Samovolný restart - prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Samovolný restart - prosím o kontrolu logu

#1 Příspěvek od CATerPILAR »

Zdravím, dostal se mi do ruky PC s Win XP, SP2 a vždycky se PC restartuje když windows naběhne až k výběru uživatelských účtů. Zakázání restartu při selhání, žádnou chybovou hlášku nepřineslo. Teď jedu na nouzák a to je v pohodě. Děkuji za kontrolu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2002-12-31 22:50:46
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 48 GB (42%) free of 114 GB
Total RAM: 446 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:50:54, on 31.12.2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre0.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfre0.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [PowerDVD] C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe /autostart
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: LUMIX Simple Viewer.lnk = ?
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AutorunsDisabled - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6479 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\RegCure Program Check.job
C:\WINDOWS\tasks\RegCure.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-03 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-06-03 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2010-06-14 2515552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfre0.dll [2010-06-14 2515552]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2005-01-12 32768]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2008-05-02 1817600]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-05-06 949376]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2006-11-21 35328]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2005-11-01 163840]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2004-03-04 172032]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2003-12-22 241664]
"HP Software Update"=C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [2004-02-18 49152]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2005-12-10 133016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"DXM6Patch_981116"=C:\WINDOWS\p_981116.exe [1998-11-30 497376]
"NPSStartup"= []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"PowerDVD"=C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe [2005-09-28 528384]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\CTFMON.EXE [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
LUMIX Simple Viewer.lnk - C:\Program Files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Install\winbox.exe"="C:\Install\winbox.exe:*:Enabled:winbox"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Swapper\swapper.exe"="C:\Program Files\Swapper\swapper.exe:*:Enabled:swapper"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Uzivatel\Plocha\utorrent.exe"="C:\Documents and Settings\Uzivatel\Plocha\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Rockstar Games\Grand Theft Auto\WINO\Grand Theft Auto.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto\WINO\Grand Theft Auto.exe:*:Enabled:Grand Theft Auto"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.js - edit - "C:\Program Files\Macromedia\Dreamweaver 8\dreamweaver.exe" "%1"

======List of files/folders created in the last 1 months======

2010-08-08 18:08:21 ----A---- C:\WINDOWS\system32\drivers\pciide.sys
2010-08-08 18:07:35 ----A---- C:\WINDOWS\ntbtlog.txt
2010-08-04 11:26:13 ----D---- C:\WINDOWS\Minidump
2010-07-14 18:03:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-07-12 11:20:43 ----D---- C:\WINDOWS\Sun
2010-06-23 15:13:38 ----SHD---- C:\Config.Msi
2010-06-10 16:52:18 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$
2010-06-10 15:54:46 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-06-10 15:54:37 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-06-10 15:54:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-06-10 15:51:07 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-06-10 15:51:00 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-06-10 15:50:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-06-03 13:59:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-06-03 13:59:33 ----D---- C:\Program Files\Common Files\Java
2010-06-03 13:59:03 ----A---- C:\WINDOWS\system32\javaws.exe
2010-06-03 13:59:03 ----A---- C:\WINDOWS\system32\javaw.exe
2010-06-03 13:59:03 ----A---- C:\WINDOWS\system32\java.exe
2010-06-03 13:59:03 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-06-03 13:58:37 ----D---- C:\Program Files\Java
2010-05-26 19:50:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-05-13 08:53:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-05-10 17:31:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2010-05-10 17:25:04 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2010-05-10 17:24:57 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2010-05-10 17:24:15 ----A---- C:\WINDOWS\system32\drivers\ss_bmdm.sys
2010-05-10 17:24:15 ----A---- C:\WINDOWS\system32\drivers\ss_bmdfl.sys
2010-05-10 17:24:15 ----A---- C:\WINDOWS\system32\drivers\ss_bcmnt.sys
2010-05-10 17:24:15 ----A---- C:\WINDOWS\system32\drivers\ss_bcm.sys
2010-05-10 17:24:14 ----A---- C:\WINDOWS\system32\drivers\ss_bwhnt.sys
2010-05-10 17:24:14 ----A---- C:\WINDOWS\system32\drivers\ss_bwh.sys
2010-05-10 17:24:14 ----A---- C:\WINDOWS\system32\drivers\ss_bbus.sys
2010-05-10 17:23:51 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2010-05-10 17:23:50 ----D---- C:\Program Files\DIFX
2010-05-10 17:23:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-05-10 17:23:42 ----A---- C:\WINDOWS\system32\FsUsbExDisk.Sys
2010-05-10 17:23:42 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2010-05-10 17:23:41 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2010-05-10 17:22:46 ----D---- C:\Program Files\MarkAny
2010-05-10 17:22:42 ----D---- C:\Program Files\PC Connectivity Solution
2010-05-10 17:21:16 ----D---- C:\Program Files\Samsung
2010-05-03 15:33:13 ----D---- C:\Program Files\Pythagoras s.r.o
2010-04-29 16:06:16 ----A---- C:\WINDOWS\system32\tsccvid.dll
2010-04-16 16:45:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-16 16:44:56 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-16 16:44:21 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-04-16 16:35:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-16 16:35:08 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 14:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-14 19:16:39 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-03-31 19:58:50 ----HDC---- C:\WINDOWS\$NtUninstallKB980182$
2010-03-30 23:16:34 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2010-03-30 23:10:40 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2010-03-11 07:55:11 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-08 14:25:45 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-02-24 16:44:16 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-11 12:52:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-11 12:51:50 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-11 12:46:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-11 12:46:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-11 12:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-11 12:44:26 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-11 12:43:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-11 12:43:18 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-01-23 10:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-01-13 16:30:47 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-13 16:30:41 ----A---- C:\WINDOWS\imsins.BAK
2010-01-13 16:30:36 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2009-12-16 19:26:28 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-12-16 19:25:54 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2009-12-15 14:19:13 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-15 14:19:07 ----D---- C:\Program Files\MSBuild
2009-12-15 14:19:04 ----D---- C:\WINDOWS\system32\en-US
2009-12-15 14:18:55 ----D---- C:\Program Files\Reference Assemblies
2009-12-15 14:18:03 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-12-15 14:18:02 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-12-15 14:18:02 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-12-15 14:18:02 ----D---- C:\5523486a70395775fa8031e6249a
2009-12-15 14:06:04 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2009-12-15 14:05:50 ----D---- C:\Program Files\MSXML 6.0
2009-12-14 20:52:44 ----D---- C:\21f58cd03e7c6ed7bf8f
2009-12-14 20:52:41 ----D---- C:\8b8018267b409a90770b7429
2009-12-14 18:04:44 ----D---- C:\f4c3e2e8b337cc5e3ba0762ffa
2009-12-14 18:04:40 ----D---- C:\85c432a4e19cb450749a1aa929ce
2009-12-14 15:08:22 ----D---- C:\3227d3557d8804719b1f91
2009-12-14 15:08:19 ----D---- C:\c06d41e3b78c849b66
2009-12-11 19:57:28 ----D---- C:\WINDOWS\system32\KB905474
2009-12-10 14:30:28 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-12-10 14:30:14 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-12-10 14:30:05 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-12-10 14:29:55 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-12-10 14:29:48 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-12-10 14:29:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 14:29:27 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-12-10 14:29:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-12-10 14:29:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-12-10 14:28:54 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-12-10 14:28:43 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-10 14:28:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-12-10 14:27:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-12-10 14:27:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-12-10 14:27:40 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-12-10 14:27:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-12-10 14:27:22 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-12-10 14:27:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-12-10 14:26:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2009-12-10 14:26:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-12-10 14:26:22 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-12-10 14:25:49 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-10 14:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-12-10 14:25:22 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-12-10 14:25:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-12-10 14:24:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 14:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 14:24:38 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-12-10 14:24:27 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-12-10 14:24:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-12-10 14:23:51 ----D---- C:\WINDOWS\ServicePackFiles
2009-12-10 14:23:48 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2009-12-10 14:23:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-12-10 14:23:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-12-10 14:22:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-12-10 14:20:01 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2009-12-10 00:24:15 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-12-10 00:24:06 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-12-10 00:23:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-12-10 00:23:42 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-23 16:47:52 ----D---- C:\suntemp
2009-11-07 00:07:08 ----A---- C:\WINDOWS\system32\netfxperf.dll
2009-11-07 00:07:04 ----A---- C:\WINDOWS\system32\mscoree.dll
2009-11-07 00:06:46 ----A---- C:\WINDOWS\system32\dfshim.dll
2009-08-19 17:07:18 ----A---- C:\WINDOWS\system32\msxml6.dll
2009-07-21 00:05:40 ----A---- C:\WINDOWS\system32\msxml4.dll
2009-03-11 12:00:46 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-03-11 12:00:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$
2009-03-11 12:00:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-02-25 20:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-02-22 17:42:33 ----A---- C:\WINDOWS\clofghls.dll
2009-02-22 08:27:04 ----D---- C:\Program Files\Vietcong
2009-02-21 21:10:00 ----D---- C:\Program Files\Conduit
2009-02-21 21:09:19 ----D---- C:\Program Files\free-downloads.net
2009-02-21 21:08:49 ----D---- C:\Program Files\Alcohol Soft
2009-02-11 21:18:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-01-31 12:44:54 ----A---- C:\WINDOWS\mafosav.INI
2009-01-31 12:36:08 ----A---- C:\WINDOWS\MarioForever_Toolbar_Uninstaller_5812.exe
2009-01-31 12:35:48 ----A---- C:\WINDOWS\MarioForever_Toolbar_Uninstaller_8984.exe
2009-01-31 12:34:52 ----D---- C:\Program Files\Mario Forever
2009-01-21 16:46:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Macromedia
2009-01-21 16:42:33 ----D---- C:\WINDOWS\Downloaded Installations
2009-01-20 20:05:21 ----D---- C:\Program Files\Bonjour
2009-01-20 19:52:26 ----D---- C:\Program Files\Common Files\Macrovision Shared
2009-01-16 19:28:31 ----D---- C:\Program Files\DivX
2009-01-15 16:25:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-07 17:33:49 ----D---- C:\Program Files\RegCure
2008-12-19 19:45:15 ----D---- C:\Program Files\ICQ6.5
2008-12-18 19:40:17 ----HDC---- C:\WINDOWS\$NtUninstallKB960714$
2008-12-12 16:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-12 16:04:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2008-12-11 19:44:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958215$
2008-12-11 19:42:57 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2008-12-11 19:42:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2008-12-11 15:23:45 ----A---- C:\WINDOWS\system32\SET231A.tmp
2008-12-11 15:23:34 ----A---- C:\WINDOWS\system32\SET231C.tmp
2008-12-11 15:23:28 ----A---- C:\WINDOWS\system32\SET231F.tmp
2008-12-11 15:23:23 ----A---- C:\WINDOWS\system32\SET231D.tmp
2008-12-11 15:23:22 ----A---- C:\WINDOWS\system32\SET231B.tmp
2008-12-10 19:22:45 ----D---- C:\Program Files\ICQ6Toolbar
2008-12-10 19:22:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2008-11-20 19:52:21 ----A---- C:\WINDOWS\system32\LMRTREND.dll
2008-11-20 19:52:17 ----A---- C:\WINDOWS\system32\dxtmsft3.dll
2008-11-20 19:52:11 ----A---- C:\WINDOWS\system32\unam4ie.exe
2008-11-20 19:52:07 ----A---- C:\WINDOWS\system32\vidx16.dll
2008-11-20 19:52:07 ----A---- C:\WINDOWS\system32\qcut.dll
2008-11-20 19:52:06 ----A---- C:\WINDOWS\system32\w95inf32.dll
2008-11-20 19:52:06 ----A---- C:\WINDOWS\system32\w95inf16.dll
2008-11-20 19:51:53 ----D---- C:\Program Files\Fox
2008-11-20 19:38:35 ----R---- C:\RAYMAN.BAT
2008-11-20 19:38:35 ----D---- C:\RAYMAN
2008-11-12 20:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-11-12 20:13:41 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-11-06 17:35:00 ----A---- C:\WINDOWS\system32\ssldivx.dll
2008-11-06 17:35:00 ----A---- C:\WINDOWS\system32\libdivx.dll
2008-11-03 16:30:09 ----D---- C:\Program Files\Rockstar Games
2008-11-03 16:29:54 ----A---- C:\WINDOWS\IsUninst.exe
2008-10-30 19:15:17 ----D---- C:\Program Files\Sega
2008-10-24 16:12:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-10-17 04:57:03 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-10-17 04:56:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-17 04:56:40 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-10-17 04:56:29 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-10-17 04:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-10-17 04:54:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956390$
2008-10-15 17:39:25 ----D---- C:\Program Files\Common Files\Vbox
2008-09-27 18:05:30 ----D---- C:\Program Files\uTorrent
2008-09-24 16:31:48 ----D---- C:\Program Files\ABC Transdict
2008-09-10 19:36:04 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 19:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2008-09-10 14:08:09 ----D---- C:\Program Files\EDDICA
2008-09-09 07:26:08 ----D---- C:\WINDOWS\system32\CatRoot_bak
2008-09-04 18:38:22 ----D---- C:\WINDOWS\Cache
2008-09-02 19:17:35 ----D---- C:\Program Files\Skype
2008-09-02 19:17:34 ----D---- C:\Program Files\Common Files\Skype
2008-09-02 19:17:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2008-08-15 10:01:32 ----D---- C:\Program Files\ICQToolbar
2008-08-15 09:56:56 ----D---- C:\Program Files\ICQ6
2008-08-14 14:04:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-14 14:03:53 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-14 14:03:46 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-14 14:03:39 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-14 14:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-14 14:02:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-14 14:02:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-14 14:01:58 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2008-07-29 21:10:04 ----A---- C:\WINDOWS\system32\TsWpfWrp.exe
2008-07-29 21:10:04 ----A---- C:\WINDOWS\system32\evr.dll
2008-07-29 21:10:04 ----A---- C:\WINDOWS\system32\dxva2.dll
2008-07-29 19:59:58 ----A---- C:\WINDOWS\system32\UIAutomationCore.dll
2008-07-29 19:59:58 ----A---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2008-07-29 19:59:58 ----A---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2008-07-29 19:24:50 ----A---- C:\WINDOWS\system32\infocardapi.dll
2008-07-29 19:24:50 ----A---- C:\WINDOWS\system32\icardres.dll
2008-07-29 19:24:50 ----A---- C:\WINDOWS\system32\icardagt.exe
2008-07-29 05:49:58 ----A---- C:\WINDOWS\system32\icardres.dll.mui
2008-07-25 11:16:58 ----A---- C:\WINDOWS\system32\mscories.dll
2008-07-25 11:16:58 ----A---- C:\WINDOWS\system32\mscorier.dll
2008-07-24 09:15:13 ----D---- C:\Program Files\QIP Infium
2008-07-21 20:32:33 ----D---- C:\Program Files\VisualConnection
2008-07-21 20:22:46 ----RSD---- C:\WINDOWS\assembly
2008-07-21 20:21:49 ----D---- C:\WINDOWS\Microsoft.NET
2008-07-09 16:30:37 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-06-24 11:17:58 ----D---- C:\Program Files\Karaoke Island
2008-06-20 09:41:18 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-06-13 12:52:39 ----D---- C:\Program Files\VideoLAN
2008-06-11 14:39:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-06-11 14:39:46 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-06-11 14:39:29 ----HDC---- C:\WINDOWS\$NtUninstallKB950759$
2008-06-11 14:39:20 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-06-11 14:39:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-06-11 14:07:58 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-10 09:35:30 ----D---- C:\Program Files\TubeTilla
2008-06-02 19:39:55 ----D---- C:\Program Files\Abracadabra
2008-06-02 19:16:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Macrovision
2008-06-02 19:15:47 ----N---- C:\WINDOWS\system32\msvcr70.dll
2008-06-02 19:15:47 ----N---- C:\WINDOWS\system32\mfc70enu.dll
2008-06-02 19:15:47 ----N---- C:\WINDOWS\system32\mfc70.dll
2008-06-02 19:15:44 ----D---- C:\Program Files\Common Files\Macromedia Shared
2008-06-02 19:15:43 ----D---- C:\Program Files\Common Files\Macromedia
2008-06-02 19:15:32 ----D---- C:\Program Files\Macromedia
2008-05-14 05:59:10 ----HDC---- C:\WINDOWS\$NtUninstallKB950749$
2008-04-20 20:23:02 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2008-04-20 20:22:47 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2008-04-20 20:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2008-04-19 10:25:24 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2008-04-19 10:24:51 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-04-19 10:24:50 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2008-04-19 10:24:09 ----D---- C:\Program Files\Windows Media Connect 2
2008-04-19 10:23:58 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2008-04-19 10:22:53 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2008-04-19 10:22:21 ----D---- C:\WINDOWS\system32\LogFiles
2008-04-19 10:22:21 ----D---- C:\WINDOWS\system32\drivers\UMDF
2008-04-19 10:22:15 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2008-04-14 04:22:47 ----A---- C:\WINDOWS\system32\spdwnwxp.exe
2008-04-13 10:58:43 ----D---- C:\Program Files\MP3 Player Utilities 4.09
2008-04-09 13:41:03 ----HDC---- C:\WINDOWS\$NtUninstallKB948881$
2008-04-09 13:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB947864$
2008-04-09 13:40:29 ----HDC---- C:\WINDOWS\$NtUninstallKB941693$
2008-04-09 13:40:15 ----HDC---- C:\WINDOWS\$NtUninstallKB948590$
2008-04-09 13:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB944338$
2008-04-09 13:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB945553$
2008-03-29 14:16:35 ----D---- C:\Program Files\Common Files\Adobe
2008-03-29 14:16:24 ----D---- C:\WINDOWS\SxsCaPendDel
2008-03-26 16:22:34 ----HD---- C:\WINDOWS\PIF
2008-03-13 09:40:22 ----D---- C:\Chcete být milionářem LT
2008-03-04 15:54:56 ----D---- C:\Program Files\PhotoFiltre
2008-02-23 10:20:23 ----D---- C:\INTRUDER
2008-02-23 10:12:25 ----D---- C:\Program Files\Games
2008-02-23 10:12:18 ----A---- C:\WINDOWS\uninst.exe
2008-02-13 16:27:16 ----HDC---- C:\WINDOWS\$NtUninstallKB946026$
2008-02-13 16:27:01 ----HDC---- C:\WINDOWS\$NtUninstallKB944533$
2008-02-13 16:26:45 ----HDC---- C:\WINDOWS\$NtUninstallKB943055$
2008-01-20 10:46:35 ----A---- C:\WINDOWS\system32\MRT.exe
2008-01-20 10:43:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2008-01-11 11:43:06 ----HDC---- C:\WINDOWS\$NtUninstallKB946627$
2008-01-10 17:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB925902$
2008-01-10 17:43:56 ----HDC---- C:\WINDOWS\$NtUninstallKB932168$
2008-01-10 17:11:26 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2008-01-10 17:11:18 ----HDC---- C:\WINDOWS\$NtUninstallKB927779$
2008-01-10 17:11:11 ----HDC---- C:\WINDOWS\$NtUninstallKB927802$
2008-01-10 17:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB943460$
2008-01-10 17:10:54 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2008-01-10 17:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2008-01-10 17:10:40 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2008-01-10 17:10:33 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2008-01-10 17:10:24 ----HDC---- C:\WINDOWS\$NtUninstallKB937894$
2008-01-10 17:10:14 ----HDC---- C:\WINDOWS\$NtUninstallKB928255$
2008-01-10 17:10:04 ----HDC---- C:\WINDOWS\$NtUninstallKB931784$
2008-01-10 17:09:57 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2008-01-10 17:09:49 ----HDC---- C:\WINDOWS\$NtUninstallKB942840$
2008-01-10 17:09:42 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2008-01-10 17:09:35 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2008-01-10 17:09:28 ----HDC---- C:\WINDOWS\$NtUninstallKB933729$
2008-01-10 17:09:21 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2008-01-10 17:09:14 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2008-01-10 17:09:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923980$
2008-01-10 17:09:00 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2008-01-10 17:08:53 ----HDC---- C:\WINDOWS\$NtUninstallKB936021$
2008-01-10 17:08:46 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2008-01-10 17:08:40 ----HDC---- C:\WINDOWS\$NtUninstallKB938828$
2008-01-10 17:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB924667$
2008-01-10 17:08:26 ----HDC---- C:\WINDOWS\$NtUninstallKB900485$
2008-01-10 17:08:18 ----HDC---- C:\WINDOWS\$NtUninstallKB924270$
2008-01-10 17:08:11 ----HDC---- C:\WINDOWS\$NtUninstallKB931261$
2008-01-10 17:08:03 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP9$
2008-01-10 17:07:43 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2008-01-10 17:07:37 ----HDC---- C:\WINDOWS\$NtUninstallKB924496$
2008-01-10 17:07:30 ----HDC---- C:\WINDOWS\$NtUninstallKB941644$
2008-01-10 17:07:23 ----HDC---- C:\WINDOWS\$NtUninstallKB927891$
2008-01-10 17:07:16 ----HDC---- C:\WINDOWS\$NtUninstallKB936357$
2008-01-10 17:07:10 ----HDC---- C:\WINDOWS\$NtUninstallKB921503$
2008-01-10 17:07:03 ----HDC---- C:\WINDOWS\$NtUninstallKB887472$
2008-01-10 17:06:57 ----HDC---- C:\WINDOWS\$NtUninstallKB938829$
2008-01-10 17:06:51 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2008-01-10 17:06:43 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$
2008-01-10 17:06:37 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2008-01-10 17:06:31 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2008-01-10 17:06:24 ----HDC---- C:\WINDOWS\$NtUninstallKB918439$
2008-01-10 17:06:11 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2008-01-10 17:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2008-01-10 17:05:57 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2008-01-10 17:05:50 ----HDC---- C:\WINDOWS\$NtUninstallKB920872$
2008-01-10 17:05:42 ----HDC---- C:\WINDOWS\$NtUninstallKB942763$
2008-01-10 17:05:34 ----HDC---- C:\WINDOWS\$NtUninstallKB930178$
2008-01-10 17:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2008-01-10 17:05:22 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2008-01-10 17:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2008-01-10 17:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2008-01-10 17:04:48 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2008-01-10 17:04:42 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2008-01-10 17:04:36 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2008-01-10 17:04:30 ----HDC---- C:\WINDOWS\$NtUninstallKB941202$
2008-01-10 17:04:24 ----HDC---- C:\WINDOWS\$NtUninstallKB918118$
2008-01-10 17:04:18 ----HDC---- C:\WINDOWS\$NtUninstallKB926255$
2008-01-10 17:04:12 ----HDC---- C:\WINDOWS\$NtUninstallKB941568$
2008-01-10 17:04:05 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2008-01-10 17:03:58 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2008-01-10 17:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB938127$
2008-01-10 17:03:45 ----HDC---- C:\WINDOWS\$NtUninstallKB920213$
2008-01-10 17:03:39 ----HDC---- C:\WINDOWS\$NtUninstallKB935840$
2008-01-10 17:03:33 ----HDC---- C:\WINDOWS\$NtUninstallKB943485$
2008-01-10 17:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB916595$
2008-01-10 17:03:22 ----HDC---- C:\WINDOWS\$NtUninstallKB930916$
2008-01-10 17:03:08 ----HDC---- C:\WINDOWS\$NtUninstallKB942615$
2008-01-10 17:02:54 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2008-01-10 17:02:47 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2008-01-10 17:02:40 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2008-01-10 17:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2008-01-10 10:31:54 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2008-01-10 10:31:49 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2008-01-10 10:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2008-01-10 10:31:26 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2008-01-10 10:30:59 ----HDC---- C:\WINDOWS\$NtUninstallKB922582$
2008-01-10 10:30:52 ----HDC---- C:\WINDOWS\$NtUninstallKB886185$
2008-01-10 10:30:47 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2008-01-10 10:30:44 ----D---- C:\Program Files\MSXML 4.0
2008-01-10 10:30:29 ----HDC---- C:\WINDOWS\$NtUninstallKB935839$
2008-01-10 10:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB894391$
2008-01-10 10:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2008-01-10 10:30:11 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2008-01-10 10:30:05 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2008-01-10 10:30:00 ----HDC---- C:\WINDOWS\$NtUninstallKB944653$
2008-01-10 10:29:51 ----HDC---- C:\WINDOWS\$NtUninstallKB928843$
2008-01-09 20:38:50 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2008-01-09 20:38:22 ----D---- C:\WINDOWS\system32\PreInstall
2008-01-09 20:38:21 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2008-01-09 20:38:20 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2008-01-09 20:38:20 ----HD---- C:\WINDOWS\$hf_mig$
2008-01-09 18:40:44 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2008-01-07 20:18:50 ----D---- C:\Program Files\QIP
2007-11-13 12:31:11 ----N---- C:\WINDOWS\system32\tzchange.exe
2007-10-25 16:26:10 ----A---- C:\WINDOWS\system32\drivers\StarOpen.sys
2007-10-25 12:47:50 ----A---- C:\WINDOWS\system32\PhDi2.sys
2007-10-25 12:46:49 ----A---- C:\WINDOWS\system32\PICSDK2.dll
2007-10-25 12:46:49 ----A---- C:\WINDOWS\system32\PICSDK.ini
2007-10-25 12:46:49 ----A---- C:\WINDOWS\system32\PICSDK.dll
2007-10-25 12:46:49 ----A---- C:\WINDOWS\system32\PICEntry.dll
2007-10-25 12:46:49 ----A---- C:\WINDOWS\system32\EpPicPrt.dll
2007-10-25 12:46:48 ----A---- C:\WINDOWS\system32\EPPicMgr.dll
2007-10-25 12:45:59 ----D---- C:\Program Files\Panasonic
2007-10-11 16:27:48 ----D---- C:\Program Files\DAEMON Tools
2007-10-11 16:27:48 ----A---- C:\WINDOWS\system32\drivers\dtscsi.sys
2007-10-11 16:25:59 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2007-10-11 01:14:30 ----A---- C:\WINDOWS\system32\xpsp3res.dll
2007-09-16 09:05:12 ----D---- C:\Program Files\Glassfish Games
2007-09-06 16:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2007-09-06 16:12:24 ----D---- C:\Program Files\Adobe
2007-08-19 13:43:05 ----D---- C:\Program Files\Kodek CZ
2007-08-19 13:29:37 ----D---- C:\Program Files\Webteh
2007-07-30 19:19:16 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2007-07-30 19:19:12 ----A---- C:\WINDOWS\system32\wups2.dll
2007-07-30 19:18:58 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2007-07-30 19:18:20 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2007-05-21 15:28:29 ----A---- C:\WINDOWS\NeroDigital.ini
2007-05-19 13:07:24 ----D---- C:\Temp
2007-05-17 12:15:06 ----A---- C:\WINDOWS\VPlayer.INI
2007-05-14 20:05:45 ----D---- C:\Program Files\ICQLite
2007-05-14 18:45:44 ----RA---- C:\WINDOWS\system32\MSXML4r.dll
2007-05-14 18:45:44 ----RA---- C:\WINDOWS\system32\MSXML4a.dll
2007-05-14 18:45:43 ----RA---- C:\WINDOWS\system32\hpvcr70.dll
2007-05-14 18:45:43 ----RA---- C:\WINDOWS\system32\hpvcp70.dll
2007-05-14 18:45:43 ----RA---- C:\WINDOWS\system32\hpvaut32.dll
2007-05-14 18:45:25 ----D---- C:\Program Files\Hewlett-Packard
2007-05-14 18:45:13 ----D---- C:\Program Files\HP
2007-05-14 18:44:39 ----A---- C:\WINDOWS\hpdj3740.ini
2007-05-14 18:43:42 ----A---- C:\WINDOWS\hpbvspst.ini
2007-05-14 18:39:30 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2007-05-08 17:08:12 ----A---- C:\WINDOWS\system32\msxml6r.dll
2007-05-06 16:52:23 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2007-05-06 16:52:20 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2007-05-06 16:52:18 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2007-05-06 16:52:16 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2007-05-06 16:52:13 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2007-05-06 16:52:11 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2007-05-06 16:52:09 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2007-05-06 16:52:06 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2007-05-06 16:52:03 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-05-06 16:52:01 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2007-05-06 16:51:58 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-05-06 16:51:53 ----RA---- C:\WINDOWS\system32\RTLCPL.EXE
2007-05-06 16:51:53 ----RA---- C:\WINDOWS\system32\RTLCPAPI.dll
2007-05-06 16:51:53 ----RA---- C:\WINDOWS\Alcrmv.exe
2007-05-06 16:51:52 ----RA---- C:\WINDOWS\SOUNDMAN.EXE
2007-05-06 16:51:51 ----RA---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2007-05-06 16:51:50 ----A---- C:\WINDOWS\system32\ksuser.dll
2007-05-06 16:51:50 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2007-05-06 16:51:49 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2007-05-06 16:46:46 ----A---- C:\WINDOWS\system32\h323log.txt
2007-05-06 16:38:53 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2007-05-06 16:38:24 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2007-05-06 16:38:02 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS
2007-05-06 16:37:44 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2007-05-06 16:37:41 ----A---- C:\WINDOWS\system32\usbui.dll
2007-05-06 16:36:37 ----SHD---- C:\WINDOWS\Installer
2007-05-06 16:36:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2007-05-06 16:36:36 ----D---- C:\Program Files\Common Files\ODBC
2007-05-06 16:36:36 ----A---- C:\WINDOWS\ODBCINST.INI
2007-05-06 16:36:33 ----D---- C:\Program Files\Common Files\SpeechEngines
2007-05-06 16:36:32 ----RD---- C:\Program Files
2007-05-06 16:36:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2007-05-06 16:36:32 ----D---- C:\Program Files\Common Files
2007-05-06 16:36:28 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2007-05-06 16:36:28 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2007-05-06 16:36:28 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2007-05-06 16:36:26 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2007-05-06 16:36:26 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdur.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdru.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2007-05-06 16:36:25 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2007-05-06 16:36:22 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2007-05-06 16:36:20 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2007-05-06 16:36:20 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2007-05-06 16:36:20 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2007-05-06 16:36:20 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2007-05-06 16:36:20 ----RA---- C:\WINDOWS\system32\kbdest.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdsl.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdro.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdpl.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdhu.dll
2007-05-06 16:36:16 ----A---- C:\WINDOWS\system32\kbdcr.dll
2007-05-06 16:36:15 ----A---- C:\WINDOWS\system32\kbdycl.dll
2007-05-06 16:36:15 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2007-05-06 16:36:14 ----A---- C:\WINDOWS\system32\spxcoins.dll
2007-05-06 16:36:14 ----A---- C:\WINDOWS\system32\irclass.dll
2007-05-06 16:36:14 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2007-05-06 16:36:14 ----A---- C:\WINDOWS\system32\dgsetup.dll
2007-05-06 16:36:14 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2007-05-06 16:36:11 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2007-05-06 16:36:11 ----A---- C:\WINDOWS\TASKMAN.EXE
2007-05-06 16:36:11 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2007-05-06 16:36:11 ----A---- C:\WINDOWS\system32\batt.dll
2007-05-06 16:36:10 ----A---- C:\WINDOWS\NOTEPAD.EXE
2007-05-06 16:36:09 ----A---- C:\WINDOWS\system32\storprop.dll
2007-05-06 16:36:01 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2007-05-06 16:35:56 ----RA---- C:\WINDOWS\SET8.tmp
2007-05-06 16:35:53 ----RA---- C:\WINDOWS\SET4.tmp
2007-05-06 16:35:52 ----RA---- C:\WINDOWS\SET3.tmp
2007-05-06 16:35:46 ----D---- C:\WINDOWS\system32\CatRoot2
2007-05-06 16:35:46 ----D---- C:\WINDOWS\system32\CatRoot
2007-05-06 16:35:41 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2007-05-06 16:35:17 ----SHD---- C:\System Volume Information
2007-05-06 16:35:17 ----D---- C:\Documents and Settings
2007-05-06 16:34:29 ----SH---- C:\boot.ini
2007-05-06 16:30:03 ----A---- C:\WINDOWS\system32\VTTrayp.exe
2007-05-06 16:30:02 ----A---- C:\WINDOWS\system32\VTTimer.exe
2007-05-06 16:30:02 ----A---- C:\WINDOWS\system32\VTovrlay.dll
2007-05-06 16:30:02 ----A---- C:\WINDOWS\system32\VTInfo2.dll
2007-05-06 16:30:02 ----A---- C:\WINDOWS\system32\vticd.dll
2007-05-06 16:30:02 ----A---- C:\WINDOWS\system32\drivers\vtmini.sys
2007-05-06 16:30:01 ----A---- C:\WINDOWS\system32\VTGamma2.dll
2007-05-06 16:30:01 ----A---- C:\WINDOWS\system32\VTDisply.dll
2007-05-06 16:30:01 ----A---- C:\WINDOWS\system32\vtdisp.dll
2007-05-06 16:30:01 ----A---- C:\WINDOWS\system32\VModes.exe
2007-05-06 16:29:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2007-05-06 16:29:23 ----RSD---- C:\WINDOWS\Fonts
2007-05-06 16:29:23 ----RD---- C:\WINDOWS\Web
2007-05-06 16:29:23 ----HD---- C:\WINDOWS\inf
2007-05-06 16:29:23 ----D---- C:\WINDOWS\WinSxS
2007-05-06 16:29:23 ----D---- C:\WINDOWS\twain_32
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Temp
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\wins
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\wbem
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\usmt
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\spool
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\ShellExt
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\Setup
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\ras
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\oobe
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\npp
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\mui
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\inetsrv
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\IME
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\icsxml
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\ias
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\export
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\drivers\etc
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\drivers
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\dhcp
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\config
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\3com_dmi
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\3076
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\2052
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1054
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1042
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1041
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1037
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1033
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1031
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1029
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1028
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32\1025
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system32
2007-05-06 16:29:23 ----D---- C:\WINDOWS\system

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#2 Příspěvek od CATerPILAR »

2007-05-06 16:29:23 ----D---- C:\WINDOWS\security
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Resources
2007-05-06 16:29:23 ----D---- C:\WINDOWS\repair
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Provisioning
2007-05-06 16:29:23 ----D---- C:\WINDOWS\pchealth
2007-05-06 16:29:23 ----D---- C:\WINDOWS\PeerNet
2007-05-06 16:29:23 ----D---- C:\WINDOWS\mui
2007-05-06 16:29:23 ----D---- C:\WINDOWS\msapps
2007-05-06 16:29:23 ----D---- C:\WINDOWS\msagent
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Media
2007-05-06 16:29:23 ----D---- C:\WINDOWS\java
2007-05-06 16:29:23 ----D---- C:\WINDOWS\ime
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Help
2007-05-06 16:29:23 ----D---- C:\WINDOWS\ehome
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Driver Cache
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Debug
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Cursors
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Connection Wizard
2007-05-06 16:29:23 ----D---- C:\WINDOWS\Config
2007-05-06 16:29:23 ----D---- C:\WINDOWS\AppPatch
2007-05-06 16:29:23 ----D---- C:\WINDOWS\addins
2007-05-06 16:29:23 ----D---- C:\WINDOWS
2007-05-06 16:29:23 ----ASH---- C:\pagefile.sys
2007-05-06 15:43:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2007-05-06 15:19:57 ----D---- C:\Program Files\IrfanView
2007-05-06 15:19:23 ----D---- C:\Program Files\Mv2Player
2007-05-06 15:19:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2007-05-06 15:19:07 ----D---- C:\Program Files\DVD Shrink
2007-05-06 15:18:22 ----D---- C:\Program Files\Mozilla Firefox
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\vxblock.dll
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxsfs.dll
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxdrv.dll
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\pxafs.dll
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-05-06 15:17:28 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-05-06 15:17:27 ----N---- C:\WINDOWS\system32\pxwave.dll
2007-05-06 15:17:27 ----N---- C:\WINDOWS\system32\pxmas.dll
2007-05-06 15:17:27 ----N---- C:\WINDOWS\system32\px.dll
2007-05-06 15:17:17 ----D---- C:\Program Files\Winamp
2007-05-06 15:16:05 ----A---- C:\WINDOWS\system32\imon.dll
2007-05-06 15:16:04 ----A---- C:\WINDOWS\system32\drivers\nod32drv.sys
2007-05-06 15:16:04 ----A---- C:\WINDOWS\system32\drivers\amon.sys
2007-05-06 15:15:23 ----D---- C:\Program Files\ESET
2007-05-06 15:14:58 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2007-05-06 15:14:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2007-05-06 15:14:22 ----D---- C:\Program Files\Spyware Terminator
2007-05-06 15:13:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2007-05-06 15:13:52 ----D---- C:\Program Files\Spybot - Search & Destroy
2007-05-06 15:13:23 ----A---- C:\WINDOWS\ODBC.INI
2007-05-06 15:13:20 ----A---- C:\WINDOWS\system32\mdimon.dll
2007-05-06 15:12:28 ----D---- C:\Program Files\Common Files\DESIGNER
2007-05-06 15:12:17 ----D---- C:\WINDOWS\SHELLNEW
2007-05-06 15:11:33 ----D---- C:\Program Files\Microsoft Office
2007-05-06 15:10:01 ----RHD---- C:\MSOCache
2007-05-06 15:08:06 ----D---- C:\Install
2007-05-06 15:07:44 ----D---- C:\Program Files\Totalcmd
2007-05-06 15:07:44 ----A---- C:\WINDOWS\wincmd.ini
2007-05-06 15:07:44 ----A---- C:\WINDOWS\UC.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\RAR.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\PKZIP.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\PKUNZIP.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\NOCLOSE.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\LHA.PIF
2007-05-06 15:07:44 ----A---- C:\WINDOWS\ARJ.PIF
2007-05-06 15:06:34 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2007-05-06 15:05:47 ----HD---- C:\Program Files\InstallShield Installation Information
2007-05-06 15:05:45 ----D---- C:\Program Files\CyberLink
2007-05-06 15:05:32 ----D---- C:\Program Files\Common Files\InstallShield
2007-05-06 15:04:23 ----SHD---- C:\RECYCLER
2007-05-06 15:03:48 ----D---- C:\Program Files\Common Files\LightScribe
2007-05-06 15:02:47 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2007-05-06 15:02:47 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2007-05-06 15:02:44 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2007-05-06 15:02:43 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2007-05-06 15:02:43 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2007-05-06 15:02:43 ----N---- C:\WINDOWS\system32\ImagX7.dll
2007-05-06 15:02:42 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2007-05-06 15:02:38 ----D---- C:\Program Files\Common Files\Ahead
2007-05-06 15:02:36 ----D---- C:\Program Files\Ahead
2007-05-06 15:00:20 ----HD---- C:\Program Files\Uninstall Information
2007-05-06 14:58:23 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2007-05-06 14:58:21 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2007-05-06 14:58:11 ----D---- C:\WINDOWS\SoftwareDistribution
2007-05-06 14:58:10 ----SD---- C:\WINDOWS\system32\Microsoft
2007-05-06 14:58:10 ----D---- C:\WINDOWS\Prefetch
2007-05-06 14:58:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2007-05-06 14:53:18 ----D---- C:\WINDOWS\system32\xircom
2007-05-06 14:53:18 ----D---- C:\Program Files\xerox
2007-05-06 14:53:18 ----D---- C:\Program Files\microsoft frontpage
2007-05-06 14:52:56 ----RASH---- C:\MSDOS.SYS
2007-05-06 14:52:56 ----RASH---- C:\IO.SYS
2007-05-06 14:52:56 ----A---- C:\WINDOWS\control.ini
2007-05-06 14:52:56 ----A---- C:\CONFIG.SYS
2007-05-06 14:52:56 ----A---- C:\AUTOEXEC.BAT
2007-05-06 14:52:36 ----A---- C:\WINDOWS\system32\mapi32.dll
2007-05-06 14:51:39 ----SD---- C:\WINDOWS\Downloaded Program Files
2007-05-06 14:51:39 ----RD---- C:\WINDOWS\Offline Web Pages
2007-05-06 14:51:39 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2007-05-06 14:51:31 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2007-05-06 14:51:26 ----HD---- C:\Program Files\WindowsUpdate
2007-05-06 14:51:23 ----D---- C:\Program Files\Online Services
2007-05-06 14:51:04 ----D---- C:\WINDOWS\system32\DirectX
2007-05-06 14:50:38 ----A---- C:\WINDOWS\system32\atrace.dll
2007-05-06 14:50:35 ----A---- C:\WINDOWS\system32\desktop.ini
2007-05-06 14:50:35 ----A---- C:\WINDOWS\desktop.ini
2007-05-06 14:50:27 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2007-05-06 14:50:26 ----A---- C:\WINDOWS\system32\acctres.dll
2007-05-06 14:50:25 ----D---- C:\Program Files\Common Files\Services
2007-05-06 14:50:22 ----SD---- C:\WINDOWS\Tasks
2007-05-06 14:50:22 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2007-05-06 14:50:21 ----D---- C:\Program Files\Common Files\MSSoap
2007-05-06 14:50:16 ----D---- C:\WINDOWS\srchasst
2007-05-06 14:50:15 ----D---- C:\WINDOWS\system32\Macromed
2007-05-06 14:50:11 ----A---- C:\WINDOWS\system32\wuweb.dll
2007-05-06 14:50:11 ----A---- C:\WINDOWS\system32\wucltui.dll
2007-05-06 14:50:11 ----A---- C:\WINDOWS\system32\wuauserv.dll
2007-05-06 14:50:11 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2007-05-06 14:50:10 ----A---- C:\WINDOWS\system32\wups.dll
2007-05-06 14:50:10 ----A---- C:\WINDOWS\system32\wuaueng.dll
2007-05-06 14:50:10 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2007-05-06 14:50:10 ----A---- C:\WINDOWS\system32\wuauclt.exe
2007-05-06 14:50:09 ----A---- C:\WINDOWS\system32\wuapi.dll
2007-05-06 14:50:09 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2007-05-06 14:50:09 ----A---- C:\WINDOWS\system32\qmgr.dll
2007-05-06 14:50:09 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2007-05-06 14:50:09 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2007-05-06 14:50:05 ----D---- C:\Program Files\Movie Maker
2007-05-06 14:49:59 ----A---- C:\WINDOWS\system32\safrslv.dll
2007-05-06 14:49:59 ----A---- C:\WINDOWS\system32\safrdm.dll
2007-05-06 14:49:59 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2007-05-06 14:49:59 ----A---- C:\WINDOWS\system32\racpldlg.dll
2007-05-06 14:49:53 ----A---- C:\WINDOWS\system32\fltmc.exe
2007-05-06 14:49:53 ----A---- C:\WINDOWS\system32\fltlib.dll
2007-05-06 14:49:53 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2007-05-06 14:49:52 ----D---- C:\WINDOWS\system32\Restore
2007-05-06 14:49:52 ----A---- C:\WINDOWS\system32\srsvc.dll
2007-05-06 14:49:52 ----A---- C:\WINDOWS\system32\srrstr.dll
2007-05-06 14:49:52 ----A---- C:\WINDOWS\system32\srclient.dll
2007-05-06 14:49:52 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2007-05-06 14:49:51 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2007-05-06 14:49:51 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2007-05-06 14:49:51 ----A---- C:\WINDOWS\system32\mnmdd.dll
2007-05-06 14:49:51 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2007-05-06 14:49:51 ----A---- C:\WINDOWS\system32\ils.dll
2007-05-06 14:49:50 ----A---- C:\WINDOWS\system32\msconf.dll
2007-05-06 14:49:47 ----D---- C:\Program Files\NetMeeting
2007-05-06 14:49:47 ----A---- C:\WINDOWS\system32\msoert2.dll
2007-05-06 14:49:47 ----A---- C:\WINDOWS\system32\msoeacct.dll
2007-05-06 14:49:46 ----A---- C:\WINDOWS\system32\inetres.dll
2007-05-06 14:49:45 ----A---- C:\WINDOWS\system32\inetcomm.dll
2007-05-06 14:49:43 ----D---- C:\Program Files\Outlook Express
2007-05-06 14:49:43 ----A---- C:\WINDOWS\system32\schedsvc.dll
2007-05-06 14:49:43 ----A---- C:\WINDOWS\system32\mstinit.exe
2007-05-06 14:49:43 ----A---- C:\WINDOWS\system32\mstask.dll
2007-05-06 14:49:42 ----A---- C:\WINDOWS\system32\isign32.dll
2007-05-06 14:49:42 ----A---- C:\WINDOWS\system32\inetcfg.dll
2007-05-06 14:49:42 ----A---- C:\WINDOWS\system32\icwphbk.dll
2007-05-06 14:49:42 ----A---- C:\WINDOWS\system32\icwdial.dll
2007-05-06 14:49:34 ----D---- C:\Program Files\Common Files\System
2007-05-06 14:49:33 ----D---- C:\Program Files\Internet Explorer
2007-05-06 14:48:53 ----D---- C:\Program Files\ComPlus Applications
2007-05-06 14:48:51 ----A---- C:\WINDOWS\vbaddin.ini
2007-05-06 14:48:51 ----A---- C:\WINDOWS\vb.ini
2007-05-06 14:48:47 ----D---- C:\WINDOWS\Registration
2007-05-06 14:48:40 ----D---- C:\Program Files\Windows Media Player
2007-05-06 14:48:34 ----D---- C:\Program Files\Messenger
2007-05-06 14:48:30 ----D---- C:\Program Files\MSN Gaming Zone
2007-05-06 14:48:30 ----A---- C:\WINDOWS\system32\write.exe
2007-05-06 14:48:18 ----A---- C:\WINDOWS\system32\sndvol32.exe
2007-05-06 14:48:18 ----A---- C:\WINDOWS\system32\hticons.dll
2007-05-06 14:48:17 ----A---- C:\WINDOWS\system32\avwav.dll
2007-05-06 14:48:17 ----A---- C:\WINDOWS\system32\avtapi.dll
2007-05-06 14:48:17 ----A---- C:\WINDOWS\system32\avmeter.dll
2007-05-06 14:48:16 ----A---- C:\WINDOWS\system32\winchat.exe
2007-05-06 14:48:08 ----A---- C:\WINDOWS\system32\getuname.dll
2007-05-06 14:48:07 ----A---- C:\WINDOWS\system32\sol.exe
2007-05-06 14:48:07 ----A---- C:\WINDOWS\system32\charmap.exe
2007-05-06 14:48:07 ----A---- C:\WINDOWS\system32\calc.exe
2007-05-06 14:48:06 ----A---- C:\WINDOWS\system32\winmine.exe
2007-05-06 14:48:06 ----A---- C:\WINDOWS\system32\mshearts.exe
2007-05-06 14:48:06 ----A---- C:\WINDOWS\system32\freecell.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\tslabels.ini
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\tskill.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\tscon.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\shadow.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\rwinsta.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\reset.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\regini.exe
2007-05-06 14:48:05 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\qwinsta.exe
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\qappsrv.exe
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\msg.exe
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\logoff.exe
2007-05-06 14:48:04 ----A---- C:\WINDOWS\system32\cdmodem.dll
2007-05-06 14:48:03 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2007-05-06 14:48:03 ----A---- C:\WINDOWS\system32\mtxex.dll
2007-05-06 14:48:03 ----A---- C:\WINDOWS\system32\mtxdm.dll
2007-05-06 14:48:03 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2007-05-06 14:48:02 ----A---- C:\WINDOWS\system32\stclient.dll
2007-05-06 14:48:02 ----A---- C:\WINDOWS\system32\comsnap.dll
2007-05-06 14:48:02 ----A---- C:\WINDOWS\system32\comrepl.dll
2007-05-06 14:48:02 ----A---- C:\WINDOWS\system32\comaddin.dll
2007-05-06 14:47:56 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2007-05-06 14:47:54 ----A---- C:\WINDOWS\system32\sndrec32.exe
2007-05-06 14:47:54 ----A---- C:\WINDOWS\system32\mplay32.exe
2007-05-06 14:47:54 ----A---- C:\WINDOWS\system32\hypertrm.dll
2007-05-06 14:47:54 ----A---- C:\WINDOWS\system32\accwiz.exe
2007-05-06 14:47:53 ----D---- C:\Program Files\Windows NT
2007-05-06 14:47:53 ----A---- C:\WINDOWS\system32\mspaint.exe
2007-05-06 14:47:53 ----A---- C:\WINDOWS\system32\clipbrd.exe
2007-05-06 14:47:52 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2007-05-06 14:47:52 ----A---- C:\WINDOWS\system32\spider.exe
2007-05-06 14:47:52 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2007-05-06 14:47:52 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2007-05-06 14:47:52 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\sessmgr.exe
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\remotepg.dll
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\rdshost.exe
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\mstscax.dll
2007-05-06 14:47:51 ----A---- C:\WINDOWS\system32\mstsc.exe
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\termsrv.dll
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\rdpclip.exe
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\rdchost.dll
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\qprocess.exe
2007-05-06 14:47:50 ----A---- C:\WINDOWS\system32\icaapi.dll
2007-05-06 14:47:49 ----D---- C:\WINDOWS\system32\MsDtc
2007-05-06 14:47:49 ----A---- C:\WINDOWS\system32\mtxoci.dll
2007-05-06 14:47:49 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2007-05-06 14:47:49 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2007-05-06 14:47:49 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2007-05-06 14:47:48 ----A---- C:\WINDOWS\system32\xolehlp.dll
2007-05-06 14:47:48 ----A---- C:\WINDOWS\system32\msdtctm.dll
2007-05-06 14:47:48 ----A---- C:\WINDOWS\system32\msdtclog.dll
2007-05-06 14:47:48 ----A---- C:\WINDOWS\system32\msdtc.exe
2007-05-06 14:47:47 ----D---- C:\WINDOWS\system32\Com
2007-05-06 14:47:47 ----A---- C:\WINDOWS\system32\colbact.dll
2007-05-06 14:47:47 ----A---- C:\WINDOWS\system32\clbcatex.dll
2007-05-06 14:47:47 ----A---- C:\WINDOWS\system32\catsrvps.dll
2007-05-06 14:47:46 ----A---- C:\WINDOWS\system32\catsrvut.dll
2007-05-06 14:47:46 ----A---- C:\WINDOWS\system32\catsrv.dll
2007-05-06 14:47:45 ----A---- C:\WINDOWS\system32\comuid.dll
2007-05-06 14:47:45 ----A---- C:\WINDOWS\system32\comsvcs.dll
2007-05-06 14:47:45 ----A---- C:\WINDOWS\system32\clbcatq.dll
2007-05-06 14:47:38 ----A---- C:\WINDOWS\system32\servdeps.dll
2007-05-06 14:47:37 ----A---- C:\WINDOWS\system32\mmfutil.dll
2007-05-06 14:47:37 ----A---- C:\WINDOWS\system32\licwmi.dll
2007-05-06 14:47:37 ----A---- C:\WINDOWS\system32\cmprops.dll
2007-05-06 14:47:33 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2007-05-06 14:47:33 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2007-04-10 14:04:12 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2007-04-10 14:02:50 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2007-04-10 14:01:46 ----A---- C:\WINDOWS\system32\WgaTray.exe
2007-03-12 14:02:26 ----A---- C:\WINDOWS\system32\msjava.dll
2006-11-02 10:51:40 ----N---- C:\WINDOWS\system32\wpdshextres.dll
2006-10-24 12:30:20 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2006-10-24 12:30:06 ----N---- C:\WINDOWS\system32\WindowsCodecs.dll
2006-10-24 12:30:00 ----N---- C:\WINDOWS\system32\WMPhoto.dll
2006-10-24 12:29:50 ----N---- C:\WINDOWS\system32\WindowsCodecsExt.dll
2006-10-18 20:58:00 ----N---- C:\WINDOWS\system32\wdfmgr.exe
2006-10-18 20:58:00 ----N---- C:\WINDOWS\system32\uwdf.exe
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\wpdsp.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WPDShServiceObj.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WpdShext.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\wpdmtpus.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\wpdmtp.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\wpdconns.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\wpd_ci.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVXENCD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVSENCD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVSDECD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVENCOD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVDECOD.dll
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVADVE.DLL
2006-10-18 20:47:22 ----N---- C:\WINDOWS\system32\WMVADVD.dll
2006-10-18 20:47:22 ----A---- C:\WINDOWS\system32\SET764.tmp
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpsrcwp.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpps.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpmde.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpencen.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmpeffects.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmdrmsdk.dll
2006-10-18 20:47:20 ----N---- C:\WINDOWS\system32\wmdrmnet.dll
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\SET75D.tmp
2006-10-18 20:47:20 ----A---- C:\WINDOWS\system32\SET75C.tmp
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\wmdrmdev.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\wdfapi.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWMDRM.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceWiaCompat.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceTypes.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceClassExtension.dll
2006-10-18 20:47:18 ----N---- C:\WINDOWS\system32\PortableDeviceApi.dll
2006-10-18 20:47:18 ----A---- C:\WINDOWS\system32\SET758.tmp
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MPG4DECD.dll
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MP4SDECD.dll
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MP43DECD.dll
2006-10-18 20:47:14 ----N---- C:\WINDOWS\system32\MFPLAT.dll
2006-10-18 20:47:08 ----N---- C:\WINDOWS\system32\audiodev.dll
2006-10-18 19:00:46 ----N---- C:\WINDOWS\system32\drmupgds.exe
2006-10-18 19:00:14 ----N---- C:\WINDOWS\system32\wpdshextautoplay.exe
2006-10-18 19:00:00 ----N---- C:\WINDOWS\system32\drivers\wpdusb.sys
2006-10-02 14:28:42 ----N---- C:\WINDOWS\system32\msdelta.dll
2006-09-28 19:13:26 ----N---- C:\WINDOWS\system32\WUDFCoinstaller.dll
2006-09-28 18:00:34 ----N---- C:\WINDOWS\system32\drivers\WudfRd.sys
2006-09-28 17:56:38 ----N---- C:\WINDOWS\system32\WUDFx.dll
2006-09-28 17:56:38 ----N---- C:\WINDOWS\system32\WudfHost.exe
2006-09-28 17:56:16 ----N---- C:\WINDOWS\system32\WudfPlatform.dll
2006-09-28 17:56:14 ----N---- C:\WINDOWS\system32\WudfSvc.dll
2006-09-28 17:55:50 ----N---- C:\WINDOWS\system32\drivers\WudfPf.sys
2006-08-24 16:15:06 ----A---- C:\WINDOWS\system32\rgb9rast_2.dll
2006-06-29 14:58:52 ----A---- C:\WINDOWS\fonts\GlobalUserInterface.CompositeFont
2006-06-29 14:53:56 ----A---- C:\WINDOWS\fonts\GlobalSansSerif.CompositeFont
2006-04-18 15:39:28 ----A---- C:\WINDOWS\fonts\GlobalSerif.CompositeFont
2006-04-18 15:39:28 ----A---- C:\WINDOWS\fonts\GlobalMonospace.CompositeFont
2006-03-17 01:38:01 ----N---- C:\WINDOWS\system32\verclsid.exe
2006-03-06 09:41:02 ----A---- C:\WINDOWS\system32\AMV_DecDLL.dll
2006-02-28 12:41:34 ----A---- C:\WINDOWS\system32\dns-sd.exe
2006-02-28 12:41:22 ----A---- C:\WINDOWS\system32\dnssd.dll
2004-09-16 12:26:40 ----A---- C:\WINDOWS\system32\drivers\ADFUUD.SYS
2004-09-16 12:26:40 ----A---- C:\WINDOWS\ADFUUD.SYS
2004-08-17 16:49:22 ----A---- C:\WINDOWS\system32\wzcsvc.dll
2004-08-17 16:49:22 ----A---- C:\WINDOWS\system32\wzcsapi.dll
2004-08-17 16:49:16 ----A---- C:\WINDOWS\system32\pjlmon.dll
2004-08-17 16:49:16 ----A---- C:\WINDOWS\system32\pid.dll
2004-08-17 16:49:14 ----A---- C:\WINDOWS\system32\msyuv.dll
2004-08-17 16:49:10 ----A---- C:\WINDOWS\system32\iyuv_32.dll
2004-08-17 16:49:08 ----A---- C:\WINDOWS\system32\hid.dll
2004-08-17 16:49:06 ----A---- C:\WINDOWS\system32\dmutil.dll
2004-08-17 16:49:04 ----A---- C:\WINDOWS\system32\cnbjmon.dll
2004-08-17 16:45:30 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2004-08-17 16:44:38 ----A---- C:\WINDOWS\system32\drivers\crusoe.sys
2004-08-17 16:43:34 ----A---- C:\WINDOWS\system32\drivers\processr.sys
2004-08-17 16:43:28 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys
2004-08-17 16:43:28 ----A---- C:\WINDOWS\system32\drivers\amdk6.sys
2004-08-17 16:43:24 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys
2004-08-17 16:43:22 ----A---- C:\WINDOWS\system32\drivers\modem.sys
2004-08-17 16:43:10 ----A---- C:\WINDOWS\system32\drivers\parport.sys
2004-08-17 16:43:08 ----A---- C:\WINDOWS\system32\drivers\p3.sys
2004-08-17 15:51:20 ----A---- C:\WINDOWS\system32\netsetup.exe
2004-08-17 15:49:38 ----A---- C:\WINDOWS\system32\tsddd.dll
2004-08-17 15:49:38 ----A---- C:\WINDOWS\system32\rdpdd.dll
2004-08-17 15:49:36 ----A---- C:\WINDOWS\system32\drmclien.dll
2004-08-17 15:49:34 ----A---- C:\WINDOWS\system32\WMVCore.dll
2004-08-17 15:49:34 ----A---- C:\WINDOWS\system32\drmv2clt.dll
2004-08-17 15:49:32 ----A---- C:\WINDOWS\system32\msscp.dll
2004-08-17 15:49:32 ----A---- C:\WINDOWS\system32\msnetobj.dll
2004-08-17 15:49:30 ----A---- C:\WINDOWS\system32\xcopy.exe
2004-08-17 15:49:30 ----A---- C:\WINDOWS\system32\wscript.exe
2004-08-17 15:49:30 ----A---- C:\WINDOWS\system32\wscntfy.exe
2004-08-17 15:49:30 ----A---- C:\WINDOWS\system32\wpnpinst.exe
2004-08-17 15:49:30 ----A---- C:\WINDOWS\system32\wpabaln.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\winhlp32.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\winver.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\winlogon.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\wiaacmgr.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\wextract.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\vssvc.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\utilman.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\userinit.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\ups.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\upnpcont.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tracert.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tracerpt.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tourstart.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tlntsvr.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tlntsess.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\tlntadmn.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\telnet.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\taskmgr.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\sysocmgr.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\svchost.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\stimon.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\spoolsv.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\spnpinst.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\smss.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\smlogsvc.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\smbinst.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\skeys.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\sigverif.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\schtasks.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\shutdown.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\shrpubw.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\shmgrate.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\setup.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\sethc.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\services.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\secedit.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\sdbinst.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\scardsvr.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\savedump.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\runonce.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rundll32.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rtcshare.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rsnotify.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rsh.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rexec.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\regsvr32.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\reg.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rcp.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rcimlby.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\rasphone.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\proxycfg.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\proquota.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\progman.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\powercfg.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\ping.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\perfmon.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\packager.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\osk.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\openfiles.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\odbcconf.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\odbcad32.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\ntvdm.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\system32\ntbackup.exe
2004-08-17 15:49:28 ----A---- C:\WINDOWS\regedit.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\nslookup.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\notepad.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\netstat.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\netsh.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\netdde.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\net1.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\net.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\nddeapir.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\narrator.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\msiexec.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mshta.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mqtgsvc.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mqsvc.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mqbkup.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mobsync.exe
2004-08-17 15:49:26 ----A---- C:\WINDOWS\system32\mmc.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\makecab.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\magnify.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\lsass.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\logonui.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\logman.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\logagent.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\locator.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ipxroute.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ipv6.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ipconfig.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\imapi.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\iexpress.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\grpconv.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\gpresult.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ftp.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\fsquirt.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\fontview.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\findstr.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\extrac32.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\eventcreate.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\eudcedit.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dxdiag.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dwwin.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dvdupgrd.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dumprep.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dpvsetup.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dplaysvr.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dmremote.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dmadmin.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dllhost.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\diskpart.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\diantz.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dfrgntfs.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\dfrgfat.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\defrag.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ddeshare.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\ctfmon.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\csrss.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cscript.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\conime.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cmstp.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cmmon32.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cmdl32.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cmd.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\clipsrv.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cliconfg.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cleanmgr.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cisvc.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\cipher.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\system32\blastcln.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\hh.exe
2004-08-17 15:49:24 ----A---- C:\WINDOWS\explorer.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\zipfldr.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\xmlprovi.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\xmlprov.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\xactsrv.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wzcdlg.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wtsapi32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wstdecod.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wsock32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wsnmp32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wshtcpip.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\WshRm.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wship6.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wshext.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wshcon.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wshbth.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wsecedit.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wscsvc.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\ws2help.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\ws2_32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wow32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmvdmoe2.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmvdmod.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmstream.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\WMSPDMOE.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmspdmod.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmsdmoe2.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmsdmoe.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmsdmod.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpui.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpshell.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpdxm.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpcore.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpcd.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmpasf.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmp.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\WMNetmgr.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmidx.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmdmps.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmdmlog.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wmasf.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\WMADMOE.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\WMADMOD.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wlnotify.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wldap32.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wkssvc.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wintrust.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winsta.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winsrv.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winshfhc.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winscard.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winrnr.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winmm.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winipsec.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wininet.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\winhttp.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\win32spl.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wiavideo.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\wiashext.dll
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\autolfn.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\autochk.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\autofmt.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\autoconv.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\auditusr.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\atmadm.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\at.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\asr_pfu.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\asr_fmt.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\alg.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\ahui.exe
2004-08-17 15:49:22 ----A---- C:\WINDOWS\system32\actmovie.exe
2004-08-17 15:49:20 ----A---- C:\WINDOWS\twain_32.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\wiaservc.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\wiascr.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\wiadss.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\wiadefui.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\webvw.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\webcheck.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\webclnt.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\wdigest.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\w3ssl.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\w32time.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\vssapi.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\version.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\vdmredir.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\vdmdbg.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\vbscript.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\vbajet32.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\uxtheme.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\usp10.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\userenv.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\user32.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\usbmon.dll

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#3 Příspěvek od CATerPILAR »

2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\urlmon.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\url.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\upnpui.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\upnphost.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\upnp.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\untfs.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\uniplat.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\unimdmat.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\umpnpmgr.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\umandlg.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\ulib.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\udhisapi.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\txflog.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\twext.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\trkwks.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tlntsvrp.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\themeui.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\termmgr.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tcpmonui.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tcpmon.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tcpmib.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tapisrv.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tapi32.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\tapi3.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\t2embed.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\syssetup.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\syncui.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\synceng.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\sxs.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\strmfilt.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\strmdll.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\stobject.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\sti_ci.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\sti.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\ssdpsrv.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\ssdpapi.dll
2004-08-17 15:49:20 ----A---- C:\WINDOWS\system32\srvsvc.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sqlunirl.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sqlsrv32.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\spoolss.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\snmpsnap.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\snmpapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\smlogcfg.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\slbiop.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\slayerxp.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sigtab.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\schannel.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shsvcs.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shscrap.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shmedia.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shlwapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shimgvw.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shimeng.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shgina.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shfolder.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shell32.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\shdocvw.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sfcfiles.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sfc_os.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sfc.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\setupapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sensapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sens.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sendmail.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sendcmsg.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\security.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\secur32.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\seclogon.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sdhcinst.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\scrrun.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\scrobj.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sclgntfy.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\scesrv.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\scecli.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sccsccp.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\scarddlg.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sbeio.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\sbe.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\samsrv.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\samlib.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rtutils.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rtipxmib.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rsmps.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rshx32.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rpcss.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\riched20.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\resutils.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\regwizc.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\regsvc.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\regapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rcbdyctl.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rastls.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rastapi.dll
2004-08-17 15:49:18 ----A---- C:\WINDOWS\system32\rassapi.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasppp.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasmans.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasman.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\raschap.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasdlg.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasauto.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasapi32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\rasadhlp.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\query.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\quartz.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\qedit.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\qdvd.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\qdv.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\qcap.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\qasf.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pstorsvc.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pstorec.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\psbase.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\psapi.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\profmap.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\printui.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\powrprof.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\polstore.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pnrpnsp.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pngfilt.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\photowiz.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\perfproc.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\perfos.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\perfdisk.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\perfctrs.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pdh.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\pautoenr.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\p2psvc.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\p2pnetsh.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\p2pgraph.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\p2pgasvc.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\p2p.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\osuninst.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\opengl32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\olepro32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\oleprn.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\oleaut32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ole32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\offfilt.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odtext32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odpdx32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odfox32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odexl32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\oddbse32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbctrac.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbcjt32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbccu32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbccr32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbccp32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbcconf.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbcbcp.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbc32gt.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\odbc32.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\occache.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\objsel.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\oakley.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\nwwks.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\nwprovau.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntshrui.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntprint.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntmssvc.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntmsmgr.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntmsdba.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntmsapi.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntmarta.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntlsapi.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntlanman.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\ntdsapi.dll
2004-08-17 15:49:16 ----A---- C:\WINDOWS\system32\npptools.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\nlhtml.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\newdev.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netui1.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netui0.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netshell.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netrap.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netplwiz.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netman.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netlogon.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netid.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netcfgx.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\netapi32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\nddenb32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\nddeapi.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\ncobjapi.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mydocs.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mtxclu.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msxml3.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msxml2.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msxml.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msxbde40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mswstr10.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mswsock.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mswmdm.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mswdat10.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msw3prt.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvidctl.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvfw32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvcrt.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvcp60.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvcirt.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msvbvm60.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msv1_0.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msutb.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mstlsapi.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mstext40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mssap.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msrle32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msrepl40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msrd3x40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msrd2x40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msrating.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mspmsp.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mspmsnsv.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mspbde40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mspatcha.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msorcl32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msnsspc.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msltus40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\mslbui.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msjtes40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msjter40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msjint40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msjet40.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msisip.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\MSIMTF.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msimg32.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msihnd.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msieftp.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msidle.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msident.dll
2004-08-17 15:49:14 ----A---- C:\WINDOWS\system32\msi.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mshtmled.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mshtml.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msgsvc.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msgina.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msftedit.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msexch40.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msexcl40.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msdmo.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msdart.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msdadiag.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\MSCTFP.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\MSCTF.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mscpxl32.dLL
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mscms.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msasn1.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msapsspc.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\msacm32.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqutil.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqupgrd.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqtrig.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqsnap.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqsec.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqrtdep.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqrt.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqqm.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqoa.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqlogmgr.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqise.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqdscli.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mqad.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mprapi.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mpr.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\MPG4DMOD.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\MP4SDMOD.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\MP43DMOD.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\modemui.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mobsync.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mmcshext.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mmcndmgr.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mmcbase.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mlang.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\miglibnt.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\midimap.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mgmtapi.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mfcsubs.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mfc42u.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mfc42.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mf3216.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mdminst.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mciwave.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mciseq.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mciavi32.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\mcastmib.dll
2004-08-17 15:49:12 ----A---- C:\WINDOWS\system32\lsasrv.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\lprhelp.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\lpk.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\localui.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\localspl.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\localsec.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\loadperf.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\lmrt.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\lmhsvc.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\linkinfo.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\licmgr10.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\licdll.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\LAPRXY.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\keymgr.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\kernel32.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\kerberos.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\jsproxy.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\jscript.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ixsso.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iuengine.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\itss.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\itircl.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ir50_qcx.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ir50_qc.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ir50_32.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ir41_qcx.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ir41_qc.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ipv6mon.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ipsmsnap.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ipsecsvc.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ipsecsnp.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ippromon.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ipnathlp.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iphlpapi.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\inseng.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\input.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\initpki.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\inetppui.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\inetpp.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\inetmib1.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\imm32.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\imgutil.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\imeshare.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\imagehlp.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\igmpagnt.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ifmon.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iesetup.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iernonce.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iepeers.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ieencode.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ieaksie.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\ieakeng.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\idq.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\icm32.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iccvid.dll
2004-08-17 15:49:10 ----A---- C:\WINDOWS\system32\iasrad.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\htui.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\httpapi.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\hotplug.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\hnetwiz.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\hnetcfg.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\hhsetup.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\hccoin.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\h323msp.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\gptext.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\gpedit.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\glu32.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\gdi32.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\fwcfg.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\fontext.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\fldrclnr.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\filemgmt.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\feclient.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\fdeploy.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\faultrep.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\extmgr.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\expsrv.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\eventlog.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\esent.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\es.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\ersvc.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\encdec.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\encapi.dll
2004-08-17 15:49:08 ----A---- C:\WINDOWS\system32\els.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\efsadu.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dxtrans.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dxmasf.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dx8vb.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dx7vb.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\duser.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dswave.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsuiext.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dssec.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsquery.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsprop.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsound3d.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsound.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dskquota.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsdmoprp.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dsdmo.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\ds32gt.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\drprov.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\drmstor.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpwsockx.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpvvox.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpvoice.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpvacm.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpnhupnp.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpnet.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dpmodemx.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dplayx.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\docprop2.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dnsrslvr.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dnsapi.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmusic.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmsynth.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmstyle.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmserver.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmscript.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmloader.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmime.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmdskmgr.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmcompos.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dmband.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dinput8.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dinput.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\digest.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dhcpcsvc.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dgnet.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dfsshlex.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dfrgui.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dfrgsnap.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\devmgr.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\devenum.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\ddrawex.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\ddraw.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dciman32.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dbnmpntw.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dbnetlib.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dbmsrpcn.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dbghelp.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\davclnt.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\dataclen.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\danim.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\d3dim700.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\d3d9.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\d3d8.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\csrsrv.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\cscui.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\cscdll.dll
2004-08-17 15:49:06 ----A---- C:\WINDOWS\system32\cryptui.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cryptsvc.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cryptnet.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cryptext.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cryptdll.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cryptdlg.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\credui.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\corpol.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\comres.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\compstui.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\compatUI.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\comdlg32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\comctl32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cmutil.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cmsetACL.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cmdial32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cmcfg32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\clusapi.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cliconfg.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\ciodm.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cewmdm.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\certmgr.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\certcli.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cdosys.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cdm.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cdfview.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\camocx.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cabview.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\cabinet.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\btpanui.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\bthserv.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\bthci.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\browsewm.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\browseui.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\browser.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\blackbox.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\bidispl.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\batmeter.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\basesrv.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\avifil32.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\authz.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\audiosrv.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\atmlib.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\atl.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\asycfilt.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\appmgr.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\appmgmts.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\apphelp.dll
2004-08-17 15:49:04 ----A---- C:\WINDOWS\system32\amstream.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\alrsvc.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\advpack.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\advapi32.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\adsnt.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\adsmsext.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\adsldpc.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\adsldp.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\admparse.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\actxprxy.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\activeds.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\aclui.dll
2004-08-17 15:49:02 ----A---- C:\WINDOWS\system32\6to4svc.dll
2004-08-17 15:48:58 ----A---- C:\WINDOWS\system32\ntdll.dll
2004-08-17 15:48:56 ----A---- C:\WINDOWS\system32\wmploc.dll
2004-08-17 15:48:54 ----A---- C:\WINDOWS\system32\wmi.dll
2004-08-17 15:48:54 ----A---- C:\WINDOWS\system32\wmerror.dll
2004-08-17 15:48:54 ----A---- C:\WINDOWS\system32\winntbbu.dll
2004-08-17 15:48:54 ----A---- C:\WINDOWS\system32\winbrand.dll
2004-08-17 15:48:44 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2004-08-17 15:48:44 ----A---- C:\WINDOWS\system32\xpsp1res.dll
2004-08-17 15:48:40 ----A---- C:\WINDOWS\system32\shdoclc.dll
2004-08-17 15:48:40 ----A---- C:\WINDOWS\system32\dpcdll.dll
2004-08-17 15:48:38 ----A---- C:\WINDOWS\system32\qedwipes.dll
2004-08-17 15:48:36 ----A---- C:\WINDOWS\system32\xpob2res.dll
2004-08-17 15:48:36 ----A---- C:\WINDOWS\system32\odbcp32r.dll
2004-08-17 15:48:36 ----A---- C:\WINDOWS\system32\odbcji32.dll
2004-08-17 15:48:36 ----A---- C:\WINDOWS\system32\odbcint.dll
2004-08-17 15:48:32 ----A---- C:\WINDOWS\system32\msprivs.dll
2004-08-17 15:48:32 ----A---- C:\WINDOWS\system32\msorc32r.dll
2004-08-17 15:48:30 ----A---- C:\WINDOWS\system32\msimsg.dll
2004-08-17 15:48:24 ----A---- C:\WINDOWS\system32\mshtmler.dll
2004-08-17 15:48:22 ----A---- C:\WINDOWS\system32\msdxmlc.dll
2004-08-17 15:48:22 ----A---- C:\WINDOWS\system32\mscpx32r.dLL
2004-08-17 15:48:22 ----A---- C:\WINDOWS\system32\msafd.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\moricons.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdukx.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdsmsno.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdsmsfi.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdno1.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdmlt48.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdmlt47.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdmaori.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdinmal.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdinben.dll
2004-08-17 15:48:20 ----A---- C:\WINDOWS\system32\kbdinbe1.dll
2004-08-17 15:48:18 ----A---- C:\WINDOWS\system32\kbdfi1.dll
2004-08-17 15:48:16 ----A---- C:\WINDOWS\system32\icmp.dll
2004-08-17 15:48:16 ----A---- C:\WINDOWS\system32\gpkrsrc.dll
2004-08-17 15:48:16 ----A---- C:\WINDOWS\system32\framebuf.dll
2004-08-17 15:48:12 ----A---- C:\WINDOWS\system32\pidgen.dll
2004-08-17 15:48:12 ----A---- C:\WINDOWS\system32\dsprpres.dll
2004-08-17 15:48:10 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2004-08-17 15:48:10 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2004-08-17 15:48:08 ----A---- C:\WINDOWS\system32\cfgmgr32.dll
2004-08-17 15:48:06 ----A---- C:\WINDOWS\system32\browselc.dll
2004-08-17 15:48:06 ----A---- C:\WINDOWS\system32\atmfd.dll
2004-08-17 15:48:06 ----A---- C:\WINDOWS\system32\asferror.dll
2004-08-17 15:45:38 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2004-08-17 15:45:06 ----A---- C:\WINDOWS\system32\drivers\dmio.sys
2004-08-17 15:45:04 ----A---- C:\WINDOWS\system32\drivers\dmboot.sys
2004-08-17 15:45:00 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys
2004-08-17 15:44:44 ----A---- C:\WINDOWS\system32\win32k.sys
2004-08-17 15:44:38 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys
2004-08-17 15:44:22 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys
2004-08-17 15:44:16 ----A---- C:\WINDOWS\system32\drivers\serial.sys
2004-08-17 15:44:12 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys
2004-08-17 15:43:22 ----A---- C:\WINDOWS\system32\mmsystem.dll
2004-08-17 15:43:14 ----A---- C:\WINDOWS\system32\drivers\pcmcia.sys
2004-08-17 15:43:12 ----A---- C:\WINDOWS\system32\drivers\pci.sys
2004-08-17 15:43:12 ----A---- C:\WINDOWS\system32\drivers\acpi.sys
2004-08-04 00:15:22 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2004-08-04 00:09:56 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys
2004-08-04 00:08:58 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys
2004-08-04 00:08:04 ----A---- C:\WINDOWS\system32\drivers\stream.sys
2004-08-04 00:07:48 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys
2004-08-04 00:07:46 ----A---- C:\WINDOWS\system32\drivers\mf.sys
2004-08-04 00:03:18 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys
2004-08-04 00:03:14 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys
2004-08-03 23:58:42 ----A---- C:\WINDOWS\system32\drivers\swenum.sys
2004-08-03 23:58:30 ----A---- C:\WINDOWS\system32\drivers\nic1394.sys
2004-08-03 23:58:30 ----A---- C:\WINDOWS\system32\drivers\arp1394.sys
2004-08-03 23:20:08 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys
2004-08-03 23:15:22 ----A---- C:\WINDOWS\system32\drivers\mup.sys
2004-08-03 23:15:18 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys
2004-08-03 23:15:10 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2004-08-03 23:14:46 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2004-08-03 23:14:42 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2004-08-03 23:14:38 ----A---- C:\WINDOWS\system32\drivers\netbt.sys
2004-08-03 23:14:32 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys
2004-08-03 23:14:30 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2004-08-03 23:14:30 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys
2004-08-03 23:14:28 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys
2004-08-03 23:14:28 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys
2004-08-03 23:14:24 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys
2004-08-03 23:14:18 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys
2004-08-03 23:14:16 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2004-08-03 23:14:12 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys
2004-08-03 23:08:44 ----A---- C:\WINDOWS\system32\drivers\usbport.sys
2004-08-03 23:08:44 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys
2004-08-03 23:08:38 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys
2004-08-03 23:08:38 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys
2004-08-03 23:08:20 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys
2004-08-03 23:08:18 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys
2004-08-03 23:07:50 ----A---- C:\WINDOWS\system32\drivers\tdi.sys
2004-08-03 23:07:48 ----A---- C:\WINDOWS\system32\drivers\sdbus.sys
2004-08-03 23:07:46 ----A---- C:\WINDOWS\system32\drivers\tcpip6.sys
2004-08-03 23:07:34 ----A---- C:\WINDOWS\system32\watchdog.sys
2004-08-03 23:07:08 ----A---- C:\WINDOWS\system32\drivers\vga.sys
2004-08-03 23:07:06 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys
2004-08-03 23:05:08 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys
2004-08-03 23:05:04 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys
2004-08-03 23:04:58 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys
2004-08-03 23:04:52 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys
2004-08-03 23:04:46 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys
2004-08-03 23:04:34 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys
2004-08-03 23:04:32 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys
2004-08-03 23:04:20 ----A---- C:\WINDOWS\system32\drivers\psched.sys
2004-08-03 23:04:14 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys
2004-08-03 23:03:36 ----A---- C:\WINDOWS\system32\drivers\nwlnkipx.sys
2004-08-03 23:03:22 ----A---- C:\WINDOWS\system32\drivers\netbios.sys
2004-08-03 23:02:24 ----A---- C:\WINDOWS\system32\drivers\nwrdr.sys
2004-08-03 23:00:58 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys
2004-08-03 23:00:56 ----A---- C:\WINDOWS\system32\drivers\dxg.sys
2004-08-03 23:00:44 ----A---- C:\WINDOWS\system32\drivers\npfs.sys
2004-08-03 23:00:42 ----A---- C:\WINDOWS\system32\drivers\msfs.sys
2004-08-03 23:00:32 ----A---- C:\WINDOWS\system32\drivers\udfs.sys
2004-08-03 23:00:16 ----A---- C:\WINDOWS\system32\drivers\imapi.sys
2004-08-03 23:00:14 ----A---- C:\WINDOWS\system32\drivers\http.sys
2004-08-03 23:00:08 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys
2004-08-03 23:00:00 ----A---- C:\WINDOWS\system32\drivers\tape.sys
2004-08-03 22:59:58 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2004-08-03 22:59:56 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys
2004-08-03 22:59:56 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys
2004-08-03 22:59:56 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys
2004-08-03 22:59:56 ----A---- C:\WINDOWS\system32\drivers\disk.sys
2004-08-03 22:59:54 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys
2004-08-03 22:59:54 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys
2004-08-03 22:59:52 ----A---- C:\WINDOWS\system32\drivers\nmnt.sys
2004-08-03 22:59:48 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys
2004-08-03 22:59:44 ----A---- C:\WINDOWS\system32\drivers\viaide.sys
2004-08-03 22:59:44 ----A---- C:\WINDOWS\system32\drivers\atapi.sys
2004-08-03 22:59:42 ----A---- C:\WINDOWS\system32\drivers\scsiport.sys
2004-08-03 22:59:42 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys
2004-08-03 22:59:36 ----A---- C:\WINDOWS\system32\spiisupd.exe
2004-08-03 22:59:28 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys
2004-08-03 22:59:28 ----A---- C:\WINDOWS\system32\drivers\fdc.sys
2004-08-03 22:59:24 ----A---- C:\WINDOWS\system32\kd1394.dll
2004-08-03 22:59:10 ----A---- C:\WINDOWS\system32\hal.dll
2004-08-03 22:59:08 ----A---- C:\WINDOWS\system32\drivers\serenum.sys
2004-08-03 22:58:36 ----A---- C:\WINDOWS\system32\drivers\atmlane.sys
2004-08-03 22:58:34 ----A---- C:\WINDOWS\system32\drivers\update.sys
2004-08-03 22:58:32 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys
2004-08-03 22:58:32 ----A---- C:\WINDOWS\system32\drivers\atmarpc.sys
2004-08-03 22:58:26 ----A---- C:\WINDOWS\system32\msvcrt40.dll
2004-08-03 22:58:22 ----A---- C:\WINDOWS\system32\drivers\mqac.sys
2004-08-03 22:51:26 ----A---- C:\WINDOWS\system32\dosx.exe
2004-08-03 22:51:20 ----A---- C:\WINDOWS\system32\winnls.dll
2004-08-03 22:49:46 ----A---- C:\WINDOWS\system32\krnl386.exe
2004-08-03 22:48:46 ----A---- C:\WINDOWS\system32\redir.exe
2004-08-03 22:46:56 ----A---- C:\WINDOWS\system32\keyboard.sys
2004-08-03 22:45:20 ----A---- C:\WINDOWS\system32\ntio.sys
2004-08-03 22:45:16 ----A---- C:\WINDOWS\system32\ntio412.sys
2004-08-03 22:45:16 ----A---- C:\WINDOWS\system32\ntio404.sys
2004-08-03 22:45:14 ----A---- C:\WINDOWS\system32\ntio804.sys
2004-08-03 22:45:12 ----A---- C:\WINDOWS\system32\ntio411.sys
2004-08-03 22:38:34 ----RASH---- C:\NTDETECT.COM
2004-08-03 22:31:44 ----A---- C:\WINDOWS\system32\slbcsp.dll
2004-08-03 22:31:44 ----A---- C:\WINDOWS\system32\sccbase.dll
2004-08-03 22:31:44 ----A---- C:\WINDOWS\system32\rsaenh.dll
2004-08-03 22:31:44 ----A---- C:\WINDOWS\system32\gpkcsp.dll
2004-08-03 22:31:44 ----A---- C:\WINDOWS\system32\dssenh.dll
2004-07-17 11:46:14 ----A---- C:\WINDOWS\system32\tcpmon.ini
2004-07-17 11:41:10 ----A---- C:\WINDOWS\system32\login.cmd
2004-07-17 11:39:00 ----A---- C:\WINDOWS\system32\xenroll.dll
2004-07-17 11:36:44 ----A---- C:\WINDOWS\system32\odbc16gt.dll
2004-07-17 11:36:44 ----A---- C:\WINDOWS\system32\ds16gt.dLL
2004-07-17 11:36:38 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys
2004-07-17 11:34:48 ----A---- C:\WINDOWS\system32\msjetoledb40.dll
2004-03-04 16:18:08 ----A---- C:\WINDOWS\system32\hpzsnt10.dll
2004-03-04 16:05:56 ----A---- C:\WINDOWS\system32\hpzcon10.dll
2004-03-04 16:04:54 ----A---- C:\WINDOWS\system32\hpzcoi10.dll
2003-11-11 15:05:00 ----A---- C:\WINDOWS\system32\divx.dll
2003-08-03 17:56:16 ----A---- C:\WINDOWS\system32\FM20.DLL
2003-07-29 17:40:18 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2003-07-16 12:09:32 ----A---- C:\WINDOWS\system32\xvid.dll
2003-07-15 05:57:04 ----A---- C:\WINDOWS\system32\FM20ENU.DLL
2003-04-22 09:11:18 ----A---- C:\WINDOWS\system32\divxc32f.dll
2003-04-21 12:32:40 ----A---- C:\WINDOWS\system32\divxc32.dll
2002-12-31 22:50:46 ----D---- C:\rsit
2002-12-31 22:50:46 ----D---- C:\Program Files\trend micro
2002-12-31 21:25:53 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
2002-12-31 21:25:53 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2002-12-31 21:22:06 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
2002-12-31 21:19:29 ----SHD---- C:\WINDOWS\CSC
2002-12-31 21:08:22 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2002-12-31 21:08:22 ----ASH---- C:\Documents and Settings\Administrator\Data aplikací\desktop.ini

======List of files/folders modified in the last 1 months======

2009-11-27 17:40:13 ----A---- C:\WINDOWS\system32\tsbyuv.dll
2009-11-27 17:40:13 ----A---- C:\WINDOWS\system32\msvidc32.dll
2009-10-15 18:22:45 ----A---- C:\WINDOWS\system32\fontsub.dll
2009-02-06 17:54:36 ----A---- C:\WINDOWS\system32\sc.exe
2008-07-21 20:45:20 ----A---- C:\WINDOWS\system.ini
2008-06-02 19:41:00 ----A---- C:\WINDOWS\win.ini
2007-05-06 14:52:24 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2006-11-01 20:19:08 ----A---- C:\WINDOWS\system32\mfc40u.dll
2006-10-16 17:16:07 ----A---- C:\WINDOWS\system32\oledlg.dll
2006-10-13 13:41:01 ----A---- C:\WINDOWS\system32\nwapi32.dll
2006-07-21 09:28:17 ----A---- C:\WINDOWS\system32\hlink.dll
2006-06-01 19:49:39 ----A---- C:\WINDOWS\system32\jgpl400.dll
2006-06-01 19:49:39 ----A---- C:\WINDOWS\system32\jgdw400.dll
2005-07-26 05:42:51 ----A---- C:\WINDOWS\system32\olecnv32.dll
2005-07-26 05:42:51 ----A---- C:\WINDOWS\system32\olecli32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2006-08-25 36528]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-02-21 717296]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2004-08-04 44672]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2007-10-11 223128]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
S1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2007-05-06 15424]
S1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
S2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2007-05-06 512096]
S3 acmmcmvc;acmmcmvc; C:\WINDOWS\system32\drivers\acmmcmvc.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-01-25 4027456]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2005-12-27 247040]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-31 233472]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-06-03 153376]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728]
S2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-05-06 552064]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2008-05-02 606720]
S2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-20 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2008-06-02 68096]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#4 Příspěvek od motji »

Dobrý večer :)

:!: Zazálohujte si důležitá data, pro jistotu :)

:arrow: Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe

-souhlaste s instalací konzole pro zotavení

- ComboFix je třeba spustit pod účtem s právy administrátora

- Před použitím vypněte všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary

- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího se okna :!:

- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah sem
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#5 Příspěvek od CATerPILAR »

ComboFix 10-08-16.04 - Administrator 01.01.2003 17:02:45.1.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.446.286 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\install\Antispyware\Ad-aware\Desktop_.ini
c:\install\Antispyware\Desktop_.ini
c:\install\Antispyware\SpyBot\Desktop_.ini
c:\install\Antispyware\Terminator\Desktop_.ini
c:\install\Antivir\Avast\Desktop_.ini
c:\install\Antivir\Desktop_.ini
c:\install\Antivir\nod-last\Desktop_.ini
c:\install\Audio\AudioGrabber\AG 1.83\Desktop_.ini
c:\install\Audio\AudioGrabber\Desktop_.ini
c:\install\Audio\Desktop_.ini
c:\install\Audio\Lame\Desktop_.ini
c:\install\Audio\WinAmp\Desktop_.ini
c:\install\Browser&Mail\Desktop_.ini
c:\install\Burning\Desktop_.ini
c:\install\Burning\DVDShrink\Desktop_.ini
c:\install\Burning\Nero_6_6_0_8\Desktop_.ini
c:\install\Communication\Desktop_.ini
c:\install\Filemanager\Desktop_.ini
c:\install\Graphics\Desktop_.ini
c:\install\Video\BSPlayer\Desktop_.ini
c:\install\Video\Codecs\Desktop_.ini
c:\install\Video\Desktop_.ini
c:\install\Video\DVDShrink\Desktop_.ini
c:\install\Video\MV2 Player 0.7\Desktop_.ini
c:\windows\clofghls.dll
c:\windows\system\WINSPOOL.DRV
c:\windows\system32\ieuinit.inf

c:\windows\system32\msgsvc.dll . . . je infikován!!

.
((((((((((((((((((((((((( Soubory vytvořené od 2002-12-01 do 2003-01-01 )))))))))))))))))))))))))))))))
.

2010-08-08 17:08 . 2001-10-24 09:52 3328 ----a-w- c:\windows\system32\drivers\pciide.sys
2010-07-12 10:20 . 2010-07-12 10:20 -------- d-----w- c:\windows\Sun
2010-06-03 12:59 . 2010-06-03 12:59 -------- d-----w- c:\program files\Common Files\Java
2010-06-03 12:59 . 2010-06-03 12:58 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-06-03 12:58 . 2010-06-03 12:58 -------- d-----w- c:\program files\Java
2010-05-10 16:25 . 2007-05-02 14:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-05-10 16:24 . 2007-09-17 13:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-05-10 16:24 . 2009-03-20 08:01 14976 ----a-w- c:\windows\system32\drivers\ss_bmdfl.sys
2010-05-10 16:24 . 2009-03-20 08:01 121856 ----a-w- c:\windows\system32\drivers\ss_bmdm.sys
2010-05-10 16:21 . 2010-05-10 16:25 -------- d-----w- c:\program files\Samsung
2010-05-03 14:33 . 2010-05-03 14:33 -------- d-----w- c:\program files\Pythagoras s.r.o
2010-04-29 15:06 . 2001-09-12 00:21 98304 ----a-w- c:\windows\system32\tsccvid.dll
2010-03-30 22:16 . 2010-03-30 22:16 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-03-30 22:10 . 2010-03-30 22:10 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-03-08 13:25 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2009-12-15 13:19 . 2009-12-15 13:19 -------- d-----w- c:\windows\system32\XPSViewer
2009-12-15 13:19 . 2009-12-15 13:19 -------- d-----w- c:\program files\MSBuild
2009-12-15 13:18 . 2009-12-15 13:18 -------- d-----w- c:\program files\Reference Assemblies
2009-12-15 13:18 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2009-12-15 13:18 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-12-15 13:18 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-12-15 13:18 . 2009-12-15 13:18 -------- d-----w- C:\5523486a70395775fa8031e6249a
2009-12-15 13:18 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-12-15 13:18 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-12-15 13:18 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-12-15 13:18 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-12-15 13:18 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-12-15 13:18 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2009-12-15 13:05 . 2009-12-15 13:05 -------- d-----w- c:\program files\MSXML 6.0
2009-12-14 19:52 . 2009-12-14 19:52 -------- d-----w- C:\21f58cd03e7c6ed7bf8f
2009-12-14 19:52 . 2009-12-14 19:52 -------- d-----w- C:\8b8018267b409a90770b7429
2009-12-14 17:04 . 2009-12-14 17:04 -------- d-----w- C:\f4c3e2e8b337cc5e3ba0762ffa
2009-12-14 17:04 . 2009-12-14 17:04 -------- d-----w- C:\85c432a4e19cb450749a1aa929ce
2009-12-14 14:08 . 2009-12-14 14:08 -------- d-----w- C:\3227d3557d8804719b1f91
2009-12-14 14:08 . 2009-12-14 14:08 -------- d-----w- C:\c06d41e3b78c849b66
2009-12-11 18:57 . 2009-12-11 18:57 -------- d-----w- c:\windows\system32\KB905474
2009-12-10 13:23 . 2009-12-10 13:23 -------- d-----w- c:\windows\ServicePackFiles
2009-11-27 17:35 . 2009-11-27 17:35 17920 -c----w- c:\windows\system32\dllcache\msyuv.dll
2009-11-27 16:40 . 2009-11-27 16:40 8704 -c----w- c:\windows\system32\dllcache\tsbyuv.dll
2009-11-27 16:40 . 2009-11-27 16:40 48128 -c----w- c:\windows\system32\dllcache\iyuv_32.dll
2009-11-23 15:47 . 2009-11-23 15:48 -------- d-----w- C:\suntemp
2009-11-06 23:07 . 2009-11-06 23:07 49488 ----a-w- c:\windows\system32\netfxperf.dll
2009-11-06 23:07 . 2009-11-06 23:07 297808 ----a-w- c:\windows\system32\mscoree.dll
2009-11-06 23:06 . 2009-11-06 23:06 1130824 ----a-w- c:\windows\system32\dfshim.dll
2009-08-19 16:07 . 2009-08-19 16:07 1415000 ----a-w- c:\windows\system32\msxml6.dll
2009-07-20 23:05 . 2009-07-20 23:05 1348432 ----a-w- c:\windows\system32\msxml4.dll
2009-02-22 07:27 . 2009-02-22 07:28 -------- d-----w- c:\program files\Vietcong
2009-02-21 20:10 . 2009-02-21 20:10 -------- d-----w- c:\program files\Conduit
2009-02-21 20:09 . 2010-06-14 17:03 -------- d-----w- c:\program files\free-downloads.net
2009-02-21 20:08 . 2009-02-21 20:08 -------- d-----w- c:\program files\Alcohol Soft
2009-01-31 11:36 . 2009-01-31 11:36 407129 ----a-w- c:\windows\MarioForever_Toolbar_Uninstaller_5812.exe
2009-01-31 11:35 . 2009-01-31 11:35 407129 ----a-w- c:\windows\MarioForever_Toolbar_Uninstaller_8984.exe
2009-01-31 11:34 . 2009-01-31 11:35 -------- d-----w- c:\program files\Mario Forever
2009-01-21 15:42 . 2009-01-21 15:42 -------- d-----w- c:\windows\Downloaded Installations
2009-01-20 19:05 . 2009-01-20 19:05 -------- d-----w- c:\program files\Bonjour
2009-01-20 18:52 . 2009-01-20 18:52 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2009-01-16 18:28 . 2009-01-16 18:28 -------- d-----w- c:\program files\DivX
2009-01-15 15:38 . 2009-01-15 15:38 -------- d-----w- c:\documents and settings\Uzivatel\Data aplikacÝ
2009-01-15 15:37 . 2009-01-15 15:38 -------- d-----w- c:\documents and settings\Uzivatel\Bit Che
2009-01-07 16:33 . 2009-01-07 16:33 -------- d-----w- c:\program files\RegCure
2008-12-19 18:45 . 2010-01-04 09:38 -------- d-----w- c:\program files\ICQ6.5
2008-12-10 18:22 . 2008-12-19 19:36 -------- d-----w- c:\program files\ICQ6Toolbar
2008-11-20 18:52 . 1998-09-02 08:28 38160 ----a-w- c:\windows\system32\LMRTREND.dll
2008-11-20 18:52 . 1998-08-27 04:51 182032 ----a-w- c:\windows\system32\dxtmsft3.dll
2008-11-20 18:52 . 1998-09-02 08:28 63488 ----a-w- c:\windows\system32\unam4ie.exe
2008-11-20 18:52 . 1998-09-02 08:02 194320 ----a-w- c:\windows\system32\qcut.dll
2008-11-20 18:52 . 1998-08-17 09:21 10240 ----a-w- c:\windows\system32\vidx16.dll
2008-11-20 18:52 . 1998-08-17 09:21 11776 ----a-w- c:\windows\system32\mciqtz.drv
2008-11-20 18:52 . 2008-11-20 18:52 4608 ----a-w- c:\windows\system32\w95inf32.dll
2008-11-20 18:52 . 2008-11-20 18:52 2272 ----a-w- c:\windows\system32\w95inf16.dll
2008-11-20 18:51 . 2008-11-20 18:51 -------- d-----w- c:\program files\Fox
2008-11-20 18:38 . 2008-11-20 18:49 63 ------r- C:\RAYMAN.BAT
2008-11-20 18:38 . 2008-11-20 18:49 -------- d-----w- C:\RAYMAN
2008-11-06 16:37 . 2008-11-06 16:37 1585664 ----a-w- c:\windows\system32\VC80CRTRedist.msi
2008-11-06 16:35 . 2008-11-06 16:35 200704 ----a-w- c:\windows\system32\ssldivx.dll
2008-11-06 16:35 . 2008-11-06 16:35 1044480 ----a-w- c:\windows\system32\libdivx.dll
2008-11-03 15:30 . 2008-11-03 15:30 -------- d-----w- c:\program files\Rockstar Games
2008-11-03 15:29 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2008-11-03 15:28 . 2008-11-03 15:29 -------- d-----w- c:\temp\GTAINSTALLER
2008-10-30 18:15 . 2008-10-30 18:15 -------- d-----w- c:\program files\Sega
2008-10-15 16:39 . 2008-10-15 16:39 -------- d-----w- c:\program files\Common Files\Vbox
2008-09-27 17:05 . 2008-09-27 17:05 -------- d-----w- c:\program files\uTorrent
2008-09-24 15:31 . 2008-09-24 15:31 -------- d-----w- c:\program files\ABC Transdict
2008-09-10 13:08 . 2008-09-10 13:08 -------- d-----w- c:\program files\EDDICA
2008-09-09 06:26 . 2009-12-11 22:30 -------- d-----w- c:\windows\system32\CatRoot_bak
2008-09-04 17:38 . 2008-09-04 17:38 -------- d-----w- c:\windows\Cache
2008-09-02 18:19 . 2008-09-02 18:19 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2008-09-02 18:17 . 2008-09-02 18:17 -------- d-----w- c:\program files\Skype
2008-09-02 18:17 . 2008-09-02 18:17 -------- d-----w- c:\program files\Common Files\Skype
2008-08-15 09:01 . 2008-11-30 18:05 -------- d-----w- c:\program files\ICQToolbar
2008-08-15 08:56 . 2008-12-10 18:19 -------- d-----w- c:\program files\ICQ6
2008-07-29 20:10 . 2008-07-29 20:10 73720 ----a-w- c:\windows\system32\dxva2.dll
2008-07-29 20:10 . 2008-07-29 20:10 493048 ----a-w- c:\windows\system32\evr.dll
2008-07-29 20:10 . 2008-07-29 20:10 26112 ----a-w- c:\windows\system32\TsWpfWrp.exe
2008-07-29 18:59 . 2008-07-29 18:59 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2008-07-29 18:59 . 2008-07-29 18:59 161296 ----a-w- c:\windows\system32\UIAutomationCore.dll
2008-07-29 18:59 . 2008-07-29 18:59 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2008-07-29 18:24 . 2008-07-29 18:24 97800 ----a-w- c:\windows\system32\infocardapi.dll
2008-07-29 18:24 . 2008-07-29 18:24 622080 ----a-w- c:\windows\system32\icardagt.exe
2008-07-29 18:24 . 2008-07-29 18:24 11264 ----a-w- c:\windows\system32\icardres.dll
2008-07-25 10:16 . 2008-07-25 10:16 83968 ----a-w- c:\windows\system32\mscories.dll
2008-07-25 10:16 . 2008-07-25 10:16 158720 ----a-w- c:\windows\system32\mscorier.dll
2008-07-24 08:15 . 2008-07-24 08:15 -------- d-----w- c:\program files\QIP Infium
2008-07-21 19:32 . 2008-07-21 19:32 -------- d-----w- c:\program files\VisualConnection
2008-06-24 10:17 . 2008-06-24 10:17 -------- d-----w- c:\program files\Karaoke Island
2008-06-13 11:52 . 2008-06-13 11:52 -------- d-----w- c:\program files\VideoLAN
2008-06-11 13:07 . 2008-06-14 18:00 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2008-06-11 13:07 . 2008-06-14 18:00 272128 ------w- c:\windows\system32\drivers\bthport.sys
2008-06-10 08:35 . 2009-03-27 11:09 -------- d-----w- c:\program files\TubeTilla
2008-06-02 18:39 . 2008-06-02 18:41 -------- d-----w- c:\program files\Abracadabra
2008-06-02 18:15 . 2002-01-05 05:48 974848 ------w- c:\windows\system32\mfc70.dll
2008-06-02 18:15 . 2002-01-05 05:10 57344 ------w- c:\windows\system32\mfc70enu.dll
2008-06-02 18:15 . 2002-01-05 04:37 344064 ------w- c:\windows\system32\msvcr70.dll
2008-06-02 18:15 . 2008-06-02 18:15 -------- d-----w- c:\program files\Common Files\Macromedia Shared
2008-06-02 18:15 . 2009-01-21 15:49 -------- d-----w- c:\program files\Common Files\Macromedia
2008-06-02 18:15 . 2009-01-21 15:45 -------- d-----w- c:\program files\Macromedia
2008-04-19 09:24 . 2008-04-19 09:24 -------- d-----w- c:\program files\Windows Media Connect 2
2008-04-19 09:22 . 2010-05-10 16:31 -------- d-----w- c:\windows\system32\drivers\UMDF
2008-04-19 09:22 . 2008-04-19 09:22 -------- d-----w- c:\windows\system32\LogFiles
2008-04-14 03:22 . 2008-04-14 03:22 7680 ----a-w- c:\windows\system32\spdwnwxp.exe
2008-04-13 09:58 . 2008-04-13 09:58 -------- d-----w- c:\program files\MP3 Player Utilities 4.09
2008-03-29 13:16 . 2009-01-20 19:03 -------- d-----w- c:\program files\Common Files\Adobe
2008-03-29 13:16 . 2008-03-29 17:23 -------- d-----w- c:\windows\SxsCaPendDel
2008-03-26 15:22 . 2008-03-26 15:22 -------- d--h--w- c:\windows\PIF
2008-03-13 08:40 . 2008-03-13 08:41 -------- d-----w- C:\Chcete být milionářem LT

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-02 06:23 . 2007-05-06 14:14 -------- d-----w- c:\program files\Spyware Terminator
2010-06-14 14:30 . 2007-05-06 13:49 743936 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-05-10 16:27 . 2007-05-06 14:05 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-10 16:24 . 2010-05-10 16:23 -------- d-----w- c:\program files\DIFX
2010-05-10 16:24 . 2010-05-10 16:22 -------- d-----w- c:\program files\PC Connectivity Solution
2010-05-10 16:22 . 2010-05-10 16:22 -------- d-----w- c:\program files\MarkAny
2010-05-02 08:27 . 2004-08-17 14:44 1850880 ----a-w- c:\windows\system32\win32k.sys
2010-04-20 05:48 . 2004-08-17 14:48 285696 ----a-w- c:\windows\system32\atmfd.dll
2010-04-16 15:38 . 2004-08-17 14:49 663040 ----a-w- c:\windows\system32\wininet.dll
2010-04-16 15:38 . 2004-08-17 14:49 81920 ----a-w- c:\windows\system32\ieencode.dll
2010-03-10 08:07 . 2004-08-17 14:49 417792 ----a-w- c:\windows\system32\vbscript.dll
2010-03-05 14:57 . 2004-08-17 14:49 65536 ----a-w- c:\windows\system32\asycfilt.dll
2010-02-24 12:31 . 2004-08-03 22:15 454016 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-16 19:34 . 2004-08-17 15:45 2060544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-16 19:34 . 2004-08-17 14:45 2183552 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-12 04:47 . 2004-08-17 14:49 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:01 . 2004-08-03 22:07 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2010-02-05 18:40 . 2004-08-17 14:49 1293824 ----a-w- c:\windows\system32\quartz.dll
2010-01-29 15:07 . 2007-05-06 13:49 683520 ----a-w- c:\windows\system32\inetcomm.dll
2010-01-13 14:10 . 2004-08-17 14:49 85504 ----a-w- c:\windows\system32\cabview.dll
2009-12-31 16:14 . 2004-08-03 22:14 352640 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-24 07:07 . 2004-08-17 14:49 177664 ----a-w- c:\windows\system32\wintrust.dll
2009-12-17 08:00 . 2007-05-06 13:47 343552 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:37 . 2004-08-17 14:49 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-11-27 17:35 . 2004-08-17 15:49 17920 ----a-w- c:\windows\system32\msyuv.dll
2009-11-27 16:40 . 2004-08-17 15:49 48128 ----a-w- c:\windows\system32\iyuv_32.dll
2009-11-27 16:40 . 2004-08-17 14:49 11264 ----a-w- c:\windows\system32\msrle32.dll
2009-11-27 16:40 . 2004-08-17 14:49 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-11-27 16:40 . 2001-10-25 12:00 28672 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-27 16:40 . 2001-10-24 12:25 8704 ----a-w- c:\windows\system32\tsbyuv.dll
2009-11-21 16:46 . 2004-08-17 14:49 470528 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-10-15 21:52 . 2004-08-17 14:49 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-10-15 17:22 . 2001-10-25 12:00 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-10-13 10:53 . 2004-08-17 14:49 267776 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:54 . 2004-08-17 14:49 112640 ----a-w- c:\windows\system32\rastls.dll
2009-10-12 13:54 . 2004-08-17 14:49 69632 ----a-w- c:\windows\system32\raschap.dll
2009-09-11 14:35 . 2004-08-17 14:49 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 20:47 . 2004-08-17 14:49 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-26 08:16 . 2004-08-17 14:49 247326 ----a-w- c:\windows\system32\strmdll.dll
2009-08-06 18:24 . 2007-05-06 13:50 327896 ----a-w- c:\windows\system32\wucltui.dll
2009-08-06 18:24 . 2007-05-06 13:50 209632 ----a-w- c:\windows\system32\wuweb.dll
2009-08-06 18:24 . 2007-05-06 13:50 35552 ----a-w- c:\windows\system32\wups.dll
2009-08-06 18:24 . 2007-05-06 13:50 53472 ----a-w- c:\windows\system32\wuauclt.exe
2009-08-06 18:24 . 2004-08-17 14:49 96480 ----a-w- c:\windows\system32\cdm.dll
2009-08-06 18:23 . 2007-05-06 13:50 575704 ----a-w- c:\windows\system32\wuapi.dll
2009-08-06 18:23 . 2007-05-06 13:50 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2009-08-05 09:07 . 2004-08-17 14:49 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-31 04:59 . 2004-08-17 14:49 1172480 ----a-w- c:\windows\system32\msxml3.dll
2009-07-17 18:57 . 2004-08-17 14:49 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-17 16:27 . 2004-08-17 14:49 1437696 ----a-w- c:\windows\system32\query.dll
2009-07-13 22:43 . 2004-08-17 14:49 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-06-25 18:37 . 2004-08-17 14:49 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:37 . 2004-08-17 14:49 517120 ----a-w- c:\windows\system32\mqsnap.dll
2009-06-25 18:37 . 2004-08-17 14:49 489472 ----a-w- c:\windows\system32\mqutil.dll
2009-06-25 18:37 . 2004-08-17 14:49 48640 ----a-w- c:\windows\system32\mqupgrd.dll
2009-06-25 18:37 . 2004-08-17 14:49 186880 ----a-w- c:\windows\system32\mqtrig.dll
2009-06-25 18:37 . 2004-08-17 14:49 123392 ----a-w- c:\windows\system32\mqrtdep.dll
2009-06-25 18:37 . 2004-08-17 14:49 661504 ----a-w- c:\windows\system32\mqqm.dll
2009-06-25 18:37 . 2004-08-17 14:49 47104 ----a-w- c:\windows\system32\mqdscli.dll
2009-06-25 18:37 . 2004-08-17 14:49 225280 ----a-w- c:\windows\system32\mqoa.dll
2009-06-25 18:37 . 2004-08-17 14:49 177152 ----a-w- c:\windows\system32\mqrt.dll
2009-06-25 18:37 . 2004-08-17 14:49 16896 ----a-w- c:\windows\system32\mqise.dll
2009-06-25 18:37 . 2004-08-17 14:49 138240 ----a-w- c:\windows\system32\mqad.dll
2009-06-25 08:48 . 2004-08-17 14:49 59392 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:48 . 2004-08-17 14:49 56320 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:48 . 2004-08-17 14:49 168448 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:48 . 2004-08-17 14:49 723456 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:48 . 2004-08-17 14:49 298496 ----a-w- c:\windows\system32\kerberos.dll
2009-06-22 11:49 . 2004-08-17 14:49 19968 ----a-w- c:\windows\system32\mqbkup.exe
2009-06-22 11:49 . 2004-08-17 14:49 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2009-06-22 11:49 . 2004-08-17 14:49 4608 ----a-w- c:\windows\system32\mqsvc.exe
2009-06-22 11:48 . 2004-08-03 21:58 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
2009-06-22 11:34 . 2004-08-03 21:59 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-15 11:33 . 2004-08-17 14:49 78336 ----a-w- c:\windows\system32\telnet.exe
2009-06-15 11:33 . 2004-08-17 14:49 81408 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-10 06:31 . 2004-08-17 14:49 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 07:46 . 2007-05-06 13:47 655872 ----a-w- c:\windows\system32\mstscax.dll
2009-05-07 15:44 . 2004-08-17 14:49 345088 ----a-w- c:\windows\system32\localspl.dll
2009-04-15 15:18 . 2004-08-17 14:49 584192 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-01 22:02 . 2004-08-17 14:49 604160 ----a-w- c:\windows\system32\wmspdmod.dll
2009-03-31 07:39 . 2010-05-10 16:23 36608 ----a-w- c:\windows\system32\FsUsbExDisk.Sys
2009-03-31 07:39 . 2010-05-10 16:23 110592 ----a-w- c:\windows\system32\FsUsbExDevice.Dll
2009-03-31 07:39 . 2010-05-10 16:23 233472 ----a-w- c:\windows\system32\FsUsbExService.Exe
2009-03-27 07:14 . 2009-12-09 21:10 1193414 ----a-w- c:\windows\AppPatch\SET230B.tmp
2009-03-20 08:01 . 2010-05-10 16:24 12160 ----a-w- c:\windows\system32\drivers\ss_bcmnt.sys
2009-03-20 08:01 . 2010-05-10 16:24 12160 ----a-w- c:\windows\system32\drivers\ss_bcm.sys
2009-03-20 08:01 . 2010-05-10 16:24 90112 ----a-w- c:\windows\system32\drivers\ss_bbus.sys
2009-03-20 08:01 . 2010-05-10 16:24 12160 ----a-w- c:\windows\system32\drivers\ss_bwhnt.sys
2009-03-20 08:01 . 2010-05-10 16:24 12160 ----a-w- c:\windows\system32\drivers\ss_bwh.sys
2009-03-06 14:47 . 2004-08-17 14:49 283648 ----a-w- c:\windows\system32\pdh.dll
2009-02-09 10:22 . 2004-08-17 14:49 399360 ----a-w- c:\windows\system32\rpcss.dll
2009-02-09 10:22 . 2007-05-06 13:47 453120 ----a-w- c:\windows\system32\wbem\wmiprvsd.dll
2009-02-09 10:22 . 2007-05-06 13:47 473088 ----a-w- c:\windows\system32\wbem\fastprox.dll
2009-02-09 10:22 . 2004-08-17 14:49 683520 ----a-w- c:\windows\system32\advapi32.dll
2009-02-09 10:22 . 2004-08-17 14:48 709632 ----a-w- c:\windows\system32\ntdll.dll
2009-02-09 10:11 . 2004-08-17 14:49 111104 ----a-w- c:\windows\system32\services.exe
2009-02-06 16:54 . 2001-10-25 12:00 35328 ----a-w- c:\windows\system32\sc.exe
2009-02-06 16:39 . 2007-05-06 13:47 227840 ----a-w- c:\windows\system32\wbem\wmiprvse.exe
2009-01-21 15:42 . 2007-05-06 14:05 -------- d-----w- c:\program files\Common Files\InstallShield
2008-12-16 12:50 . 2004-08-17 14:49 351232 ----a-w- c:\windows\system32\winhttp.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
2010-06-14 17:03 2515552 ----a-w- c:\program files\free-downloads.net\tbfre0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"= "c:\program files\free-downloads.net\tbfre0.dll" [2010-06-14 2515552]

[HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2005-01-12 32768]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-05-02 1817600]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-05-06 949376]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2006-11-21 35328]
"VTTimer"="VTTimer.exe" [2005-03-08 53248]
"VTTrayp"="VTtrayp.exe" [2005-11-01 163840]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 49152]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2005-12-10 133016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"DXM6Patch_981116"="c:\windows\p_981116.exe" [1998-11-30 497376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"PowerDVD"="c:\program files\CyberLink\PowerDVD\PowerDVD.exe" [2005-09-28 528384]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
LUMIX Simple Viewer.lnk - c:\program files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2007-10-25 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AutorunsDisabled]
2008-09-05 21:31 267304 ----a-w- c:\windows\system32\WgaLogon.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Install\\winbox.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto\\WINO\\Grand Theft Auto.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [6.5.2007 15:16 15424]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [6.5.2007 15:14 141312]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [10.5.2010 17:23 233472]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [10.12.2008 19:22 222456]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [10.5.2010 17:23 36608]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [10.5.2010 17:24 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [10.5.2010 17:24 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [10.5.2010 17:24 121856]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11.10.2007 16:25 717296]
.
Obsah adresáře 'Naplánované úlohy'

2002-12-31 c:\windows\Tasks\RegCure Program Check.job
- c:\program files\RegCure\RegCure.exe [2008-11-27 18:55]

2009-01-07 c:\windows\Tasks\RegCure.job
- c:\program files\RegCure\RegCure.exe [2008-11-27 18:55]

2002-12-31 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-12-11 21:18]
.
.
------- Doplňkový sken -------
.
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\ogpbjbi1.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-NPSStartup - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2003-01-01 17:17
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(628)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll

- - - - - - - > 'explorer.exe'(1060)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
Celkový čas: 2003-01-01 17:21:27 - počítač byl restartován
ComboFix-quarantined-files.txt 2003-01-01 16:21

Před spuštěním: Volných bajtů: 50 116 620 288
Po spuštění: Volných bajtů: 57 493 209 088

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 300B967FA99C69E2A55AB82ED40967A9

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#6 Příspěvek od motji »

:o :o nějak se mi to nelíbí. Jak to vypadá s počítačem?

:arrow: Otestujte na www.virustotal.com

c:\windows\system32\ntdll.dll
c:\windows\system32\services.exe
c:\windows\system32\sc.exe
c:\windows\AppPatch\SET230B.tmp
c:\windows\system32\drivers\mqac.sys
c:\windows\system32\drivers\pciide.sys


-Do okénka zkopírujte cestu k souboru , pokud napíše, že soubor byl už testován, dejte otestovat znovu.
-Sem vložte link s výsledky.



:arrow: Tuto složku znáte?
c:\program files\Abracadabra
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#7 Příspěvek od CATerPILAR »


Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#8 Příspěvek od motji »

:arrow: Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Restore::
c:\windows\system32\msgsvc.dll

Srpeek::
c:\windows\system32\msgsvc.dll


-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek


-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#9 Příspěvek od CATerPILAR »

ComboFix 10-08-21.06 - Administrator 22.08.2010 19:02:10.2.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.446.254 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

Nakažená kopie c:\windows\system32\msgsvc.dll byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\ERDNT\cache\msgsvc.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-22 do 2010-08-22 )))))))))))))))))))))))))))))))
.

2010-08-08 17:08 . 2001-10-24 09:52 3328 ----a-w- c:\windows\system32\drivers\pciide.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-02 06:23 . 2007-05-06 14:14 -------- d-----w- c:\program files\Spyware Terminator
2010-06-14 14:30 . 2007-05-06 13:49 743936 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-03 12:58 . 2010-06-03 12:59 411368 ----a-w- c:\windows\system32\deployJava1.dll
.

(((((((((((((((((((((((((((((((((((((((((( SR_Search ))))))))))))))))))))))))))))))))))))))))))))))))))))))))

c:\windows\system32\dllcache\msgsvc.dll [x]
[7] 8B2FCBD881879B55BE40B41F12FFC431 33792 \RP522\A0982713.dll

[7] 8B2FCBD881879B55BE40B41F12FFC431 33792 c:\windows\system32\msgsvc.dll
[7] 8B2FCBD881879B55BE40B41F12FFC431 33792 \RP522\A0982714.dll
.
((((((((((((((((((((((((((((( SnapShot@2003-01-01_16.17.29 )))))))))))))))))))))))))))))))))))))))))
.
+ 2003-01-01 17:19 . 2010-04-29 14:39 38224 c:\windows\system32\drivers\mbamswissarmy.sys
+ 2003-01-01 17:19 . 2010-04-29 14:39 20952 c:\windows\system32\drivers\mbam.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
2010-06-14 17:03 2515552 ----a-w- c:\program files\free-downloads.net\tbfre0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{ecdee021-0d17-467f-a1ff-c7a115230949}"= "c:\program files\free-downloads.net\tbfre0.dll" [2010-06-14 2515552]

[HKEY_CLASSES_ROOT\clsid\{ecdee021-0d17-467f-a1ff-c7a115230949}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2005-01-12 32768]
"SpywareTerminator"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2008-05-02 1817600]
"nod32kui"="c:\program files\Eset\nod32kui.exe" [2007-05-06 949376]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2006-11-21 35328]
"VTTimer"="VTTimer.exe" [2005-03-08 53248]
"VTTrayp"="VTtrayp.exe" [2005-11-01 163840]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-03-04 172032]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 241664]
"HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2004-02-18 49152]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2005-12-10 133016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"DXM6Patch_981116"="c:\windows\p_981116.exe" [1998-11-30 497376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"PowerDVD"="c:\program files\CyberLink\PowerDVD\PowerDVD.exe" [2005-09-28 528384]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
LUMIX Simple Viewer.lnk - c:\program files\Panasonic\LUMIXSimpleViewer\PhLeAutoRun.exe [2007-10-25 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AutorunsDisabled]
2008-09-05 21:31 267304 ----a-w- c:\windows\system32\WgaLogon.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Install\\winbox.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto\\WINO\\Grand Theft Auto.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsasvr.exe"=
"c:\\Program Files\\Samsung\\Samsung New PC Studio\\npsvsvr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

S1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [6.5.2007 16:16 15424]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [6.5.2007 16:14 141312]
S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [10.5.2010 18:23 233472]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [10.12.2008 20:22 222456]
S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [10.5.2010 18:23 36608]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [10.5.2010 18:24 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [10.5.2010 18:24 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [10.5.2010 18:24 121856]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11.10.2007 17:25 717296]
.
Obsah adresáře 'Naplánované úlohy'

2003-01-01 c:\windows\Tasks\RegCure Program Check.job
- c:\program files\RegCure\RegCure.exe [2008-11-27 18:55]

2009-01-07 c:\windows\Tasks\RegCure.job
- c:\program files\RegCure\RegCure.exe [2008-11-27 18:55]

2003-01-01 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-12-11 21:18]
.
.
------- Doplňkový sken -------
.
LSP: c:\windows\system32\imon.dll
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\ogpbjbi1.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-22 19:09
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(628)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll

- - - - - - - > 'explorer.exe'(1456)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\rundll32.exe
c:\\?\c:\windows\system32\WBEM\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-08-22 19:13:16 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-08-22 17:13
ComboFix2.txt 2003-01-01 16:21

Před spuštěním: Volných bajtů: 57 484 853 248
Po spuštění: Volných bajtů: 57 472 892 928

- - End Of File - - B7C9719FA1F3913AEB9809B2754FEE48

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#10 Příspěvek od motji »

Jak to vypadá s počítačem?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#11 Příspěvek od CATerPILAR »

Počítač se stále restartuje. V nouzovém režimu OK.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#12 Příspěvek od motji »

:arrow: Stáhněte a spusťte http://users.telenet.be/marcvn/tools/reglooks.exe
- objeví se červené okno a program bude pracovat.
-po dokončení skenu na Vás vyskočí poznámkový blok result.txt- obsah sem zkopírujte
- v případě že na Vás nevyskočí, najdete ho zde c:\result.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#13 Příspěvek od CATerPILAR »

REGLOOKS logfile - version 0.985
Scan started: ne 22.08.2010 22:56:22,59

--- INFORMATION ---

Manufacturer: MICRO-STAR INTERNATIONAL CO., LTD - Model: MS-7211
Operating System: Systém Microsoft Windows XP Professional -- 5.1.2600 -- Service Pack 3 --
Processor: Intel(R) Celeron(R) CPU 2.66GHz
Number of Processors: 1
Work Station
Bootmode: Fail-safe with network boot
Total RAM: 446 MB (free 210 MB - 47%)

Computername: PC
Domain: SKUPINA
User: Uzivatel (Administrator account)

Bootdevice: \Device\HarddiskVolume1
Systemdrive: C:
Windowsdirectory: C:\WINDOWS
Systemdirectory: C:\WINDOWS\system32

Internet Explorer Version: 6.0.2900.5512

Antivirus Program: Eset NOD32 Antivirus 2.70 2.70 [Enabled - Updated]



--- SIGCHECK ---

C:\WINDOWS\explorer.exe -- [1034240] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\appmgmts.dll -- [171008] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\browser.dll -- [77824] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\comres.dll -- [806912] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\comctl32.dll -- [617472] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\cryptsvc.dll -- [62464] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\ctfmon.exe -- [15360] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\es.dll -- [253952] -- [07.07.2008 22:29] -- sigcheck OK
C:\WINDOWS\system32\eventlog.dll -- [56320] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\ias.dll NOT found
C:\WINDOWS\system32\imm32.dll -- [110080] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\kernel32.dll -- [988160] -- [21.03.2009 16:09] -- sigcheck OK
C:\WINDOWS\system32\linkinfo.dll -- [19968] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\lpk.dll -- [22016] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\lsass.exe -- [13312] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\mfc40u.dll -- [927504] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\msgsvc.dll -- [33792] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\mshtml.dll -- [3088896] -- [12.12.2008 19:03] -- sigcheck OK
C:\WINDOWS\system32\mspmsnsv.dll -- [27136] -- [18.10.2006 21:47] -- sigcheck OK
C:\WINDOWS\system32\mswsock.dll -- [247296] -- [20.06.2008 19:49] -- sigcheck OK
C:\WINDOWS\system32\netlogon.dll -- [407040] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\netman.dll -- [198144] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\ntkrnlpa.exe -- [2068224] -- [10.02.2009 20:09] -- sigcheck OK
C:\WINDOWS\system32\ntmssvc.dll -- [435712] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\ntoskrnl.exe -- [2191232] -- [09.02.2009 13:26] -- sigcheck OK
C:\WINDOWS\system32\pchsvc.dll NOT found
C:\WINDOWS\system32\powrprof.dll -- [17408] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\qmgr.dll -- [409088] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\rasauto.dll -- [88576] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\regsvc.dll -- [59904] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\rpcss.dll -- [401408] -- [09.02.2009 12:56] -- sigcheck OK
C:\WINDOWS\system32\scecli.dll -- [185856] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\schedsvc.dll -- [192512] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\services.exe -- [111104] -- [09.02.2009 13:25] -- sigcheck OK
C:\WINDOWS\system32\sfc.dll -- [5120] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\sfcfiles.dll -- [1571840] -- [14.04.2008 08:51] -- sigcheck OK
C:\WINDOWS\system32\spoolsv.exe -- [57856] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\srsvc.dll -- [171008] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\ssdpsrv.dll -- [71680] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\svchost.exe -- [14336] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\tapisrv.dll -- [249856] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\termsrv.dll -- [295936] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\upnphost.dll -- [186368] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\user32.dll -- [578560] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\userinit.exe -- [26112] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\wininet.dll -- [667136] -- [16.10.2008 03:03] -- sigcheck OK
C:\WINDOWS\system32\winlogon.exe -- [507904] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\ws2_32.dll -- [82432] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\wscntfy.exe -- [13824] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\wuauclt.exe -- [53472] -- [06.08.2009 20:24] -- sigcheck OK
C:\WINDOWS\system32\xmlprov.dll -- [129024] -- [14.04.2008 08:52] -- sigcheck OK
C:\WINDOWS\system32\drivers\acpiec.sys -- [11776] -- [25.10.2001 14:00] -- sigcheck OK
C:\WINDOWS\system32\drivers\aec.sys -- [142592] -- [13.04.2008 22:09] -- sigcheck OK
C:\WINDOWS\system32\drivers\asyncmac.sys -- [14336] -- [14.04.2008 00:27] -- sigcheck OK
C:\WINDOWS\system32\drivers\atapi.sys -- [96512] -- [14.04.2008 00:10] -- sigcheck OK
C:\WINDOWS\system32\drivers\beep.sys -- [4224] -- [25.10.2001 14:00] -- sigcheck OK
C:\WINDOWS\system32\drivers\classpnp.sys -- [49536] -- [14.04.2008 00:46] -- sigcheck OK
C:\WINDOWS\system32\drivers\disk.sys -- [36352] -- [14.04.2008 00:10] -- sigcheck OK
C:\WINDOWS\system32\drivers\iaStor.sys NOT found
C:\WINDOWS\system32\drivers\ip6fw.sys -- [36608] -- [14.04.2008 00:23] -- sigcheck OK
C:\WINDOWS\system32\drivers\kbdclass.sys -- [24576] -- [14.04.2008 07:59] -- sigcheck OK
C:\WINDOWS\system32\drivers\ndis.sys -- [182656] -- [14.04.2008 00:50] -- sigcheck OK
C:\WINDOWS\system32\drivers\ntfs.sys -- [574976] -- [14.04.2008 00:45] -- sigcheck OK
C:\WINDOWS\system32\drivers\tcpip.sys -- [361600] -- [20.06.2008 13:51] -- sigcheck OK


--- SSODL regkeys ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" -- File: %SystemRoot%\system32\shell32.dll -- [?]
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" -- File: %SystemRoot%\system32\SHELL32.dll -- [?]
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" -- File: %Systemroot%\system32\webcheck.dll -- [?]
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" -- File: %systemroot%\system32\stobject.dll -- [?]
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}" -- File: C:\WINDOWS\system32\WPDShServiceObj.dll -- [133632] -- [18.10.2006 21:47]


--- STS regkeys ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" -- File: %SystemRoot%\system32\browseui.dll -- [?]
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Proces mezipaměti kategorií součástí" -- File: %SystemRoot%\system32\browseui.dll -- [?]


--- USERINIT regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
File: C:\WINDOWS\system32\userinit.exe -- [26112] -- [14.04.2008 08:52]


--- SHELL regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="Explorer.exe"
File: C:\WINDOWS\Explorer.exe -- [1034240] -- [14.04.2008 08:52]


--- SYSTEM regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


--- APPINIT_DLLS regkey ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
no AppInit_DLLs regkey found


--- NOTIFY regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]
-- not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]
-- not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
-- File: C:\WINDOWS\system32\crypt32.dll -- [602112] -- [14.04.2008 08:51]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
-- File: C:\WINDOWS\system32\cryptnet.dll -- [64512] -- [14.04.2008 08:51]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
-- File: C:\WINDOWS\system32\cscdll.dll -- [102400] -- [14.04.2008 08:51]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\dimsntfy]
-- File: %SystemRoot%\System32\dimsntfy.dll -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
-- File: C:\WINDOWS\system32\wlnotify.dll -- [92672] -- [14.04.2008 08:52]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
-- File: C:\WINDOWS\system32\wlnotify.dll -- [92672] -- [14.04.2008 08:52]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
-- File: C:\WINDOWS\system32\sclgntfy.dll -- [22016] -- [14.04.2008 08:51]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
-- File: C:\WINDOWS\system32\WlNotify.dll -- [92672] -- [14.04.2008 08:52]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
-- File: C:\WINDOWS\system32\wlnotify.dll -- [92672] -- [14.04.2008 08:52]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
-- File: C:\WINDOWS\system32\wlnotify.dll -- [92672] -- [14.04.2008 08:52]


--- RUN / LOAD regkeys ---

[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
"load"=""


--- SHELLEXECUTEHOOKS regkey ---

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" -- File: shell32.dll -- [?]


--- HKLM AUTORUN regkeys ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor]
no AutoRun regkey found


--- HKCU AUTORUN regkeys ---

[HKEY_CURRENT_USER\Software\Microsoft\Command Processor]
no AutoRun regkey found


--- HKLM\RUN regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck" -- File C:\WINDOWS\system32\NeroCheck.exe -- [155648] -- [09.07.2001 11:50]
"RemoteControl" -- File "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" -- [32768] -- [12.01.2005 03:01]
"SpywareTerminator" -- File "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" -- [1817600] -- [02.05.2008 11:23]
"nod32kui" -- File: "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE -- [?]
"WinampAgent" -- File C:\Program Files\Winamp\winampa.exe -- [35328] -- [21.11.2006 19:38]
"VTTimer" -- File: VTTimer.exe -- [?]
"VTTrayp" -- File: VTtrayp.exe -- [?]
"SoundMan" -- File: SOUNDMAN.EXE -- [?]
"HPDJ Taskbar Utility" -- File C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe -- [172032] -- [04.03.2004 17:46]
"HP Component Manager" -- File "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" -- [241664] -- [22.12.2003 08:38]
"HP Software Update" -- File: "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" -- [?]
"DAEMON Tools" -- File: "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 -- [?]
"Adobe Reader Speed Launcher" -- File "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" -- [40048] -- [11.05.2007 14:06]
"DXM6Patch_981116" -- File: C:\WINDOWS\p_981116.exe /Q:A -- [?]
"SunJavaUpdateSched" -- File "C:\Program Files\Common Files\Java\Java Update\jusched.exe" -- [248040] -- [18.02.2010 11:43]
"PowerDVD" -- File: C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe /autostart -- [?]
"KernelFaultCheck" -- File: %systemroot%\system32\dumprep 0 -k -- [?]


--- HKLM\RUNONCE regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"KB923561" -- File: rundll32.exe apphelp.dll,ShimFlushCache -- [?]
"KB955759" -- File: rundll32.exe apphelp.dll,ShimFlushCache -- [?]


--- HKLM\RUNONCEEX regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]
no runonceex values found


--- HKLM\RUNSERVICES regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
key not found


--- HKLM\RUNSERVICESONCE regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]
key not found


--- HKCU\RUN regkey ---

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE" -- File C:\WINDOWS\system32\ctfmon.exe -- [15360] -- [14.04.2008 08:52]
"MSMSGS" -- File: "C:\Program Files\Messenger\msmsgs.exe" /background -- [?]
"Skype" -- File: "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [?]
"AlcoholAutomount" -- File: "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount -- [?]
"AutoStartNPSAgent" -- File C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe -- [102400] -- [02.04.2009 18:05]


--- HKCU\RUNONCE regkey ---

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate" -- File: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p -- [?]


--- HKCU\RUNONCEEX regkey ---

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx]
key not found


--- HKCU\RUNSERVICES regkey ---

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
key not found


--- HKCU\RUNSERVICESONCE regkey ---

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce]
key not found


--- HKU\.DEFAULT\Run regkeys - Default user ---

[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [14.04.2008 08:52]


--- HKU\S-1-5-18\Run regkeys - user SYSTEM ---

[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE" -- File C:\WINDOWS\system32\CTFMON.EXE -- [15360] -- [14.04.2008 08:52]


--- HKU\S-1-5-19\Run regkeys - User Lokale service ---

[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
key not found


--- HKU\S-1-5-20\Run regkeys - User Lokale service ---

[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
key not found


--- HKLM\Explorer\Run regkeys ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
no run values found


--- HKCU\Explorer\Run regkeys ---

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
key not found


--- Image File Execution regkeys ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]
no debuggers found


--- BROWSER HELPER OBJECTS regkeys ---

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
-- CLSID not found
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
-- File: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll -- [62080] -- [23.10.2006 10:08]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
-- File: C:\Program Files\Spybot - Search & Destroy\SDHelper.dll -- [?]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
-- File: C:\Program Files\Java\jre6\bin\jp2ssv.dll -- [41760] -- [03.06.2010 14:58]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
-- File: C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll -- [79648] -- [03.06.2010 14:58]
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
-- File: C:\Program Files\free-downloads.net\tbfre0.dll -- [?]


--- TOOLBAR regkeys ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} -- File: C:\Program Files\ICQ6Toolbar\ICQToolBar.dll -- [958712] -- [12.06.2008 17:46]
{ecdee021-0d17-467f-a1ff-c7a115230949} -- File: C:\Program Files\free-downloads.net\tbfre0.dll -- [?]


--- HKLM\URLSEARCHHOOKS regkeys ---

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\URLSearchHooks]
no urlsearchhooks found


--- HKCU\URLSEARCHHOOKS regkeys ---

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
{855F3B16-6D32-4fe6-8A56-BBB695989046} -- File: C:\Program Files\ICQ6Toolbar\ICQToolBar.dll -- [958712] -- [12.06.2008 17:46]
{855F3B16-6D32-4fe6-8A56-BBB695989046} -- File: C:\Program Files\ICQ6Toolbar\ICQToolBar.dll -- [958712] -- [12.06.2008 17:46]
{ecdee021-0d17-467f-a1ff-c7a115230949} -- File: C:\Program Files\free-downloads.net\tbfre0.dll -- [?]


--- SRCEENSAVER regkey ---

[HKEY_CURRENT_USER\Control Panel\Desktop]
"SCRNSAVE.EXE" -- File C:\WINDOWS\system32\logon.scr -- [220672] -- [14.04.2008 08:52]


--- ALTERNATESHELL regkey ---

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot]
File: C:\WINDOWS\system32\cmd.exe -- [390144] -- [14.04.2008 08:52]


--- SECURITYPROVIDERS regkey ---

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
File: C:\WINDOWS\system32\msapsspc.dll -- [86016] -- [14.04.2008 08:51]
File: C:\WINDOWS\system32\schannel.dll -- [147456] -- [25.06.2009 10:27]
File: C:\WINDOWS\system32\digest.dll -- [68608] -- [14.04.2008 08:51]
File: C:\WINDOWS\system32\msnsspc.dll -- [290816] -- [14.04.2008 08:51]


--- Active Setup\Installed Components regkey ---

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
-- File: %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
-- File: RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
-- File: %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
-- File: %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
-- File: "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
-- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
-- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
-- File: rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
-- File: regsvr32.exe /s /n /i:U shell32.dll -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
-- File: %SystemRoot%\system32\ie4uinit.exe -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
-- File: %SystemRoot%\system32\ie4uinit.exe -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
-- File: c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install -- [?]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}]
-- filepath not found


--- Services regkey ---

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dtscsi]
-- File: \SystemRoot\System32\Drivers\dtscsi.sys -- [?]


--- SAFEBOOT MINIMAL SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal
{533C5B84-EC70-11D2-9505-00C04F79DEAF}


--- SAFEBOOT Network SERVICES ---

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network
DnsCache


--- BOOTEXECUTE regkey ---

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"BootExecute"= autocheck autochk *\0\0\0


--- PENDINGFILERENAMEOPERATIONS regkey ---

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations"= \??\C:\DOCUME~1\Uzivatel\LOCALS~1\TEMPOR~1\Content.IE5\index.dat\0\0\??\C:\DOCUME~1\Uzivatel\Cookies\index.dat\0\0\??\C:\DOCUME~1\Uzivatel\LOCALS~1\History\History.IE5\index.dat\0\0\0


--- WOW-CMDLINE regkeys ---

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW]
"cmdline" = %SystemRoot%\system32\ntvdm.exe
"cmdline" = %SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386


--- NETSVCS regkey ---

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] -- NETSVCS
0Schedule
0WmdmPmSN


--- DNS SERVER regkeys ---

no "NameServer" values found


--- File associations ---

.BAT files: ("%1" %*)
.COM files: ("%1" %*)
.EXE files: ("%1" %*)
.HLP files: (%SystemRoot%\System32\winhlp32.exe %1)
.INF files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
.INI files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
.JS files: (%SystemRoot%\System32\WScript.exe "%1" %*)
.PIF files: ("%1" %*)
.REG files: (regedit.exe "%1")
.SCR files: ("%1" /S)
.TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
.VBS files: (%SystemRoot%\System32\WScript.exe "%1" %*)


--- STARTUP FOLDERS ---



--- TASK SCHEDULER JOBS ---

C:\WINDOWS\tasks\RegCure Program Check.job -- [444] -- [22.08.2010 22:00]
C:\WINDOWS\tasks\RegCure.job -- [378] -- [07.01.2009 18:34]
C:\WINDOWS\tasks\WGASetup.job -- [260] -- [22.08.2010 22:00]


Scan completed: ne 22.08.2010 22:57:39,45
FINISHED

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Samovolný restart - prosím o kontrolu logu

#14 Příspěvek od motji »

Můžete se podívat, jestli máte na disku tento soubor?
C:\WINDOWS\system32\userinit.exe
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

CATerPILAR
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 08 Lis 2007 13:50

Re: Samovolný restart - prosím o kontrolu logu

#15 Příspěvek od CATerPILAR »

ano našel jsem ho. Má 26kB.

Odpovědět