Nejde spustit IE, programy antispyware, brána firewall atd.

Zpráva

jessiie · #1 Příspěvek od **jessiie** » 16 srp 2010 04:05

Prosím o kontrolu logu z těchto důvodů:

Problém začal vypínáním monitoru - respektive no signal bez restartování PC. Později následovalo s hláškou no signal i restartování PC. Antivirus ESET v mém PC nic nenašel a online ESET také ne. Ostatní online antiviry nešly spustit bu'dto z důvodu, že fungují jen v IE ( který mi nešel spustit ) nebo to hlásilo nějakou chybu. Při pokusu instalovat cokoliv, co by zneškodnilo případnou havěť mi to psalo chybu. Nejde spustit např. i program Website X5 a v při prohlížení určitých stránek mi to hlásí chybu skriptu. Ztratil se panel nabídky, který se dá nastavit, ale po restartu opět zmizí. Otevřené okno po minimalizaci zmizí, musím ho obnovit pomocí správce úloh ( přepnout ).

Děkuji za případnou pomoc - zde je Log:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-08-16 04:02:41
WIN_XP Service Pack 3
System drive F: has 4 GB (3%) free of 153 GB
Total RAM: 511 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 4:03:06, on 16.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Safe mode with network support

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\csrss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\ESET\ESET Online Scanner\OnlineScannerApp.exe
F:\Program Files\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
F:\WINDOWS\system32\taskmgr.exe
F:\Program Files\Mozilla Firefox\firefox.exe
F:\Program Files\Mozilla Firefox\plugin-container.exe
F:\WINDOWS\system32\rundll32.exe
F:\Documents and Settings\Administrator\Dokumenty\Stažené soubory\RSIT.exe
F:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - SOFTWARE - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Smapp] "F:\Program Files\Analog Devices\SoundMAX\Smtray.exe"
O4 - HKLM\..\Run: [nod32kui] "F:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [combofix] "F:\ComboFix\CF20677.cfxxe" /c "F:\ComboFix\C.bat"
O4 - HKLM\..\RunOnce: [combofix] "F:\ComboFix\CF20677.cfxxe" /c "F:\ComboFix\C.bat"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [NSSInstallation] F:\Documents and Settings\Administrator\Dokumenty\Stažené soubory\NSSstub.exe /runonce
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-117609710-1844823847-839522115-500\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe (User '?')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://F:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://F:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - F:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra 'Tools' menuitem: Nastavení aplikace &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - F:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra button: Statistika součásti Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - F:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - F:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - F:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - F:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - F:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0470E62C-C97E-4317-81E5-0774D8CBF7B7} (EndPointScan Class) - http://www.endpointscan.com/EndPointScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar ... vSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CS2\Services\Tcpip\..\{09086E79-9C52-469E-A42C-53313BCE29E5}: NameServer = 10.35.1.1,10.35.1.2
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - F:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: byXQJdBT - Invalid registry found
O20 - Winlogon Notify: opnlIxYP - opnlIxYP.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - F:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - F:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - F:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - F:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Služba Google Update (gupdate1c9a65434ce1bda) (gupdate1c9a65434ce1bda) - Google Inc. - F:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - F:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - F:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - F:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - F:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - F:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - F:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - F:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - F:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 8922 bytes

======Scheduled tasks folder======

F:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
F:\WINDOWS\tasks\AppleSoftwareUpdate.job
F:\WINDOWS\tasks\Google Software Updater.job
F:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
F:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1844823847-839522115-1003Core.job
F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-1844823847-839522115-1003UA.job
F:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job
F:\WINDOWS\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
F:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\SOFTWARE]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-04-02 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - F:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-02 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-02 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Smapp"=F:\Program Files\Analog Devices\SoundMAX\Smtray.exe [2002-06-26 90112]
"nod32kui"=F:\Program Files\Eset\nod32kui.exe [2009-09-09 917504]
"KernelFaultCheck"=F:\WINDOWS\system32\dumprep 0 -k []
"NvMediaCenter"=F:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]
"NvCplDaemon"=F:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"combofix"=F:\ComboFix\CF20677.cfxxe [2010-08-16 390144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"combofix"=F:\ComboFix\CF20677.cfxxe [2010-08-16 390144]
"Malwarebytes' Anti-Malware"=F:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"NSSInstallation"=F:\Documents and Settings\Administrator\Dokumenty\Stažené soubory\NSSstub.exe [2010-04-08 497016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=F:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\byXQJdBT]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\opnlIxYP]
opnlIxYP.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=F:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{C3A9074B-1E3C-45D6-9195-604CE2F1D5B8}"= []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avas_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avmgma_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\avss_service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\gozer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tpavdrw_service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"undockwithoutlogon"=1
"ShutdownWithoutLogon"=1
"NoDispCPL"=0
"NoDispSettingsPage"=0
"NoDispScrSavPage"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoActiveDesktopChanges"=0
"NoSetActiveDesktop"=0
"NoResolveTrack"=1
"NoViewContextMenu"=0
"NoFileAssociate"=0
"NoFind"=0
"NoRun"=0
"NoClose"=0
"StartMenuLogoff"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"F:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="F:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"F:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="F:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"F:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="F:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Documents and Settings\jessiie\Plocha\BitComet.exe"="C:\Documents and Settings\jessiie\Plocha\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"F:\Documents and Settings\iveta\Plocha\StrongDC.exe"="F:\Documents and Settings\iveta\Plocha\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Documents and Settings\jessiie\Plocha\StrongDC.exe"="C:\Documents and Settings\jessiie\Plocha\StrongDC.exe:*:Enabled:StrongDC++"
"F:\Program Files\BitComet\BitComet.exe"="F:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"F:\Documents and Settings\iveta\Dokumenty\vlc-0.8.6b-test1\vlc.exe"="F:\Documents and Settings\iveta\Dokumenty\vlc-0.8.6b-test1\vlc.exe:*:Enabled:VLC media player"
"F:\Program Files\FlashFXP\FlashFXP.exe"="F:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"
"C:\kav\kav7.0\german\setup.exe"="C:\kav\kav7.0\german\setup.exe:*:Enabled:Installationsprogramm für Kaspersky Anti-Virus 7.0"
"F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="F:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"F:\Program Files\ICQ6\ICQ.exe"="F:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"F:\Program Files\SopCast\SopCast.exe"="F:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast"
"F:\Program Files\SopCast\adv\SopAdver.exe"="F:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"
"F:\Program Files\Internet Explorer\iexplore.exe"="F:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"F:\Documents and Settings\iveta\Plocha\mplayerc.exe"="F:\Documents and Settings\iveta\Plocha\mplayerc.exe:*:Disabled:Media Player Classic"
"F:\Program Files\uTorrent\utorrent.exe"="F:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"F:\Program Files\Mozilla Firefox\firefox.exe"="F:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"F:\Program Files\Xfire\xfire.exe"="F:\Program Files\Xfire\xfire.exe:*:Enabled:Xfire"
"F:\Program Files\iTunes\iTunes.exe"="F:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"F:\Program Files\QIP\qip.exe"="F:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"F:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="F:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"F:\Program Files\WebSite X5 v8 - Evolution\WebSite.exe"="F:\Program Files\WebSite X5 v8 - Evolution\WebSite.exe:*:Enabled:WebSite X5"
"F:\Documents and Settings\iveta\Local Settings\Temp\7zS1FA1.tmp\SymNRT.exe"="F:\Documents and Settings\iveta\Local Settings\Temp\7zS1FA1.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"F:\Program Files\FlashFXP\FlashFXP.exe"="F:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3"

======List of files/folders created in the last 1 months======

2010-08-16 04:02:43 ----D---- F:\Program Files\trend micro
2010-08-16 04:02:41 ----D---- F:\rsit
2010-08-16 03:04:21 ----D---- F:\Documents and Settings\Administrator\Data aplikací\Sun
2010-08-16 02:52:45 ----D---- F:\Documents and Settings\Administrator\Data aplikací\QuickScan
2010-08-16 02:25:08 ----D---- F:\Program Files\NortonInstaller
2010-08-16 02:21:04 ----D---- F:\Documents and Settings\Administrator\Data aplikací\Identities
2010-08-16 02:09:21 ----A---- F:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-08-16 02:09:20 ----A---- F:\WINDOWS\system32\drivers\mbam.sys
2010-08-16 02:03:44 ----D---- F:\Documents and Settings\Administrator\Data aplikací\Adobe
2010-08-16 02:01:28 ----D---- F:\Documents and Settings\Administrator\Data aplikací\Mozilla
2010-08-16 01:36:01 ----ASH---- F:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2010-08-16 01:36:00 ----SD---- F:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-08-16 01:36:00 ----D---- F:\Documents and Settings\Administrator\Data aplikací\Macromedia
2010-08-16 01:33:17 ----D---- F:\ComboFix
2010-08-16 01:32:35 ----D---- F:\Qoobox
2010-08-15 21:37:26 ----D---- F:\Program Files\Panda Security
2010-08-12 14:51:50 ----HDC---- F:\WINDOWS\$NtUninstallKB982214$
2010-08-12 14:51:27 ----HDC---- F:\WINDOWS\$NtUninstallKB2115168$
2010-08-12 14:50:04 ----HDC---- F:\WINDOWS\$NtUninstallKB981852$
2010-08-12 14:47:15 ----HDC---- F:\WINDOWS\$NtUninstallKB2079403$
2010-08-12 14:24:08 ----HDC---- F:\WINDOWS\$NtUninstallKB2160329$
2010-08-12 14:22:38 ----HDC---- F:\WINDOWS\$NtUninstallKB980436$
2010-08-12 14:06:15 ----HDC---- F:\WINDOWS\$NtUninstallKB981997$
2010-08-12 13:58:48 ----HDC---- F:\WINDOWS\$NtUninstallKB982665$
2010-08-12 13:41:01 ----D---- F:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-08-12 13:40:48 ----D---- F:\Program Files\NVIDIA Corporation
2010-08-06 05:49:43 ----HDC---- F:\WINDOWS\$NtUninstallKB2286198$

======List of files/folders modified in the last 1 months======

2010-08-16 04:02:43 ----D---- F:\Program Files
2010-08-16 03:47:50 ----A---- F:\WINDOWS\ntbtlog.txt
2010-08-16 03:08:11 ----SHD---- F:\RECYCLER
2010-08-16 02:17:27 ----D---- F:\Program Files\ESET
2010-08-16 02:13:00 ----D---- F:\Program Files\Malwarebytes' Anti-Malware
2010-08-16 02:12:58 ----D---- F:\WINDOWS\system32\drivers
2010-08-16 01:57:22 ----HD---- F:\WINDOWS\system32\GroupPolicy
2010-08-16 01:36:00 ----D---- F:\Documents and Settings
2010-08-16 01:35:54 ----SHD---- F:\WINDOWS\CSC
2010-08-16 01:29:12 ----D---- F:\WINDOWS\Temp
2010-08-16 00:34:43 ----D---- F:\WINDOWS\system32
2010-08-16 00:34:43 ----A---- F:\WINDOWS\system32\oeminfo.ini
2010-08-16 00:15:45 ----D---- F:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2010-08-15 23:08:34 ----D---- F:\WINDOWS\Minidump
2010-08-15 23:08:34 ----D---- F:\WINDOWS
2010-08-15 21:02:41 ----A---- F:\WINDOWS\NeroDigital.ini
2010-08-15 16:32:39 ----D---- F:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-08-15 16:32:07 ----D---- F:\Program Files\Spyware Terminator
2010-08-14 20:58:37 ----SD---- F:\WINDOWS\Tasks
2010-08-14 20:38:58 ----D---- F:\WINDOWS\Prefetch
2010-08-14 14:37:24 ----A---- F:\WINDOWS\SchedLgU.Txt
2010-08-14 14:37:01 ----HD---- F:\WINDOWS\inf
2010-08-14 14:36:57 ----D---- F:\WINDOWS\system32\CatRoot2
2010-08-13 17:30:18 ----D---- F:\Documents and Settings\All Users\Data aplikací\Google Updater
2010-08-13 02:21:33 ----RSD---- F:\WINDOWS\assembly
2010-08-13 02:21:00 ----D---- F:\WINDOWS\Microsoft.NET
2010-08-12 21:18:15 ----D---- F:\Config.Msi
2010-08-12 14:55:30 ----RSHDC---- F:\WINDOWS\system32\dllcache
2010-08-12 14:55:12 ----D---- F:\WINDOWS\system32\cs-cz
2010-08-12 14:55:12 ----D---- F:\Program Files\Internet Explorer
2010-08-12 14:53:59 ----D---- F:\WINDOWS\ie7updates
2010-08-12 14:51:47 ----HD---- F:\WINDOWS\$hf_mig$
2010-08-12 14:44:23 ----SHD---- F:\WINDOWS\Installer
2010-08-12 14:44:10 ----D---- F:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-08-12 14:35:13 ----A---- F:\WINDOWS\system32\PerfStringBackup.INI
2010-08-12 14:32:55 ----D---- F:\WINDOWS\WinSxS
2010-08-12 14:06:39 ----D---- F:\Program Files\Movie Maker
2010-08-12 13:41:46 ----D---- F:\WINDOWS\Help
2010-08-11 12:57:02 ----A---- F:\mbam-error.txt
2010-08-10 19:45:46 ----A---- F:\WINDOWS\system.ini
2010-08-03 20:09:31 ----A---- F:\WINDOWS\system32\MRT.exe
2010-08-03 02:08:32 ----D---- F:\Program Files\SWiSH Max3
2010-08-02 21:42:23 ----D---- F:\Program Files\Photo Filter Factory
2010-07-27 08:30:31 ----A---- F:\WINDOWS\system32\shell32.dll
2010-07-26 02:35:51 ----D---- F:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; F:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
R0 d347bus;d347bus; F:\WINDOWS\system32\DRIVERS\d347bus.sys [2004-08-22 155136]
R0 d347prt;d347prt; F:\WINDOWS\System32\Drivers\d347prt.sys [2004-08-22 5248]
R0 PxHelp20;PxHelp20; F:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-31 44944]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; F:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 Afc;PPdus ASPI Shell; F:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; F:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-05-19 26600]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; F:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; F:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S0 Lbd;Lbd; F:\WINDOWS\system32\DRIVERS\Lbd.sys []
S1 intelppm;Řadič procesoru Intel; F:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S1 sp_rsdrv2;Spyware Terminator Driver 2; \??\F:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
S2 AMON;AMON; \??\F:\WINDOWS\system32\drivers\amon.sys []
S2 tmcomm;tmcomm; \??\F:\WINDOWS\system32\drivers\tmcomm.sys []
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\F:\WINDOWS\system32\drivers\NSDriver.sys []
S3 Ad-Watch Real-Time Scanner;AW Real-Time Scanner; \??\F:\WINDOWS\system32\drivers\AWRTPD.sys []
S3 Ad-Watch Registry Filter;Ad-Watch Registry Kernel Filter; \??\F:\WINDOWS\system32\drivers\AWRTRD.sys []
S3 aeaudio;aeaudio; F:\WINDOWS\system32\drivers\aeaudio.sys [2002-08-22 98752]
S3 hidusb;Ovladač třídy standardu HID; F:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Ovladač myši standardu HID; F:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 nm;Ovladač programu Sledování sítě; F:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 NPF;NetGroup Packet Filter Driver; F:\WINDOWS\system32\drivers\npf.sys [2005-08-02 32512]
S3 nv;nv; F:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-03 10232128]
S3 pcouffin;VSO Software pcouffin; F:\WINDOWS\System32\Drivers\pcouffin.sys [2008-02-27 47360]
S3 sermouse;Ovladač sériové myši; F:\WINDOWS\system32\DRIVERS\sermouse.sys [2001-10-24 17664]
S3 smwdm;smwdm; F:\WINDOWS\system32\drivers\smwdm.sys [2002-08-23 549672]
S3 TSP;TSP; \??\F:\WINDOWS\system32\drivers\klif.sys []
S3 TVICHW32;TVICHW32; \??\F:\WINDOWS\system32\DRIVERS\TVICHW32.SYS []
S3 usbaudio;Ovladač zvukové karty USB (WDM); F:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; F:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; F:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; F:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; F:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; F:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S4 sptd;sptd; F:\WINDOWS\System32\Drivers\sptd.sys [2002-01-01 715248]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 ACDaemon;ArcSoft Connect Daemon; F:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2008-11-19 109056]
S2 Apple Mobile Device;Apple Mobile Device; F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-26 132424]
S2 gupdate1c9a65434ce1bda;Služba Google Update (gupdate1c9a65434ce1bda); F:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-16 133104]
S2 gusvc;Google Software Updater; F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
S2 JavaQuickStarterService;Java Quick Starter; F:\Program Files\Java\jre6\bin\jqs.exe [2009-08-02 152984]
S2 NOD32krn;NOD32 Kernel Service; F:\Program Files\Eset\nod32krn.exe [2009-09-09 507904]
S2 NVSvc;NVIDIA Display Driver Service; F:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
S2 SoundMAX Agent Service (default);SoundMAX Agent Service; F:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-07-15 45056]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; F:\Program Files\Spyware Terminator\sp_rsser.exe [2009-11-05 487936]
S3 aspnet_state;ASP.NET State Service; F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; f:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; F:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-06-03 30192]
S3 idsvc;Windows CardSpace; f:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; F:\Program Files\iPod\bin\iPodService.exe [2009-04-02 656168]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; F:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; F:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; F:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 odserv;Microsoft Office Diagnostics Service; F:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; F:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); F:\Program Files\WinPcap\rpcapd.exe [2005-08-02 86016]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; F:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; f:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **eda** » 16 srp 2010 06:55

Zdravím!
Potřeboval bych vidět log z ComboFixu. Měl by se nacházet zde: F:\ComboFix.txt

jessiie · #3 Příspěvek od **jessiie** » 16 srp 2010 14:44

Tak se mi podařilo vytvořit log ComboFix.txt. Vytvářela jsem ho bez připojení k síti. Děkuji za pomoc a zde je log rozdělen na dvě části:
ComboFix 10-08-15.04 - Administrator 16.08.2010 15:11:04.1.1 - x86 NETWORK
Spuštěný z: f:\documents and settings\Administrator\Dokumenty\Stažené soubory\ComboFix.exe

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

f:\windows\daemon.dll

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MYWEBSEARCHSERVICE

((((((((((((((((((((((((( Soubory vytvořené od 2010-07-16 do 2010-08-16 )))))))))))))))))))))))))))))))
.

2010-08-16 02:02 . 2010-08-16 02:03 -------- d-----w- f:\program files\trend micro
2010-08-16 02:02 . 2010-08-16 02:03 -------- d-----w- F:\rsit
2010-08-16 00:25 . 2010-08-16 00:25 -------- d-----w- f:\program files\NortonInstaller
2010-08-16 00:09 . 2010-04-29 13:39 38224 ----a-w- f:\windows\system32\drivers\mbamswissarmy.sys
2010-08-16 00:09 . 2010-04-29 13:39 20952 ----a-w- f:\windows\system32\drivers\mbam.sys
2010-08-15 19:37 . 2010-08-15 19:37 -------- d-----w- f:\program files\Panda Security
2010-08-12 11:40 . 2010-08-12 11:41 -------- d-----w- f:\program files\NVIDIA Corporation
2010-08-12 00:02 . 2010-08-12 00:02 552 ----a-w- f:\windows\system32\d3d8caps.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-16 00:17 . 2009-09-09 16:28 -------- d-----w- f:\program files\ESET
2010-08-16 00:13 . 2008-07-21 18:14 -------- d-----w- f:\program files\Malwarebytes' Anti-Malware
2010-08-15 14:32 . 2009-11-05 18:09 -------- d-----w- f:\program files\Spyware Terminator
2010-08-12 18:54 . 2009-05-18 19:28 8704 --sha-w- f:\program files\Thumbs.db
2010-08-12 12:35 . 2001-10-25 14:00 79062 ----a-w- f:\windows\system32\perfc005.dat
2010-08-12 12:35 . 2001-10-25 14:00 432004 ----a-w- f:\windows\system32\perfh005.dat
2010-08-12 00:02 . 2009-09-09 17:15 664 ----a-w- f:\windows\system32\d3d9caps.dat
2010-08-03 00:08 . 2010-05-09 23:10 -------- d-----w- f:\program files\SWiSH Max3
2010-08-02 19:42 . 2009-04-12 18:28 -------- d-----w- f:\program files\Photo Filter Factory
2010-07-16 15:52 . 2010-07-14 23:56 -------- d-----w- f:\program files\Links Manager
2010-06-30 12:33 . 2004-08-17 13:49 149504 ----a-w- f:\windows\system32\schannel.dll
2010-06-26 11:52 . 2010-06-26 11:52 -------- d-----w- f:\program files\VideoLAN
2010-06-24 12:19 . 2004-08-17 13:49 832512 ----a-w- f:\windows\system32\wininet.dll
2010-06-24 12:19 . 2004-08-17 13:49 78336 ----a-w- f:\windows\system32\ieencode.dll
2010-06-24 12:19 . 2004-08-17 13:49 17408 ------w- f:\windows\system32\corpol.dll
2010-06-24 09:02 . 2004-08-17 13:44 1851904 ----a-w- f:\windows\system32\win32k.sys
2010-06-21 15:27 . 2004-08-03 21:14 354304 ----a-w- f:\windows\system32\drivers\srv.sys
2010-06-17 14:03 . 2004-08-17 13:49 80384 ----a-w- f:\windows\system32\iccvid.dll
2010-06-14 14:31 . 2002-01-01 02:25 744448 ----a-w- f:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:43 . 2004-08-17 13:49 1172480 ----a-w- f:\windows\system32\msxml3.dll
2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- f:\windows\system32\GPhotos.scr
2009-10-18 09:36 . 2009-10-18 09:36 0 ----a-w- f:\program files\email_cv.html
2009-10-18 09:36 . 2009-10-18 09:36 394 ----a-w- f:\program files\uninst.log
2009-10-18 09:36 . 2009-10-18 09:36 3721642 ----a-w- f:\program files\CV Curriculum vitae CREATOR.exe
2008-05-03 11:36 . 2008-05-03 11:36 1936 ----a-w- f:\program files\setup_error.log
2008-02-22 08:21 . 2008-05-03 10:59 76886 ----a-w- f:\program files\idm_cz.lng
2007-12-28 16:31 . 2007-12-27 18:47 130 ----a-w- f:\program files\TRANSLAT.INI
2007-12-27 18:47 . 2007-12-27 18:47 360448 ----a-w- f:\program files\SETUPWEB.EXE
2010-06-03 18:23 . 2010-06-03 18:24 119808 ----a-w- f:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\atapi.sys
[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . f:\windows\system32\drivers\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\asyncmac.sys
[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . f:\windows\system32\drivers\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\asyncmac.sys

[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . f:\windows\system32\dllcache\beep.sys
[-] 2001-10-25 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . f:\windows\system32\drivers\beep.sys

[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\kbdclass.sys
[-] 2008-04-14 . 1B6162FE7F66B1A71A4B70F941C4AA9B . 24576 . . [5.1.2600.5512] . . f:\windows\system32\drivers\kbdclass.sys
[-] 2004-08-17 . 6F877BF8DC01A550CD666F3BEDB2213C . 24576 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ndis.sys
[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . f:\windows\system32\drivers\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ndis.sys

[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ntfs.sys
[-] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . f:\windows\system32\drivers\ntfs.sys
[-] 2007-02-09 . 05AB81909514BFD69CBB1F2C147CF6B9 . 574976 . . [5.1.2600.3081] . . f:\windows\$hf_mig$\KB930916\SP2QFE\ntfs.sys
[-] 2007-02-09 . 19A811EF5F1ED5C926A028CE107FF1AF . 574464 . . [5.1.2600.3081] . . f:\windows\$NtServicePackUninstall$\ntfs.sys
[-] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB930916$\ntfs.sys

[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . f:\windows\system32\dllcache\null.sys
[-] 2001-10-25 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . f:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . f:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . f:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . f:\windows\system32\drivers\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\tcpip.sys
[-] 2007-10-30 . 90CAFF4B094573449A0872A0F919B178 . 360064 . . [5.1.2600.3244] . . f:\windows\$NtServicePackUninstall$\tcpip.sys
[-] 2007-10-30 . 64798ECFA43D78C7178375FCDD16D8C8 . 360832 . . [5.1.2600.3244] . . f:\windows\$hf_mig$\KB941644\SP2QFE\tcpip.sys
[-] 2006-04-20 . B2220C618B42A2212A59D91EBD6FC4B4 . 360576 . . [5.1.2600.2892] . . f:\windows\$hf_mig$\KB917953\SP2QFE\tcpip.sys
[-] 2006-04-20 . 1DBF125862891817F374F407626967F4 . 359808 . . [5.1.2600.2892] . . f:\windows\$NtUninstallKB941644$\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB917953$\tcpip.sys

[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\browser.dll
[-] 2008-04-14 . 249276D3EF1E74B992299CB96099E4D7 . 77824 . . [5.1.2600.5512] . . f:\windows\system32\browser.dll
[-] 2004-08-17 . F219E27E88107A50544153898DD8178E . 77312 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\browser.dll

[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\lsass.exe
[-] 2008-04-14 . ED0A176354487CEED65B80A7148AB739 . 13312 . . [5.1.2600.5512] . . f:\windows\system32\lsass.exe
[-] 2004-08-17 . 82A362FE1D4980B71B588D9C10748511 . 13312 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\lsass.exe

[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\netman.dll
[-] 2008-04-14 . 72E1E9E2977BE08BDEEDB6D8FD9D4D40 . 198144 . . [5.1.2600.5512] . . f:\windows\system32\netman.dll
[-] 2005-08-22 . 86AD5B0E02F2C968FBB096AB4C555C9C . 197632 . . [5.1.2600.2743] . . f:\windows\$NtServicePackUninstall$\netman.dll
[-] 2005-08-22 . BB0557B62B95F366464C3C60A0BD6BDF . 197632 . . [5.1.2600.2743] . . f:\windows\$hf_mig$\KB905414\SP2QFE\netman.dll
[-] 2004-08-17 . AF342D2781225A8769686E0D47E3123E . 198144 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB905414$\netman.dll

[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . f:\windows\ServicePackFiles\i386\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . f:\windows\system32\qmgr.dll
[-] 2008-04-14 . 19395D092FD85DDC2D9C7729CF5A2AC8 . 409088 . . [6.7.2600.5512] . . f:\windows\system32\bits\qmgr.dll
[-] 2004-08-17 . E774A26610EC92674273486612C11CFC . 382464 . . [6.6.2600.2180] . . f:\windows\$NtServicePackUninstall$\qmgr.dll

[-] 2009-02-09 . C0BD34A62508BA68F146E22CE45919F9 . 401408 . . [5.1.2600.5755] . . f:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . f:\windows\system32\rpcss.dll
[-] 2009-02-09 . BE27674D1CBC3214AEC84B4336A38BBF . 401408 . . [5.1.2600.5755] . . f:\windows\system32\dllcache\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB956572$\rpcss.dll
[-] 2008-04-14 . C868F3AE15CF71A93F2AA3A32856D839 . 399360 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\rpcss.dll
[-] 2005-07-26 . DBDE980506B54AE928D151D12419B425 . 397824 . . [5.1.2600.2726] . . f:\windows\$NtServicePackUninstall$\rpcss.dll
[-] 2005-07-26 . 46C3197AAC32EBA82453ACDD84114DC2 . 398336 . . [5.1.2600.2726] . . f:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[-] 2005-04-28 . 5DE239E9CC9DB7430233EA7BE10EAD32 . 396288 . . [5.1.2600.2665] . . f:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
[-] 2005-04-28 . 676E6C3C8F3B4F8B64BE33FD20ADFCE2 . 395776 . . [5.1.2600.2665] . . f:\windows\$NtUninstallKB902400$\rpcss.dll
[-] 2004-08-17 . C72C15EE57E248C66E57C76CAB086CF2 . 395776 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB894391$\rpcss.dll

[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . f:\windows\system32\services.exe
[-] 2009-02-09 . 9EF697AF07BB8DD82C3B02CA953A95B7 . 111104 . . [5.1.2600.5755] . . f:\windows\system32\dllcache\services.exe
[-] 2009-02-09 . 3D107D45CCFDB266E91D84B52CD7F430 . 111104 . . [5.1.2600.5755] . . f:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB956572$\services.exe
[-] 2008-04-14 . F0D2AE69035092BF22DAD6B50FAB85C2 . 108544 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-17 . 6E401E61F952FBBF708AFBECEFAFAE81 . 108544 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\services.exe

[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\spoolsv.exe
[-] 2008-04-14 . CB1090BCA0E7B40D0B5B4E4D66531809 . 57856 . . [5.1.2600.5512] . . f:\windows\system32\spoolsv.exe
[-] 2005-06-11 . AD3D9D191AEA7B5445FE1D82FFBB4788 . 57856 . . [5.1.2600.2696] . . f:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2005-06-10 . DA81EC57ACD4CDC3D4C51CF3D409AF9F . 57856 . . [5.1.2600.2696] . . f:\windows\$NtServicePackUninstall$\spoolsv.exe
[-] 2004-08-17 . 21B6FAA88044A41640E03EBB68BE93E8 . 57856 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB896423$\spoolsv.exe

[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2008-04-14 . CDDB1F8E1AEA356F3AD106F2CF9B7FEA . 507904 . . [5.1.2600.5512] . . f:\windows\system32\winlogon.exe
[-] 2004-08-17 . 221C29AE1B4CC61D11D8B27DE78B2307 . 502272 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\winlogon.exe

[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . f:\windows\ServicePackFiles\i386\comctl32.dll
[-] 2008-04-14 . 4F993463DC5F3F80D77A3D34D7BFBFED . 617472 . . [5.82] . . f:\windows\system32\comctl32.dll
[-] 2006-08-25 . E26B26189B786E6B092F002041D5A1E2 . 617472 . . [5.82] . . f:\windows\$NtServicePackUninstall$\comctl32.dll
[-] 2004-08-17 . 876C658C44F2BF4AF050E5534A9F066F . 611328 . . [5.82] . . f:\windows\$NtUninstallKB923191$\comctl32.dll

[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\cryptsvc.dll
[-] 2008-04-14 . F3AB0933CBD166D271992F411C27CCAF . 62464 . . [5.1.2600.5512] . . f:\windows\system32\cryptsvc.dll
[-] 2004-08-17 . 70D2A1756F4B2067658A186C963FCABD . 60416 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\cryptsvc.dll

[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . f:\windows\system32\es.dll
[-] 2008-07-07 20:29 . A371F11EF07653591C8DE26AFB13CE7F . 253952 . . [2001.12.4414.706] . . f:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:25 . BE68EA4457E2E5717231CF91BE5448E0 . 253952 . . [2001.12.4414.706] . . f:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-04-14 06:51 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . f:\windows\$NtUninstallKB950974$\es.dll
[-] 2008-04-14 06:51 . 260C69FD67687B0DC062FC3D31655857 . 246272 . . [2001.12.4414.701] . . f:\windows\ServicePackFiles\i386\es.dll
[-] 2005-07-26 04:42 . 8B1B932554B6317E97AE3B9D05344470 . 243200 . . [2001.12.4414.308] . . f:\windows\$NtServicePackUninstall$\es.dll
[-] 2005-07-26 04:30 . 7B9199B6809586DC2CF30D411CECBD33 . 243200 . . [2001.12.4414.308] . . f:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-17 13:49 . 972378B907070F64932A87C90A035487 . 243200 . . [2001.12.4414.258] . . f:\windows\$NtUninstallKB902400$\es.dll

[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\imm32.dll
[-] 2008-04-14 . 6C60CA8AC7470AC01CFD3D24C7283CD1 . 110080 . . [5.1.2600.5512] . . f:\windows\system32\imm32.dll
[-] 2004-08-17 . 2413635113361E54B62F0C40E4E4DAE6 . 110080 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\imm32.dll

[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . f:\windows\system32\kernel32.dll
[-] 2009-03-21 . 545C653E8FE241CA6200798AA94FE5C7 . 988160 . . [5.1.2600.5781] . . f:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . 0D8F61460F84139BBE5E391D8DE18D9A . 990208 . . [5.1.2600.5781] . . f:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2008-04-14 . FD91CD95A1C663DF54DD371CC8A234DE . 988160 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\kernel32.dll
[-] 2007-04-16 . 2B33979FDE5D1B9293ADB025F323B0D9 . 984576 . . [5.1.2600.3119] . . f:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[-] 2007-04-16 . C23A84D7AB99678B2F1A52080280E4ED . 983040 . . [5.1.2600.3119] . . f:\windows\$NtServicePackUninstall$\kernel32.dll
[-] 2004-08-17 . 98DA079F61265BC26D4587E280B79F30 . 982016 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB935839$\kernel32.dll

[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\linkinfo.dll
[-] 2008-04-14 . 7FDE9FC15765E02B23E1756930165AD1 . 19968 . . [5.1.2600.5512] . . f:\windows\system32\linkinfo.dll
[-] 2005-09-01 . 3E611531CC70649635FC890B421AECD0 . 19968 . . [5.1.2600.2751] . . f:\windows\$hf_mig$\KB900725\SP2QFE\linkinfo.dll
[-] 2005-09-01 . B5DE324E0F9AEBEC885ABF5DB6B2F73D . 19968 . . [5.1.2600.2751] . . f:\windows\$NtServicePackUninstall$\linkinfo.dll
[-] 2004-08-17 . EE1F842DB2AE412136643B0814D770A6 . 18944 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB900725$\linkinfo.dll

[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\lpk.dll
[-] 2008-04-14 . C66BA7BD13C8FB8BEC4863B88641C763 . 22016 . . [5.1.2600.5512] . . f:\windows\system32\lpk.dll
[-] 2004-08-17 . BFE8DC7AAE7CB1C86243D77B340DC304 . 22016 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\lpk.dll

[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . f:\windows\SoftwareDistribution\Download\e574754c794d710f0c3b9c139e56b57f\sp3gdr\mshtml.dll
[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . f:\windows\system32\mshtml.dll
[-] 2010-06-24 . 2049A2958FE037E6AAEEF323AF7976DD . 3600896 . . [7.00.6000.17080] . . f:\windows\system32\dllcache\mshtml.dll
[-] 2010-06-24 . 8A1385BF9CD3B394F266C8C5ACFEC5E0 . 3603968 . . [7.00.6000.21283] . . f:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\mshtml.dll
[-] 2010-06-24 . 8A1385BF9CD3B394F266C8C5ACFEC5E0 . 3603968 . . [7.00.6000.21283] . . f:\windows\SoftwareDistribution\Download\e574754c794d710f0c3b9c139e56b57f\sp3qfe\mshtml.dll
[-] 2010-05-04 . 313C9A62085098043B441652B7491665 . 3600384 . . [7.00.6000.17063] . . f:\windows\ie7updates\KB2183461-IE7\mshtml.dll
[-] 2010-05-04 . A85A3A10CA88BD7861D1859183559ED5 . 3603456 . . [7.00.6000.21264] . . f:\windows\$hf_mig$\KB982381-IE7\SP3QFE\mshtml.dll
[-] 2010-03-11 . 233FE995790E850D3D4B1AAD02CE3220 . 3599872 . . [7.00.6000.17023] . . f:\windows\ie7updates\KB982381-IE7\mshtml.dll
[-] 2010-03-11 . C8969C224E767DFFF5F2E2607E484810 . 3602944 . . [7.00.6000.21228] . . f:\windows\$hf_mig$\KB980182-IE7\SP3QFE\mshtml.dll
[-] 2010-01-05 . D563E48DB8B998E44400C9C9BE2D6ECD . 3599360 . . [7.00.6000.16981] . . f:\windows\ie7updates\KB980182-IE7\mshtml.dll
[-] 2010-01-05 . 5DA02EE50F8FC661964857F21A2AE606 . 3602944 . . [7.00.6000.21183] . . f:\windows\$hf_mig$\KB978207-IE7\SP3QFE\mshtml.dll
[-] 2009-10-29 . EC37726162FF477D0E38111CD11C3000 . 3598336 . . [7.00.6000.16945] . . f:\windows\ie7updates\KB978207-IE7\mshtml.dll
[-] 2009-10-29 . C4C38495BA7AFC2C1752501A6875B323 . 3602432 . . [7.00.6000.21148] . . f:\windows\$hf_mig$\KB976325-IE7\SP3QFE\mshtml.dll
[-] 2009-10-21 . 80B95B28B9E587AFFC7EB33DCF9F9E1F . 3598336 . . [7.00.6000.16939] . . f:\windows\ie7updates\KB976325-IE7\mshtml.dll
[-] 2009-10-21 . 442FC9D0BC1F64557B5106E0E7293B20 . 3602432 . . [7.00.6000.21142] . . f:\windows\$hf_mig$\KB976749-IE7\SP3QFE\mshtml.dll
[-] 2009-08-29 . 7CE28B79DBBCECFD442F85000292DFB9 . 3598336 . . [7.00.6000.16915] . . f:\windows\ie7updates\KB976749-IE7\mshtml.dll
[-] 2009-08-29 . 52809FB433B19A60DB827C690447AD6C . 3600384 . . [7.00.6000.21115] . . f:\windows\$hf_mig$\KB974455-IE7\SP3QFE\mshtml.dll
[-] 2009-07-19 . 6EDDB6AE1F6B387EEA08F013A2FD6463 . 3597824 . . [7.00.6000.16890] . . f:\windows\ie7updates\KB974455-IE7\mshtml.dll
[-] 2009-07-19 . 347FBA88D4C2C0D4FD4AA2EDCD300270 . 3600384 . . [7.00.6000.21089] . . f:\windows\$hf_mig$\KB972260-IE7\SP3QFE\mshtml.dll
[-] 2009-04-29 . 8B27B2CC3C6376C67586E3A0DD7732CC . 3596288 . . [7.00.6000.16850] . . f:\windows\ie7updates\KB972260-IE7\mshtml.dll
[-] 2009-04-29 . 46C3D119A366232907CD32A609A276B2 . 3598336 . . [7.00.6000.21045] . . f:\windows\$hf_mig$\KB969897-IE7\SP3QFE\mshtml.dll
[-] 2009-02-21 . 920B2B7C54C6B102A98EE54C56134CEC . 3596800 . . [7.00.6000.21015] . . f:\windows\$hf_mig$\KB963027-IE7\SP3QFE\mshtml.dll
[-] 2009-02-20 . DB1BCEDF3C640170A9E78E199516A8C9 . 3595264 . . [7.00.6000.16825] . . f:\windows\ie7updates\KB969897-IE7\mshtml.dll
[-] 2009-01-16 . 95E1214DBB029B3D37076999B53407D6 . 3594752 . . [7.00.6000.16809] . . f:\windows\ie7updates\KB963027-IE7\mshtml.dll
[-] 2009-01-16 . D049549814B44670C88C0C3777D24FFA . 3596288 . . [7.00.6000.20996] . . f:\windows\$hf_mig$\KB961260-IE7\SP2QFE\mshtml.dll
[-] 2008-12-13 . A3F482D8B827DDFBDA3F47B922DF5020 . 3593216 . . [7.00.6000.16788] . . f:\windows\ie7updates\KB961260-IE7\mshtml.dll
[-] 2008-12-13 . E32432E44F926075122F5B17E224ABF5 . 3594752 . . [7.00.6000.20973] . . f:\windows\$hf_mig$\KB960714-IE7\SP2QFE\mshtml.dll
[-] 2008-10-17 . 00439C27E013BE9DC0A6DDE4B626B6DC . 3593216 . . [7.00.6000.16762] . . f:\windows\ie7updates\KB960714-IE7\mshtml.dll
[-] 2008-10-16 . B5F7E24595A3F05ACE4F1152542FB07F . 3595264 . . [7.00.6000.20935] . . f:\windows\$hf_mig$\KB958215-IE7\SP2QFE\mshtml.dll
[-] 2008-08-27 . 2ECA71D805E010713BE4EA0E86827410 . 3593216 . . [7.00.6000.16735] . . f:\windows\ie7updates\KB958215-IE7\mshtml.dll
[-] 2008-08-26 . F1877EA1F348638E803DED6BEFB20637 . 3594752 . . [7.00.6000.20900] . . f:\windows\$hf_mig$\KB956390-IE7\SP2QFE\mshtml.dll
[-] 2008-06-24 . 221718BE0A0DE22548C3BF125F19F49A . 3592192 . . [7.00.6000.16705] . . f:\windows\ie7updates\KB956390-IE7\mshtml.dll
[-] 2008-06-23 . B552ADA48C2BA853872AFFCAC88A6513 . 3594240 . . [7.00.6000.20861] . . f:\windows\$hf_mig$\KB953838-IE7\SP2QFE\mshtml.dll
[-] 2008-04-23 . 4B0ED25CBE16A4BECE1CCB7F8F7C8112 . 3591680 . . [7.00.6000.16674] . . f:\windows\ie7updates\KB953838-IE7\mshtml.dll
[-] 2008-04-23 . 223F1E24EBBF6D6FB67999179DD2D75E . 3593728 . . [7.00.6000.20815] . . f:\windows\$hf_mig$\KB950759-IE7\SP2QFE\mshtml.dll
[-] 2008-04-14 . DAF9947DE2A6EA20AE524B7C50487E57 . 3066880 . . [6.00.2900.5512] . . f:\windows\ServicePackFiles\i386\mshtml.dll
[-] 2008-03-01 . 03093130102A79634BD562406EAE1F2F . 3591680 . . [7.00.6000.16640] . . f:\windows\ie7updates\KB950759-IE7\mshtml.dll
[-] 2008-03-01 . AA61A6FAA4D691A6ED38FC1099EDE19B . 3593216 . . [7.00.6000.20772] . . f:\windows\$hf_mig$\KB947864-IE7\SP2QFE\mshtml.dll
[-] 2007-12-08 . E753D2EE81F01E9EA352FF2056A67622 . 3592192 . . [7.00.6000.16608] . . f:\windows\ie7updates\KB947864-IE7\mshtml.dll
[-] 2007-12-07 . DBDDA1D78F879B4562DF99805490FC97 . 3593216 . . [7.00.6000.20733] . . f:\windows\$hf_mig$\KB944533-IE7\SP2QFE\mshtml.dll
[-] 2007-10-31 . E932C9B7BFAA4B0E18AAA9C61B917DD3 . 3590656 . . [7.00.6000.16587] . . f:\windows\ie7updates\KB944533-IE7\mshtml.dll
[-] 2007-10-31 . E932C9B7BFAA4B0E18AAA9C61B917DD3 . 3590656 . . [7.00.6000.16587] . . f:\windows\SoftwareDistribution\Download\1b2d1e82f1d52f1e15e78edb3a426c24\SP2GDR\mshtml.dll
[-] 2007-10-30 . E7125FC5771EF8DE8963A6B877E2E65B . 3593216 . . [7.00.6000.20710] . . f:\windows\$hf_mig$\KB942615-IE7\SP2QFE\mshtml.dll
[-] 2007-10-30 . E7125FC5771EF8DE8963A6B877E2E65B . 3593216 . . [7.00.6000.20710] . . f:\windows\SoftwareDistribution\Download\1b2d1e82f1d52f1e15e78edb3a426c24\SP2QFE\mshtml.dll
[-] 2007-10-30 . 72A740DB336912F140C4C0F3C6E73EF9 . 3079680 . . [6.00.2900.3243] . . f:\windows\$NtUninstallKB942615$\mshtml.dll
[-] 2007-10-30 . F78A71834C592859A55513D7CD22C6E1 . 3086848 . . [6.00.2900.3243] . . f:\windows\$hf_mig$\KB942615\SP2QFE\mshtml.dll
[-] 2007-10-30 . F78A71834C592859A55513D7CD22C6E1 . 3086848 . . [6.00.2900.3243] . . f:\windows\ie7\mshtml.dll
[-] 2007-08-13 . C6EC2493346ED8888A549F59210A8ED3 . 3578368 . . [7.00.5730.13] . . f:\windows\ie7updates\KB942615-IE7\mshtml.dll
[-] 2004-08-17 . EF74351C9098210CC9C1A3679DB62041 . 3003392 . . [6.00.2900.2180] . . f:\windows\$NtUninstallKB942615_0$\mshtml.dll

[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . f:\windows\ServicePackFiles\i386\msvcrt.dll
[-] 2008-04-14 . D165DFCB4EA452510E53416F573018BB . 343040 . . [7.0.2600.5512] . . f:\windows\system32\msvcrt.dll
[-] 2004-08-17 . 91CC3E4CCDBBF8E224182C76C87E454F . 343040 . . [7.0.2600.2180] . . f:\windows\$NtServicePackUninstall$\msvcrt.dll

[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . f:\windows\system32\mswsock.dll
[-] 2008-06-20 . 1289B7611CCD6CB27596AE92CBF03E35 . 247296 . . [5.1.2600.5625] . . f:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . B6CEC406351EA5EF131416D5F52D006F . 247296 . . [5.1.2600.5625] . . f:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB951748$\mswsock.dll
[-] 2008-04-14 . AAC97DAB5F8A0573CF10E0EAC42A7724 . 247296 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\mswsock.dll
[-] 2004-08-17 . 64C078BD4EFD441C3F159EDC5EA4420A . 247296 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\mswsock.dll

[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\netlogon.dll
[-] 2008-04-14 . C2ED0E3408F50BBC149D4F0936E67832 . 407040 . . [5.1.2600.5512] . . f:\windows\system32\netlogon.dll
[-] 2004-08-17 . 2591CADAEF7D2242039255028E577688 . 407040 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\netlogon.dll

[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . f:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . f:\windows\SoftwareDistribution\Download\27b793fe2b6c1c81fb77700e46b60c21\SP3GDR\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . f:\windows\system32\ntoskrnl.exe
[-] 2010-04-28 . EF1542C4875CAA34484A7BCB998B6BC4 . 2192128 . . [5.1.2600.5973] . . f:\windows\system32\dllcache\ntoskrnl.exe
[-] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . f:\windows\$hf_mig$\KB981852\SP3QFE\ntoskrnl.exe
[-] 2010-04-28 . 91FE668957FF51A2DBCEE0D8637BA77E . 2192256 . . [5.1.2600.5973] . . f:\windows\SoftwareDistribution\Download\27b793fe2b6c1c81fb77700e46b60c21\SP3QFE\ntoskrnl.exe
[-] 2010-02-17 . 4E8268B816B2D27E711A688D6FD0E319 . 2192128 . . [5.1.2600.5938] . . f:\windows\$NtUninstallKB981852$\ntoskrnl.exe
[-] 2010-02-16 . 6B2312D847BA95F4E858CB4C3B5F51E1 . 2192256 . . [5.1.2600.5938] . . f:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
[-] 2009-12-10 . 7782F11AE957B736585870CD2671227B . 2191488 . . [5.1.2600.5913] . . f:\windows\$hf_mig$\KB977165-v2\SP3QFE\ntoskrnl.exe
[-] 2009-12-09 . 3B0DC252A20C8A938ED21073EE736AEA . 2191360 . . [5.1.2600.5913] . . f:\windows\$NtUninstallKB979683$\ntoskrnl.exe
[-] 2009-08-04 . F61EB18DA0AA630E2F8A944ED6BD3BF9 . 2191360 . . [5.1.2600.5857] . . f:\windows\$NtUninstallKB977165-v2$\ntoskrnl.exe
[-] 2009-08-04 . 3502DBBC657001D7A2A2768BD7DE1483 . 2191488 . . [5.1.2600.5857] . . f:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[-] 2009-02-10 . 97480EBFE1D4B547657BAD75AAAB1325 . 2191360 . . [5.1.2600.5755] . . f:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 . F48662F55CD8DDD4DBBBCB69DE197725 . 2191232 . . [5.1.2600.5755] . . f:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[-] 2008-08-14 . 2BCBCE27A946C057051A85CB032F49FF . 2191360 . . [5.1.2600.5657] . . f:\windows\$hf_mig$\KB956841\SP3QFE\ntoskrnl.exe
[-] 2008-08-14 . 91F18AB1E9ACBF6E27A5545A8F57C89B . 2191360 . . [5.1.2600.5657] . . f:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB956841$\ntoskrnl.exe
[-] 2008-04-14 . C1536014AC1CB1D5397E31D9735E6571 . 2191104 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ntoskrnl.exe
[-] 2007-02-28 . D40B4F66D877802EC5E655B91B5490FA . 2184320 . . [5.1.2600.3093] . . f:\windows\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
[-] 2007-02-28 . C09CA7FAFFC40BBFACEEB9F0F429F673 . 2182528 . . [5.1.2600.3093] . . f:\windows\$NtServicePackUninstall$\ntoskrnl.exe
[-] 2005-03-02 . 7FABE135EAC02A4BC8094B831ADC0CC3 . 2181632 . . [5.1.2600.2622] . . f:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2005-03-02 . B0DAE70164CC79D1289EF3530A3646F1 . 2181504 . . [5.1.2600.2622] . . f:\windows\$NtUninstallKB931784$\ntoskrnl.exe
[-] 2004-08-17 . 12C80E46DCEC9B82473D1B1B9DA1F16B . 2183168 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB890859$\ntoskrnl.exe

[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . f:\windows\ServicePackFiles\i386\powrprof.dll
[-] 2008-04-14 . 9FA69781CAA7A1DA981A24F240A61A60 . 17408 . . [6.00.2900.5512] . . f:\windows\system32\powrprof.dll
[-] 2004-08-17 . 134B95A1D8FAFD74A68E4B2116DEFA7D . 17408 . . [6.00.2900.2180] . . f:\windows\$NtServicePackUninstall$\powrprof.dll

[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\scecli.dll
[-] 2008-04-14 . 830CE8951C71F361D7D2F38416CC8BC1 . 185856 . . [5.1.2600.5512] . . f:\windows\system32\scecli.dll
[-] 2004-08-17 . 07119058D451CB7EA4317BCFDA8599A6 . 184832 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\scecli.dll

[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\sfc.dll
[-] 2008-04-14 . 5EE949255BABC0B17C09DDB2E59E3878 . 5120 . . [5.1.2600.5512] . . f:\windows\system32\sfc.dll
[-] 2004-08-17 . 6CC2D21488333133AE0C9F44F6051CB7 . 5120 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\sfc.dll

[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\svchost.exe
[-] 2008-04-14 . BE4A520E29B6391F49E79CCC52044D93 . 14336 . . [5.1.2600.5512] . . f:\windows\system32\svchost.exe
[-] 2004-08-17 . DFBA2915B0BF58ABB288CD4C9318CB3F . 14336 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\svchost.exe

[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\tapisrv.dll
[-] 2008-04-14 . C2546CD7A398476F9DF5614B2AE160E8 . 249856 . . [5.1.2600.5512] . . f:\windows\system32\tapisrv.dll
[-] 2005-07-08 . 2EB5536278D697C5895A48514682BF64 . 249344 . . [5.1.2600.2716] . . f:\windows\$hf_mig$\KB893756\SP2QFE\tapisrv.dll
[-] 2005-07-08 . 250241D65CCF692AEACC318A266413C2 . 249344 . . [5.1.2600.2716] . . f:\windows\$NtServicePackUninstall$\tapisrv.dll
[-] 2004-08-17 . 37162D29CD61519E6F5EA0DE99786FF6 . 246272 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB893756$\tapisrv.dll

[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\user32.dll
[-] 2008-04-14 . E16E0990967374E76F3E40CACAFD3D53 . 578560 . . [5.1.2600.5512] . . f:\windows\system32\user32.dll
[-] 2007-03-08 . 5393076FDCD6DAEB82814688DDE3E9A2 . 578048 . . [5.1.2600.3099] . . f:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2007-03-08 . 43240B12D220F30C7C75EA69B2E806B0 . 577536 . . [5.1.2600.3099] . . f:\windows\$NtServicePackUninstall$\user32.dll
[-] 2005-03-02 . 3EF380290CE2CA8598E475CEAC4ADB13 . 577024 . . [5.1.2600.2622] . . f:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2005-03-02 . 9267BC598E271BC3FA69F36CF1C8BD36 . 577024 . . [5.1.2600.2622] . . f:\windows\$NtUninstallKB925902$\user32.dll
[-] 2004-08-17 . 1B4CCC59980DA34E75F20E42B283B027 . 577024 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB890859$\user32.dll

[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\userinit.exe
[-] 2008-04-14 . 7DC1830F22E7D275B438127B68030239 . 26112 . . [5.1.2600.5512] . . f:\windows\system32\userinit.exe
[-] 2004-08-17 . 836F7960362FF95C5D49E40B891F2CFC . 24576 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\userinit.exe

[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . f:\windows\SoftwareDistribution\Download\e574754c794d710f0c3b9c139e56b57f\sp3gdr\wininet.dll
[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . f:\windows\system32\wininet.dll
[-] 2010-06-24 . 805149680A8D2E91234D065BA4EAAB7A . 832512 . . [7.00.6000.17080] . . f:\windows\system32\dllcache\wininet.dll
[-] 2010-06-24 . 5A2EC6E4AE30B8CAF53389A286E39C23 . 841216 . . [7.00.6000.21283] . . f:\windows\$hf_mig$\KB2183461-IE7\SP3QFE\wininet.dll
[-] 2010-06-24 . 5A2EC6E4AE30B8CAF53389A286E39C23 . 841216 . . [7.00.6000.21283] . . f:\windows\SoftwareDistribution\Download\e574754c794d710f0c3b9c139e56b57f\sp3qfe\wininet.dll
[-] 2010-05-04 . 1497FB3C1BC993A5F263FB57E0AD63D3 . 832512 . . [7.00.6000.17055] . . f:\windows\ie7updates\KB2183461-IE7\wininet.dll
[-] 2010-05-04 . 3D4713D326A245AAE068E7148C08AA77 . 841216 . . [7.00.6000.21256] . . f:\windows\$hf_mig$\KB982381-IE7\SP3QFE\wininet.dll
[-] 2010-03-11 . 366F583DBB53049DDFB04D6F7BF2795C . 832512 . . [7.00.6000.17023] . . f:\windows\ie7updates\KB982381-IE7\wininet.dll
[-] 2010-03-11 . 894D1910F23ABB82A19F4E2F1966271E . 841216 . . [7.00.6000.21228] . . f:\windows\$hf_mig$\KB980182-IE7\SP3QFE\wininet.dll
[-] 2010-01-05 . 9BD776679C4656E0CEA5E8BFB9CFD33B . 832512 . . [7.00.6000.16981] . . f:\windows\ie7updates\KB980182-IE7\wininet.dll
[-] 2010-01-05 . 0D90D150ED0DD4C673C627C52D3F7149 . 841216 . . [7.00.6000.21183] . . f:\windows\$hf_mig$\KB978207-IE7\SP3QFE\wininet.dll
[-] 2009-10-29 . 33D6B94981C3FB88F27CFBBE72B59122 . 832512 . . [7.00.6000.16945] . . f:\windows\ie7updates\KB978207-IE7\wininet.dll
[-] 2009-10-29 . 7CD98B487F578D12281B163E2FEF7487 . 841216 . . [7.00.6000.21148] . . f:\windows\$hf_mig$\KB976325-IE7\SP3QFE\wininet.dll
[-] 2009-08-29 . 422C96661C35C7D6DAC7A58A1D6BB145 . 832512 . . [7.00.6000.16915] . . f:\windows\ie7updates\KB976325-IE7\wininet.dll
[-] 2009-08-29 . 7CA27BB855E6B8CC4725582501197E39 . 840704 . . [7.00.6000.21115] . . f:\windows\$hf_mig$\KB974455-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 155CEA8BCA8349B1DB7B8142BA95F6AE . 828928 . . [7.00.6000.21073] . . f:\windows\$hf_mig$\KB972260-IE7\SP3QFE\wininet.dll
[-] 2009-06-29 . 4121C2AFFC37600A4710F63AD8017CF9 . 827392 . . [7.00.6000.16876] . . f:\windows\ie7updates\KB974455-IE7\wininet.dll
[-] 2009-04-29 . D8B3732B92CF879ADE65CCE9361D36FB . 827392 . . [7.00.6000.16850] . . f:\windows\ie7updates\KB972260-IE7\wininet.dll
[-] 2009-04-29 . C6D7F3DF74C49ED8E01CB18272EA0CCA . 828928 . . [7.00.6000.21045] . . f:\windows\$hf_mig$\KB969897-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . 3D7B87D8102C41BABBE5922B5275AA7C . 828416 . . [7.00.6000.21020] . . f:\windows\$hf_mig$\KB963027-IE7\SP3QFE\wininet.dll
[-] 2009-03-03 . BA2611F55D9AE29554008ADBC49D7664 . 826368 . . [7.00.6000.16827] . . f:\windows\ie7updates\KB969897-IE7\wininet.dll
[-] 2008-12-20 . A039CE5F34BF98760F877B29E5A1D4CD . 827904 . . [7.00.6000.20978] . . f:\windows\$hf_mig$\KB961260-IE7\SP2QFE\wininet.dll
[-] 2008-12-20 . 793DA751C812EFC3C6786BBD3B8489A8 . 826368 . . [7.00.6000.16791] . . f:\windows\ie7updates\KB963027-IE7\wininet.dll
[-] 2008-10-16 . 84801E4617B5AFB065DD58438850587D . 826368 . . [7.00.6000.16762] . . f:\windows\ie7updates\KB961260-IE7\wininet.dll
[-] 2008-10-16 . A72D6CC0F715D415003478294C4ECB2A . 827904 . . [7.00.6000.20935] . . f:\windows\$hf_mig$\KB958215-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . A74381B8D7024B2D8BB5691A93F825B8 . 827904 . . [7.00.6000.20900] . . f:\windows\$hf_mig$\KB956390-IE7\SP2QFE\wininet.dll
[-] 2008-08-26 . 0930F57122FF74739E3684D0016877F1 . 826368 . . [7.00.6000.16735] . . f:\windows\ie7updates\KB958215-IE7\wininet.dll
[-] 2008-06-23 . 01EF5E10F55A5AE4D49C93C25879921E . 826368 . . [7.00.6000.16705] . . f:\windows\ie7updates\KB956390-IE7\wininet.dll
[-] 2008-06-23 . 57BE3F6CA8282AC863C16862C1B65964 . 827904 . . [7.00.6000.20861] . . f:\windows\$hf_mig$\KB953838-IE7\SP2QFE\wininet.dll
[-] 2008-04-23 . 03727BB0DE4D4902F951D3BD7D0AC4FE . 827392 . . [7.00.6000.20815] . . f:\windows\$hf_mig$\KB950759-IE7\SP2QFE\wininet.dll
[-] 2008-04-23 . B2F04AA876DC2E15B59B509DE727F415 . 826368 . . [7.00.6000.16674] . . f:\windows\ie7updates\KB953838-IE7\wininet.dll
[-] 2008-04-14 . 3FE5E65A7ED9EC98AEE9167CA07812D3 . 667136 . . [6.00.2900.5512] . . f:\windows\ServicePackFiles\i386\wininet.dll
[-] 2008-03-01 . 4B0D8A282E0BEF3E52B8B6449D8473DD . 826368 . . [7.00.6000.16640] . . f:\windows\ie7updates\KB950759-IE7\wininet.dll
[-] 2008-03-01 . 46A1A52EB6C86344C6EBF65B17404C90 . 827392 . . [7.00.6000.20772] . . f:\windows\$hf_mig$\KB947864-IE7\SP2QFE\wininet.dll
[-] 2007-12-07 . E9B04B01D5A1ECC47B2E4364D171CF23 . 824832 . . [7.00.6000.16608] . . f:\windows\ie7updates\KB947864-IE7\wininet.dll
[-] 2007-12-07 . 32CC73F851F377B035A5B8216CAC63CE . 825344 . . [7.00.6000.20733] . . f:\windows\$hf_mig$\KB944533-IE7\SP2QFE\wininet.dll
[-] 2007-10-11 . 11CAE3F562451FEDA69FEFE453657D2E . 660480 . . [6.00.2900.3231] . . f:\windows\$NtUninstallKB942615$\wininet.dll
[-] 2007-10-11 . 20DBD2AA8E1BC32BC8CAA03BD44F8D4E . 667136 . . [6.00.2900.3231] . . f:\windows\$hf_mig$\KB942615\SP2QFE\wininet.dll
[-] 2007-10-11 . 20DBD2AA8E1BC32BC8CAA03BD44F8D4E . 667136 . . [6.00.2900.3231] . . f:\windows\ie7\wininet.dll
[-] 2007-10-10 . C543CC3D7A05FB0D23107C89115811A0 . 824832 . . [7.00.6000.16574] . . f:\windows\ie7updates\KB944533-IE7\wininet.dll
[-] 2007-10-10 . C543CC3D7A05FB0D23107C89115811A0 . 824832 . . [7.00.6000.16574] . . f:\windows\SoftwareDistribution\Download\1b2d1e82f1d52f1e15e78edb3a426c24\SP2GDR\wininet.dll
[-] 2007-10-10 . 3C48D8EFA3FFA68F7AEAAAFFAB6B9CB3 . 825344 . . [7.00.6000.20696] . . f:\windows\$hf_mig$\KB942615-IE7\SP2QFE\wininet.dll
[-] 2007-10-10 . 3C48D8EFA3FFA68F7AEAAAFFAB6B9CB3 . 825344 . . [7.00.6000.20696] . . f:\windows\SoftwareDistribution\Download\1b2d1e82f1d52f1e15e78edb3a426c24\SP2QFE\wininet.dll
[-] 2007-08-13 . A4A0FC92358F39538A6494C42EF99FE9 . 818688 . . [7.00.5730.13] . . f:\windows\ie7updates\KB942615-IE7\wininet.dll
[-] 2004-08-17 . 50D263E3454E8357D13BB598129185AD . 657408 . . [6.00.2900.2180] . . f:\windows\$NtUninstallKB942615_0$\wininet.dll

[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ws2_32.dll
[-] 2008-04-14 . 951D473917C51F21496D914CF6E5DDD1 . 82432 . . [5.1.2600.5512] . . f:\windows\system32\ws2_32.dll
[-] 2004-08-17 . 382E9B87F1282E697C67AF84E34E35E2 . 82944 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ws2_32.dll

[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ws2help.dll
[-] 2008-04-14 . 859F7735F199C90403340183A3DDFB78 . 19968 . . [5.1.2600.5512] . . f:\windows\system32\ws2help.dll
[-] 2004-08-17 . C2B86666FC44B48903AD6016D15A23DF . 19968 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ws2help.dll

[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . f:\windows\explorer.exe
[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . f:\windows\ServicePackFiles\i386\explorer.exe
[-] 2007-06-13 . ED7B460B142A32097B8A8F6ECC941815 . 1033728 . . [6.00.2900.3156] . . f:\windows\$NtServicePackUninstall$\explorer.exe
[-] 2007-06-13 . 9B32416BD5988C97B6397CE0B02CAF97 . 1033728 . . [6.00.2900.3156] . . f:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2004-08-17 . 53114D57AB73A406AC7F602227781A99 . 1032704 . . [6.00.2900.2180] . . f:\windows\$NtUninstallKB938828$\explorer.exe

[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ole32.dll
[-] 2008-04-14 . 21F836AAB269FF644E0E708B794B0DF7 . 1287168 . . [5.1.2600.5512] . . f:\windows\system32\ole32.dll
[-] 2005-07-26 . A0D5A763708D868C1EFC18D6F6EEDE0D . 1284608 . . [5.1.2600.2726] . . f:\windows\$NtServicePackUninstall$\ole32.dll
[-] 2005-07-26 . 93AC0C1189CB7C34910CD00748A23E3A . 1285632 . . [5.1.2600.2726] . . f:\windows\$hf_mig$\KB902400\SP2QFE\ole32.dll
[-] 2005-04-28 . 518208504C310D52FF0FD447AD837AAF . 1286144 . . [5.1.2600.2665] . . f:\windows\$hf_mig$\KB894391\SP2QFE\ole32.dll
[-] 2005-04-28 . CFCC76DA89286D20644CA92DFD2CF410 . 1284608 . . [5.1.2600.2665] . . f:\windows\$NtUninstallKB902400$\ole32.dll
[-] 2004-08-17 . 7FE54C063DDA8EF226846510852E6B1B . 1281024 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB894391$\ole32.dll

[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\srsvc.dll
[-] 2008-04-14 . 35B91147124F64AC8081A2EDB9EA4DEE . 171008 . . [5.1.2600.5512] . . f:\windows\system32\srsvc.dll
[-] 2004-08-17 . 3CD57F31A64D32FDB28918B16D1E6AAC . 170496 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\srsvc.dll

[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\wscntfy.exe
[-] 2008-04-14 . 278A14BEDEF58687EAF8BEC056A78D8B . 13824 . . [5.1.2600.5512] . . f:\windows\system32\wscntfy.exe
[-] 2004-08-17 . 93F75FF033BAA186D08115D73BFE3D32 . 13824 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\wscntfy.exe

[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\xmlprov.dll
[-] 2008-04-14 . EAA4BB9EDB3FB10CF8979FE65E63658F . 129024 . . [5.1.2600.5512] . . f:\windows\system32\xmlprov.dll
[-] 2004-08-17 . 9B835D4C64860B155A1701D5092EC9E4 . 129536 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\xmlprov.dll

[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\eventlog.dll
[-] 2008-04-14 . 2EE99F67C930931EB404DADCE57E976E . 56320 . . [5.1.2600.5512] . . f:\windows\system32\eventlog.dll
[-] 2004-08-17 . 6EB66066D5C0175320CFEA0A4C74C88F . 55808 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\eventlog.dll

[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\sfcfiles.dll
[-] 2008-04-14 . 56A6034E7764E23D9114223EB3523925 . 1571840 . . [5.1.2600.5512] . . f:\windows\system32\sfcfiles.dll
[-] 2004-08-17 . 5CA2E2BA624D6F2C7A581C91E70394CB . 1548288 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\sfcfiles.dll

[-] 2008-05-17 . A5BAA91475167161DEA02BA3C4CA4F59 . 15360 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ctfmon.exe
[-] 2008-04-14 . A756B8F0F7BAFBA6DFE39F7D169F2519 . 15360 . . [5.1.2600.5512] . . f:\windows\system32\ctfmon.exe

[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . f:\windows\ServicePackFiles\i386\shsvcs.dll
[-] 2008-04-14 . B927443008910B412BEC72FC41C1BAD0 . 135168 . . [6.00.2900.5512] . . f:\windows\system32\shsvcs.dll
[-] 2006-12-19 . E26EDC7AFA8DA3C528055EABC82C8C79 . 134656 . . [6.00.2900.3051] . . f:\windows\$NtServicePackUninstall$\shsvcs.dll
[-] 2006-12-19 . F961FDD353F9451440197024FDDFE086 . 135168 . . [6.00.2900.3051] . . f:\windows\$hf_mig$\KB928255\SP2QFE\shsvcs.dll
[-] 2004-08-17 . 8BA76BD2A943F642F267A296A15776D2 . 134656 . . [6.00.2900.2180] . . f:\windows\$NtUninstallKB928255$\shsvcs.dll

[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\regsvc.dll
[-] 2008-04-14 . 8F31505484A190D5B22274708799F4EC . 59904 . . [5.1.2600.5512] . . f:\windows\system32\regsvc.dll
[-] 2004-08-17 . 5B21208FCF8970BB61FE98E19D828714 . 59904 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\regsvc.dll

[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\schedsvc.dll
[-] 2008-04-14 . 3FF232A7731621B8902D81D42418C93C . 192512 . . [5.1.2600.5512] . . f:\windows\system32\schedsvc.dll
[-] 2004-08-17 . 29AC93307C6182DBE336BCA314947F28 . 190976 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\schedsvc.dll

[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ssdpsrv.dll
[-] 2008-04-14 . BECD5271DC4E3B7C3D035F790FCBC1E5 . 71680 . . [5.1.2600.5512] . . f:\windows\system32\ssdpsrv.dll
[-] 2004-08-17 . 88C28F53F53438DAFCD95E99C837C61E . 71680 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ssdpsrv.dll

[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\termsrv.dll
[-] 2008-04-14 . A75DD6FC3DBEE4FFF5EBC9F2C28BB66E . 295936 . . [5.1.2600.5512] . . f:\windows\system32\termsrv.dll
[-] 2004-08-17 . 2F5919F2F6EE7A845893D9C3AA2BC56A . 295936 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\termsrv.dll

[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\appmgmts.dll
[-] 2008-04-14 . 6B8E7A90E576D4FE308F97C69060A171 . 171008 . . [5.1.2600.5512] . . f:\windows\system32\appmgmts.dll
[-] 2004-08-17 . 421184F91EAE5C6E78E653C6B32AAE84 . 171008 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\appmgmts.dll

[-] 2001-10-25 . AFDFF022A01F0B11C776F0860C3B282F . 11776 . . [5.1.2600.0] . . f:\windows\system32\drivers\acpiec.sys

jessiie · #4 Příspěvek od **jessiie** » 16 srp 2010 14:45

[-] 2008-04-13 20:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . f:\windows\ServicePackFiles\i386\aec.sys
[-] 2008-04-13 20:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . f:\windows\system32\drivers\aec.sys
[-] 2006-02-15 00:30 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . f:\windows\$hf_mig$\KB900485\SP2QFE\aec.sys
[-] 2006-02-15 00:22 . 1EE7B434BA961EF845DE136224C30FEC . 142464 . . [5.1.2601.2180] . . f:\windows\$NtServicePackUninstall$\aec.sys
[-] 2004-08-03 21:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . f:\windows\$NtUninstallKB900485$\aec.sys

[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\agp440.sys
[-] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . f:\windows\system32\drivers\agp440.sys
[-] 2004-08-03 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\agp440.sys
[-] 2004-08-03 . 2C428FA0C3E3A01ED93C9B2A27D8D4BB . 42368 . . [5.1.2600.2180] . . f:\windows\system32\ReinstallBackups\0001\DriverFiles\i386\AGP440.SYS

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ip6fw.sys
[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . f:\windows\system32\drivers\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\ip6fw.sys

[-] 2008-04-14 06:51 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . f:\windows\ServicePackFiles\i386\mfc40u.dll
[-] 2008-04-14 06:51 . 7C3351F60B759D5D917E68342AE3307C . 927504 . . [4.1.0.61] . . f:\windows\system32\mfc40u.dll
[-] 2006-11-01 19:19 . 6C44E5766939B7552BFF75B2B6FF1161 . 927504 . . [4.1.0.61] . . f:\windows\$NtServicePackUninstall$\mfc40u.dll
[-] 2001-10-25 14:00 . A9D81C87BEF253D4CE3A5F8CEE2526C4 . 924432 . . [4.1.6140] . . f:\windows\$NtUninstallKB924667$\mfc40u.dll

[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\msgsvc.dll
[-] 2008-04-14 . 221CD1C815B8A6B79389C3F5D1018DE8 . 33792 . . [5.1.2600.5512] . . f:\windows\system32\msgsvc.dll
[-] 2004-08-17 . 8B2FCBD881879B55BE40B41F12FFC431 . 33792 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\msgsvc.dll

[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . f:\windows\system32\mspmsnsv.dll
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . f:\windows\system32\dllcache\mspmsnsv.dll
[-] 2005-01-28 07:53 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . f:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2005-01-28 07:53 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . f:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[-] 2004-08-17 13:49 . E02E913B3841717A890A644EE167B9A5 . 52224 . . [9.0.1.56] . . f:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . f:\windows\$hf_mig$\KB981852\SP3QFE\ntkrnlpa.exe
[-] 2010-04-28 . 2FA1EF498F026847CF276DF9099ABE79 . 2069120 . . [5.1.2600.5973] . . f:\windows\SoftwareDistribution\Download\27b793fe2b6c1c81fb77700e46b60c21\SP3QFE\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . f:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . f:\windows\SoftwareDistribution\Download\27b793fe2b6c1c81fb77700e46b60c21\SP3GDR\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . f:\windows\system32\ntkrnlpa.exe
[-] 2010-04-28 . E4D3DB21C20749B8776B3E2C4B880404 . 2068992 . . [5.1.2600.5973] . . f:\windows\system32\dllcache\ntkrnlpa.exe
[-] 2010-02-16 . 6C31566C176BC28C7D73BC6332642A58 . 2068992 . . [5.1.2600.5938] . . f:\windows\$NtUninstallKB981852$\ntkrnlpa.exe
[-] 2010-02-16 . DCC3D91A3DEDBBA9ECFFA6028D872CF5 . 2069120 . . [5.1.2600.5938] . . f:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
[-] 2009-12-10 . 58516936F00D10D4B615C458A8A4AB71 . 2068352 . . [5.1.2600.5913] . . f:\windows\$hf_mig$\KB977165-v2\SP3QFE\ntkrnlpa.exe
[-] 2009-12-09 . 166530C022AB3A0F9EADB20633AE034E . 2068224 . . [5.1.2600.5913] . . f:\windows\$NtUninstallKB979683$\ntkrnlpa.exe
[-] 2009-08-04 . 97815C93200676C727CE951AE5C78137 . 2068352 . . [5.1.2600.5857] . . f:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[-] 2009-08-04 . 182A95C233C9C254FEE7F047E6CA73D1 . 2068224 . . [5.1.2600.5857] . . f:\windows\$NtUninstallKB977165-v2$\ntkrnlpa.exe
[-] 2009-02-10 . D721665942F74CA7FF4162A0761CBB0A . 2068224 . . [5.1.2600.5755] . . f:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[-] 2009-02-09 . FF8A3F180A224AA27EBAB937CA027F4D . 2068352 . . [5.1.2600.5755] . . f:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 5495B7902AE2EEE3A98D889E9A679724 . 2068224 . . [5.1.2600.5657] . . f:\windows\$hf_mig$\KB956841\SP3QFE\ntkrnlpa.exe
[-] 2008-08-14 . 09CD607918C3F5600D8A111155F62CA6 . 2068224 . . [5.1.2600.5657] . . f:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . f:\windows\$NtUninstallKB956841$\ntkrnlpa.exe
[-] 2008-04-14 . 4DEE41C45E803DB91A72FD1BA69C05EE . 2067968 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\ntkrnlpa.exe
[-] 2007-02-28 . A873FF1754E2A81CB1A34588CAB363D6 . 2061568 . . [5.1.2600.3093] . . f:\windows\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
[-] 2007-02-28 . C80BCA19AA7D4DC37857E9F8250756DA . 2059776 . . [5.1.2600.3093] . . f:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
[-] 2005-03-02 . 9355304DD565E23F8EE294720B2C03E5 . 2059008 . . [5.1.2600.2622] . . f:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2005-03-02 . E32780E8939338B80EDFF39E2314C223 . 2059008 . . [5.1.2600.2622] . . f:\windows\$NtUninstallKB931784$\ntkrnlpa.exe
[-] 2004-08-17 . E86DD06F2B8F919DDF23F78A3BF2AA23 . 2059008 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB890859$\ntkrnlpa.exe

[-] 2008-04-14 06:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . f:\windows\ServicePackFiles\i386\ntmssvc.dll
[-] 2008-04-14 06:51 . 023DD70573D644F3D9C8B1258A7BFD08 . 435712 . . [5.1.2400.5512] . . f:\windows\system32\ntmssvc.dll
[-] 2004-08-17 13:49 . D8D2B13BA93AE830B1A637DF571D1195 . 435712 . . [5.1.2400.2180] . . f:\windows\$NtServicePackUninstall$\ntmssvc.dll

[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\upnphost.dll
[-] 2008-04-14 . 651BD90DCEE5B7BDC74A2EB7C9266F9E . 186368 . . [5.1.2600.5512] . . f:\windows\system32\upnphost.dll
[-] 2007-02-05 . 6FD45FDC0C32BC4E81F718B671A3E017 . 185344 . . [5.1.2600.3077] . . f:\windows\$hf_mig$\KB931261\SP2QFE\upnphost.dll
[-] 2007-02-05 . 0C0C2C77C6B52181369594F2AA36AF40 . 185344 . . [5.1.2600.3077] . . f:\windows\$NtServicePackUninstall$\upnphost.dll
[-] 2004-08-17 . 984FC1518B0D5B31D76F0E63608E0500 . 185344 . . [5.1.2600.2180] . . f:\windows\$NtUninstallKB931261$\upnphost.dll

[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . f:\windows\ServicePackFiles\i386\dsound.dll
[-] 2008-04-14 . 8E009E7AC012823845D5F39A77F4A27F . 367616 . . [5.3.2600.5512] . . f:\windows\system32\dsound.dll
[-] 2004-08-17 . 8ECC475F5BAD26DB85943F888D62E364 . 367616 . . [5.3.2600.2180] . . f:\windows\$NtServicePackUninstall$\dsound.dll

[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . f:\windows\ServicePackFiles\i386\d3d9.dll
[-] 2008-04-14 . 3B8AE11A3419DF8239183E94888702FA . 1689088 . . [5.03.2600.5512] . . f:\windows\system32\d3d9.dll
[-] 2004-08-17 . A19F5837E52D57DB66D9DB55BFCC7796 . 1689088 . . [5.03.2600.2180] . . f:\windows\$NtServicePackUninstall$\d3d9.dll

[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . f:\windows\ServicePackFiles\i386\ddraw.dll
[-] 2008-04-14 . EDAD701F01FFD9B5799B8FCF1CF6BDA7 . 279552 . . [5.03.2600.5512] . . f:\windows\system32\ddraw.dll
[-] 2004-08-17 . 0F9A5DD4503E82B085D8B1336B961A81 . 266240 . . [5.03.2600.2180] . . f:\windows\$NtServicePackUninstall$\ddraw.dll

[-] 2008-04-14 06:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\olepro32.dll
[-] 2008-04-14 06:51 . 16C195EBC0A3EC35C48D0C2D9A346BAB . 84992 . . [5.1.2600.5512] . . f:\windows\system32\olepro32.dll
[-] 2004-08-17 13:49 . 33F14F23DFAE4B43CDD4E535CD7C1963 . 83456 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\olepro32.dll

[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . f:\windows\ServicePackFiles\i386\perfctrs.dll
[-] 2008-04-14 . 1682285F7C0934C764A0EBBC568153CA . 39936 . . [5.1.2600.5512] . . f:\windows\system32\perfctrs.dll
[-] 2004-08-17 . 6C08FF4B76506676617E03C34ECCFB11 . 39936 . . [5.1.2600.2180] . . f:\windows\$NtServicePackUninstall$\perfctrs.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="f:\documents and settings\iveta\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2009-05-07 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Smapp"="f:\program files\Analog Devices\SoundMAX\Smtray.exe" [2002-06-26 90112]
"nod32kui"="f:\program files\Eset\nod32kui.exe" [2009-09-09 917504]
"NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2010-04-03 13670504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoFileAssociate"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"f:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"f:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\jessiie\\Plocha\\BitComet.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"f:\\Documents and Settings\\iveta\\Plocha\\StrongDC.exe"=
"c:\\Documents and Settings\\jessiie\\Plocha\\StrongDC.exe"=
"f:\\Program Files\\BitComet\\BitComet.exe"=
"f:\\Documents and Settings\\iveta\\Dokumenty\\vlc-0.8.6b-test1\\vlc.exe"=
"f:\\Program Files\\FlashFXP\\FlashFXP.exe"=
"c:\\kav\\kav7.0\\german\\setup.exe"=
"f:\\Program Files\\ICQ6\\ICQ.exe"=
"f:\\Program Files\\SopCast\\SopCast.exe"=
"f:\\Program Files\\SopCast\\adv\\SopAdver.exe"=
"f:\\Documents and Settings\\iveta\\Plocha\\mplayerc.exe"=
"f:\\Program Files\\uTorrent\\utorrent.exe"=
"f:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"f:\\Program Files\\Xfire\\xfire.exe"=
"f:\\Program Files\\iTunes\\iTunes.exe"=
"f:\\Program Files\\QIP\\qip.exe"=
"f:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"f:\\Program Files\\WebSite X5 v8 - Evolution\\WebSite.exe"=

R0 Lbd;Lbd;f:\windows\system32\DRIVERS\Lbd.sys [x]
R2 gupdate1c9a65434ce1bda;Služba Google Update (gupdate1c9a65434ce1bda);f:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 133104]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;f:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-06-03 30192]
R3 NPF;NetGroup Packet Filter Driver;f:\windows\system32\drivers\npf.sys [2005-08-02 32512]
R3 TVICHW32;TVICHW32;f:\windows\system32\DRIVERS\TVICHW32.SYS [2007-12-04 23600]
R4 sptd;sptd;f:\windows\system32\Drivers\sptd.sys [2002-01-01 715248]
S0 d347bus;d347bus;f:\windows\system32\DRIVERS\d347bus.sys [2004-08-22 155136]
S0 d347prt;d347prt;f:\windows\System32\Drivers\d347prt.sys [2004-08-22 5248]
S1 sp_rsdrv2;Spyware Terminator Driver 2;f:\windows\system32\drivers\sp_rsdrv2.sys [2009-11-05 142592]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
\Shell\AutoRun\command - H:\LaunchU3.exe -a
.
Obsah adresáře 'Naplánované úlohy'

2009-07-15 f:\windows\Tasks\AppleSoftwareUpdate.job
- f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 10:34]

2010-08-14 f:\windows\Tasks\Google Software Updater.job
- f:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-16 16:05]

2010-08-14 f:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- f:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 16:27]

2010-08-14 f:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- f:\program files\Google\Update\GoogleUpdate.exe [2009-03-16 16:27]

2010-08-14 f:\windows\Tasks\WGASetup.job
- f:\windows\system32\KB905474\wgasetup.exe [2009-10-06 20:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: f:\program files\Rapidown\rapidownGetAll.htm
IE: Add to Google Photos Screensa&ver - f:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - f:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Stáhnout obsah FLV videa s IDM - f:\program files\IDM\Internet Download Manager\IEGetVL.htm
IE: Stáhnout s IDM - f:\program files\IDM\Internet Download Manager\IEExt.htm
IE: Stáhnout všechny odkazy s IDM - f:\program files\IDM\Internet Download Manager\IEGetAll.htm
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Internet Explorer
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Internet Explorer\LowRegistry
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Internet Explorer\LowRegistry\Extensions
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Windows
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Windows\CurrentVersion
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Windows\CurrentVersion\Ext
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\Software\Microsoft\Windows\CurrentVersion\Ext\Stats
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software\Microsoft
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software\Microsoft\Internet Explorer
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software\Microsoft\Internet Explorer\LowRegistry
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software\Microsoft\Internet Explorer\LowRegistry\Extensions
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451}\Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449}\iexplore
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} -
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} -
LSP: imon.dll
DPF: {0470E62C-C97E-4317-81E5-0774D8CBF7B7} - hxxp://www.endpointscan.com/EndPointScan.cab
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
HKCU-Run-OEXPRESS - (no file)
Notify-byXQJdBT - (no file)
Notify-opnlIxYP - opnlIxYP.dll
AddRemove-NVIDIA Display Control Panel - f:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-16 15:20
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x82C03A70]<<
kernel: MBR read successfully
detected MBR rootkit hooks:
\Driver\Disk -> CLASSPNP.SYS @ 0xf8792f28
\Driver\ACPI -> ACPI.sys @ 0xf86dfcb8
\Driver\atapi -> 0x82c03a70
IoDeviceObjectType -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0615
ParseProcedure -> ntoskrnl.exe @ 0x8056c3ac
\Device\Harddisk0\DR0 -> DeleteProcedure -> ntoskrnl.exe @ 0x805a0615
ParseProcedure -> ntoskrnl.exe @ 0x8056c3ac
NDIS: Realtek RTL8139 Family PCI Fast Ethernet NIC #2 -> SendCompleteHandler -> NDIS.sys @ 0xf8566bd4
PacketIndicateHandler -> NDIS.sys @ 0xf8554a0d
SendHandler -> NDIS.sys @ 0xf8568b40
Warning: possible MBR rootkit infection !
user & kernel MBR OK

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):c3,54,6e,72,be,12,68,e8,53,f4,a5,ba,e4,8d,8e,40,26,9c,27,51,c9,
00,6a,23,25,f3,1f,22,89,3b,5b,bd,a5,25,a3,3e,72,9c,ba,1d,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{b2025446-5dc8-4167-a014-d51499a74356}]
@Denied: (Full) (Everyone)
"Model"=dword:000000d6
"Therad"=dword:0000001a
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,85,b1,12,f9,90,dd,23,a1,49,8c,bf,1a,9d,fe,41,71,cb,3f,46,a4,7c,ab,\
.
------------------------ Jiné spuštené procesy ------------------------
.
f:\windows\system32\nvsvc32.exe
f:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
f:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
f:\program files\Java\jre6\bin\jqs.exe
f:\program files\Eset\nod32krn.exe
f:\program files\Analog Devices\SoundMAX\SMAgent.exe
f:\program files\Spyware Terminator\sp_rsser.exe
f:\windows\system32\RUNDLL32.EXE
.
**************************************************************************
.
Celkový čas: 2010-08-16 15:26:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-08-16 13:26

Před spuštěním: 4 431 888 384
Po spuštění: 4 537 511 936

Current=3 Default=3 Failed=1 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - DEEBAFAFAA57C7296F06C746AF1D1094

#5 Příspěvek od **eda** » 16 srp 2010 15:16

No to je dost hrůza.

1) Máte legální NOD?
2) ComboFix by se neměl spouštět bez výslovného pokynu zkušené osoby!
3) Tyto soubory otestujte online na http://www.virustotal.com :
f:\windows\system32\drivers\aec.sys
f:\windows\system32\drivers\beep.sys
f:\windows\system32\ntkrnlpa.exe
f:\windows\system32\drivers\ndis.sys
f:\windows\system32\drivers\tcpip.sys

Do okna vložte cestu k souboru a dejte Odeslat. Výsledky sem.

jessiie · #6 Příspěvek od **jessiie** » 16 srp 2010 16:46

Tak jsem vše otestovala, ale mám problém s kopírováním. Nelze kopírovat jak v nouzovém režimu, tak ani v běžném režimu.

Až na jeden případ je vše Ok.

eSafe našel v beep.sys vir Win32.Banker

K antiviru - jeho některé funkce v souvislosti s virem byly zablokované a brána firewall nefunkční, což jsem nevěděla

Tak snad to dáme do kupy i s touto informací

Dík moc

#7 Příspěvek od **eda** » 16 srp 2010 16:54

Odinstalujte všechny emulátory virtuálních mechanik.

Stáhněte SPTD http://www.duplexsecure.com/en/downloads
Vyberte verzi podle svého operačního systému (64 & 32b). Uložte na plochu a spusťte.

zvolte možnost Uninstall a restartujte PC.

Stáhněte a spusťte http://www.jpshortstuff.247fixes.com/Defogger.exe
Klikněte na "Disable" a restartujte PC.

Stáhněte MBR na plochu http://www2.gmer.net/mbr/mbr.exe

Klikněte pravým tl. myši na soubor "MBR", zvolte "Vlastnosti" - "Kompatibilita" a zaškrtněte položku "Spustit tento program jako správce" - OK"

Start > Spustit (Win + R)

Vyskočí okénko, zkopírujte do něj:
Kód: Vybrat vše
"%userprofile%\desktop\mbr" -t
Klikněte na OK

Vytvoří se log s názvem mbr.log, vložte ho sem.

Dejte log z Gmer http://www.viry.cz/forum/viewtopic.php?f=29&t=62878

jessiie · #8 Příspěvek od **jessiie** » 16 srp 2010 19:37

SPTD - nelze spustit unistall. Já se z toho zblázním ... Je ještě nějaká jiná možnost?

Co ho zkusit odstranit SpyHunters na Enigmasoftware.com. Ten soft neznám, tak se raději ptám, ale umí odstranit Win32.Banker.

#9 Příspěvek od **eda** » 16 srp 2010 19:58

Na SpyHunters rychle zapomeňte. Je to podvodný program! O ten vir se mi nejedná, to byl pravděpodobně falešný poplach. Jde mi o něco jiného.

Stáhla jste správnou verzi? Pokud i tak nepůjde, restartujte počítač a pokračujte v návodu Defoggerem.

jessiie · #10 Příspěvek od **jessiie** » 16 srp 2010 20:42

Tak jsem skončila u MBR, kde mi to možnost spustit jako správce nenabízí.

nabízí mi toto:

1) Spustit v režimu kompatibility pro
* Win 95
* Win 98 a Me
* Win NT 4.0
* Win 2000

2) Nastavení obrazovky

9) Nastavení zadání

To't vše ...

Mám ten soubor spustit bez toho nastavení?

#11 Příspěvek od **eda** » 17 srp 2010 05:37

Spusťte. Nezapomeňte mbr uložit na Plochu před dalším příkazem.

jessiie · #12 Příspěvek od **jessiie** » 23 srp 2010 23:05

Omlouvám se, že reaguji s takovým zpožděním, ale PC totálně kleklo a musela jsem s ním do servisu. Odešel zdroj, ale virů tam prý bylo také požehnaně

Ještě jednou děkuji za pomoc a přeji hezký den.

#13 Příspěvek od **eda** » 24 srp 2010 05:36

Hlavně že je to už dobrý.
Děkuju. Vám taky pěkný den.

VIRY.CZ

Nejde spustit IE, programy antispyware, brána firewall atd.

Nejde spustit IE, programy antispyware, brána firewall atd.

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a

Re: Nejde spustit IE, programy antispyware, brána firewall a