00 492620 ----a-w- c:\windows\system32\perfh005.dat
2010-08-05 09:45 . 2008-04-14 15:16 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-05 08:30 . 2009-05-07 07:00 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-05 08:27 . 2008-04-15 06:58 -------- d-----w- c:\program files\Common Files\Adobe
2010-08-05 08:20 . 2009-09-29 15:23 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-08-03 10:01 . 2010-08-03 10:01 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 2
2010-08-03 09:42 . 2010-08-03 09:41 -------- d-----w- c:\program files\Ask.com
2010-08-03 09:41 . 2008-11-25 14:34 -------- d-----w- c:\program files\VDOWNLOADER
2010-08-02 05:13 . 2010-08-02 05:13 -------- d-----w- c:\program files\AIMP2
2010-07-30 10:18 . 2008-04-16 18:53 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-07-28 08:58 . 2009-07-31 07:03 -------- d-----w- c:\program files\7210-7250-7250i USB-Handset Manager
2010-07-28 08:53 . 2009-04-24 07:23 -------- d-----w- c:\program files\CCleaner
2010-07-22 05:20 . 2010-07-22 05:20 -------- d-----w- c:\program files\AnvSoft
2010-07-21 11:13 . 2008-05-17 10:21 -------- d-----w- c:\program files\Windows Media Connect 2
2010-07-21 11:13 . 2009-12-05 11:06 -------- d-----w- c:\program files\CentrumczToolbar
2010-07-21 11:07 . 2008-11-28 18:30 -------- d-----w- c:\program files\Sony
2010-07-21 10:59 . 2008-05-16 14:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-07-20 09:45 . 2009-10-19 08:56 -------- d-----w- c:\program files\Spyware Terminator
2010-07-19 15:55 . 2010-07-19 15:37 -------- d-----w- c:\program files\Super Internet TV
2010-07-17 03:00 . 2010-07-09 07:21 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-16 05:35 . 2008-08-27 11:29 -------- d-----w- c:\program files\Rainlendar2
2010-07-15 06:23 . 2009-10-06 06:05 -------- d-----w- c:\program files\EA GAMES
2010-07-15 06:17 . 2010-07-15 06:17 -------- d-----w- c:\program files\VS Revo Group
2010-07-14 18:16 . 2010-05-04 10:32 -------- d-----w- c:\program files\NVIDIA Corporation
2010-07-14 05:50 . 2010-07-14 05:50 245 ----a-w- C:\UnInstall.dat
2010-07-09 07:54 . 2009-07-21 19:57 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-08 09:19 . 2008-07-17 10:41 -------- d-----w- c:\program files\OpenAL
2010-07-08 08:54 . 2010-06-16 13:48 -------- d-----w- c:\program files\PCPitstop
2010-07-08 08:42 . 2009-07-09 16:30 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-07-08 08:37 . 2009-08-05 10:42 -------- d-----w- c:\program files\Common Files\Nero
2010-07-08 08:25 . 2009-02-07 23:04 -------- d-----w- c:\program files\Crawler
2010-07-08 08:23 . 2009-02-20 07:09 -------- d-----w- c:\program files\Any Video Converter
2010-07-08 07:29 . 2010-07-08 07:29 -------- d-----w- c:\program files\SIW
2010-07-07 08:13 . 2010-07-07 08:13 53248 ----a-w- c:\windows\system32\apache.dll
2010-07-07 08:12 . 2010-07-07 08:12 -------- d-----w- c:\program files\GSC World Publishing
2010-07-06 16:27 . 2010-06-16 17:11 359016 ----a-w- c:\windows\vncutil.exe
2010-07-06 16:27 . 2008-04-14 15:16 84584 ----a-w- c:\windows\SOUNDMAN.EXE
2010-07-06 16:27 . 2008-04-14 15:16 1833576 ----a-w- c:\windows\SkyTel.exe
2010-07-06 16:27 . 2008-04-14 15:16 1489512 ----a-w- c:\windows\RtlUpd.exe
2010-07-06 16:26 . 2008-04-14 15:16 9721960 ----a-w- c:\windows\RTLCPL.EXE
2010-07-06 16:26 . 2008-04-14 15:16 6088296 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2010-07-06 16:26 . 2010-08-05 09:50 53864 ----a-w- c:\windows\system32\SET160.tmp
2010-07-06 16:26 . 2010-06-16 17:11 129640 ----a-w- c:\windows\RtkAudioService.exe
2010-07-06 16:26 . 2008-04-14 15:16 19556968 ----a-w- c:\windows\RTHDCPL.EXE
2010-07-06 16:26 . 2010-06-16 17:11 2815592 ----a-w- c:\windows\ALCWZRD.EXE
2010-07-06 16:26 . 2008-04-14 15:16 2180712 ----a-w- c:\windows\MicCal.exe
2010-07-06 16:26 . 2010-06-16 17:11 64104 ----a-w- c:\windows\ALCMTR.EXE
2010-07-04 18:47 . 2010-07-04 18:47 170 ----a-w- c:\program files\1bomb.ini
2010-07-04 18:44 . 2010-07-04 18:44 -------- d-----w- c:\program files\Pokemon PC
2010-06-28 20:57 . 2010-06-29 11:28 38848 ----a-w- c:\windows\avastSS.scr
2010-06-28 20:57 . 2008-04-17 17:31 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2008-04-17 17:31 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2008-04-25 16:29 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2008-04-25 16:29 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2008-04-17 17:31 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2008-04-17 17:31 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2008-04-25 16:29 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2008-04-17 17:31 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-24 09:13 . 2008-04-14 15:16 1251944 ----a-w- c:\windows\RtlExUpd.dll
2010-06-23 15:47 . 2007-09-20 08:22 305696 ----a-w- c:\windows\system32\drivers\yk51x86.sys
2010-06-20 13:30 . 2008-12-14 10:21 -------- d-----w- c:\program files\EA Sports
2010-06-20 12:50 . 2010-06-16 10:20 -------- d-----w- c:\program files\Ashampoo
2010-06-17 06:58 . 2010-06-17 06:58 -------- d-----w- c:\program files\Intel
2010-06-16 14:34 . 2010-06-16 14:34 -------- d-----w- c:\program files\Driver-Soft
2010-06-16 13:17 . 2010-06-16 12:33 -------- d-----w- c:\program files\Windows Desktop Search
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft Sync Framework
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft
2010-06-16 12:58 . 2010-06-16 12:57 -------- d-----w- c:\program files\Windows Live
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-06-16 12:57 . 2010-06-16 12:57 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-06-16 12:48 . 2010-06-16 12:48 -------- d-----w- c:\program files\Common Files\Windows Live
2010-06-15 12:29 . 2008-05-03 07:04 -------- d-----w- c:\program files\uTorrent
2010-06-15 11:53 . 2009-06-06 14:58 -------- d-----w- c:\program files\Lavasoft
2010-06-15 09:53 . 2008-04-17 17:31 -------- d-----w- c:\program files\Alwil Software
2010-06-15 05:33 . 2008-11-03 19:33 -------- d-----w- c:\program files\ICQ6Toolbar
2010-06-14 14:31 . 2008-04-13 17:09 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:44 . 2010-06-14 07:41 -------- d-----w- c:\program files\ICQ7.2
2010-06-07 23:57 . 2010-01-11 11:53 600680 ----a-w- c:\windows\system32\nvudisp.exe
2010-05-31 08:50 . 2010-05-31 08:50 0 ----a-w- c:\windows\PowerReg.dat
2010-05-28 10:58 . 2010-01-11 11:52 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-05-13 17:52 . 2010-06-16 15:38 289026 ----a-w- c:\windows\pchealth\helpctr\Config\Cache\Professional_32_1029.dat
2010-02-10 09:18 . 2010-08-03 09:41 2131336 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\$NtServicePackUninstall$\ntfs.sys

[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys

[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 86AD5B0E02F2C968FBB096AB4C555C9C . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll
[-] 2005-08-22 . BB0557B62B95F366464C3C60A0BD6BDF . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll

[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-07-26 . DBDE980506B54AE928D151D12419B425 . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2005-07-26 . 46C3197AAC32EBA82453ACDD84114DC2 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . 5DE239E9CC9DB7430233EA7BE10EAD32 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll

[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe

[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe

[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2006-08-25 . E26B26189B786E6B092F002041D5A1E2 . 617472 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll

[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 398314DF0B21338C4996B469101750D1 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:19 . 3440C414044935B124B5821C0994B37F . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2005-07-26 04:30 . 7B9199B6809586DC2CF30D411CECBD33 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll

[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2007-04-16 . 2B33979FDE5D1B9293ADB025F323B0D9 . 984576 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . C23A84D7AB99678B2F1A52080280E4ED . 983040 . . [5.1.2600.3119] . . c:\windows\$NtServicePackUninstall$\kernel32.dll

[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . 3E611531CC70649635FC890B421AECD0 . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . B5DE324E0F9AEBEC885ABF5DB6B2F73D . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\mshtml.dll
[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\system32\mshtml.dll
[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
[-] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\mshtml.dll
[7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\mshtml.dll
[-] 2008-12-12 . 0E5ED45F7D6CBBCC973C92247FBE9F30 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . 96AD32D5C30A1F79F487A99BC1D5AFE9 . 3088896 . . [6.00.2900.5726] . . c:\windows\ie8\mshtml.dll
[-] 2008-10-16 . 2A9F87DE02E61CFB762121C160E87F6A . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-08-20 . 78160DA0DB2913BB30473AC3F6619C3E . 3088896 . . [6.00.2900.5659] . . c:\windows\$hf_mig$\KB956390\SP3QFE\mshtml.dll
[-] 2008-06-25 . F73C9A14AF90CEE8A9895271FA7D57E8 . 3088896 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3QFE\mshtml.dll
[-] 2008-06-24 . 221718BE0A0DE22548C3BF125F19F49A . 3592192 . . [7.00.6000.16705] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2GDR\mshtml.dll
[-] 2008-06-23 . FA659F528F12494D21E6CB0CB8261EA3 . 3088384 . . [6.00.2900.3395] . . c:\windows\$hf_mig$\KB953838\SP2QFE\mshtml.dll
[-] 2008-06-23 . 2EBBE7DB6B57D396961449883EB9E24D . 3080704 . . [6.00.2900.3395] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2008-06-23 . B552ADA48C2BA853872AFFCAC88A6513 . 3594240 . . [7.00.6000.20861] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2QFE\mshtml.dll
[-] 2008-06-23 . 239E9C71F84E4FF13445EC3464C37FB1 . 3088384 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3GDR\mshtml.dll
[-] 2008-04-23 . 223F1E24EBBF6D6FB67999179DD2D75E . 3593728 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-04-21 . 5D8B15580ED2BB084ED0649C972D091A . 3087872 . . [6.00.2900.3354] . . c:\windows\$hf_mig$\KB950759\SP2QFE\mshtml.dll
[-] 2008-04-21 . B4AE83D91A77D398F9C41847CE17F9C3 . 3087872 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3GDR\mshtml.dll
[-] 2008-04-21 . 84DD596D04865401939EFA2770C41DAB . 3088384 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-01 . AA61A6FAA4D691A6ED38FC1099EDE19B . 3593216 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2008-02-16 . 5BB152929C0F6824D59E49E06947495B . 3087872 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\mshtml.dll
[7] 2007-12-08 . E753D2EE81F01E9EA352FF2056A67622 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[7] 2007-12-07 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll

[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll

[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . A6E79B60AC73241E5721AB6A573D2B24 . 247296 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 37BABA5DBD9027837FDC27E5D6EF33E1 . 247296 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll

[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2007-02-28 . D40B4F66D877802EC5E655B91B5490FA . 2184320 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 . C09CA7FAFFC40BBFACEEB9F0F429F673 . 2182528 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2005-03-02 . 7FABE135EAC02A4BC8094B831ADC0CC3 . 2181632 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . 2EB5536278D697C5895A48514682BF64 . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . 250241D65CCF692AEACC318A266413C2 . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . 5393076FDCD6DAEB82814688DDE3E9A2 . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . 43240B12D220F30C7C75EA69B2E806B0 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2005-03-02 . 3EF380290CE2CA8598E475CEAC4ADB13 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll

[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\wininet.dll
[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\system32\wininet.dll
[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\system32\dllcache\wininet.dll
[-] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
[-] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\wininet.dll
[7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\wininet.dll
[-] 2008-10-16 . 370940E124256D20DE4CA7E51377335C . 668160 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 8E7DE90524F7DD5DB33CC38AD9A1B0B4 . 667136 . . [6.00.2900.5694] . . c:\windows\ie8\wininet.dll
[-] 2008-08-20 . 805DE4C27B23B68A56C07E1A96E10693 . 667648 . . [6.00.2900.5659] . . c:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll
[-] 2008-06-23 . 01EF5E10F55A5AE4D49C93C25879921E . 826368 . . [7.00.6000.16705] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2GDR\wininet.dll
[-] 2008-06-23 . 1906B249A57EB5917FF81627D767B936 . 668160 . . [6.00.2900.3395] . . c:\windows\$hf_mig$\KB953838\SP2QFE\wininet.dll
[-] 2008-06-23 . 9BFA429E9FD7923B57C395AA56CFA6EB . 660480 . . [6.00.2900.3395] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2008-06-23 . 57BE3F6CA8282AC863C16862C1B65964 . 827904 . . [7.00.6000.20861] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2QFE\wininet.dll
[-] 2008-06-23 . 47D3A0B49FC337F0893204E15EB49833 . 667136 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3GDR\wininet.dll
[-] 2008-06-23 . 261F5B58FB5308BBA53692DE884C3743 . 667648 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll
[-] 2008-04-23 . 03727BB0DE4D4902F951D3BD7D0AC4FE . 827392 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-04-21 . A688DA7719A8EA242B1AC3437BFF662C . 667648 . . [6.00.2900.3354] . . c:\windows\$hf_mig$\KB950759\SP2QFE\wininet.dll
[-] 2008-04-21 . 540D6806D0FF026DFB4CA4E01207084E . 667136 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3GDR\wininet.dll
[-] 2008-04-21 . E2CFF7BF2F1D122CFA546C667A47F87E . 667648 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3QFE\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-01 . 46A1A52EB6C86344C6EBF65B17404C90 . 827392 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2008-02-16 . 8F14F3E4F2B1BCDDADAC195302D808F4 . 667136 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\wininet.dll
[7] 2007-12-07 . E9B04B01D5A1ECC47B2E4364D171CF23 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
[7] 2007-12-07 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll

[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2007-06-13 . ED7B460B142A32097B8A8F6ECC941815 . 1033728 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
[-] 2007-06-13 . 9B32416BD5988C97B6397CE0B02CAF97 . 1033728 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe

[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\system32\ole32.dll
[-] 2005-07-26 . A0D5A763708D868C1EFC18D6F6EEDE0D . 1284608 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\ole32.dll
[-] 2005-07-26 . 93AC0C1189CB7C34910CD00748A23E3A . 1285632 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll
[-] 2005-04-28 . 518208504C310D52FF0FD447AD837AAF . 1286144 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll

[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#2 Příspěvek od vermont23 »

[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . E26EDC7AFA8DA3C528055EABC82C8C79 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
[-] 2006-12-19 . F961FDD353F9451440197024FDDFE086 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll

[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll

[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:19 . 6C44E5766939B7552BFF75B2B6FF1161 . 927504 . . [4.1.0.61] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll

[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2006-10-18 19:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-18 19:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll
[-] 2004-08-10 23:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-10 23:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll

[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2007-02-28 . A873FF1754E2A81CB1A34588CAB363D6 . 2061568 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
[-] 2007-02-28 . C80BCA19AA7D4DC37857E9F8250756DA . 2059776 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2005-03-02 . 9355304DD565E23F8EE294720B2C03E5 . 2059008 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe

[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-17 14:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . 6FD45FDC0C32BC4E81F718B671A3E017 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . 0C0C2C77C6B52181369594F2AA36AF40 . 185344 . . [5.1.2600.3077] . . c:\windows\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
[7] 2004-07-09 03:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll
[7] 2004-07-09 02:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\system32\dllcache\dsound.dll

[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
[7] 2004-07-09 03:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll
[7] 2004-07-09 02:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\system32\dllcache\ddraw.dll

[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-17 14:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-08-09_16.49.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-08-09 20:45 . 2010-08-09 20:45 16384 c:\windows\Temp\Perflib_Perfdata_61c.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ECDEE021-0D17-467F-A1FF-C7A115230949}"= "c:\program files\free-downloads.net\tbfre1.dll" [2010-05-26 2515552]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_1.dll" [2010-08-05 2515552]

[HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]
2010-05-17 13:37 392072 ----a-w- c:\program files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
2009-12-16 09:03 185344 ----a-w- c:\program files\Get Styles\enlbrdr.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]
2009-11-20 17:34 87472 ----a-w- c:\program files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
2010-01-08 02:17 700416 ----a-w- c:\program files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-04 14:50 1197448 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
2010-05-26 06:48 2515552 ----a-w- c:\program files\free-downloads.net\tbfre1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2010-08-05 12:37 2515552 ----a-w- c:\program files\BS_Player\tbBS_1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"= "c:\program files\free-downloads.net\tbfre1.dll" [2010-05-26 2515552]
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"= "c:\program files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll" [2010-01-08 700416]
"{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}"= "c:\program files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll" [2009-11-20 87472]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_1.dll" [2010-08-05 2515552]

[HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]

[HKEY_CLASSES_ROOT\clsid\{abb49b3b-ab7d-4ed0-9135-93fd5aa4f69f}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{ECDEE021-0D17-467F-A1FF-C7A115230949}"= "c:\program files\free-downloads.net\tbfre1.dll" [2010-05-26 2515552]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\tbBS_1.dll" [2010-08-05 2515552]

[HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2010-07-11 2199040]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-18 68856]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2010-06-28 2322501]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-09-15 185896]
"SearchSettings"="c:\program files\pdfforge Toolbar\SearchSettings.exe" [2010-01-08 974848]
"DataMngr"="c:\progra~1\IMESHA~1\MediaBar\DataMngr\DataMngrUI.exe" [2010-05-17 796592]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"RTHDCPL"="RTHDCPL.EXE" [2010-07-06 19556968]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\C:\0autocheck autochk *

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^koxicek xD^Dokumenty^tomáš^Programy^Simpsonovi^Po í 2^The Matrix_ Path of Neo Registration.lnk]
backup=c:\windows\pss\The Matrix_ Path of Neo Registration.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-06-14 07:41 133368 ----a-w- c:\program files\ICQ7.2\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
2010-04-15 07:24 2176512 ----a-w- c:\program files\Spyware Terminator\SpywareTerminatorShield.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
2010-04-15 07:24 3037696 ----a-w- c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2]
2007-12-05 14:06 1885464 ----a-w- c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VGAUtil]
2010-08-07 10:03 544768 ----a-w- c:\program files\GigaByte\VGA Utility Manager\G-vga.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Lavasoft Ad-Aware Service"=2 (0x2)
"sp_rssrv"=2 (0x2)
"ICQ Service"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Documents and Settings\\All Users\\Data aplikací\\NexonUS\\NGM\\NGM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"h:\\Program Files\\Call of Duty\\CoDMP.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"h:\\Call of duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\K-Lite Codec Pack\\Tools\\VobSubStrip.exe"=
"h:\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\GigaByte\\VGA Utility Manager\\gvupdate.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"22368:TCP"= 22368:TCP:BitComet 22368 TCP
"22368:UDP"= 22368:UDP:BitComet 22368 UDP
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [25.4.2008 18:29 165456]
R1 HMFAxCore46691b2fe72383a3b643d95081ef1d95;HMFAxCore46691b2fe72383a3b643d95081ef1d95;c:\windows\system32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys [18.8.2009 18:13 24064]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.10.2009 10:56 142592]
R2 0VsNdis08;VitalAgent Network Driver 8.1;c:\program files\INS\VitalAgent\Program\VsNdis08.sys [20.4.2008 18:15 31671]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8.1.2010 1:51 380928]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [25.4.2008 18:29 17744]
R2 TLRecAgent;TLRecAgent;c:\windows\system32\drivers\TLRecAgent.sys [15.4.2008 14:12 14888]
R3 0VsComm12;VitalAgent Serial Port Driver 12.4;c:\program files\INS\VitalAgent\Program\VsComm12.sys [20.4.2008 18:15 15443]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [11.5.2010 16:09 27632]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S0 OCDE;ZTekWare Original CD Emulator Service;c:\windows\system32\Drivers\OCDE.sys --> c:\windows\system32\Drivers\OCDE.sys [?]
S2 gupdate1c986b280a967ba;Google Update Service (gupdate1c986b280a967ba);c:\program files\Google\Update\GoogleUpdate.exe [4.2.2009 12:22 133104]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [16.6.2010 19:11 1691480]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [11.5.2010 16:09 13224]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [7.8.2010 12:07 17962]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [15.7.2010 8:17 27064]
S4 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [14.6.2010 9:31 246520]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [16.4.2008 17:04 691696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1750559
mWindow Title = Microsoft Internet Explorer
uInternet Settings,ProxyOverride = local
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Crawler Search - tbr:iemenu
IE: Download Video by Wise Videos Download - c:\program files\Wise Videos Download\vdown.htm
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\ctbr.dll
FF - ProfilePath - c:\documents and settings\pocitac\Data aplikací\Mozilla\Firefox\Profiles\7x93whw3.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=VD&o=14778&locale=en_EU&q=
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1487.6512\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-09 22:54
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2010-08-09 22:57:58
ComboFix-quarantined-files.txt 2010-08-09 20:57
ComboFix2.txt 2010-08-09 16:52
ComboFix3.txt 2010-08-06 06:46

Před spuštěním: Volných bajtů: 80 266 309 632
Po spuštění: Volných bajtů: 80 251 965 440

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - DCC442C5C4AF20F8F5ED2CACCD7D6B92
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Lenochod...

#3 Příspěvek od motji »

Dobrý večer :)
Combofix je na preventivku poněkud brutální nástroj :roll: , může Vám poškodit systém.
Poprosím Vás o log ze Rsitu, viz můj podpis :) .
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#4 Příspěvek od vermont23 »

Dobré ráno :)

Zde je ten log z RSITU


Logfile of random's system information tool 1.08 (written by random/random)
Run by pocitac at 2010-08-11 08:33:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 79 GB (68%) free of 116 GB
Total RAM: 767 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:33:31, on 11.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\IMESHA~1\MediaBar\DataMngr\DataMngrUI.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 2\firefox.exe
C:\Documents and Settings\pocitac\Plocha\RSIT.exe
C:\Program Files\trend micro\pocitac.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60446
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ECDEE021-0D17-467F-A1FF-C7A115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\100614959\ICQToolBar.dll
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: CentrumczToolbar BHO - {33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - C:\Program Files\Get Styles\enlbrdr.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre1.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Centrum.cz Toolbar - {D5D47440-0750-463D-BAEF-A47D02414806} - C:\Program Files\CentrumczToolbar\IEToolbar.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll
O3 - Toolbar: MediaBar - {ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\100614959\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_1.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe
O4 - HKLM\..\Run: [DataMngr] C:\PROGRA~1\IMESHA~1\MediaBar\DataMngr\DataMngrUI.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download Video by Wise Videos Download - C:\Program Files\Wise Videos Download\vdown.htm
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Počasí - {0575B56C-DC9E-41B8-B876-95131618FEDD} - http://pocasi.centrum.cz (file missing) (HKCU)
O9 - Extra button: Xchat.cz - {11B6259E-CF1D-4FB4-809F-8AEB50F035E1} - http://www.xchat.cz (file missing) (HKCU)
O9 - Extra button: Slovníky - {1A7139BC-830A-45D0-BD21-443968FF262A} - http://slovniky.centrum.cz (file missing) (HKCU)
O9 - Extra button: Centrum.cz - {2F796D5D-17A1-4786-81D4-A62FB7CDC1A5} - http://www.centrum.cz (file missing) (HKCU)
O9 - Extra button: Supermapy - {3273CC21-4AC4-4441-A37A-F63E687E2030} - http://www.supermapy.cz (file missing) (HKCU)
O9 - Extra button: Stahuj.cz - {58DE3435-BEB1-42A9-8326-9436DCBCEAB6} - http://www.stahuj.cz (file missing) (HKCU)
O9 - Extra button: Bleskově - {85D9376B-9671-4850-88E0-CBA21E4824A4} - http://www.bleskove.cz (file missing) (HKCU)
O9 - Extra button: Žena.cz - {91A5A986-5543-42C3-8BBF-612EAA4355F2} - http://www.zena.cz (file missing) (HKCU)
O9 - Extra button: Fotoalba - {B31AD104-06B0-4FFE-A1C7-56381CCC7324} - http://www.fotoalba.cz (file missing) (HKCU)
O9 - Extra button: Aktuálně - {CC76020D-EE16-4AC2-B032-30ABAEE1AF09} - http://aktualne.centrum.cz (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour ... se5036.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/da2/PCPitStop2.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c986b280a967ba) (gupdate1c986b280a967ba) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O24 - Desktop Component 0: (no name) - file:///I:/zabava/tapety/tapeta10.jpg

--
End of file - 14836 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2009-12-15 1217896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]
PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33CD02D0-8C93-4926-A2FE-2CE72CE7DF1A}]
CentrumczToolbar BHO - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-02-12 1274160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]
UrlHelper Class - C:\Program Files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll [2010-05-17 392072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
GdfrDUEn Class - C:\Program Files\Get Styles\enlbrdr.dll [2009-12-16 185344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-22 256112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]
MediaBar - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll [2009-11-20 87472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-01 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll [2010-01-08 700416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-17 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre1.dll [2010-05-26 2515552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\tbBS_1.dll [2010-08-05 2515552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre1.dll [2010-05-26 2515552]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2009-12-15 1217896]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-10-22 256112]
{D5D47440-0750-463D-BAEF-A47D02414806} - Centrum.cz Toolbar - C:\Program Files\CentrumczToolbar\IEToolbar.dll [2010-02-12 1274160]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\1.1.2\pdfforgeToolbarIE.dll [2010-01-08 700416]
{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F} - MediaBar - C:\Program Files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll [2009-11-20 87472]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\100614959\ICQToolBar.dll [2010-04-12 1018616]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\tbBS_1.dll [2010-08-05 2515552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-09-15 185896]
"SearchSettings"=C:\Program Files\pdfforge Toolbar\SearchSettings.exe [2010-01-08 974848]
"DataMngr"=C:\PROGRA~1\IMESHA~1\MediaBar\DataMngr\DataMngrUI.exe [2010-05-17 796592]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-06 19556968]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2010-07-11 2199040]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-18 68856]
"Software Informer"=C:\Program Files\Software Informer\softinfo.exe [2010-06-28 2322501]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2010-06-14 133368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2010-04-15 2176512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2010-04-15 3037696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2]
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe [2007-12-05 1885464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VGAUtil]
C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe [2010-08-07 544768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^koxicek xD^Dokumenty^tomáš^Programy^Simpsonovi^Po í 2^The Matrix_ Path of Neo Registration.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Lavasoft Ad-Aware Service"=2
"sp_rssrv"=2
"ICQ Service"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Documents and Settings\All Users\Data aplikací\NexonUS\NGM\NGM.exe"="C:\Documents and Settings\All Users\Data aplikací\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Program Files\SopCast\adv\SopAdver.exe"="C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"C:\Program Files\SopCast\SopCast.exe"="C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
"H:\Program Files\Call of Duty\CoDMP.exe"="H:\Program Files\Call of Duty\CoDMP.exe:*:Enabled:CoDMP"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"H:\Call of duty 2\CoD2MP_s.exe"="H:\Call of duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="C:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\K-Lite Codec Pack\Tools\VobSubStrip.exe"="C:\Program Files\K-Lite Codec Pack\Tools\VobSubStrip.exe:*:Enabled:VobSubStrip"
"H:\Pro Evolution Soccer 2009\pes2009.exe"="H:\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009"
"C:\Program Files\GigaByte\VGA Utility Manager\gvupdate.exe"="C:\Program Files\GigaByte\VGA Utility Manager\gvupdate.exe:*:Enabled:gvupdate"
"H:\Pro evolution soccer 2010\pes2010.exe"="H:\Pro evolution soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

======List of files/folders created in the last 3 months======

2010-08-11 08:30:28 ----D---- C:\Program Files\trend micro
2010-08-11 08:30:25 ----D---- C:\rsit
2010-08-10 12:36:34 ----SHD---- C:\RECYCLER
2010-08-09 22:57:58 ----A---- C:\ComboFix.txt
2010-08-09 07:42:02 ----D---- C:\Program Files\Common Files\Java
2010-08-09 07:40:28 ----A---- C:\WINDOWS\system32\javaws.exe
2010-08-09 07:40:28 ----A---- C:\WINDOWS\system32\javaw.exe
2010-08-09 07:40:28 ----A---- C:\WINDOWS\system32\java.exe
2010-08-07 12:32:19 ----D---- C:\Program Files\SpeedyPC
2010-08-07 12:07:55 ----A---- C:\WINDOWS\system32\drivers\GVTDrv.sys
2010-08-06 09:22:29 ----A---- C:\pdfinfo.ini
2010-08-06 08:22:44 ----A---- C:\Boot.bak
2010-08-06 08:22:37 ----RASHD---- C:\cmdcons
2010-08-06 08:17:56 ----A---- C:\WINDOWS\zip.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\SWSC.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\SWREG.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\sed.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\PEV.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\NIRCMD.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\MBR.exe
2010-08-06 08:17:56 ----A---- C:\WINDOWS\grep.exe
2010-08-06 08:17:26 ----D---- C:\WINDOWS\ERDNT
2010-08-06 07:53:32 ----AD---- C:\Qoobox
2010-08-05 19:38:00 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-08-05 17:26:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Grisoft
2010-08-05 16:06:22 ----A---- C:\WINDOWS\OEWABLog.txt
2010-08-05 13:16:09 ----D---- C:\Documents and Settings\pocitac\Data aplikací\DivX
2010-08-05 12:48:31 ----D---- C:\Program Files\NetWaiting
2010-08-05 12:45:34 ----D---- C:\Program Files\MSECache
2010-08-05 12:30:47 ----ASH---- C:\hiberfil.sys
2010-08-05 11:50:09 ----A---- C:\WINDOWS\system32\SET160.tmp
2010-08-05 11:45:08 ----A---- C:\WINDOWS\system32\drivers\VMHybrid.sys
2010-08-05 11:45:08 ----A---- C:\WINDOWS\system32\drivers\VMHybr64.sys
2010-08-05 11:43:05 ----A---- C:\WINDOWS\system32\yk51x86.dll
2010-08-05 10:45:05 ----A---- C:\WINDOWS\Tloxua.exe
2010-08-05 10:31:48 ----D---- C:\Program Files\BS_Player
2010-08-05 10:26:17 ----D---- C:\Config.Msi
2010-08-05 10:18:48 ----D---- C:\Program Files\DAEMON Tools Lite
2010-08-05 09:58:15 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Software Informer
2010-08-05 09:58:12 ----D---- C:\Program Files\Software Informer
2010-08-05 09:25:24 ----D---- C:\Program Files\Uniblue
2010-08-05 08:48:27 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Uniblue
2010-08-05 07:41:57 ----A---- C:\WINDOWS\ntbtlog.txt
2010-08-05 06:59:14 ----SD---- C:\WINDOWS\Tasks
2010-08-03 12:01:17 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 2
2010-08-03 11:41:52 ----D---- C:\Program Files\Ask.com
2010-08-03 11:41:30 ----A---- C:\Program Files\Common Files\AskToolbarInstaller.exe
2010-08-02 15:54:01 ----D---- C:\QIP Infium JadrisPack
2010-08-02 07:13:07 ----D---- C:\Program Files\AIMP2
2010-07-30 12:06:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\KONAMI
2010-07-22 07:20:16 ----D---- C:\Documents and Settings\pocitac\Data aplikací\AnvSoft
2010-07-22 07:20:12 ----D---- C:\Program Files\AnvSoft
2010-07-21 16:51:42 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-21 13:08:07 ----D---- C:\Documents and Settings\pocitac\Data aplikací\VS Revo Group
2010-07-19 17:37:45 ----D---- C:\Program Files\Super Internet TV
2010-07-15 08:17:52 ----A---- C:\WINDOWS\system32\drivers\revoflt.sys
2010-07-15 08:17:50 ----D---- C:\Program Files\VS Revo Group
2010-07-14 21:15:39 ----D---- C:\WINDOWS\Minidump
2010-07-14 07:50:03 ----A---- C:\WINDOWS\system32\grwinsthlp.exe
2010-07-09 09:54:19 ----A---- C:\mbam-error.txt
2010-07-09 09:22:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-07-09 09:21:41 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-07-08 11:34:56 ----A---- C:\WINDOWS\CoD.INI
2010-07-08 10:02:39 ----D---- C:\Documents and Settings\pocitac\Data aplikací\FTWeak
2010-07-08 09:29:47 ----D---- C:\Program Files\SIW
2010-07-07 10:13:44 ----A---- C:\WINDOWS\system32\apache.dll
2010-07-07 10:12:11 ----D---- C:\Program Files\GSC World Publishing
2010-07-04 20:47:14 ----A---- C:\Program Files\1bomb.ini
2010-07-04 20:44:46 ----D---- C:\Program Files\Pokemon PC
2010-06-20 14:37:53 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Windows Search
2010-06-17 08:58:09 ----D---- C:\Program Files\Intel
2010-06-17 08:58:09 ----A---- C:\WINDOWS\system32\CSVer.dll
2010-06-17 08:57:24 ----D---- C:\Intel
2010-06-16 19:11:45 ----A---- C:\WINDOWS\vncutil.exe
2010-06-16 19:11:40 ----N---- C:\WINDOWS\system32\RtkCoInstXP.dll
2010-06-16 19:11:40 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-06-16 19:11:36 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2010-06-16 19:11:29 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2010-06-16 19:11:29 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-06-16 19:11:29 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-06-16 18:31:51 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys
2010-06-16 16:34:12 ----A---- C:\WINDOWS\system32\XceedZip.dll
2010-06-16 16:34:07 ----D---- C:\Program Files\Driver-Soft
2010-06-16 16:28:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Drivers Headquarters
2010-06-16 15:48:34 ----D---- C:\Program Files\PCPitstop
2010-06-16 15:48:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\PCPitstop
2010-06-16 15:39:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters Inc
2010-06-16 14:58:56 ----D---- C:\Program Files\Microsoft Sync Framework
2010-06-16 14:58:44 ----D---- C:\Program Files\Microsoft
2010-06-16 14:58:05 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-06-16 14:57:18 ----D---- C:\Program Files\Windows Live SkyDrive
2010-06-16 14:57:02 ----D---- C:\Program Files\Windows Live
2010-06-16 14:48:23 ----D---- C:\Program Files\Common Files\Windows Live
2010-06-16 14:46:26 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-06-16 14:46:22 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-06-16 14:34:17 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2010-06-16 14:34:14 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Windows Desktop Search
2010-06-16 14:33:39 ----D---- C:\Program Files\Windows Desktop Search
2010-06-16 14:33:26 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2010-06-16 12:20:51 ----D---- C:\Program Files\Ashampoo
2010-06-15 11:46:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-06-15 10:24:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Fighters
2010-06-14 09:41:24 ----D---- C:\Program Files\ICQ7.2
2010-06-08 09:25:28 ----D---- C:\Program Files\7art
2010-05-26 08:47:05 ----D---- C:\Documents and Settings\pocitac\Data aplikací\imeshmediabartb
2010-05-26 08:40:55 ----D---- C:\Program Files\iMesh Applications
2010-05-12 11:23:45 ----D---- C:\WINDOWS\Eurobattle.net
2010-05-12 09:11:15 ----D---- C:\WINDOWS\Eurobattle.net Installer

======List of files/folders modified in the last 3 months======

2010-08-11 08:31:20 ----D---- C:\WINDOWS\Prefetch
2010-08-11 08:30:28 ----RD---- C:\Program Files
2010-08-11 08:17:07 ----D---- C:\WINDOWS\Temp
2010-08-10 19:09:17 ----D---- C:\Documents and Settings\pocitac\Data aplikací\ICQ
2010-08-10 18:38:13 ----D---- C:\Documents and Settings\pocitac\Data aplikací\vlc
2010-08-10 14:45:21 ----A---- C:\WINDOWS\wincmd.ini
2010-08-10 14:34:03 ----SHD---- C:\WINDOWS\Installer
2010-08-09 23:23:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-09 22:54:57 ----D---- C:\WINDOWS
2010-08-09 22:54:57 ----A---- C:\WINDOWS\system.ini
2010-08-09 22:52:43 ----D---- C:\WINDOWS\system32\drivers
2010-08-09 22:52:43 ----D---- C:\WINDOWS\system32
2010-08-09 22:52:43 ----D---- C:\WINDOWS\AppPatch
2010-08-09 22:52:40 ----D---- C:\Program Files\Common Files
2010-08-09 09:22:13 ----RASH---- C:\boot.ini
2010-08-09 09:22:13 ----A---- C:\WINDOWS\win.ini
2010-08-09 07:40:17 ----D---- C:\Program Files\Java
2010-08-07 05:42:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-08-06 19:18:37 ----D---- C:\Documents and Settings\pocitac\Data aplikací\dvdcss
2010-08-06 08:35:44 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-06 08:33:43 ----D---- C:\WINDOWS\system32\config
2010-08-06 08:32:37 ----D---- C:\Program Files\pdfforge Toolbar
2010-08-06 08:32:37 ----D---- C:\Program Files\Internet Explorer
2010-08-05 20:04:10 ----D---- C:\WINDOWS\Help
2010-08-05 20:02:18 ----D---- C:\WINDOWS\system32\CatRoot
2010-08-05 20:02:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-08-05 20:00:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-05 20:00:22 ----HD---- C:\WINDOWS\inf
2010-08-05 20:00:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-08-05 16:12:50 ----D---- C:\Documents and Settings
2010-08-05 12:57:02 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-08-05 12:56:48 ----A---- C:\WINDOWS\system32\pbsvc.exe
2010-08-05 12:47:01 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-08-05 11:58:55 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-08-05 11:54:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-08-05 11:50:53 ----D---- C:\WINDOWS\system32\RTCOM
2010-08-05 11:45:50 ----D---- C:\NVIDIA
2010-08-05 11:45:07 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-05 11:43:04 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-08-05 10:31:34 ----D---- C:\Documents and Settings\pocitac\Data aplikací\BSplayer PRO
2010-08-05 10:30:08 ----D---- C:\Program Files\Adobe
2010-08-05 10:30:05 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-08-05 10:27:02 ----D---- C:\Program Files\Common Files\Adobe
2010-08-05 10:20:03 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-08-05 06:58:24 ----RSD---- C:\WINDOWS\assembly
2010-08-04 18:34:13 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Spyware Terminator
2010-08-04 18:18:14 ----D---- C:\WINDOWS\system32\LogFiles
2010-08-04 12:33:58 ----D---- C:\WINDOWS\Debug
2010-08-04 08:15:12 ----D---- C:\WINDOWS\pss
2010-08-04 08:10:40 ----SD---- C:\Documents and Settings\pocitac\Data aplikací\Microsoft
2010-08-04 07:51:26 ----SHD---- C:\System Volume Information
2010-08-04 07:51:26 ----D---- C:\WINDOWS\system32\Restore
2010-08-03 11:41:30 ----D---- C:\Program Files\VDOWNLOADER
2010-08-03 07:54:59 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-30 12:18:49 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-07-29 16:25:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-07-29 14:45:02 ----D---- C:\WINDOWS\ie8updates
2010-07-29 14:06:37 ----D---- C:\WINDOWS\WBEM
2010-07-29 14:06:25 ----D---- C:\WINDOWS\Media
2010-07-29 14:05:56 ----D---- C:\WINDOWS\system32\cs-cz
2010-07-28 14:38:28 ----D---- C:\Documents and Settings\pocitac\Data aplikací\AIMP
2010-07-28 10:58:17 ----D---- C:\Program Files\7210-7250-7250i USB-Handset Manager
2010-07-28 10:53:15 ----D---- C:\Program Files\CCleaner
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-21 16:02:21 ----D---- C:\WINDOWS\system32\appmgmt
2010-07-21 13:13:44 ----D---- C:\Program Files\Windows Media Connect 2
2010-07-21 13:13:43 ----D---- C:\Program Files\CentrumczToolbar
2010-07-21 13:07:33 ----D---- C:\Program Files\Sony
2010-07-21 13:01:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\MP3 Remix
2010-07-21 12:59:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-07-20 11:45:51 ----D---- C:\Program Files\Spyware Terminator
2010-07-19 17:01:32 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-07-16 12:44:29 ----D---- C:\WINDOWS\system32\Macromed
2010-07-16 12:44:18 ----D---- C:\WINDOWS\system32\DirectX
2010-07-16 07:35:28 ----D---- C:\Program Files\Rainlendar2
2010-07-15 08:23:24 ----D---- C:\Program Files\EA GAMES
2010-07-14 20:16:10 ----D---- C:\Program Files\NVIDIA Corporation
2010-07-09 09:54:18 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-08 11:19:04 ----D---- C:\Program Files\OpenAL
2010-07-08 10:52:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2010-07-08 10:42:13 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-07-08 10:42:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-07-08 10:37:09 ----D---- C:\Program Files\Common Files\Nero
2010-07-08 10:36:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-07-08 10:25:15 ----D---- C:\Program Files\Crawler
2010-07-08 10:23:41 ----D---- C:\Program Files\Any Video Converter
2010-07-08 10:23:39 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Any Video Converter
2010-07-08 10:20:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-07-06 18:27:06 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-07-06 18:27:00 ----A---- C:\WINDOWS\SkyTel.exe
2010-07-06 18:27:00 ----A---- C:\WINDOWS\RtlUpd.exe
2010-07-06 18:26:54 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-07-06 18:26:42 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-07-06 18:26:36 ----A---- C:\WINDOWS\MicCal.exe
2010-07-02 21:39:05 ----A---- C:\WINDOWS\system32\MRT.exe
2010-06-28 22:57:12 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-06-24 11:13:10 ----A---- C:\WINDOWS\RtlExUpd.dll
2010-06-23 10:41:51 ----D---- C:\WINDOWS\Microsoft.NET
2010-06-23 07:39:23 ----D---- C:\WINDOWS\WinSxS
2010-06-20 15:30:45 ----D---- C:\Program Files\EA Sports
2010-06-17 13:26:08 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-06-17 12:25:03 ----RSD---- C:\WINDOWS\Fonts
2010-06-16 15:49:10 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-06-16 15:36:55 ----D---- C:\Documents and Settings\pocitac\Data aplikací\GetRightToGo
2010-06-16 15:06:21 ----D---- C:\WINDOWS\security
2010-06-16 14:33:38 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-06-16 14:33:38 ----D---- C:\WINDOWS\system32\wbem
2010-06-16 14:25:46 ----D---- C:\WINDOWS\system32\XPSViewer
2010-06-16 12:28:12 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Ashampoo
2010-06-15 14:29:38 ----D---- C:\Program Files\uTorrent
2010-06-15 13:53:48 ----D---- C:\Program Files\Lavasoft
2010-06-15 11:53:27 ----D---- C:\Program Files\Alwil Software
2010-06-15 07:33:15 ----D---- C:\Program Files\ICQ6Toolbar
2010-06-14 09:59:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-06-12 10:15:33 ----D---- C:\Documents and Settings\pocitac\Data aplikací\temp
2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-06-04 10:29:43 ----D---- C:\Program Files\Microsoft Silverlight
2010-06-03 21:22:07 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Facebook
2010-05-28 12:58:26 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-05-26 08:47:06 ----D---- C:\Documents and Settings\pocitac\Data aplikací\Mozilla
2010-05-25 14:03:48 ----D---- C:\Documents and Settings\pocitac\Data aplikací\BlackBean
2010-05-13 23:00:15 ----D---- C:\Program Files\Google
2010-05-13 19:34:08 ----AC---- C:\WINDOWS\game.ini
2010-05-12 10:29:30 ----D---- C:\Program Files\Outlook Express
2010-05-12 09:25:30 ----D---- C:\Program Files\Common Files\Blizzard Entertainment

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys [2005-04-30 28271]
R0 nvgts;nvgts; C:\WINDOWS\system32\DRIVERS\nvgts.sys [2009-06-30 164896]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-08-09 114016]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; C:\WINDOWS\system32\DRIVERS\PxHelp20.sys [2008-10-08 43872]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2005-05-16 19968]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-09-29 66048]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-11 691696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 HMFAxCore46691b2fe72383a3b643d95081ef1d95;HMFAxCore46691b2fe72383a3b643d95081ef1d95; C:\WINDOWS\system32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys [2010-01-29 24064]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2007-09-26 5632]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 0VsNdis08;VitalAgent Network Driver 8.1; \??\C:\Program Files\INS\VitalAgent\Program\VsNdis08.sys []
R2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [2008-08-14 74720]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-06-28 100176]
R2 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R2 TLRecAgent;TLRecAgent; \??\C:\WINDOWS\system32\drivers\TLRecAgent.sys []
R3 0VsComm12;VitalAgent Serial Port Driver 12.4; \??\C:\Program Files\INS\VitalAgent\Program\VsComm12.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2005-05-31 20480]
R3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-04-30 11860]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-01-07 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-06 6088296]
R3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-03 10232128]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2006-10-02 10368]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-05-11 27632]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2005-03-25 82148]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2010-06-23 305696]
S0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys []
S0 OCDE;ZTekWare Original CD Emulator Service; C:\WINDOWS\System32\Drivers\OCDE.sys []
S3 a6mzm51b;a6mzm51b; C:\WINDOWS\system32\drivers\a6mzm51b.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 apeohkca;apeohkca; C:\WINDOWS\system32\drivers\apeohkca.sys []
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2005-04-30 10804]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\pocitac\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2010-05-11 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2010-05-11 25512]
S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
S3 HidIr;Ovladač Microsoft Infrared HID Driver; C:\WINDOWS\system32\DRIVERS\hidir.sys [2008-04-13 19200]
S3 IrBus;Ovladač filtru infračervené sběrnice pro dálková ovládání eHome; C:\WINDOWS\system32\DRIVERS\IrBus.sys [2008-04-13 46592]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 Ser2pl;MAT Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2003-07-16 43264]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2010-01-08 380928]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 BlueSoleil Hid Service;BlueSoleil Hid Service; C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [2005-04-06 110592]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-01-21 75064]
R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
S2 gupdate1c986b280a967ba;Google Update Service (gupdate1c986b280a967ba); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-04 133104]
S2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe []
S2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-04 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-03 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-05 163840]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2005-11-24 53337]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2005-11-24 53337]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2005-11-24 69718]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-04-12 246520]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-04-15 488960]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Lenochod...

#5 Příspěvek od motji »

:arrow: Odinstalujte C:\PROGRA~1\IMESHA~1\MediaBar

DAEMON Tools Toolbar
pdfforge Toolbar
Ask Toolbar



:arrow: Otestujte na www.virustotal.com
C:\WINDOWS\Tloxua.exe
-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#6 Příspěvek od vermont23 »

Tak,prgramy odinstalovány,ale C:\WINDOWS\Tloxua.exe nemužu nalézt,jak jsem to hledal tak mě to asi avast sám smázl.Může to tak byt?
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Lenochod...

#7 Příspěvek od motji »

Mrkněte do karantény Avastu :) .
Je možné,. že když jste na ten soubor chytl, že se Avast probral :D .
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#8 Příspěvek od vermont23 »

Jo jo,máte pravdu,je to mázlé :) .Toť vše ja? :)
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Lenochod...

#9 Příspěvek od motji »

To byl jen rozjezd :D , teď ještě něco málo domažeme.
A příště sám nespouštějte combofix. Dívám se, že jste ho spouštěl hned několikrát :roll: . Tím mi mažete stopy v logu, v registrech, a já pak nic nevidím :(

:arrow: Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Folder::
c:\program files\iMesh Applications
C:\Program Files\pdfforge Toolbar
C:\Program Files\Ask.com
C:\Program Files\DAEMON Tools Toolbar

File::
c:\program files\BS_Player\tbBS_1.dll
C:\WINDOWS\system32\SET160.tmp

Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{ECDEE021-0D17-467F-A1FF-C7A115230949}"=-
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"=-
[-HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]
[-HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"=-
"{B922D405-6D13-4A2B-AE89-08A030DA4402}"=-
"{ABB49B3B-AB7D-4ED0-9135-93FD5AA4F69F}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"=-
[-HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]
[-HKEY_CLASSES_ROOT\clsid\{b922d405-6d13-4a2b-ae89-08a030da4402}]
[-HKEY_CLASSES_ROOT\clsid\{abb49b3b-ab7d-4ed0-9135-93fd5aa4f69f}]
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[-HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{ECDEE021-0D17-467F-A1FF-C7A115230949}"=-
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"=-
[-HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[-HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"=-
"BluetoothAuthenticationAgent"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^koxicek xD^Dokumenty^tomáš^Programy^Simpsonovi^Po í 2^The Matrix_ Path of Neo Registration.lnk]

DDS::
uStart Page = hxxp://search.conduit.com?SearchSource= ... =CT1750559

Firefox::
FF - ProfilePath - c:\documents and settings\pocitac\Data aplikací\Mozilla\Firefox\Profiles\7x93whw3.default\
FF - prefs.js: browser.search.selectedEngine - DAEMON Search
FF - prefs.js: keyword.URL - hxxp://websearch.ask.com/redirect?clien ... e=en_EU&q=
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek


-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci




:arrow: Otestujte na http://www.virustotal.com

C:\WINDOWS\system32\drivers\GVTDrv.sys


-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.



:arrow: Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT :!:
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#10 Příspěvek od vermont23 »

Omlouvám se za ten combofix... :o

Zde je ten log z toho combofixu:

ComboFix 10-08-05.02 - pocitac 12.08.2010 10:33:05.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.767.426 [GMT 2:00]
Spuštěný z: c:\documents and settings\pocitac\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\pocitac\Plocha\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
- REŽIM S OMEZENOU FUNKČNOSTÍ -

FILE ::
"c:\program files\BS_Player\tbBS_1.dll"
"c:\windows\system32\SET160.tmp"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\iMesh Applications
c:\program files\iMesh Applications\iMesh\WMHelper.log
c:\program files\iMesh Applications\MediaBar\DataMngr\datamngr.dll
c:\program files\iMesh Applications\MediaBar\DataMngr\DataMngrUI.exe
c:\program files\iMesh Applications\MediaBar\DataMngr\IEBHO.dll
c:\program files\iMesh Applications\MediaBar\INSTALL.LOG
c:\program files\iMesh Applications\MediaBar\main.ico
c:\program files\iMesh Applications\MediaBar\ToolBar\components\windowmediator.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\data\search\engines.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\data\search\search.xsl
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\imeshmediabar.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\about.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\dtxpanelwin.xul
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\dtxprefwin.xul
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\dtxwin.xul
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\emailnotifierproviders.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\external.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\neterror.xhtml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\lib\wmpstreamer.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\modules\datastore.jsm
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\neterror.xhtml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\preferences.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\toolbar.htm
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\toolbar.xul
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\uwa.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-mdl.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tl.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\bg-scalable-tr.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-dragresize.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-down.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close-over.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-close.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-down.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-maximize.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-down.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize-over.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btn-wide-minimize.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-next.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\btnarrow-previous.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\navico-home.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\panel.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\powered-mystart.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\tb_icon.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.Twitter.1227\widget.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-mdl.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tl.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\bg-scalable-tr.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-dragresize.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-down.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close-over.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-close.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-down.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-maximize.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-down.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize-over.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btn-wide-minimize.PNG
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-next.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\btnarrow-previous.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\navico-home.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\panel.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\powered-mystart.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\tb_icon.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\content\widgets\net.vmn.www.3.YouTube.1217\widget.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\bluelite.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\bluesky.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-search-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-search.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-settings-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-settings.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-widgets-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn-widgets.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\btn_settings.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-down-back-ff.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-down-back.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-down-left.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-down-right.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-down-splitter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-drop-back.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-drop-left.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-drop-right.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-drop-splitter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-hover-back-ff.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-hover-back.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-hover-left.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-hover-right.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\button-hover-splitter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\ca.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\dictionary.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\divider.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\downloadcom.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\dtxlogo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\ebay.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\email.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\email_on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\games.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\graphred0.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\graphred0_5.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\grey.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\headsup.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\ico-shield.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\images.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\imeshmediabar.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\add.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\aol.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-dn.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-right.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\arrow-up.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-end.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btn-start.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-end.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\bg-btnover-start.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\blank.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnback-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnleft-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\btnright-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\button-splitter-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\collapse.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\comcast.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\dtx.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back-hot.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\edit-back.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\expand.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\found.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\gmail.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_blue.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_cyan.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_lime.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_magenta.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\highlight_yellow.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\hotmail.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\checkmark.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\chevron.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\imap.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\loadingMid.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\lock.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\mailcom.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menu_bg-basic.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_bar.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menu_separator_white.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitem-splitter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemback-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemleft-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-down-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\menuitemright-vista.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\modify.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\move.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\movetarget.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupAbout.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupGames.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\footer.htm
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gamecategory.xsl
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameData.js
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gameList.xsl
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\gametype.xsl
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-drag.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-next.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-previous.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-download.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-play.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\ico-tags.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Add.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-download.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-Info.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-play.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\icon-shop.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollb.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\scrollt.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupGames.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\panels\popupWidgets.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\pop.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\manager.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\css\slider.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\ico-radio.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\music-note.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-options.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slider.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\slideron.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\images\track.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\managerpanel.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\radio\volumeslider.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\reload.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\remove.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\rename.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\resize-box.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\rss.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\rsschannelback.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\RSSLogo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\rsstabdivider.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-left.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\scroll-right.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\search-go.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\search.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\text-ellipsis.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\toolbarsplitter.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\transparent_1px.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_02.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_03.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_04.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_06.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_07.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_08.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_09.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_10.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_11.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_12.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_13.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_14.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_15.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_16.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_18.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_19.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_20.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\border_21.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-hot.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\close-normal.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\loadingMid.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\proxy.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\template_youtube.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\templateFF.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\templateFF_save.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\uwa\throbber.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lib\yahoo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\lichen.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\logo-about.jpg
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\logo-about.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\logo-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\logo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\logo_save.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\maps.bmp
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\menuseparatorback.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\modify-save.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\modify.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\modifyhot.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\music.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\news.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\options\options-main.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\options\options-search.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\options\options-weather.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\options\options-widgets.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\orange.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\pixsy.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\relatedlinks.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-collapse.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-delete.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-expand.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-feed.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-folder-remove.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-folder-rename.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-folder.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-found.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-reload.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss-subscribe.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rss.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rssback.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\rsstopback.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\search-over.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\search.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-left.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\searchbar\searchbar-background-right.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\settings.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\shopping.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\siteinfo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-bluelite.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-bluesky.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-grey.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-lichen.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-orange.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\skin-yellow.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\technorati.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\throbber.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\toolbarsplitter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\video.bmp
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\weather.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\web.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_allocine.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_bliptv.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_calcal.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_calculator.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_gservices.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_sudoku.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_todo.jpg
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_todo.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_trio.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widget_uconverter.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widgets-square-16px.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\widgets.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\wikipedia.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\yahoosearch.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\yellow.gif
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\youtube.png
c:\program files\iMesh Applications\MediaBar\ToolBar\chrome\skin\zoom.png
c:\program files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarDx.dll
c:\program files\iMesh Applications\MediaBar\ToolBar\iMeshMediaBarTb.dll
c:\program files\iMesh Applications\MediaBar\ToolBar\manifest.xml
c:\program files\iMesh Applications\MediaBar\ToolBar\uninstall.exe
c:\program files\iMesh Applications\MediaBar\UNWISE.EXE
c:\program files\iMesh Applications\MediaBar\UnwiseLauncher.exe
c:\windows\system32\SET160.tmp

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-12 do 2010-08-12 )))))))))))))))))))))))))))))))
.

2010-08-11 06:30 . 2010-08-11 06:33 -------- d-----w- c:\program files\trend micro
2010-08-11 06:30 . 2010-08-11 06:31 -------- d-----w- C:\rsit
2010-08-09 05:42 . 2010-08-09 05:42 -------- d-----w- c:\program files\Common Files\Java
2010-08-07 10:32 . 2010-08-09 07:13 -------- d-----w- c:\program files\SpeedyPC
2010-08-07 10:07 . 2010-08-09 06:24 17962 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2010-08-05 17:38 . 2008-04-14 06:52 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2010-08-05 10:48 . 2010-08-05 10:48 -------- d-----w- c:\program files\NetWaiting
2010-08-05 10:45 . 2010-08-05 10:45 -------- d-----w- c:\program files\MSECache
2010-08-05 09:45 . 2008-09-01 08:18 1564544 ----a-w- c:\windows\system32\drivers\VMHybr64.sys
2010-08-05 09:45 . 2008-09-01 08:05 1060224 ----a-w- c:\windows\system32\drivers\VMHybrid.sys
2010-08-05 09:43 . 2010-06-23 15:47 374048 ----a-w- c:\windows\system32\yk51x86.dll
2010-08-05 08:18 . 2010-08-05 08:20 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-08-05 07:58 . 2010-08-05 07:58 -------- d-----w- c:\program files\Software Informer
2010-08-05 07:25 . 2010-08-05 07:25 -------- d-----w- c:\program files\Uniblue

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-12 07:23 . 2010-06-14 07:41 -------- d-----w- c:\program files\ICQ7.2
2010-08-09 05:40 . 2008-05-27 08:06 -------- d-----w- c:\program files\Java
2010-08-05 18:01 . 2010-07-14 18:12 217180 ----a-w- c:\windows\system32\nvdrsdb0.bin
2010-08-05 18:01 . 2010-07-14 18:12 1 ----a-w- c:\windows\system32\nvdrssel.bin
2010-08-05 18:01 . 2010-07-14 18:12 217180 ----a-w- c:\windows\system32\nvdrsdb1.bin
2010-08-05 10:57 . 2008-07-31 19:38 139152 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-08-05 10:57 . 2008-07-31 19:38 111928 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-08-05 10:56 . 2009-01-23 11:36 794408 ----a-w- c:\windows\system32\pbsvc.exe
2010-08-05 09:58 . 2001-10-25 13:00 98528 ----a-w- c:\windows\system32\perfc005.dat
2010-08-05 09:58 . 2001-10-25 13:00 492620 ----a-w- c:\windows\system32\perfh005.dat
2010-08-05 09:45 . 2008-04-14 15:16 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-05 08:30 . 2009-05-07 07:00 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-08-05 08:27 . 2008-04-15 06:58 -------- d-----w- c:\program files\Common Files\Adobe
2010-08-03 10:01 . 2010-08-03 10:01 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 2
2010-08-03 09:41 . 2008-11-25 14:34 -------- d-----w- c:\program files\VDOWNLOADER
2010-08-02 05:13 . 2010-08-02 05:13 -------- d-----w- c:\program files\AIMP2
2010-07-30 10:18 . 2008-04-16 18:53 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-07-28 08:58 . 2009-07-31 07:03 -------- d-----w- c:\program files\7210-7250-7250i USB-Handset Manager
2010-07-28 08:53 . 2009-04-24 07:23 -------- d-----w- c:\program files\CCleaner
2010-07-22 05:20 . 2010-07-22 05:20 -------- d-----w- c:\program files\AnvSoft
2010-07-21 11:13 . 2008-05-17 10:21 -------- d-----w- c:\program files\Windows Media Connect 2
2010-07-21 11:07 . 2008-11-28 18:30 -------- d-----w- c:\program files\Sony
2010-07-21 10:59 . 2008-05-16 14:34 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-07-20 09:45 . 2009-10-19 08:56 -------- d-----w- c:\program files\Spyware Terminator
2010-07-19 15:55 . 2010-07-19 15:37 -------- d-----w- c:\program files\Super Internet TV
2010-07-17 03:00 . 2010-07-09 07:21 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-16 05:35 . 2008-08-27 11:29 -------- d-----w- c:\program files\Rainlendar2
2010-07-15 06:23 . 2009-10-06 06:05 -------- d-----w- c:\program files\EA GAMES
2010-07-15 06:17 . 2010-07-15 06:17 -------- d-----w- c:\program files\VS Revo Group
2010-07-14 18:16 . 2010-05-04 10:32 -------- d-----w- c:\program files\NVIDIA Corporation
2010-07-14 05:50 . 2010-07-14 05:50 245 ----a-w- C:\UnInstall.dat
2010-07-09 07:54 . 2009-07-21 19:57 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-08 09:19 . 2008-07-17 10:41 -------- d-----w- c:\program files\OpenAL
2010-07-08 08:54 . 2010-06-16 13:48 -------- d-----w- c:\program files\PCPitstop
2010-07-08 08:42 . 2009-07-09 16:30 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-07-08 08:37 . 2009-08-05 10:42 -------- d-----w- c:\program files\Common Files\Nero
2010-07-08 08:23 . 2009-02-20 07:09 -------- d-----w- c:\program files\Any Video Converter
2010-07-08 07:29 . 2010-07-08 07:29 -------- d-----w- c:\program files\SIW
2010-07-07 08:13 . 2010-07-07 08:13 53248 ----a-w- c:\windows\system32\apache.dll
2010-07-07 08:12 . 2010-07-07 08:12 -------- d-----w- c:\program files\GSC World Publishing
2010-07-06 16:27 . 2010-06-16 17:11 359016 ----a-w- c:\windows\vncutil.exe
2010-07-06 16:27 . 2008-04-14 15:16 84584 ----a-w- c:\windows\SOUNDMAN.EXE
2010-07-06 16:27 . 2008-04-14 15:16 1833576 ----a-w- c:\windows\SkyTel.exe
2010-07-06 16:27 . 2008-04-14 15:16 1489512 ----a-w- c:\windows\RtlUpd.exe
2010-07-06 16:26 . 2008-04-14 15:16 9721960 ----a-w- c:\windows\RTLCPL.EXE
2010-07-06 16:26 . 2008-04-14 15:16 6088296 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2010-07-06 16:26 . 2010-06-16 17:11 129640 ----a-w- c:\windows\RtkAudioService.exe
2010-07-06 16:26 . 2008-04-14 15:16 19556968 ----a-w- c:\windows\RTHDCPL.EXE
2010-07-06 16:26 . 2010-06-16 17:11 2815592 ----a-w- c:\windows\ALCWZRD.EXE
2010-07-06 16:26 . 2008-04-14 15:16 2180712 ----a-w- c:\windows\MicCal.exe
2010-07-06 16:26 . 2010-06-16 17:11 64104 ----a-w- c:\windows\ALCMTR.EXE
2010-07-04 18:47 . 2010-07-04 18:47 170 ----a-w- c:\program files\1bomb.ini
2010-07-04 18:44 . 2010-07-04 18:44 -------- d-----w- c:\program files\Pokemon PC
2010-06-28 20:57 . 2010-06-29 11:28 38848 ----a-w- c:\windows\avastSS.scr
2010-06-28 20:57 . 2008-04-17 17:31 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2008-04-17 17:31 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2008-04-25 16:29 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2008-04-25 16:29 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2008-04-17 17:31 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2008-04-17 17:31 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2008-04-25 16:29 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2008-04-17 17:31 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-24 09:13 . 2008-04-14 15:16 1251944 ----a-w- c:\windows\RtlExUpd.dll
2010-06-23 15:47 . 2007-09-20 08:22 305696 ----a-w- c:\windows\system32\drivers\yk51x86.sys
2010-06-20 13:30 . 2008-12-14 10:21 -------- d-----w- c:\program files\EA Sports
2010-06-20 12:50 . 2010-06-16 10:20 -------- d-----w- c:\program files\Ashampoo
2010-06-17 06:58 . 2010-06-17 06:58 -------- d-----w- c:\program files\Intel
2010-06-16 14:34 . 2010-06-16 14:34 -------- d-----w- c:\program files\Driver-Soft
2010-06-16 13:17 . 2010-06-16 12:33 -------- d-----w- c:\program files\Windows Desktop Search
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft Sync Framework
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft
2010-06-16 12:58 . 2010-06-16 12:57 -------- d-----w- c:\program files\Windows Live
2010-06-16 12:58 . 2010-06-16 12:58 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-06-16 12:57 . 2010-06-16 12:57 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-06-16 12:48 . 2010-06-16 12:48 -------- d-----w- c:\program files\Common Files\Windows Live
2010-06-15 12:29 . 2008-05-03 07:04 -------- d-----w- c:\program files\uTorrent
2010-06-15 11:53 . 2009-06-06 14:58 -------- d-----w- c:\program files\Lavasoft
2010-06-15 09:53 . 2008-04-17 17:31 -------- d-----w- c:\program files\Alwil Software
2010-06-14 14:31 . 2008-04-13 17:09 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-07 23:57 . 2010-01-11 11:53 600680 ----a-w- c:\windows\system32\nvudisp.exe
2010-05-31 08:50 . 2010-05-31 08:50 0 ----a-w- c:\windows\PowerReg.dat
2010-05-28 10:58 . 2010-01-11 11:52 600680 ----a-w- c:\windows\system32\NVUNINST.EXE
2010-02-10 09:18 . 2010-08-03 09:41 2131336 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\ReinstallBackups\0017\DriverFiles\i386\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . c:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#11 Příspěvek od vermont23 »

[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . c:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys

[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2005-08-22 . 86AD5B0E02F2C968FBB096AB4C555C9C . 197632 . . [5.1.2600.2743] . . c:\windows\$NtServicePackUninstall$\netman.dll
[-] 2005-08-22 . BB0557B62B95F366464C3C60A0BD6BDF . 197632 . . [5.1.2600.2743] . . c:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll

[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-07-26 . DBDE980506B54AE928D151D12419B425 . 397824 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2005-07-26 . 46C3197AAC32EBA82453ACDD84114DC2 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . 5DE239E9CC9DB7430233EA7BE10EAD32 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll

[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\services.exe

[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe

[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
[-] 2006-08-25 . E26B26189B786E6B092F002041D5A1E2 . 617472 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll

[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:32 . 398314DF0B21338C4996B469101750D1 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:19 . 3440C414044935B124B5821C0994B37F . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 03:21 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
[-] 2005-07-26 04:30 . 7B9199B6809586DC2CF30D411CECBD33 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll

[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2007-04-16 . 2B33979FDE5D1B9293ADB025F323B0D9 . 984576 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . C23A84D7AB99678B2F1A52080280E4ED . 983040 . . [5.1.2600.3119] . . c:\windows\$NtServicePackUninstall$\kernel32.dll

[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2005-09-01 . 3E611531CC70649635FC890B421AECD0 . 19968 . . [5.1.2600.2751] . . c:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . B5DE324E0F9AEBEC885ABF5DB6B2F73D . 19968 . . [5.1.2600.2751] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll

[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\mshtml.dll
[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\system32\mshtml.dll
[-] 2010-05-06 . 06B941C7749A9F071444B4C7563F36B5 . 5950976 . . [8.00.6001.18928] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\mshtml.dll
[-] 2010-05-06 . 3F88F981AA7BC20744E0D2C699F500EF . 5953024 . . [8.00.6001.23019] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\mshtml.dll
[7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\mshtml.dll
[-] 2008-12-12 . 0E5ED45F7D6CBBCC973C92247FBE9F30 . 3088896 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . 96AD32D5C30A1F79F487A99BC1D5AFE9 . 3088896 . . [6.00.2900.5726] . . c:\windows\ie8\mshtml.dll
[-] 2008-10-16 . 2A9F87DE02E61CFB762121C160E87F6A . 3088896 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-08-20 . 78160DA0DB2913BB30473AC3F6619C3E . 3088896 . . [6.00.2900.5659] . . c:\windows\$hf_mig$\KB956390\SP3QFE\mshtml.dll
[-] 2008-06-25 . F73C9A14AF90CEE8A9895271FA7D57E8 . 3088896 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3QFE\mshtml.dll
[-] 2008-06-24 . 221718BE0A0DE22548C3BF125F19F49A . 3592192 . . [7.00.6000.16705] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2GDR\mshtml.dll
[-] 2008-06-23 . FA659F528F12494D21E6CB0CB8261EA3 . 3088384 . . [6.00.2900.3395] . . c:\windows\$hf_mig$\KB953838\SP2QFE\mshtml.dll
[-] 2008-06-23 . 2EBBE7DB6B57D396961449883EB9E24D . 3080704 . . [6.00.2900.3395] . . c:\windows\$NtServicePackUninstall$\mshtml.dll
[-] 2008-06-23 . B552ADA48C2BA853872AFFCAC88A6513 . 3594240 . . [7.00.6000.20861] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2QFE\mshtml.dll
[-] 2008-06-23 . 239E9C71F84E4FF13445EC3464C37FB1 . 3088384 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3GDR\mshtml.dll
[-] 2008-04-23 . 223F1E24EBBF6D6FB67999179DD2D75E . 3593728 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-04-21 . 5D8B15580ED2BB084ED0649C972D091A . 3087872 . . [6.00.2900.3354] . . c:\windows\$hf_mig$\KB950759\SP2QFE\mshtml.dll
[-] 2008-04-21 . B4AE83D91A77D398F9C41847CE17F9C3 . 3087872 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3GDR\mshtml.dll
[-] 2008-04-21 . 84DD596D04865401939EFA2770C41DAB . 3088384 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-01 . AA61A6FAA4D691A6ED38FC1099EDE19B . 3593216 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2008-02-16 . 5BB152929C0F6824D59E49E06947495B . 3087872 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\mshtml.dll
[7] 2007-12-08 . E753D2EE81F01E9EA352FF2056A67622 . 3592192 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\mshtml.dll
[7] 2007-12-07 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll

[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll

[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . A6E79B60AC73241E5721AB6A573D2B24 . 247296 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
[-] 2008-06-20 . 37BABA5DBD9027837FDC27E5D6EF33E1 . 247296 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll

[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\system32\ntoskrnl.exe
[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2007-02-28 . D40B4F66D877802EC5E655B91B5490FA . 2184320 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 . C09CA7FAFFC40BBFACEEB9F0F429F673 . 2182528 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2005-03-02 . 7FABE135EAC02A4BC8094B831ADC0CC3 . 2181632 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe

[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2005-07-08 . 2EB5536278D697C5895A48514682BF64 . 249344 . . [5.1.2600.2716] . . c:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . 250241D65CCF692AEACC318A266413C2 . 249344 . . [5.1.2600.2716] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll

[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
[-] 2007-03-08 . 5393076FDCD6DAEB82814688DDE3E9A2 . 578048 . . [5.1.2600.3099] . . c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . 43240B12D220F30C7C75EA69B2E806B0 . 577536 . . [5.1.2600.3099] . . c:\windows\$NtServicePackUninstall$\user32.dll
[-] 2005-03-02 . 3EF380290CE2CA8598E475CEAC4ADB13 . 577024 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll

[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3GDR\wininet.dll
[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\system32\wininet.dll
[-] 2010-05-06 . B7ECEF0CCF63119356E174A78C185171 . 916480 . . [8.00.6001.18923] . . c:\windows\system32\dllcache\wininet.dll
[-] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\$hf_mig$\KB982381-IE8\SP3QFE\wininet.dll
[-] 2010-05-06 . 72064DA077E9D6912F39438D97CC0C60 . 919040 . . [8.00.6001.23014] . . c:\windows\SoftwareDistribution\Download\4da92e2c99b7232d7106179052438045\SP3QFE\wininet.dll
[7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB982381-IE8\wininet.dll
[-] 2008-10-16 . 370940E124256D20DE4CA7E51377335C . 668160 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 8E7DE90524F7DD5DB33CC38AD9A1B0B4 . 667136 . . [6.00.2900.5694] . . c:\windows\ie8\wininet.dll
[-] 2008-08-20 . 805DE4C27B23B68A56C07E1A96E10693 . 667648 . . [6.00.2900.5659] . . c:\windows\$hf_mig$\KB956390\SP3QFE\wininet.dll
[-] 2008-06-23 . 01EF5E10F55A5AE4D49C93C25879921E . 826368 . . [7.00.6000.16705] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2GDR\wininet.dll
[-] 2008-06-23 . 1906B249A57EB5917FF81627D767B936 . 668160 . . [6.00.2900.3395] . . c:\windows\$hf_mig$\KB953838\SP2QFE\wininet.dll
[-] 2008-06-23 . 9BFA429E9FD7923B57C395AA56CFA6EB . 660480 . . [6.00.2900.3395] . . c:\windows\$NtServicePackUninstall$\wininet.dll
[-] 2008-06-23 . 57BE3F6CA8282AC863C16862C1B65964 . 827904 . . [7.00.6000.20861] . . c:\windows\SoftwareDistribution\Download\64f22a803993c07b52508d59fdecec6f\SP2QFE\wininet.dll
[-] 2008-06-23 . 47D3A0B49FC337F0893204E15EB49833 . 667136 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3GDR\wininet.dll
[-] 2008-06-23 . 261F5B58FB5308BBA53692DE884C3743 . 667648 . . [6.00.2900.5626] . . c:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll
[-] 2008-04-23 . 03727BB0DE4D4902F951D3BD7D0AC4FE . 827392 . . [7.00.6000.20815] . . c:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-04-21 . A688DA7719A8EA242B1AC3437BFF662C . 667648 . . [6.00.2900.3354] . . c:\windows\$hf_mig$\KB950759\SP2QFE\wininet.dll
[-] 2008-04-21 . 540D6806D0FF026DFB4CA4E01207084E . 667136 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3GDR\wininet.dll
[-] 2008-04-21 . E2CFF7BF2F1D122CFA546C667A47F87E . 667648 . . [6.00.2900.5583] . . c:\windows\$hf_mig$\KB950759\SP3QFE\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-01 . 46A1A52EB6C86344C6EBF65B17404C90 . 827392 . . [7.00.6000.20772] . . c:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2008-02-16 . 8F14F3E4F2B1BCDDADAC195302D808F4 . 667136 . . [6.00.2900.3314] . . c:\windows\$hf_mig$\KB947864\SP2QFE\wininet.dll
[7] 2007-12-07 . E9B04B01D5A1ECC47B2E4364D171CF23 . 824832 . . [7.00.6000.16608] . . c:\windows\ie7updates\KB947864-IE7\wininet.dll
[7] 2007-12-07 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . c:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll

[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
[-] 2007-06-13 . ED7B460B142A32097B8A8F6ECC941815 . 1033728 . . [6.00.2900.3156] . . c:\windows\$NtServicePackUninstall$\explorer.exe
[-] 2007-06-13 . 9B32416BD5988C97B6397CE0B02CAF97 . 1033728 . . [6.00.2900.3156] . . c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe

[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . c:\windows\system32\ole32.dll
[-] 2005-07-26 . A0D5A763708D868C1EFC18D6F6EEDE0D . 1284608 . . [5.1.2600.2726] . . c:\windows\$NtServicePackUninstall$\ole32.dll
[-] 2005-07-26 . 93AC0C1189CB7C34910CD00748A23E3A . 1285632 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll
[-] 2005-04-28 . 518208504C310D52FF0FD447AD837AAF . 1286144 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll

[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe

[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2006-12-19 . E26EDC7AFA8DA3C528055EABC82C8C79 . 134656 . . [6.00.2900.3051] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
[-] 2006-12-19 . F961FDD353F9451440197024FDDFE086 . 135168 . . [6.00.2900.3051] . . c:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll

[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll

[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . c:\windows\$NtServicePackUninstall$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 03:21 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:19 . 6C44E5766939B7552BFF75B2B6FF1161 . 927504 . . [4.1.0.61] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll

[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2006-10-18 19:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-18 19:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-17 14:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll
[-] 2004-08-10 23:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-10 23:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll

[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\system32\ntkrnlpa.exe
[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . c:\windows\$hf_mig$\KB977165\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . c:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2007-02-28 . A873FF1754E2A81CB1A34588CAB363D6 . 2061568 . . [5.1.2600.3093] . . c:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
[-] 2007-02-28 . C80BCA19AA7D4DC37857E9F8250756DA . 2059776 . . [5.1.2600.3093] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2005-03-02 . 9355304DD565E23F8EE294720B2C03E5 . 2059008 . . [5.1.2600.2622] . . c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe

[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 03:21 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-17 14:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2007-02-05 . 6FD45FDC0C32BC4E81F718B671A3E017 . 185344 . . [5.1.2600.3077] . . c:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . 0C0C2C77C6B52181369594F2AA36AF40 . 185344 . . [5.1.2600.3077] . . c:\windows\$NtServicePackUninstall$\upnphost.dll

[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
[7] 2004-07-09 03:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\dsound.dll
[7] 2004-07-09 02:27 . 033A45AB696EEF481707C2808C806E1A . 381952 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\system32\dllcache\dsound.dll

[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
[7] 2004-07-09 03:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\RegisteredPackages\{44BBA855-CC51-11CF-AAFA-00AA00B6015C}\ddraw.dll
[7] 2004-07-09 02:27 . 90114704C17A581DA1BAE029F20932BE . 292864 . . [5.3.0000001.0904 built by: private/Lab06_dev(DXBLD00)] . . c:\windows\system32\dllcache\ddraw.dll

[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 03:21 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
[-] 2004-08-17 14:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-08-09_16.49.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-08-12 08:28 . 2010-08-12 08:28 16384 c:\windows\Temp\Perflib_Perfdata_728.dat
+ 2010-08-10 12:34 . 2010-08-10 12:34 73728 c:\windows\Installer\{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}\Shortcut_PES2010_E_19E2C126E9A346458082E1106EC36033.exe
+ 2010-08-10 12:34 . 2010-08-10 12:34 32570 c:\windows\Installer\{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}\ARPPRODUCTICON.exe
+ 2010-08-12 06:12 . 2010-08-12 06:12 232912 c:\windows\system32\Macromed\Flash\FlashUtil10i_Plugin.exe
+ 2010-08-10 12:34 . 2010-08-10 12:34 180224 c:\windows\Installer\{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}\Shortcut_SETTINGS__E16DFE45D7AC4FBF87BBB412D05EFC15.exe
+ 2009-10-28 03:40 . 2010-08-12 06:12 5969360 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2010-08-10 12:33 . 2010-08-10 12:33 1693184 c:\windows\Installer\a6c88.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2010-07-11 2199040]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-18 68856]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2010-06-28 2322501]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"RTHDCPL"="RTHDCPL.EXE" [2010-07-06 19556968]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /p \??\C:\0autocheck autochk *

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-06-14 07:41 133368 ----a-w- c:\program files\ICQ7.2\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
2010-04-15 07:24 2176512 ----a-w- c:\program files\Spyware Terminator\SpywareTerminatorShield.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
2010-04-15 07:24 3037696 ----a-w- c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue RegistryBooster 2]
2007-12-05 14:06 1885464 ----a-w- c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VGAUtil]
2010-08-07 10:03 544768 ----a-w- c:\program files\GigaByte\VGA Utility Manager\G-vga.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Lavasoft Ad-Aware Service"=2 (0x2)
"sp_rssrv"=2 (0x2)
"ICQ Service"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Documents and Settings\\All Users\\Data aplikací\\NexonUS\\NGM\\NGM.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"c:\\Program Files\\SopCast\\SopCast.exe"=
"h:\\Program Files\\Call of Duty\\CoDMP.exe"=
"c:\\Program Files\\Xfire\\Xfire.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"h:\\Call of duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\Sony Ericsson\\Update Service\\Update Service.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\K-Lite Codec Pack\\Tools\\VobSubStrip.exe"=
"h:\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\GigaByte\\VGA Utility Manager\\gvupdate.exe"=
"h:\\Pro evolution soccer 2010\\pes2010.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"22368:TCP"= 22368:TCP:BitComet 22368 TCP
"22368:UDP"= 22368:UDP:BitComet 22368 UDP
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [25.4.2008 18:29 165456]
R1 HMFAxCore46691b2fe72383a3b643d95081ef1d95;HMFAxCore46691b2fe72383a3b643d95081ef1d95;c:\windows\system32\drivers\HMFAxCore46691b2fe72383a3b643d95081ef1d95.sys [18.8.2009 18:13 24064]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [19.10.2009 10:56 142592]
R2 0VsNdis08;VitalAgent Network Driver 8.1;c:\program files\INS\VitalAgent\Program\VsNdis08.sys [20.4.2008 18:15 31671]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [25.4.2008 18:29 17744]
R2 TLRecAgent;TLRecAgent;c:\windows\system32\drivers\TLRecAgent.sys [15.4.2008 14:12 14888]
R3 0VsComm12;VitalAgent Serial Port Driver 12.4;c:\program files\INS\VitalAgent\Program\VsComm12.sys [20.4.2008 18:15 15443]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [11.5.2010 16:09 27632]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys --> c:\windows\system32\DRIVERS\Lbd.sys [?]
S0 OCDE;ZTekWare Original CD Emulator Service;c:\windows\system32\Drivers\OCDE.sys --> c:\windows\system32\Drivers\OCDE.sys [?]
S2 gupdate1c986b280a967ba;Google Update Service (gupdate1c986b280a967ba);c:\program files\Google\Update\GoogleUpdate.exe [4.2.2009 12:22 133104]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [16.6.2010 19:11 1691480]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [11.5.2010 16:09 13224]
S3 GVTDrv;GVTDrv;c:\windows\system32\drivers\GVTDrv.sys [7.8.2010 12:07 17962]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [15.7.2010 8:17 27064]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [16.4.2008 17:04 691696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
.
------- Doplňkový sken -------
.
mWindow Title = Microsoft Internet Explorer
uInternet Settings,ProxyOverride = local
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download Video by Wise Videos Download - c:\program files\Wise Videos Download\vdown.htm
IE: {{14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\Get Styles\ct.htm
FF - ProfilePath - c:\documents and settings\pocitac\Data aplikací\Mozilla\Firefox\Profiles\7x93whw3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1487.6512\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-DataMngr - c:\progra~1\IMESHA~1\MediaBar\DataMngr\DataMngrUI.exe
AddRemove-iMesh MediaBar - c:\program files\iMesh Applications\MediaBar\UnwiseLauncher.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-12 10:36
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


c:\windows\TEMP\_avast5_\unp11093734.tmp 26219912 bytes
c:\windows\TEMP\_avast5_\unp120088818.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp123898550.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp124901918.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp58363728.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp58855050.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp62852983.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp63324908.tmp 25152 bytes executable
c:\windows\TEMP\_avast5_\unp64998940.tmp 11632 bytes executable
c:\windows\TEMP\_avast5_\unp65774491.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp69815522.tmp 26219912 bytes
c:\windows\TEMP\_avast5_\unp74469221.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp77671408.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp17403005.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp19862563.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp258698815.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp264532773.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp29650041.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp31046458.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp3264157.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp35474749.tmp 197168 bytes executable
c:\windows\TEMP\_avast5_\unp35643388.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp36359209.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp37123263.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp37323734.tmp 16736 bytes executable
c:\windows\TEMP\_avast5_\unp37764897.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp38103302.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp38412182.tmp 27736 bytes executable
c:\windows\TEMP\_avast5_\unp39244744.tmp
c:\windows\TEMP\_avast5_\unp40383869.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp43176999.tmp 98360 bytes executable
c:\windows\TEMP\_avast5_\unp43510014.tmp 289016 bytes executable
c:\windows\TEMP\_avast5_\unp43543521.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp44792341.tmp 10808 bytes executable
c:\windows\TEMP\_avast5_\unp45397193.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp200911676.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp205764643.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp210784518.tmp 16200 bytes executable
c:\windows\TEMP\_avast5_\unp210840464.tmp 5960 bytes executable
c:\windows\TEMP\_avast5_\unp213273473.tmp 8536 bytes executable
c:\windows\TEMP\_avast5_\unp214474054.tmp 16960 bytes executable
c:\windows\TEMP\_avast5_\unp8352605.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp8738565.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp9506997.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\Webshlock.txt 0 bytes
c:\windows\TEMP\_avast5_\unp47375113.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp48161912.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp50288496.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp51329800.tmp 28224 bytes executable
c:\windows\TEMP\_avast5_\unp51900031.tmp 47936 bytes executable
c:\windows\TEMP\_avast5_\unp54097177.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp54271376.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp55303926.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp57127597.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp215918621.tmp 33624 bytes executable
c:\windows\TEMP\_avast5_\unp216625609.tmp 150904 bytes executable
c:\windows\TEMP\_avast5_\unp217622061.tmp 25152 bytes executable
c:\windows\TEMP\_avast5_\unp222090401.tmp 37376 bytes executable
c:\windows\TEMP\_avast5_\unp222772179.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp236779511.tmp
c:\windows\TEMP\_avast5_\unp236963305.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp24260653.tmp 193856 bytes executable
c:\windows\TEMP\_avast5_\unp246009498.tmp 221680 bytes executable
c:\windows\TEMP\_avast5_\unp248770079.tmp 197168 bytes executable
c:\windows\TEMP\_avast5_\unp253520601.tmp 15424 bytes executable
c:\windows\TEMP\_avast5_\unp256724909.tmp 37376 bytes executable

sken byl úspešně dokončen
skryté soubory: 66

**************************************************************************
.
Celkový čas: 2010-08-12 10:41:29
ComboFix-quarantined-files.txt 2010-08-12 08:41
ComboFix2.txt 2010-08-09 20:57
ComboFix3.txt 2010-08-09 16:52
ComboFix4.txt 2010-08-06 06:46

Před spuštěním: Volných bajtů: 79 218 814 976
Po spuštění: Volných bajtů: 79 272 951 808

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - 4CDE1810FD0253246064C0CD0F8BD15D
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#12 Příspěvek od vermont23 »

Zde je výsledek z virustotal:

Antivirus Version Last Update Result
a-squared 5.0.0.26 2010.06.03 -
AhnLab-V3 2010.06.03.03 2010.06.03 -
AntiVir 8.2.2.4 2010.06.02 -
Antiy-AVL 2.0.3.7 2010.06.02 -
Authentium 5.2.0.5 2010.06.03 -
Avast 4.8.1351.0 2010.06.03 -
Avast5 5.0.332.0 2010.06.03 -
AVG 9.0.0.787 2010.06.03 -
BitDefender 7.2 2010.06.03 -
CAT-QuickHeal 10.00 2010.06.03 -
ClamAV 0.96.0.3-git 2010.06.03 -
Comodo 4980 2010.06.01 -
DrWeb 5.0.2.03300 2010.06.03 -
eSafe 7.0.17.0 2010.06.03 -
eTrust-Vet 35.2.7527 2010.06.03 -
F-Prot 4.6.0.103 2010.06.03 -
F-Secure 9.0.15370.0 2010.06.03 -
Fortinet 4.1.133.0 2010.06.03 -
GData 21 2010.06.03 -
Ikarus T3.1.1.84.0 2010.06.03 -
Jiangmin 13.0.900 2010.06.03 -
Kaspersky 7.0.0.125 2010.06.03 -
McAfee 5.400.0.1158 2010.06.03 -
McAfee-GW-Edition 2010.1 2010.06.03 -
Microsoft 1.5802 2010.06.03 -
NOD32 5170 2010.06.03 -
Norman 6.04.12 2010.06.03 -
nProtect 2010-06-03.01 2010.06.03 -
Panda 10.0.2.7 2010.06.03 -
PCTools 7.0.3.5 2010.06.03 -
Prevx 3.0 2010.06.03 -
Rising 22.50.03.04 2010.06.03 -
Sophos 4.53.0 2010.06.03 -
Sunbelt 6399 2010.06.03 -
Symantec 20101.1.0.89 2010.06.03 -
TheHacker 6.5.2.0.292 2010.06.03 -
TrendMicro 9.120.0.1004 2010.06.03 -
TrendMicro-HouseCall 9.120.0.1004 2010.06.03 -
VBA32 3.12.12.5 2010.06.03 -
ViRobot 2010.6.3.2335 2010.06.03 -
VirusBuster 5.0.27.0 2010.06.03 -
Additional information
MD5 : 2f6afac62e38e5b4a831086b6899cf54
SHA1 : 42fd2943e8d4b88827c177d65713c4b1eec209c4
SHA256: e07a3a35484553130e9e35cfe339e24eb92d2995effb203c7ada194791f2c624
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#13 Příspěvek od vermont23 »

ještě provedu sken z MBAM
Nahoru
Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Lenochod...

#14 Příspěvek od motji »

:)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Uživatelský avatar
vermont23
Návštěvník
Návštěvník
Příspěvky: 79
Registrován: 05 srp 2010 16:36
Bydliště: Olomóc
Kontaktovat uživatele:
Kontaktovat uživatele vermont23

Re: Lenochod...

#15 Příspěvek od vermont23 »

Tak,zde je ten sken z MBAM:


Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12.8.2010 13:23:56
mbam-log-2010-08-12 (13-23-56).txt

Typ skenu: Úplný sken (C:\|D:\|G:\|H:\|I:\|J:\|K:\|)
Skenované objekty: 226058
Uplynulý čas: 2 hodina(y), 17 minuta(y), 18 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\System Volume Information\_restore{9CB91E49-ECCF-402C-B607-0596DEE874B3}\RP12\A0007099.sys (Rootkit.Rustock) -> No action taken.
C:\System Volume Information\_restore{9CB91E49-ECCF-402C-B607-0596DEE874B3}\RP26\A0016666.exe (HackTool.Craggle) -> No action taken.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“