Kámoš mi zaviroval počítač

[clever.potheat]

Ahoj, kámoš mi před 10-ti minutami zaviroval pc, říkal že to sám uklidí, ale moc mu nevěřím, byl bych klidnější kdyby se na to někdo podíval. Díky

Log:

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by WarezBos at 2010-09-06 22:08:54
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 10 GB (21%) free of 50 GB
Total RAM: 2047 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:08:59, on 6.9.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\MEDIAK~1\MagicKey.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\Program Files\Steam\Steam.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Creative\MediaSource\RemoteControl\OSDMenu.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Pidgin\pidgin.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\System32\WScript.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\svchost.exe
C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\WarezBos\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\WarezBos.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: Shell=Explorer.exe Explore.vbs
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SbUsb AudCtrl] RunDll32 sbusbdll.dll,RCMonitor
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [MagicKey] C:\PROGRA~1\MEDIAK~1\MagicKey.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [SystemKey] C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\All Users\Data aplikací\SystemKey\SystemKey.dll" rdl
O4 - HKLM\..\Run: [svchost] C:\WINDOWS\svchost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Sony Ericsson PC Companion] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /systray /nologon
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AODService - Unknown owner - C:\Program Files\AMD\OverDrive\AODAssist.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

--
End of file - 7710 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-861567501-839522115-500Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1482476501-861567501-839522115-500UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-14 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-14 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SbUsb AudCtrl"=RunDll32 sbusbdll.dll,RCMonitor []
"UpdReg"=C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]
"MagicKey"=C:\PROGRA~1\MEDIAK~1\MagicKey.exe [2007-01-09 167936]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-01 61440]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"SystemKey"=C:\Documents and Settings\All Users\Data aplikací\SystemKey\SystemKey.dll [2006-04-07 339968]
"svchost"=C:\WINDOWS\svchost.exe [2010-09-06 603136]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"RemoteCenter"=C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE [2004-06-25 147456]
"Google Update"=C:\Documents and Settings\WarezBos\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-08-11 136176]
"Steam"=C:\Program Files\Steam\Steam.exe [2010-08-24 1242448]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-08-26 327472]
"Sony Ericsson PC Companion"=C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe [2009-06-18 772096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-09-03 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Program Files\Steam\steamapps\tkunovsky\half-life 2 deathmatch\hl2.exe"="C:\Program Files\Steam\steamapps\tkunovsky\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Wizards of the Coast LLC\Magic The Gathering - Duels of the Planeswalkers\DotP.exe"="C:\Program Files\Wizards of the Coast LLC\Magic The Gathering - Duels of the Planeswalkers\DotP.exe:*:Enabled:DotP"
"C:\Program Files\Pidgin\pidgin.exe"="C:\Program Files\Pidgin\pidgin.exe:*:Enabled:Pidgin"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Steam\steamapps\common\magic the gathering - duels of the planeswalkers\DotP.exe"="C:\Program Files\Steam\steamapps\common\magic the gathering - duels of the planeswalkers\DotP.exe:*:Enabled:Magic: The Gathering - Duels of the Planeswalkers"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-09-06 22:08:55 ----D---- C:\Program Files\trend micro
2010-09-06 22:08:54 ----D---- C:\rsit
2010-09-06 21:56:50 ----A---- C:\WINDOWS\svchost.exe
2010-09-06 21:56:47 ----A---- C:\WINDOWS\screenshot.exe
2010-09-06 21:35:07 ----A---- C:\WINDOWS\shb.sys
2010-09-06 21:35:07 ----A---- C:\WINDOWS\Explore.vbs
2010-09-06 15:14:19 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Thinstall
2010-09-06 12:41:36 ----D---- C:\zdrojak ahk
2010-09-05 15:39:56 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys
2010-09-05 15:39:53 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys
2010-09-05 15:39:52 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys
2010-09-05 15:39:51 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys
2010-09-05 15:39:49 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2010-09-05 15:39:48 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2010-09-05 15:39:46 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2010-09-05 15:39:39 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-09-05 15:39:39 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2010-09-05 15:36:25 ----A---- C:\WINDOWS\system32\drivers\avc.sys
2010-09-05 15:36:22 ----A---- C:\WINDOWS\system32\drivers\61883.sys
2010-09-05 13:42:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\SystemKey
2010-09-05 08:32:49 ----A---- C:\log.txt
2010-09-05 08:07:07 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-09-04 08:59:17 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-09-03 07:55:42 ----D---- C:\WINDOWS\ie7updates
2010-09-03 07:55:19 ----D---- C:\WINDOWS\WBEM
2010-09-03 07:55:19 ----D---- C:\WINDOWS\system32\cs-cz
2010-09-03 07:54:27 ----HDC---- C:\WINDOWS\ie7
2010-09-03 07:54:18 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-09-03 07:54:08 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-09-03 07:53:55 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2010-09-03 07:53:54 ----N---- C:\WINDOWS\system32\xmllite.dll
2010-09-03 07:52:37 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-03 07:52:33 ----D---- C:\WINDOWS\network diagnostic
2010-09-03 07:52:32 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2010-09-02 17:49:59 ----A---- C:\WINDOWS\system32\drivers\s1018unic.sys
2010-09-02 17:49:59 ----A---- C:\WINDOWS\system32\drivers\s1018mgmt.sys
2010-09-02 17:49:59 ----A---- C:\WINDOWS\system32\drivers\s1018cr.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018whnt.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018wh.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018obex.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018nd5.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018cmnt.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018cm.sys
2010-09-02 17:49:58 ----A---- C:\WINDOWS\system32\drivers\s1018bus.sys
2010-09-02 17:49:56 ----D---- C:\Program Files\Sony Ericsson
2010-09-02 17:49:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2010-09-02 17:49:43 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-02 17:49:40 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2010-09-02 17:49:15 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-09-02 17:49:02 ----D---- C:\WINDOWS\system32\LogFiles
2010-09-02 17:49:02 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-09-02 17:48:56 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2010-08-31 18:35:07 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\PSpad
2010-08-31 18:35:03 ----D---- C:\Program Files\PSPad editor
2010-08-30 18:51:20 ----A---- C:\STF141.tmp
2010-08-30 18:50:35 ----A---- C:\STF140.tmp
2010-08-30 18:48:08 ----D---- C:\Program Files\NVIDIA Corporation
2010-08-30 18:47:24 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2010-08-30 18:47:24 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2010-08-30 18:47:24 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2010-08-30 18:47:24 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2010-08-30 18:47:23 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2010-08-30 18:47:23 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2010-08-30 18:47:23 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2010-08-30 18:47:23 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2010-08-30 18:47:22 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2010-08-30 18:47:22 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2010-08-30 18:47:22 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2010-08-30 18:47:22 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2010-08-30 18:47:22 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2010-08-30 18:47:21 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2010-08-30 18:47:21 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2010-08-30 18:47:20 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2010-08-30 18:47:19 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-08-30 18:47:19 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2010-08-30 18:47:19 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-08-30 18:42:36 ----D---- C:\Program Files\Elaborate Bytes
2010-08-29 22:04:12 ----D---- C:\DriveKey
2010-08-26 21:52:17 ----D---- C:\Program Files\Vypínač na dobrou noc
2010-08-26 15:33:33 ----D---- C:\Program Files\Magic Workstation
2010-08-26 09:17:53 ----D---- C:\Program Files\uTorrent
2010-08-26 09:17:07 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\uTorrent
2010-08-25 19:36:22 ----D---- C:\Program Files\AutoHotkey
2010-08-21 22:22:36 ----A---- C:\WINDOWS\WORDPAD.INI
2010-08-21 16:03:09 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\gtk-2.0
2010-08-20 14:06:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Macromedia
2010-08-20 06:53:50 ----D---- C:\Program Files\YouTube Downloader
2010-08-20 06:52:10 ----D---- C:\Program Files\FDRLab
2010-08-19 15:57:09 ----D---- C:\totalcmd
2010-08-19 15:57:09 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\GHISLER
2010-08-19 15:57:09 ----A---- C:\WINDOWS\UC.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\RAR.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\PKZIP.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\PKUNZIP.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\NOCLOSE.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\LHA.PIF
2010-08-19 15:57:09 ----A---- C:\WINDOWS\ARJ.PIF
2010-08-17 15:01:44 ----D---- C:\Program Files\VOWSoft
2010-08-17 15:01:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\VOWSoft
2010-08-16 16:01:17 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-08-16 15:59:35 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2010-08-16 00:31:41 ----D---- C:\WINDOWS\system32\XPSViewer
2010-08-16 00:31:38 ----D---- C:\Program Files\MSBuild
2010-08-16 00:31:37 ----D---- C:\WINDOWS\system32\en-US
2010-08-16 00:31:35 ----D---- C:\Program Files\Reference Assemblies
2010-08-16 00:31:22 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-08-16 00:31:21 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-08-16 00:31:21 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-08-16 00:29:42 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-08-16 00:29:38 ----D---- C:\Program Files\MSXML 6.0
2010-08-15 10:07:56 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-08-15 08:24:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-08-15 08:24:25 ----D---- C:\Program Files\Common Files\Adobe
2010-08-15 08:24:25 ----D---- C:\Program Files\Adobe
2010-08-15 08:20:18 ----D---- C:\Program Files\CDisplay
2010-08-14 22:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-08-14 22:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-08-14 22:34:59 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\ATI
2010-08-14 22:34:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-08-14 22:29:55 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-08-14 22:28:39 ----RSD---- C:\WINDOWS\assembly
2010-08-14 22:28:24 ----D---- C:\WINDOWS\Microsoft.NET
2010-08-14 22:27:21 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-08-14 14:44:37 ----A---- C:\WINDOWS\PhotoSnapViewer.INI
2010-08-14 13:30:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-08-14 13:30:18 ----D---- C:\Program Files\Common Files\Java
2010-08-14 13:30:09 ----A---- C:\WINDOWS\system32\javaws.exe
2010-08-14 13:30:09 ----A---- C:\WINDOWS\system32\javaw.exe
2010-08-14 13:30:09 ----A---- C:\WINDOWS\system32\java.exe
2010-08-14 13:30:09 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-08-14 13:29:57 ----D---- C:\Program Files\Java
2010-08-14 13:29:22 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Sun
2010-08-13 16:23:52 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-08-13 16:23:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-08-13 16:23:47 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-08-13 16:23:43 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-08-13 16:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-08-13 16:23:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-08-13 16:23:34 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-08-13 16:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-08-13 16:23:26 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-08-13 16:23:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-08-13 16:23:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-08-13 16:23:19 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-08-13 16:23:16 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-08-13 16:23:13 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-08-13 16:23:09 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-08-13 16:23:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-08-13 16:23:03 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-08-13 16:22:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-08-13 16:22:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-08-13 16:22:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-08-13 16:22:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-08-13 16:22:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-08-13 16:22:44 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-08-13 16:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-08-13 16:22:38 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-08-13 16:22:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-08-13 16:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-08-13 16:22:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-08-13 16:22:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-08-13 16:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-08-13 16:22:15 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-08-13 16:22:13 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-08-13 16:22:10 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-08-13 16:22:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-08-13 16:22:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-08-13 16:22:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-08-13 16:21:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-08-13 16:21:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-08-13 16:21:51 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-08-13 16:21:45 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-08-13 16:21:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-08-13 16:21:39 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-08-13 16:21:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2010-08-13 16:21:33 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-08-13 16:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-08-13 16:21:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-08-13 16:21:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-08-13 16:21:19 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-08-13 16:21:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-08-13 16:21:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-08-13 16:21:07 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-08-13 16:21:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-08-13 16:21:01 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-08-13 16:20:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-08-13 16:20:54 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-08-13 16:20:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-08-13 16:20:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-08-13 16:20:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-08-13 16:20:43 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-08-13 16:20:40 ----D---- C:\WINDOWS\ServicePackFiles
2010-08-13 16:20:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-08-13 16:20:36 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-08-13 16:20:33 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-08-13 16:20:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-08-13 16:20:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2010-08-13 16:20:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-08-13 16:20:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-08-13 16:20:15 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-08-13 16:20:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9L$
2010-08-13 16:20:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-08-13 16:19:58 ----HDC---- C:\WINDOWS\$NtUninstallKB982381$
2010-08-13 16:19:53 ----D---- C:\Program Files\MSXML 4.0
2010-08-13 16:19:47 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-08-13 16:19:44 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-08-13 16:19:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-08-13 16:19:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-08-13 14:59:55 ----D---- C:\Program Files\AMD
2010-08-13 14:52:45 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-08-13 14:51:24 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-08-13 14:50:19 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-08-13 14:47:59 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-13 14:45:52 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-08-13 14:38:58 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-08-13 14:38:58 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-08-13 14:38:57 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-08-13 14:38:56 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-08-13 14:38:55 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-08-13 14:38:55 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-08-13 14:38:54 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-08-13 14:38:47 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-08-13 14:38:42 ----D---- C:\Program Files\Alwil Software
2010-08-13 14:38:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-08-13 13:52:48 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-08-13 13:52:48 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-08-13 13:52:47 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-08-13 13:52:46 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-08-13 13:52:46 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-08-13 13:52:46 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-08-13 13:52:46 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-08-13 13:52:46 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-08-13 13:52:45 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-08-13 13:52:45 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-08-13 13:52:45 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-08-13 13:52:44 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-08-13 13:52:44 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-08-13 13:52:44 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-08-13 13:52:43 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-08-13 13:52:43 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-08-13 13:52:43 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-08-13 13:52:43 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-08-13 13:52:42 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-08-13 13:52:42 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-08-13 13:52:42 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-08-13 13:52:42 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-08-13 13:52:42 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-08-13 13:52:41 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-08-13 13:52:41 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-08-13 13:52:41 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-08-13 13:52:40 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-08-13 13:52:40 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-08-13 13:52:40 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-08-13 13:52:40 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-08-13 13:52:39 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-08-13 13:52:39 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-08-13 13:52:39 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-08-13 13:52:39 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-08-13 13:52:38 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-08-13 13:52:37 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-08-13 13:52:37 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-08-13 13:52:37 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-08-13 13:52:37 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-08-13 13:52:36 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-08-13 13:52:36 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-08-13 13:52:35 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-08-13 13:52:34 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-08-13 13:52:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-08-13 13:52:33 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-08-13 13:52:33 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-08-13 13:52:33 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-08-13 13:52:32 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-08-13 13:52:24 ----D---- C:\WINDOWS\Logs
2010-08-13 13:24:33 ----D---- C:\Program Files\Wizards of the Coast LLC
2010-08-13 12:53:30 ----D---- C:\WINDOWS\Minidump
2010-08-12 15:07:27 ----D---- C:\Program Files\MagicISO
2010-08-12 09:00:02 ----A---- C:\WINDOWS\NeroDigital.ini
2010-08-12 08:59:53 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-08-11 22:05:34 ----D---- C:\WINDOWS\ShellNew
2010-08-11 21:54:18 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Ahead
2010-08-11 21:53:40 ----D---- C:\Program Files\Nero
2010-08-11 21:53:40 ----D---- C:\Program Files\Common Files\Ahead
2010-08-11 21:53:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-08-11 21:53:16 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-08-11 21:53:16 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-08-11 20:10:21 ----A---- C:\WINDOWS\system32\h323log.txt
2010-08-11 20:08:28 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-08-11 20:08:27 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-08-11 20:08:26 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-08-11 20:08:25 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-08-11 20:08:24 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-08-11 20:08:24 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-08-11 20:08:23 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-08-11 20:08:22 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-08-11 20:08:21 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-08-11 20:08:20 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-08-11 20:08:19 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-08-11 20:08:16 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-08-11 20:07:21 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-08-11 20:07:21 ----A---- C:\WINDOWS\system32\drivers\USBAUDIO.sys
2010-08-11 20:07:21 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-08-11 20:07:21 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-08-11 20:07:20 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-08-11 20:07:00 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-08-11 20:06:07 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2010-08-11 20:05:49 ----A---- C:\WINDOWS\system32\usbui.dll
2010-08-11 20:05:37 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys
2010-08-11 20:04:56 ----A---- C:\WINDOWS\imsins.BAK
2010-08-11 20:04:54 ----SHD---- C:\WINDOWS\Installer
2010-08-11 20:04:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-08-11 20:04:53 ----D---- C:\Program Files\Common Files\ODBC
2010-08-11 20:04:53 ----A---- C:\WINDOWS\ODBCINST.INI
2010-08-11 20:04:51 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-08-11 20:04:50 ----RD---- C:\Program Files
2010-08-11 20:04:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-08-11 20:04:50 ----D---- C:\Program Files\Common Files
2010-08-11 20:04:48 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-08-11 20:04:48 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-08-11 20:04:48 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-08-11 20:04:47 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-08-11 20:04:46 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-08-11 20:04:45 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-08-11 20:04:45 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-08-11 20:04:45 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-08-11 20:04:45 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-08-11 20:04:45 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-08-11 20:04:43 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\irclass.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-08-11 20:04:42 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-08-11 20:04:41 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-08-11 20:04:40 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-08-11 20:04:40 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-08-11 20:04:40 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-08-11 20:04:40 ----A---- C:\WINDOWS\system32\batt.dll
2010-08-11 20:04:39 ----A---- C:\WINDOWS\system32\storprop.dll
2010-08-11 20:04:39 ----A---- C:\WINDOWS\notepad.exe
2010-08-11 20:04:33 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-08-11 20:04:29 ----RA---- C:\WINDOWS\SET8.tmp
2010-08-11 20:04:27 ----RA---- C:\WINDOWS\SET4.tmp
2010-08-11 20:04:26 ----RA---- C:\WINDOWS\SET3.tmp
2010-08-11 20:04:22 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-11 20:04:22 ----D---- C:\WINDOWS\system32\CatRoot
2010-08-11 20:04:16 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-08-11 20:04:00 ----A---- C:\WINDOWS\setuplog.txt
2010-08-11 20:03:57 ----SHD---- C:\System Volume Information
2010-08-11 20:03:57 ----D---- C:\Documents and Settings
2010-08-11 20:03:09 ----SH---- C:\boot.ini
2010-08-11 19:59:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-11 19:59:54 ----RSD---- C:\WINDOWS\Fonts
2010-08-11 19:59:54 ----RD---- C:\WINDOWS\Web
2010-08-11 19:59:54 ----HD---- C:\WINDOWS\inf
2010-08-11 19:59:54 ----D---- C:\WINDOWS\WinSxS
2010-08-11 19:59:54 ----D---- C:\WINDOWS\twain_32
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Temp
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\wins
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\wbem
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\usmt
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\spool
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\ShellExt
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\Setup
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\ras
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\PreInstall
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\oobe
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\npp
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\mui
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\inetsrv
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\IME
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\icsxml
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\ias
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\export
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\drivers
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\dhcp
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\config
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\3com_dmi
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\3076
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\2052
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1054
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1042
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1041
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1037
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1033
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1031
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1029
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1028
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32\1025
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system32
2010-08-11 19:59:54 ----D---- C:\WINDOWS\system
2010-08-11 19:59:54 ----D---- C:\WINDOWS\security
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Resources
2010-08-11 19:59:54 ----D---- C:\WINDOWS\repair
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Provisioning
2010-08-11 19:59:54 ----D---- C:\WINDOWS\pchealth
2010-08-11 19:59:54 ----D---- C:\WINDOWS\PeerNet
2010-08-11 19:59:54 ----D---- C:\WINDOWS\mui
2010-08-11 19:59:54 ----D---- C:\WINDOWS\msapps
2010-08-11 19:59:54 ----D---- C:\WINDOWS\msagent
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Media
2010-08-11 19:59:54 ----D---- C:\WINDOWS\java
2010-08-11 19:59:54 ----D---- C:\WINDOWS\ime
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Help
2010-08-11 19:59:54 ----D---- C:\WINDOWS\ehome
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Driver Cache
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Debug
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Cursors
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Connection Wizard
2010-08-11 19:59:54 ----D---- C:\WINDOWS\Config
2010-08-11 19:59:54 ----D---- C:\WINDOWS\AppPatch
2010-08-11 19:59:54 ----D---- C:\WINDOWS\addins
2010-08-11 19:59:54 ----D---- C:\WINDOWS
2010-08-11 19:59:54 ----ASH---- C:\pagefile.sys
2010-08-11 19:56:48 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\.purple
2010-08-11 19:56:33 ----D---- C:\Program Files\Pidgin
2010-08-11 19:47:33 ----D---- C:\Program Files\Steam
2010-08-11 19:42:49 ----D---- C:\Program Files\The KMPlayer
2010-08-11 19:40:18 ----D---- C:\Program Files\Media Key
2010-08-11 19:39:32 ----D---- C:\Program Files\ATI Technologies
2010-08-11 19:39:30 ----D---- C:\Program Files\ATI
2010-08-11 19:39:12 ----D---- C:\ATI
2010-08-11 19:31:12 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-08-11 19:31:12 ----A---- C:\WINDOWS\system32\yk51x86.dll
2010-08-11 19:31:12 ----A---- C:\WINDOWS\system32\drivers\yk51x86.sys
2010-08-11 19:31:08 ----D---- C:\Program Files\Marvell
2010-08-11 19:15:27 ----D---- C:\Program Files\Driver-Soft
2010-08-11 19:14:49 ----SHD---- C:\RECYCLER
2010-08-11 19:13:34 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\WinRAR
2010-08-11 19:13:28 ----D---- C:\Program Files\WinRAR
2010-08-11 19:02:56 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Macromedia
2010-08-11 19:02:56 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Adobe
2010-08-11 18:45:48 ----N---- C:\WINDOWS\Ctregrun.exe
2010-08-11 18:44:46 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Creative
2010-08-11 18:44:27 ----D---- C:\WINDOWS\RegisteredPackages
2010-08-11 18:44:24 ----N---- C:\WINDOWS\system32\CTSVCCTL.EXE
2010-08-11 18:44:24 ----N---- C:\WINDOWS\system32\CTSVCCDA.EXE
2010-08-11 18:43:26 ----N---- C:\WINDOWS\Updreg.EXE
2010-08-11 18:43:26 ----A---- C:\WINDOWS\SBWIN.INI
2010-08-11 18:43:19 ----N---- C:\WINDOWS\system32\SFCVRT32.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\system32\MFCUIA32.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\system32\MFCANS32.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\system32\AC3API.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\CTRES.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\CTCCW.DLL
2010-08-11 18:43:19 ----N---- C:\WINDOWS\AC3API.INI
2010-08-11 18:43:18 ----N---- C:\WINDOWS\system32\INETWH32.DLL
2010-08-11 18:43:18 ----N---- C:\WINDOWS\system32\CTWFLT32.DLL
2010-08-11 18:43:18 ----N---- C:\WINDOWS\system32\CTL3D.DLL
2010-08-11 18:43:06 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-08-11 18:43:05 ----D---- C:\WINDOWS\system32\Data
2010-08-11 18:43:04 ----RA---- C:\WINDOWS\system32\sbusbdll.dll
2010-08-11 18:43:04 ----A---- C:\WINDOWS\system32\sfms32.dll
2010-08-11 18:43:04 ----A---- C:\WINDOWS\system32\sfman32.dll
2010-08-11 18:43:04 ----A---- C:\WINDOWS\INRES.DLL
2010-08-11 18:43:02 ----RA---- C:\WINDOWS\system32\drivers\sbusb.sys
2010-08-11 18:43:02 ----RA---- C:\WINDOWS\system32\drivers\ctsfm2k.sys
2010-08-11 18:43:02 ----RA---- C:\WINDOWS\system32\drivers\ctoss2k.sys
2010-08-11 18:43:00 ----RA---- C:\WINDOWS\system32\a3d.dll
2010-08-11 18:42:59 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2010-08-11 18:42:59 ----A---- C:\WINDOWS\system32\ksenum.dll
2010-08-11 18:42:52 ----A---- C:\WINDOWS\system32\SBUSB.INI
2010-08-11 18:42:12 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-11 18:41:38 ----N---- C:\WINDOWS\system32\drivers\PFMODNT.SYS
2010-08-11 18:41:38 ----D---- C:\Program Files\Creative
2010-08-11 18:41:35 ----D---- C:\Program Files\Common Files\InstallShield
2010-08-11 18:22:07 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Identities
2010-08-11 18:21:43 ----HD---- C:\Program Files\Uninstall Information
2010-08-11 18:21:38 ----ASH---- C:\Documents and Settings\WarezBos\Data aplikací\desktop.ini
2010-08-11 18:21:36 ----SD---- C:\Documents and Settings\WarezBos\Data aplikací\Microsoft
2010-08-11 18:21:36 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Mozilla
2010-08-11 18:21:32 ----D---- C:\WINDOWS\SoftwareDistribution
2010-08-11 18:21:29 ----SD---- C:\WINDOWS\system32\Microsoft
2010-08-11 18:21:29 ----D---- C:\WINDOWS\Prefetch
2010-08-11 18:21:28 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-11 18:18:40 ----D---- C:\WINDOWS\system32\xircom
2010-08-11 18:18:40 ----D---- C:\Program Files\xerox
2010-08-11 18:18:40 ----D---- C:\Program Files\microsoft frontpage
2010-08-11 18:18:05 ----D---- C:\Program Files\Mozilla Firefox
2010-08-11 18:18:05 ----D---- C:\Program Files\ESET
2010-08-11 18:17:04 ----D---- C:\WINDOWS\Packs
2010-08-11 18:17:04 ----A---- C:\WINDOWS\PackUninst.txt
2010-08-11 18:14:12 ----RASH---- C:\MSDOS.SYS
2010-08-11 18:14:12 ----RASH---- C:\IO.SYS
2010-08-11 18:14:12 ----A---- C:\WINDOWS\control.ini
2010-08-11 18:14:12 ----A---- C:\CONFIG.SYS
2010-08-11 18:14:12 ----A---- C:\AUTOEXEC.BAT
2010-08-11 18:14:06 ----A---- C:\WINDOWS\OEWABLog.txt
2010-08-11 18:14:02 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-08-11 18:13:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-08-11 18:13:31 ----RD---- C:\WINDOWS\Offline Web Pages
2010-08-11 18:13:31 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-08-11 18:13:27 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-08-11 18:13:25 ----HD---- C:\Program Files\WindowsUpdate
2010-08-11 18:13:22 ----D---- C:\Program Files\Online Services
2010-08-11 18:13:11 ----D---- C:\WINDOWS\system32\DirectX
2010-08-11 18:12:56 ----A---- C:\WINDOWS\system32\atrace.dll
2010-08-11 18:12:53 ----A---- C:\WINDOWS\system32\desktop.ini
2010-08-11 18:12:53 ----A---- C:\WINDOWS\desktop.ini
2010-08-11 18:12:49 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-08-11 18:12:48 ----A---- C:\WINDOWS\system32\acctres.dll
2010-08-11 18:12:47 ----D---- C:\Program Files\Common Files\Services
2010-08-11 18:12:46 ----SD---- C:\WINDOWS\Tasks
2010-08-11 18:12:46 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-08-11 18:12:45 ----D---- C:\Program Files\Common Files\MSSoap
2010-08-11 18:12:42 ----D---- C:\WINDOWS\srchasst
2010-08-11 18:12:41 ----D---- C:\WINDOWS\system32\Macromed
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wups.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-08-11 18:12:38 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-08-11 18:12:37 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-08-11 18:12:37 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-08-11 18:12:37 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-08-11 18:12:37 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-08-11 18:12:34 ----D---- C:\Program Files\Movie Maker
2010-08-11 18:12:31 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-08-11 18:12:31 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-08-11 18:12:31 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-08-11 18:12:31 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-08-11 18:12:28 ----D---- C:\WINDOWS\system32\Restore
2010-08-11 18:12:28 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-08-11 18:12:28 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-08-11 18:12:28 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-08-11 18:12:28 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\srclient.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\msconf.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\ils.dll
2010-08-11 18:12:27 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-08-11 18:12:25 ----D---- C:\Program Files\NetMeeting
2010-08-11 18:12:25 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-08-11 18:12:25 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-08-11 18:12:24 ----A---- C:\WINDOWS\system32\inetres.dll
2010-08-11 18:12:23 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-08-11 18:12:22 ----D---- C:\Program Files\Outlook Express
2010-08-11 18:12:22 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-08-11 18:12:22 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-08-11 18:12:21 ----A---- C:\WINDOWS\system32\mstask.dll
2010-08-11 18:12:21 ----A---- C:\WINDOWS\system32\isign32.dll
2010-08-11 18:12:21 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-08-11 18:12:21 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-08-11 18:12:21 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-08-11 18:12:17 ----D---- C:\Program Files\Common Files\System
2010-08-11 18:12:16 ----D---- C:\Program Files\Internet Explorer
2010-08-11 18:11:53 ----D---- C:\Program Files\ComPlus Applications
2010-08-11 18:11:52 ----A---- C:\WINDOWS\vbaddin.ini
2010-08-11 18:11:52 ----A---- C:\WINDOWS\vb.ini
2010-08-11 18:11:48 ----D---- C:\WINDOWS\Registration
2010-08-11 18:11:42 ----D---- C:\Program Files\Windows Media Player
2010-08-11 18:11:38 ----D---- C:\Program Files\Messenger
2010-08-11 18:11:36 ----D---- C:\Program Files\MSN Gaming Zone
2010-08-11 18:11:36 ----A---- C:\WINDOWS\system32\write.exe
2010-08-11 18:11:30 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-08-11 18:11:30 ----A---- C:\WINDOWS\system32\hticons.dll
2010-08-11 18:11:30 ----A---- C:\WINDOWS\system32\avwav.dll
2010-08-11 18:11:30 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-08-11 18:11:30 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-08-11 18:11:29 ----A---- C:\WINDOWS\system32\winchat.exe
2010-08-11 18:11:25 ----A---- C:\WINDOWS\system32\winmine.exe
2010-08-11 18:11:25 ----A---- C:\WINDOWS\system32\sol.exe
2010-08-11 18:11:25 ----A---- C:\WINDOWS\system32\charmap.exe
2010-08-11 18:11:25 ----A---- C:\WINDOWS\system32\getuname.dll
2010-08-11 18:11:25 ----A---- C:\WINDOWS\system32\calc.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\tskill.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\tscon.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\shadow.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\reset.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\regini.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\msg.exe
2010-08-11 18:11:24 ----A---- C:\WINDOWS\system32\freecell.exe
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\logoff.exe
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-08-11 18:11:23 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-08-11 18:11:22 ----A---- C:\WINDOWS\system32\stclient.dll
2010-08-11 18:11:22 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-08-11 18:11:19 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-08-11 18:11:18 ----D---- C:\Program Files\Windows NT
2010-08-11 18:11:18 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-08-11 18:11:18 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-08-11 18:11:18 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-08-11 18:11:18 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\spider.exe
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-08-11 18:11:17 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-08-11 18:11:16 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-08-11 18:11:15 ----D---- C:\WINDOWS\system32\MsDtc
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-08-11 18:11:15 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-08-11 18:11:14 ----D---- C:\WINDOWS\system32\Com
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\colbact.dll
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-08-11 18:11:14 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-08-11 18:11:13 ----A---- C:\WINDOWS\system32\comuid.dll
2010-08-11 18:11:13 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-08-11 18:11:13 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-08-11 18:11:13 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-08-11 18:11:13 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-08-11 18:11:08 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-08-11 18:11:08 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-08-11 18:11:08 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-08-11 18:11:08 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-08-11 18:11:02 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-08-11 18:11:02 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 months======

2010-08-21 12:40:06 ----A---- C:\WINDOWS\win.ini
2010-08-11 20:04:49 ----A---- C:\WINDOWS\system.ini
2010-08-11 18:17:21 ----A---- C:\WINDOWS\system32\uxtheme.dll
2010-08-11 18:13:54 ----ASH---- C:\WINDOWS\fonts\desktop.ini

[clever.potheat]

Kód: Vybrat vše

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-04 61056]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2004-08-04 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-06-28 100176]
R2 PfModNT;PfModNT; \??\C:\WINDOWS\system32\drivers\PfModNT.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2007-06-05 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-09-03 3300864]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2004-04-26 130384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2007-06-05 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2007-06-05 61824]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2004-04-26 178736]
R3 RTLWUSB;AirLive WL1600USB; C:\WINDOWS\system32\DRIVERS\RTL8187.sys [2008-06-27 332928]
R3 sbusb;Sound Blaster USB Audio Driver; C:\WINDOWS\system32\DRIVERS\sbusb.sys [2004-07-27 1643648]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2010-06-23 305696]
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2004-08-03 48128]
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2004-08-03 38912]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2004-08-03 51328]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-09-03 573440]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.EXE [1999-12-13 44032]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-08-14 153376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S2 AODService;AODService; C:\Program Files\AMD\OverDrive\AODAssist.exe [2010-04-23 136616]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-09-02 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zde je soubor, kterým mi to infikoval. Je to skript ve vbs. Má tam něco kódovaného nějakou upravenou bází 64. Je tam přímo i ta funkce kterou to dešifruje, heslo je nejspíš "nikdy to nevzdavej".

Kód: Vybrat vše

http://leteckaposta.cz/513341077

Myslím si, že tohle to bude vir: c:\windows\explore.vbs

[motji]

Dobrý večer ,
prosím nedávejte logy do code, špatně se to čte. Díky



Spusťte combofix podle tohoto návodu, před spuštěním ho přejmenujte na cokoliv.com
http://www.bleepingcomputer.com/combofi ... t-combofix

[clever.potheat]

ComboFix 10-09-06.03 - WarezBos 07.09.2010 8:33.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1310 [GMT 2:00]
Spuštěný z: C:\cokoliv.com
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Data

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-08-07 do 2010-09-07 )))))))))))))))))))))))))))))))
.

2010-09-07 06:28 . 2010-09-07 06:25 3839253 ----a-r- C:\cokoliv.com
2010-09-06 20:48 . 2010-09-06 20:51 -------- d-----w- c:\program files\NET Traffic Meter
2010-09-06 20:08 . 2010-09-07 06:06 -------- d-----w- c:\program files\trend micro
2010-09-06 20:08 . 2010-09-06 20:09 -------- d-----w- C:\rsit
2010-09-06 19:56 . 2010-09-06 22:44 43013 ----a-w- c:\windows\kl.dat
2010-09-06 19:56 . 2010-09-06 19:56 603136 ----a-w- c:\windows\dxnet.dll
2010-09-06 10:41 . 2010-09-06 10:41 -------- d-----w- C:\zdrojak ahk
2010-09-05 13:36 . 2004-08-03 21:10 38912 -c--a-w- c:\windows\system32\dllcache\avc.sys
2010-09-05 13:36 . 2004-08-03 21:10 38912 ----a-w- c:\windows\system32\drivers\avc.sys
2010-09-05 13:36 . 2004-08-03 21:10 48128 -c--a-w- c:\windows\system32\dllcache\61883.sys
2010-09-05 13:36 . 2004-08-03 21:10 48128 ----a-w- c:\windows\system32\drivers\61883.sys
2010-09-03 05:55 . 2010-09-03 05:55 -------- d-----w- c:\windows\system32\cs-cz
2010-09-03 05:52 . 2010-05-04 17:18 52224 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-09-03 05:52 . 2010-05-04 17:18 459264 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-09-03 05:52 . 2010-05-04 17:18 268288 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-09-03 05:52 . 2010-05-04 17:18 63488 -c----w- c:\windows\system32\dllcache\icardie.dll
2010-09-03 05:52 . 2010-05-04 17:18 380928 -c----w- c:\windows\system32\dllcache\ieapfltr.dll
2010-09-03 05:52 . 2010-04-16 13:24 13824 -c----w- c:\windows\system32\dllcache\ieudinit.exe
2010-09-03 05:52 . 2010-02-22 22:04 2452872 -c----w- c:\windows\system32\dllcache\ieapfltr.dat
2010-09-03 05:52 . 2010-05-04 17:18 6067200 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-08-31 16:35 . 2010-08-31 16:35 -------- d-----w- c:\program files\PSPad editor
2010-08-30 16:48 . 2010-08-30 16:48 -------- d-----w- c:\program files\NVIDIA Corporation
2010-08-30 16:42 . 2010-08-30 16:42 -------- d-----w- c:\program files\Elaborate Bytes
2010-08-29 20:04 . 2010-08-29 20:04 -------- d-----w- C:\DriveKey
2010-08-26 19:52 . 2010-08-26 19:52 -------- d-----w- c:\program files\Vypínač na dobrou noc
2010-08-26 13:33 . 2010-08-30 14:08 -------- d-----w- c:\program files\Magic Workstation
2010-08-26 07:17 . 2010-08-26 07:17 -------- d-----w- c:\program files\uTorrent
2010-08-25 17:36 . 2010-08-25 17:36 -------- d-----w- c:\program files\AutoHotkey
2010-08-20 04:53 . 2010-08-20 04:53 -------- d-----w- c:\program files\YouTube Downloader
2010-08-20 04:52 . 2010-08-20 04:52 -------- d-----w- c:\program files\FDRLab
2010-08-19 13:57 . 2010-08-19 13:57 -------- d-----w- C:\totalcmd
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\UC.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\RAR.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\PKZIP.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\LHA.PIF
2010-08-19 13:57 . 2010-07-07 05:55 545 ----a-w- c:\windows\ARJ.PIF
2010-08-17 13:01 . 2010-08-17 13:01 -------- d-----w- c:\program files\VOWSoft
2010-08-17 12:42 . 2010-08-17 12:42 -------- d-sh--w- c:\documents and settings\WarezBos\UserData
2010-08-15 22:29 . 2010-08-15 22:29 -------- d-----w- c:\program files\MSXML 6.0
2010-08-15 08:07 . 2010-08-15 08:17 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-08-15 06:24 . 2010-08-15 06:24 -------- d-----w- c:\program files\Common Files\Adobe
2010-08-15 06:20 . 2010-08-15 06:20 -------- d-----w- c:\program files\CDisplay
2010-08-14 20:29 . 2010-08-14 20:33 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-08-14 20:27 . 2008-09-02 19:05 593920 ------w- c:\windows\system32\ati2sgag.exe
2010-08-14 11:30 . 2010-08-14 11:30 -------- d-----w- c:\program files\Common Files\Java
2010-08-14 11:30 . 2010-08-14 11:30 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-08-14 11:29 . 2010-08-14 11:29 -------- d-----w- c:\program files\Java
2010-08-13 14:19 . 2010-08-13 14:19 -------- d-----w- c:\program files\MSXML 4.0
2010-08-13 12:59 . 2010-08-13 12:59 -------- d-----w- c:\program files\AMD
2010-08-13 12:53 . 2010-02-24 12:48 457216 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-08-13 12:52 . 2008-06-14 18:00 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-08-13 12:52 . 2008-06-14 18:00 272128 ------w- c:\windows\system32\drivers\bthport.sys
2010-08-13 12:51 . 2010-02-17 12:26 2065920 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-08-13 12:51 . 2010-02-16 19:26 2023936 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-08-13 12:51 . 2010-02-16 19:26 2189056 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-08-13 12:51 . 2010-02-16 19:26 2145792 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-08-13 12:50 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-08-13 12:49 . 2008-04-21 21:28 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-08-13 12:47 . 2010-09-05 06:07 -------- d--h--w- c:\windows\$hf_mig$
2010-08-13 12:38 . 2010-06-28 20:37 165456 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-08-13 12:38 . 2010-06-28 20:32 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-08-13 12:38 . 2010-06-28 20:33 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-08-13 12:38 . 2010-06-28 20:37 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-08-13 12:38 . 2010-06-28 20:32 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-08-13 12:38 . 2010-06-28 20:32 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-08-13 12:38 . 2010-06-28 20:32 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-08-13 12:38 . 2010-06-28 20:57 38848 ----a-w- c:\windows\avastSS.scr
2010-08-13 12:38 . 2010-06-28 20:57 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-08-13 12:38 . 2010-08-13 12:38 -------- d-----w- c:\program files\Alwil Software
2010-08-13 11:24 . 2010-08-13 11:24 -------- d-----w- c:\program files\Wizards of the Coast LLC
2010-08-12 13:07 . 2010-08-12 13:07 -------- d-----w- c:\program files\MagicISO
2010-08-12 06:59 . 2004-08-03 21:08 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-08-11 20:05 . 2010-08-25 17:36 -------- d-----w- c:\windows\ShellNew
2010-08-11 19:53 . 2010-08-11 19:54 -------- d-----w- c:\program files\Common Files\Ahead
2010-08-11 19:53 . 2010-08-11 19:53 -------- d-----w- c:\program files\Nero
2010-08-11 18:08 . 2006-02-15 02:22 142464 ----a-w- c:\windows\system32\drivers\aec.sys
2010-08-11 18:08 . 2001-08-17 22:00 54272 ----a-w- c:\windows\system32\drivers\swmidi.sys
2010-08-11 18:08 . 2006-06-14 10:50 6272 ----a-w- c:\windows\system32\drivers\splitter.sys
2010-08-11 18:08 . 2004-08-03 23:07 52864 ----a-w- c:\windows\system32\drivers\DMusic.sys
2010-08-11 18:08 . 2004-08-03 22:58 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys
2010-08-11 18:08 . 2004-08-03 22:58 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys
2010-08-11 18:08 . 2004-08-03 23:15 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2010-08-11 18:08 . 2006-06-14 10:50 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2010-08-11 18:08 . 2006-06-14 11:17 82944 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2010-08-11 18:08 . 2004-08-03 23:07 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2010-08-11 18:08 . 2004-08-03 22:58 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys
2010-08-11 18:08 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2010-08-11 18:07 . 2004-08-17 13:49 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll
2010-08-11 18:07 . 2004-08-17 13:49 4096 ----a-w- c:\windows\system32\ksuser.dll
2010-08-11 18:07 . 2004-08-03 23:07 59264 ----a-w- c:\windows\system32\drivers\USBAUDIO.sys
2010-08-11 18:07 . 2004-08-03 21:15 145792 -c--a-w- c:\windows\system32\dllcache\portcls.sys
2010-08-11 18:07 . 2004-08-03 21:15 145792 ----a-w- c:\windows\system32\drivers\portcls.sys
2010-08-11 18:07 . 2004-08-03 21:08 60288 -c--a-w- c:\windows\system32\dllcache\drmk.sys
2010-08-11 18:07 . 2004-08-03 21:08 60288 ----a-w- c:\windows\system32\drivers\drmk.sys
2010-08-11 18:07 . 2004-08-17 15:49 21504 ----a-w- c:\windows\system32\hidserv.dll
2010-08-11 18:07 . 2004-08-17 15:43 58240 ----a-w- c:\windows\system32\drivers\redbook.sys
2010-08-11 18:06 . 2001-08-17 21:46 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys
2010-08-11 18:05 . 2004-08-17 15:49 75264 ----a-w- c:\windows\system32\usbui.dll
2010-08-11 18:05 . 2004-08-03 23:07 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys
2010-08-11 18:03 . 2010-08-11 16:43 -------- d--h--w- c:\documents and settings\Default User
2010-08-11 18:03 . 2010-08-11 16:21 -------- d-----w- C:\Documents and Settings
2010-08-11 18:03 . 2010-08-11 16:13 -------- d-----w- c:\documents and settings\All Users

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-07 06:18 . 2001-10-25 16:00 77872 ----a-w- c:\windows\system32\perfc005.dat
2010-09-07 06:18 . 2001-10-25 16:00 428750 ----a-w- c:\windows\system32\perfh005.dat
2010-09-07 06:15 . 2010-08-11 17:47 -------- d-----w- c:\program files\Steam
2010-09-02 15:49 . 2010-09-02 15:49 -------- d-----w- c:\program files\Sony Ericsson
2010-09-02 15:49 . 2010-08-11 16:42 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-30 16:51 . 2010-08-30 16:51 2406 ----a-w- C:\STF141.tmp
2010-08-30 16:50 . 2010-08-30 16:50 2390 ----a-w- C:\STF140.tmp
2010-08-15 22:31 . 2010-08-15 22:31 -------- d-----w- c:\program files\MSBuild
2010-08-15 22:31 . 2010-08-15 22:31 -------- d-----w- c:\program files\Reference Assemblies
2010-08-14 20:33 . 2010-08-11 17:39 -------- d-----w- c:\program files\ATI Technologies
2010-08-12 16:25 . 2010-08-11 16:13 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-08-12 16:25 . 2010-08-11 16:13 2426 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-08-12 16:25 . 2010-08-11 16:13 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-08-11 17:56 . 2010-08-11 17:56 -------- d-----w- c:\program files\Pidgin
2010-08-11 17:43 . 2010-08-11 17:42 -------- d-----w- c:\program files\The KMPlayer
2010-08-11 17:40 . 2010-08-11 17:40 -------- d-----w- c:\program files\Media Key
2010-08-11 17:40 . 2010-08-11 16:41 -------- d-----w- c:\program files\Common Files\InstallShield
2010-08-11 17:39 . 2010-08-11 17:39 -------- d-----w- c:\program files\ATI
2010-08-11 17:31 . 2010-08-11 17:31 -------- d-----w- c:\program files\Marvell
2010-08-11 17:15 . 2010-08-11 17:15 -------- d-----w- c:\program files\Driver-Soft
2010-08-11 17:00 . 2010-08-11 17:00 0 ----a-w- c:\windows\nsreg.dat
2010-08-11 16:45 . 2010-08-11 16:41 -------- d-----w- c:\program files\Creative
2010-08-11 16:30 . 2010-08-11 16:18 -------- d-----w- c:\program files\ESET
2010-08-11 16:26 . 2010-08-11 16:26 0 ----a-w- c:\windows\ativpsrm.bin
2010-08-11 16:18 . 2010-08-11 16:18 -------- d-----w- c:\program files\microsoft frontpage
2010-08-11 16:18 . 2010-08-11 16:18 2318 ----a-w- c:\windows\mozver.dat
2010-08-11 16:17 . 2004-08-17 15:49 219648 ----a-w- c:\windows\system32\uxtheme.dll
2010-08-11 16:12 . 2010-08-11 16:12 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-06-23 15:47 . 2010-08-11 17:31 374048 ----a-w- c:\windows\system32\yk51x86.dll
2010-06-23 15:47 . 2010-08-11 17:31 305696 ----a-w- c:\windows\system32\drivers\yk51x86.sys
2010-06-14 14:30 . 2010-08-11 16:12 743936 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-08-11 16:18 . 2010-08-11 16:18 61038 ----a-w- c:\program files\mozilla firefox\components\jar50.dll
2010-08-11 16:18 . 2010-08-11 16:18 49256 ----a-w- c:\program files\mozilla firefox\components\jsd3250.dll
2010-08-11 16:18 . 2010-08-11 16:18 166000 ----a-w- c:\program files\mozilla firefox\components\xpinstal.dll
.

------- Sigcheck -------

[-] 2008-04-14 . 27AFD587C462E280EE046B8CCA3C2CD1 . 1034240 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\explorer.exe
[-] 2007-06-05 . 44960794577A2D9491FCF1E94434D4D5 . 2711552 . . [6.00.2900.2180] . . c:\windows\explorer.exe

.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteCenter"="c:\program files\Creative\MediaSource\RemoteControl\RCMan.EXE" [2004-06-25 147456]
"Google Update"="c:\documents and settings\WarezBos\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2010-08-11 136176]
"Steam"="c:\program files\Steam\Steam.exe" [2010-08-24 1242448]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-08-26 327472]
"Sony Ericsson PC Companion"="c:\program files\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" [2009-06-18 772096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SbUsb AudCtrl"="sbusbdll.dll" [2004-07-09 119296]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"MagicKey"="c:\progra~1\MEDIAK~1\MagicKey.exe" [2007-01-09 167936]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 61440]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-21 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2009-06-17 85160]
"SystemKey"="c:\documents and settings\All Users\Data aplikací\SystemKey\SystemKey.dll" [2006-04-07 339968]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"c:\\Program Files\\Steam\\steamapps\\tkunovsky\\half-life 2 deathmatch\\hl2.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Pidgin\\pidgin.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\magic the gathering - duels of the planeswalkers\\DotP.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [13.8.2010 14:38 165456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13.8.2010 14:38 17744]
R3 RTLWUSB;AirLive WL1600USB;c:\windows\system32\drivers\RTL8187.sys [29.1.2010 18:39 332928]
R3 sbusb;Sound Blaster USB Audio Driver;c:\windows\system32\drivers\sbusb.sys [11.8.2010 18:43 1643648]
S2 AODService;AODService;c:\program files\AMD\OverDrive\AODAssist.exe [23.4.2010 5:39 136616]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [2.9.2010 17:49 86824]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [2.9.2010 17:49 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [2.9.2010 17:49 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [2.9.2010 17:49 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [2.9.2010 17:49 109864]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
FF - ProfilePath - c:\documents and settings\WarezBos\Data aplikací\Mozilla\Firefox\Profiles\ea52lg2g.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - component: c:\program files\Mozilla Firefox\components\xpinstal.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.cookie.p3plevel", 1); // 0=low, 1=medium, 2=high, 3=custom
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.enablePad", false); // Allow client to do proxy autodiscovery
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.default", "chrome://branding/content/searchconfig.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.custom", "chrome://branding/content/searchconfig.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("signon.prefillForms", true);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-07 08:35
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(948)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\cscui.dll

- - - - - - - > 'explorer.exe'(1780)
c:\windows\System32\cscui.dll
c:\windows\system32\ntshrui.dll
c:\windows\system32\msi.dll
c:\windows\system32\NETSHELL.dll
c:\windows\system32\credui.dll
c:\windows\system32\stobject.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-09-07 08:35:34
ComboFix-quarantined-files.txt 2010-09-07 06:35

Před spuštěním: Volných bajtů: 10 710 097 920
Po spuštění: Volných bajtů: 11 508 953 088

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 62AC28FB44C56CDD1DBD52189DACB4EF

[motji]

Dejte soubor otestovat na http://www.virustotal.com

c:\documents and settings\All Users\Data aplikací\SystemKey\SystemKey.dll
C:\windows\UpdReg.EXE
c:\windows\explorer.exe
C:\STF141.tmp
c:\windows\kl.dat
c:\windows\system32\drivers\avc.sys
c:\windows\system32\dllcache\61883.sys
C:\WINDOWS\svchost.exe


-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky
-pokud se Vás zeptá, dejte soubor otestovat znovu, tak aby to byl soubor z Vašeho počítače

[clever.potheat]

c:\documents and settings\All Users\Data aplikací\SystemKey\SystemKey.dll

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=c460a5a3e5daf1a074c5ccb71d04bbe12ea73431d30413f0b650154eba924d1b-1283925885

C:\windows\UpdReg.EXE

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=f47f854d327c589d174d3bb5b55d5c05f5aca73df52a6bef47596b9010190291-1283926028

c:\windows\explorer.exe

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=6ffa2fb75dd77b334dc12012a59cf1ca1145cc4de8489c682b2d414ffbef7f91-1283926154

C:\STF141.tmp

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=54ec1e5fbc12e9c11b05432a381b5e128bbafb638a1643f6526a6e1133063a89-1283926283

c:\windows\kl.dat

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=8658063d9501a6026a3b547f450d75757b025fabd0b9ba0563551a73624daef0-1283926812

c:\windows\system32\drivers\avc.sys

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=8890ec45f3a604dd5f0158584d53f2b81ed687c35880ccab3cc4b13eef489c9d-1283926419

c:\windows\system32\dllcache\61883.sys

Kód: Vybrat vše

http://www.virustotal.com/file-scan/report.html?id=6c5b8a706984e3f36e3e0303cc23c4583aae03b0532220f910bd4dcd72070063-1283926569

C:\WINDOWS\svchost.exe

Kód: Vybrat vše

soubor už neexistuje

[motji]

prosím Vás některé odkazy mi nefungují aa nedávejte je do code

[clever.potheat]

Omlouvám se, je to taková moje úchylka z jiného fóra.
U tohohle jediného to něco našlo a bylo toho dost

SystemKey.dll
http://www.virustotal.com/file-scan/rep ... 1283981812

[motji]

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Folder::
c:\documents and settings\All Users\Data aplikací\SystemKey

File::
C:\STF141.tmp
C:\STF140.tmp
registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci




Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.