Pro vyoska

Zpráva

gugacka · #16 Příspěvek od **gugacka** » 03 Říj 2010 20:48

SystemLook 04.09.10 by jpshortstuff
Log created at 21:47 on 03/10/2010 by admin
Administrator - Elevation successful

========== filefind ==========

Searching for "sfsync04.sys"
C:\WINDOWS\system32\drivers\sfsync04.sys --a---- 52224 bytes [08:59 10/05/2006] [08:59 10/05/2006] 8451848F85453C24A8F91AC8D9DFA77F

========== folderfind ==========

Searching for "*star*"
C:\Documents and Settings\admin\Nabídka Start dr----- [17:16 23/03/2006]
C:\Documents and Settings\admin\Data aplikací\Microsoft\Excel\XLSTART d------ [07:54 10/06/2007]
C:\Documents and Settings\admin\Data aplikací\Microsoft\Word\STARTUP d------ [07:54 10/06/2007]
C:\Documents and Settings\admin\Local Settings\Data aplikací\Ahead\Nero StartSmart d------ [07:46 25/03/2006]
C:\Documents and Settings\All Users\Nabídka Start dr----- [17:40 23/03/2006]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Rockstar Games d------ [16:36 24/02/2007]
C:\Documents and Settings\Default User\Nabídka Start dr----- [17:40 23/03/2006]
C:\Program Files\Rockstar Games d------ [16:36 24/02/2007]
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind d------ [13:17 24/05/2007]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter\m_zbhcounter_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter10\m_zbhcounter10_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter11\m_zbhcounter11_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter12\m_zbhcounter12_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter13\m_zbhcounter13_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter14\m_zbhcounter14_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter15\m_zbhcounter15_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter16\m_zbhcounter16_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter2\m_zbhcounter2_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter3\m_zbhcounter3_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter4\m_zbhcounter4_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter5\m_zbhcounter5_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter6\m_zbhcounter6_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter7\m_zbhcounter7_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter8\m_zbhcounter8_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhcounter9\m_zbhcounter9_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps\m_zbhgaps_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps10\m_zbhgaps10_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps11\m_zbhgaps11_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps12\m_zbhgaps12_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps13\m_zbhgaps13_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps14\m_zbhgaps14_start d------ [09:28 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps15\m_zbhgaps15_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps16\m_zbhgaps16_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps17\m_zbhgaps17_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps18\m_zbhgaps18_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps19\m_zbhgaps19_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps20\m_zbhgaps20_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps21\m_zbhgaps21_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps22\m_zbhgaps22_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps23\m_zbhgaps23_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps24\m_zbhgaps24_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps25\m_zbhgaps25_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps26\m_zbhgaps26_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps27\m_zbhgaps27_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps28\m_zbhgaps28_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps29\m_zbhgaps29_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps3\m_zbhgaps3_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps4\m_zbhgaps4_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps5\m_zbhgaps5_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps6\m_zbhgaps6_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps7\m_zbhgaps7_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps8\m_zbhgaps8_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhgaps9\m_zbhgaps9_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhtetris\m_zbhtetris_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhtetris2\m_zbhtetris2_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zbhtricktheobject\m_zbhtricktheobject_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcollect\m_zdtcollect_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter\m_zdtcounter_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter2\m_zdtcounter2_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter3\m_zdtcounter3_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter4\m_zdtcounter4_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter5\m_zdtcounter5_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtcounter77\m_zdtcounter77_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps\m_zdtgaps_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps10\m_zdtgaps10_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps101\m_zdtgaps101_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps11\m_zdtgaps11_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps12\m_zdtgaps12_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps13\m_zdtgaps13_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps14\m_zdtgaps14_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps15\m_zdtgaps15_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps16\m_zdtgaps16_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps17\m_zdtgaps17_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps18\m_zdtgaps18_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps19\m_zdtgaps19_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps20\m_zdtgaps20_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps21\m_zdtgaps21_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps22\m_zdtgaps22_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps23\m_zdtgaps23_start d------ [09:29 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps24\m_zdtgaps24_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps25\m_zdtgaps25_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps26\m_zdtgaps26_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps27\m_zdtgaps27_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps28\m_zdtgaps28_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps29\m_zdtgaps29_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps3\m_zdtgaps3_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps30\m_zdtgaps30_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps4\m_zdtgaps4_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps5\m_zdtgaps5_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps7\m_zdtgaps7_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps8\m_zdtgaps8_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtgaps9\m_zdtgaps9_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdthighcombo\m_zdthighcombo_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zdtspecial\m_zdtspecial_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelcollect2\m_zelcollect2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelcounter\m_zelcounter_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zeldtgaps102\m_zeldtgaps102_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps\m_zelgaps_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps10\m_zelgaps10_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps100\m_zelgaps100_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps11\m_zelgaps11_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps12\m_zelgaps12_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps13\m_zelgaps13_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps14\m_zelgaps14_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps15\m_zelgaps15_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps16\m_zelgaps16_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps17\m_zelgaps17_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps2\m_zelgaps2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps3\m_zelgaps3_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps4\m_zelgaps4_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps5\m_zelgaps5_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps6\m_zelgaps6_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps7\m_zelgaps7_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps8\m_zelgaps8_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zelgaps9\m_zelgaps9_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhocounter\m_zhocounter_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhocounter2\m_zhocounter2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhocounter25\m_zhocounter25_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhocounter26\m_zhocounter26_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhocounter4\m_zhocounter4_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps10\m_zhogaps10_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps11\m_zhogaps11_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps13\m_zhogaps13_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps15\m_zhogaps15_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps16\m_zhogaps16_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps17\m_zhogaps17_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps18\m_zhogaps18_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps19\m_zhogaps19_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps2\m_zhogaps2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps20\m_zhogaps20_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps21\m_zhogaps21_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps22\m_zhogaps22_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps23\m_zhogaps23_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps30\m_zhogaps30_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps31\m_zhogaps31_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps4\m_zhogaps4_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps40\m_zhogaps40_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps5\m_zhogaps5_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps6\m_zhogaps6_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps7\m_zhogaps7_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps8\m_zhogaps8_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhogaps9\m_zhogaps9_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhohighcombo\m_zhohighcombo_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhohighcombo2\m_zhohighcombo2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhohighcombo3\m_zhohighcombo3_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zhoskatetheline\m_zhoskatetheline_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvcounter\m_zlvcounter_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvcounter2\m_zlvcounter2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvcounter3\m_zlvcounter3_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps\m_zlvgaps_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps2\m_zlvgaps2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps3\m_zlvgaps3_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps4\m_zlvgaps4_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps5\m_zlvgaps5_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps7\m_zlvgaps7_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zlvgaps8\m_zlvgaps8_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\M_ZOICounter\m_zoicounter_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoicounter2\m_zoicounter2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps\m_zoigaps_Start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps10\m_zoigaps10_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps11\m_zoigaps11_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps13\m_zoigaps13_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps2\m_zoigaps2_start d------ [09:30 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps3\m_zoigaps3_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps4\m_zoigaps4_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps5\m_zoigaps5_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps7\m_zoigaps7_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zoigaps8\m_zoigaps8_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmcounter1\m_zsmcounter1_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmcounter2\m_zsmcounter2_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmcounter3\m_zsmcounter3_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmcounter4\m_zsmcounter4_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps1\m_zsmgaps1_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps10\m_zsmgaps10_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps11\m_zsmgaps11_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps12\m_zsmgaps12_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps13\m_zsmgaps13_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps14\m_zsmgaps14_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps15\m_zsmgaps15_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps16\m_zsmgaps16_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps17\m_zsmgaps17_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps18\m_zsmgaps18_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps19\m_zsmgaps19_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps2\m_zsmgaps2_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps20\m_zsmgaps20_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps21\m_zsmgaps21_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps22\m_zsmgaps22_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps23\m_zsmgaps23_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps24\m_zsmgaps24_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps25\m_zsmgaps25_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps26\m_zsmgaps26_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps27\m_zsmgaps27_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps28\m_zsmgaps28_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps3\m_zsmgaps3_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps4\m_zsmgaps4_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps5\m_zsmgaps5_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps6\m_zsmgaps6_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps7\m_zsmgaps7_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps8\m_zsmgaps8_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmgaps9\m_zsmgaps9_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmtetris1\m_zsmtetris1_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmtetris2\m_zsmtetris2_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmtetris3\m_zsmtetris3_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsmtetris4\m_zsmtetris4_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\M_ZSRGAP\M_ZSRGAP_Start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\M_ZSRGAPS2\M_ZSRGAPS2_Start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsrgaps25\m_zsrgaps25_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsrgaps3\m_zsrgaps3_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsrgaps4\m_zsrgaps4_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsrgaps5\m_zsrgaps5_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsrgaps6\m_zsrgaps6_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvcounter\m_zsvcounter_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvcounter2\m_zsvcounter2_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvgaps\m_zsvgaps_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvgaps68\m_zsvgaps68_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvgaps69\m_zsvgaps69_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvgaps7\m_zsvgaps7_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvhighcombo\m_zsvhighcombo_start d------ [09:31 29/12/2009]
C:\Program Files\Aspyr Media, Inc\THAW\Game\data\missions\worldzones\m_zsvhighcombo2\m_zsvhighcombo2_start d------ [09:31 29/12/2009]
C:\Program Files\Giant\LEGO Star Wars d------ [16:19 30/11/2008]
C:\Program Files\LucasArts\Star Wars Jedi Knight Jedi Academy d------ [12:21 22/11/2006]
C:\Program Files\Microsoft Office\OFFICE11\STARTUP d------ [07:47 10/06/2007]
C:\Program Files\Microsoft Office\OFFICE11\XLSTART d------ [07:47 10/06/2007]
C:\Program Files\Nero\Nero 7\Nero StartSmart d------ [16:38 04/12/2009]
C:\Program Files\Software602\602XML\Start d------ [18:47 25/04/2008]
C:\Program Files\VID_0E8F&PID_0012\LiteStar d------ [12:56 31/03/2010]
C:\WINDOWS\system32\config\systemprofile\Nabídka Start dr----- [17:11 23/03/2006]
C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup d------ [11:29 23/03/2006]

Searching for "*FrontLine*"
No folders found.

Searching for "*SF*"
C:\Program Files\Common Files\Ahead\DSFilter d------ [16:38 04/12/2009]
C:\Program Files\Common Files\Microsoft Shared\SFPCA Cache d------ [12:32 18/12/2006]
C:\Program Files\Gameforge4D\4Story\Data\SFX d------ [14:03 11/05/2010]
C:\Program Files\ICQ7.1\imApp\theme\IMAGES\Common\IcqCountriesFlags d------ [15:16 22/04/2010]
C:\Program Files\Rockstar Games\GTA San Andreas\audio\SFX d------ [16:37 24/02/2007]
C:\Program Files\Rockstar Games\GTA San Andreas\data\maps\SF d------ [16:42 24/02/2007]
C:\Program Files\Team17\Worms World Party\fesfx d------ [14:04 21/04/2006]
C:\WINDOWS\assembly\GAC_MSIL\WindowsFormsIntegration d------ [22:27 05/12/2009]
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra# d------ [08:16 12/08/2010]
C:\WINDOWS\system32\DRVSTORE\fssfltr_F64381C38F211E3160A660B196A6A585F80604F9 d----c- [18:17 04/12/2009]

-= EOF =-

#17 Příspěvek od **vyosek** » 03 Říj 2010 20:54

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

Kód: Vybrat vše

:files
C:\WINDOWS\system32\drivers\sfsync04.sys

:services
sfsync04

:commands
[EMPTYTEMP]

Kliknete na cervene tlacitko MoveIt!
Sem pote dejte obsah okna Results (pod zelenou carou)
Pokud budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles

gugacka · #18 Příspěvek od **gugacka** » 03 Říj 2010 21:08

All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\drivers\sfsync04.sys not found.
========== SERVICES/DRIVERS ==========
Service sfsync04 stopped successfully!
Service sfsync04 deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: admin
->Temp folder emptied: 496695 bytes
->Temporary Internet Files folder emptied: 522889 bytes
->FireFox cache emptied: 42252653 bytes
->Flash cache emptied: 60689 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56504 bytes

User: LocalService
->Temp folder emptied: 65748 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 82584 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 42,00 mb

OTM by OldTimer - Version 3.1.16.1 log created on 10032010_220359

Files moved on Reboot...
File C:\WINDOWS\temp\_avast4_\Webshlock.txt not found!
File move failed. C:\WINDOWS\temp\Perflib_Perfdata_680.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...

gugacka · #19 Příspěvek od **gugacka** » 03 Říj 2010 21:09

na poprvé to zamrzlo po smazání souboru, proto ho teď nenašlo

#20 Příspěvek od **vyosek** » 03 Říj 2010 21:10

Fajn,udelej znovu mbr

gugacka · #21 Příspěvek od **gugacka** » 03 Říj 2010 21:11

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll sfsync02.sys atapi.sys viaide.sys PCIIDEX.SYS
kernel: MBR read successfully
user & kernel MBR OK

#22 Příspěvek od **vyosek** » 03 Říj 2010 21:13

Super, jak se chova PC

gugacka · #23 Příspěvek od **gugacka** » 03 Říj 2010 21:15

po startu pc spadne explorer, naskočí chyba, načte se znovu pak šlape snad dobře

#24 Příspěvek od **vyosek** » 03 Říj 2010 21:19

Abychom si rozumeli a nedoslo k milce - explorer = plocha a ne IE

Dej znovu Combofix

gugacka · #25 Příspěvek od **gugacka** » 03 Říj 2010 21:42

jj, rozumíme si, ale teď po dalšim restartu to už neudělal
každopádně mi připadá, že je pc stále nějaký zaražený

ComboFix 10-10-03.01 - admin 03.10.2010 22:31:22.5.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1535.1108 [GMT 2:00]
Spuštěný z: c:\documents and settings\admin\Plocha\Cf.com
AV: avast! antivirus 4.8.1368 [VPS 101003-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-09-03 do 2010-10-03 )))))))))))))))))))))))))))))))
.

2010-10-03 20:00 . 2010-10-03 20:00 -------- d-----w- C:\_OTM
2010-10-02 01:01 . 2010-10-02 01:01 -------- d-----w- C:\8d76c1407aae29519014e5eef364
2010-10-01 22:03 . 2010-10-01 22:03 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-10-01 21:10 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-01 21:10 . 2010-10-01 21:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-01 21:10 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-01 19:03 . 2010-10-01 19:03 -------- d-----w- c:\program files\Defraggler
2010-10-01 19:03 . 2010-10-01 19:03 -------- d-----w- c:\program files\CCleaner
2010-10-01 18:48 . 2010-10-01 18:50 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-10-01 18:35 . 2010-10-01 18:35 -------- d-----w- c:\program files\VS Revo Group
2010-10-01 18:33 . 2010-10-01 19:12 -------- d-----w- c:\program files\trend micro
2010-10-01 18:33 . 2010-10-01 18:33 -------- d-----w- C:\rsit

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 16:25 . 2007-01-14 17:32 436792 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-10-02 01:10 . 2004-08-18 12:00 84090 ----a-w- c:\windows\system32\perfc005.dat
2010-10-02 01:10 . 2004-08-18 12:00 441418 ----a-w- c:\windows\system32\perfh005.dat
2010-10-01 19:07 . 2006-03-24 17:34 -------- d-----w- c:\program files\Winamp
2010-10-01 19:00 . 2008-12-29 14:59 -------- d-----w- c:\program files\Yahoo!
2010-10-01 18:44 . 2008-08-20 15:02 -------- d-----w- c:\program files\Google
2010-10-01 16:48 . 2009-12-04 18:18 -------- d-----w- c:\program files\Microsoft Silverlight
2010-10-01 16:48 . 2008-09-19 16:12 -------- d-----w- c:\program files\Centauri
2010-09-30 20:20 . 2010-04-17 14:58 -------- d-----w- c:\program files\LG PC Suite II
2010-09-26 12:07 . 2006-03-23 18:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-26 12:06 . 2008-12-29 15:09 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-09-26 11:54 . 2007-05-24 13:41 -------- d-----w- c:\program files\Ubisoft
2010-09-26 11:53 . 2007-01-06 16:37 -------- d-----w- c:\program files\Activision
2010-09-26 11:31 . 2007-10-26 07:15 -------- d-----w- c:\program files\GOTCHA!
2010-09-26 11:29 . 2006-09-14 12:51 -------- d-----w- c:\program files\CrazyClassics
2010-09-21 18:01 . 2009-02-15 20:42 -------- d-----w- c:\program files\Spyware Terminator
2010-08-29 15:35 . 2010-08-29 15:35 -------- d-----w- c:\program files\Genius NetScroll+ Superior
2010-08-25 19:11 . 2010-04-22 15:16 -------- d-----w- c:\program files\ICQ7.1
2010-08-17 13:17 . 2004-08-18 12:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-22 15:46 . 2004-08-18 12:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 06:19 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2007-06-21 15:09 . 2007-06-21 15:11 266 ----a-w- c:\program files\Common Files\hama.de - Download-Area Gamecontroller.url
2007-02-09 20:18 . 2008-03-18 15:03 6144 ----a-r- c:\program files\zubynehty.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-10-01_19.50.38 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-10-03 20:26 . 2010-10-03 20:26 16384 c:\windows\Temp\Perflib_Perfdata_68c.dat
+ 2004-08-18 12:00 . 2010-10-02 01:10 72354 c:\windows\system32\perfc009.dat
- 2004-08-18 12:00 . 2010-09-21 18:51 72354 c:\windows\system32\perfc009.dat
+ 2010-09-22 07:43 . 2010-09-22 07:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2010-03-23 03:31 . 2010-03-23 03:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 01:17 . 2010-09-23 01:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_2fd82d27\System.Drawing.Design.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_e4263ecd\CustomMarshalers.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- 2010-07-14 21:44 . 2010-07-14 21:44 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-08-11 20:36 . 2010-08-11 20:36 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2004-08-18 12:00 . 2010-09-21 18:51 444478 c:\windows\system32\perfh009.dat
+ 2004-08-18 12:00 . 2010-10-02 01:10 444478 c:\windows\system32\perfh009.dat
- 2010-03-23 03:31 . 2010-03-23 03:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-09-22 07:43 . 2010-09-22 07:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 01:17 . 2010-09-23 01:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 19:02 . 2010-09-23 19:02 798208 c:\windows\Installer\2ad0c.msp
+ 2010-10-02 01:02 . 2010-10-02 01:02 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_823fb941\System.Drawing.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_ddd5b873\System.Drawing.Design.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_b25b9898\CustomMarshalers.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLiveLocal.Wr#\f39d526b39e8928e719d9ce8a971383e\WindowsLiveLocal.WriterPlugin.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 851968 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d0916f4cf87dafdf941b66056dd0e005\WindowsLive.Writer.BlogClient.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 594944 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\aa7ddbdf38e8a7129fb0befd951897f5\WindowsLive.Writer.HtmlEditor.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 152064 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\7619247d1c0a0779042423940f5f93de\WindowsLive.Writer.HtmlParser.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 771584 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a140e8da81b3af34c864ad851fe150fd\System.Runtime.Remoting.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2010-10-02 01:14 . 2010-10-02 01:14 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-03-23 03:32 . 2010-03-23 03:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-09-22 07:44 . 2010-09-22 07:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-09-23 00:26 . 2010-09-23 00:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 00:25 . 2010-09-23 00:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-09-23 13:55 . 2010-09-23 13:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-09-23 05:40 . 2010-09-23 05:40 2607104 c:\windows\Installer\900ae8.msp
+ 2010-09-23 05:39 . 2010-09-23 05:39 4265472 c:\windows\Installer\900ae7.msp
+ 2010-09-23 05:39 . 2010-09-23 05:39 4265472 c:\windows\Installer\2ad05.msp
+ 2010-10-02 01:02 . 2010-10-02 01:02 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_b868df6f\System.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_666cffcd\System.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_edad82c0\System.Xml.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_416d236d\System.Xml.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_36073974\System.Windows.Forms.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_14158988\System.Windows.Forms.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_388488e2\System.Drawing.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_3a77aa42\System.Design.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_02c6169b\System.Design.dll
+ 2010-10-02 01:02 . 2010-10-02 01:02 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d1229c96\mscorlib.dll
+ 2010-10-02 01:03 . 2010-10-02 01:03 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_397fb8b1\mscorlib.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 6392832 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\d13674449b3ae21327820bddbd7e445f\WindowsLive.Writer.PostEditor.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 2002432 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsLive.Writer.#\c266f56473a94ee07c092381c2ff9522\WindowsLive.Writer.CoreServices.ni.dll
+ 2010-10-02 01:17 . 2010-10-02 01:17 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2010-10-02 01:17 . 2010-10-02 01:17 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2010-10-02 01:17 . 2010-10-02 01:17 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2010-10-02 01:14 . 2010-10-02 01:14 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2010-10-02 01:16 . 2010-10-02 01:16 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-02 01:11 . 2010-10-02 01:11 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
- 2009-12-05 22:35 . 2009-12-05 22:35 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-02 01:09 . 2010-10-02 01:09 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-08-11 20:36 . 2010-08-11 20:36 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-08-11 20:37 . 2010-08-11 20:37 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-10-02 01:10 . 2010-10-02 01:10 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-07-14 21:44 . 2010-07-14 21:44 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-10-02 01:01 . 2010-10-02 01:01 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-07-14 21:44 . 2010-07-14 21:44 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-09-24 12:08 . 2010-09-24 12:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-09-24 05:08 . 2010-09-24 05:08 17518080 c:\windows\Installer\900ae6.msp
+ 2010-10-02 01:15 . 2010-10-02 01:15 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2010-10-02 01:15 . 2010-10-02 01:15 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\75aeb590008d6e166f7be18f935c52d2\System.ServiceModel.ni.dll
+ 2010-10-02 01:13 . 2010-10-02 01:13 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-04-01 1368064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-05 61440]
"VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"mouseElf"="c:\progra~1\GENIUS~1\mouseElf.exe" [2004-06-10 192512]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-6-22 966756]
Hlavnˇ panel ATI CATALYST.lnk - c:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-8-6 61440]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-12 282624]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Aspyr Media, Inc\\THAW\\Game\\THAW.exe"=
"c:\\Program Files\\ICQ7.1\\ICQ.exe"=
"c:\\Program Files\\ICQ7.1\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [5.7.2006 14:46 63352]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [22.8.2008 19:16 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [15.2.2009 22:42 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.8.2008 19:16 20560]
S3 genmcmnUSB;Genius USB Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [29.8.2010 17:35 6834]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [24.5.2007 15:17 223128]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.1.2007 19:32 436792]
.
Obsah adresáře 'Naplánované úlohy'

2008-08-20 c:\windows\Tasks\Microsoft_Hardware_Launch_vVX1000_exe.job
- c:\windows\vVX1000.exe [2008-08-20 21:46]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\documents and settings\admin\Data aplikací\Mozilla\Firefox\Profiles\vqwleh4u.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\.mfp]
@DACL=(02 0000)
@="MacromediaFlashPaper.MacromediaFlashPaper"
"Content Type"="application/x-shockwave-flash"

[HKEY_LOCAL_MACHINE\software\Classes\.sol]
@DACL=(02 0000)
"Content Type"="text/plain"

[HKEY_LOCAL_MACHINE\software\Classes\.sor]
@DACL=(02 0000)
"Content Type"="text/plain"

[HKEY_LOCAL_MACHINE\software\Classes\.spl]
@DACL=(02 0000)
@="ShockwaveFlash.ShockwaveFlash"
"Content Type"="application/futuresplash"

[HKEY_LOCAL_MACHINE\software\Classes\.swf]
@DACL=(02 0000)
@="ShockwaveFlash.ShockwaveFlash"
"Content Type"="application/x-shockwave-flash"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(656)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(1044)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-10-03 22:40:29
ComboFix-quarantined-files.txt 2010-10-03 20:40
ComboFix2.txt 2010-10-03 16:13
ComboFix3.txt 2010-10-01 21:06
ComboFix4.txt 2010-10-01 19:53

Před spuštěním: Volných bajtů: 67 243 458 560
Po spuštění: Volných bajtů: 67 251 576 832

- - End Of File - - F88F360C1DFBD2714E0416A77ADF98F1

#26 Příspěvek od **vyosek** » 03 Říj 2010 21:52

Skript pro CF - log opet sem

Kód: Vybrat vše

FireFox::
FF - ProfilePath - c:\documents and settings\admin\Data aplikací\Mozilla\Firefox\Profiles\vqwleh4u.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... id=afex&q=

RegLock::
[HKEY_LOCAL_MACHINE\software\Classes\.mfp]
[HKEY_LOCAL_MACHINE\software\Classes\.sol]
[HKEY_LOCAL_MACHINE\software\Classes\.sor]
[HKEY_LOCAL_MACHINE\software\Classes\.spl]
[HKEY_LOCAL_MACHINE\software\Classes\.swf]

Predpokladam ze cisteni pres CCleaner jsi delal, zarazeny v jakem slova smyslu

Tim MBAMem jsi sken delal

Pokud ne, tak udelat a log pred mazanim sem

Jeste zopakuj prosim gmer a logy sem taktez nasyp, jestli tam neco neni navic...

Kouknu na to asi asi az rano, zejtra valim do skoly...

gugacka · #27 Příspěvek od **gugacka** » 03 Říj 2010 22:06

ComboFix 10-10-03.01 - admin 03.10.2010 22:56:41.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1535.860 [GMT 2:00]
Spuštěný z: c:\documents and settings\admin\Plocha\Cf.com
Použité ovládací přepínače :: c:\docume~1\admin\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1368 [VPS 101003-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-09-03 do 2010-10-03 )))))))))))))))))))))))))))))))
.

2010-10-03 20:52 . 2010-10-03 20:52 63488 ----a-w- c:\documents and settings\admin\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
2010-10-03 20:52 . 2010-10-03 20:52 52224 ----a-w- c:\documents and settings\admin\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
2010-10-03 20:52 . 2010-10-03 20:52 117760 ----a-w- c:\documents and settings\admin\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
2010-10-03 20:50 . 2010-10-03 20:51 -------- d-----w- c:\program files\SUPERAntiSpyware
2010-10-03 20:00 . 2010-10-03 20:00 -------- d-----w- C:\_OTM
2010-10-02 01:01 . 2010-10-02 01:01 -------- d-----w- C:\8d76c1407aae29519014e5eef364
2010-10-01 22:03 . 2010-10-01 22:03 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-10-01 21:10 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-01 21:10 . 2010-10-01 21:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-10-01 21:10 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-01 19:03 . 2010-10-01 19:03 -------- d-----w- c:\program files\Defraggler
2010-10-01 19:03 . 2010-10-01 19:03 -------- d-----w- c:\program files\CCleaner
2010-10-01 18:48 . 2010-10-01 18:50 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-10-01 18:35 . 2010-10-01 18:35 -------- d-----w- c:\program files\VS Revo Group
2010-10-01 18:33 . 2010-10-01 19:12 -------- d-----w- c:\program files\trend micro
2010-10-01 18:33 . 2010-10-01 18:33 -------- d-----w- C:\rsit

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-03 16:25 . 2007-01-14 17:32 436792 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-10-02 01:10 . 2004-08-18 12:00 84090 ----a-w- c:\windows\system32\perfc005.dat
2010-10-02 01:10 . 2004-08-18 12:00 441418 ----a-w- c:\windows\system32\perfh005.dat
2010-10-01 19:07 . 2006-03-24 17:34 -------- d-----w- c:\program files\Winamp
2010-10-01 19:00 . 2008-12-29 14:59 -------- d-----w- c:\program files\Yahoo!
2010-10-01 18:44 . 2008-08-20 15:02 -------- d-----w- c:\program files\Google
2010-10-01 16:48 . 2009-12-04 18:18 -------- d-----w- c:\program files\Microsoft Silverlight
2010-10-01 16:48 . 2008-09-19 16:12 -------- d-----w- c:\program files\Centauri
2010-09-30 20:20 . 2010-04-17 14:58 -------- d-----w- c:\program files\LG PC Suite II
2010-09-26 12:07 . 2006-03-23 18:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-26 12:06 . 2008-12-29 15:09 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-09-26 11:54 . 2007-05-24 13:41 -------- d-----w- c:\program files\Ubisoft
2010-09-26 11:53 . 2007-01-06 16:37 -------- d-----w- c:\program files\Activision
2010-09-26 11:31 . 2007-10-26 07:15 -------- d-----w- c:\program files\GOTCHA!
2010-09-26 11:29 . 2006-09-14 12:51 -------- d-----w- c:\program files\CrazyClassics
2010-09-21 18:01 . 2009-02-15 20:42 -------- d-----w- c:\program files\Spyware Terminator
2010-08-29 15:35 . 2010-08-29 15:35 -------- d-----w- c:\program files\Genius NetScroll+ Superior
2010-08-25 19:11 . 2010-04-22 15:16 -------- d-----w- c:\program files\ICQ7.1
2010-08-17 13:17 . 2004-08-18 12:00 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-07-22 15:46 . 2004-08-18 12:00 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 06:19 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2007-06-21 15:09 . 2007-06-21 15:11 266 ----a-w- c:\program files\Common Files\hama.de - Download-Area Gamecontroller.url
2007-02-09 20:18 . 2008-03-18 15:03 6144 ----a-r- c:\program files\zubynehty.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-09-28 2424560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\SoundMAX\SMax4PNP.exe" [2004-04-01 1368064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-05 61440]
"VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"mouseElf"="c:\progra~1\GENIUS~1\mouseElf.exe" [2004-06-10 192512]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-6-22 966756]
Hlavnˇ panel ATI CATALYST.lnk - c:\program files\ATI Technologies\ATI.ACE\CLI.exe [2005-8-6 61440]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-12 282624]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Aspyr Media, Inc\\THAW\\Game\\THAW.exe"=
"c:\\Program Files\\ICQ7.1\\ICQ.exe"=
"c:\\Program Files\\ICQ7.1\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [5.7.2006 14:46 63352]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [22.8.2008 19:16 114768]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [15.2.2009 22:42 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.8.2008 19:16 20560]
S3 genmcmnUSB;Genius USB Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [29.8.2010 17:35 6834]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [24.5.2007 15:17 223128]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.1.2007 19:32 436792]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - SASDIFSV
*NewlyCreated* - SASKUTIL
*Deregistered* - RKREVEAL150
.
Obsah adresáře 'Naplánované úlohy'

2008-08-20 c:\windows\Tasks\Microsoft_Hardware_Launch_vVX1000_exe.job
- c:\windows\vVX1000.exe [2008-08-20 21:46]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe
FF - ProfilePath - c:\documents and settings\admin\Data aplikací\Mozilla\Firefox\Profiles\vqwleh4u.default\
FF - prefs.js: browser.startup.homepage - www.google.cz
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(656)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3948)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-10-03 23:02:28
ComboFix-quarantined-files.txt 2010-10-03 21:02
ComboFix2.txt 2010-10-03 20:40
ComboFix3.txt 2010-10-03 16:13
ComboFix4.txt 2010-10-01 21:06
ComboFix5.txt 2010-10-03 20:55

Před spuštěním: Volných bajtů: 67 124 518 912
Po spuštění: Volných bajtů: 67 118 055 424

- - End Of File - - C950BFA8FDD3FBD9D7732A36253AA13F

ccleaner samosebou, mbam nenašel nic, zaraženej, takovej chvilku běhá super, pak takový pomalý odezvy na klikání, něco mi říká, že by měl být svižnější

ještě skusim sas a pak sem nahodim nový logy z gmeru ....

Zatim děkuju moc za pomoc, snad to nebylo k ničemu

#28 Příspěvek od **vyosek** » 03 Říj 2010 22:08

Hlavni havet by nasel i MBAM, SAS najde maximalne nejake cookies si myslim, ale jak myslis, udelej ho a pak ten gmer...

Snad to dame nejak do kupy

gugacka · #29 Příspěvek od **gugacka** » 04 Říj 2010 15:07

tak velkej gmer zde

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-10-04 16:05:15
Windows 5.1.2600 Service Pack 3
Running: 2ikv5hub.exe; Driver: C:\DOCUME~1\admin\LOCALS~1\Temp\pfxorkoc.sys

---- System - GMER 1.0.15 ----

SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwClose [0xB0E696B8]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateKey [0xB0E69574]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDeleteValueKey [0xB0E69A52]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwDuplicateObject [0xB0E6914C]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenKey [0xB0E6964E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenProcess [0xB0E6908C]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwOpenThread [0xB0E690F0]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwQueryValueKey [0xB0E6976E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwRestoreKey [0xB0E6972E]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwSetValueKey [0xB0E698AE]
SSDT \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com) ZwTerminateProcess [0xADA08620]

Code \??\C:\DOCUME~1\admin\LOCALS~1\Temp\catchme.sys pIofCallDriver

---- Kernel code sections - GMER 1.0.15 ----

init C:\WINDOWS\system32\drivers\senfilt.sys entry point in "init" section [0xB9378F80]
? C:\WINDOWS\system32\Drivers\PROCEXP113.SYS Systém nemůže nalézt uvedený soubor. !
? C:\DOCUME~1\admin\LOCALS~1\Temp\catchme.sys Systém nemůže nalézt uvedený soubor. !
? C:\DOCUME~1\admin\LOCALS~1\Temp\mbr.sys Systém nemůže nalézt uvedený soubor. !
? C:\WINDOWS\system32\Drivers\RKREVEAL150.SYS Systém nemůže nalézt uvedený soubor. !
? System32\Drivers\IsDrv122.sys Systém nemůže nalézt uvedenou cestu. !

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\WINDOWS\system32\services.exe[700] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW] 003D0002
IAT C:\WINDOWS\system32\services.exe[700] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW] 003D0000

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IsDrv122.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IsDrv122.sys
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device \Driver\prodrv06 \Device\ProDrv06 E1CA9828
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdePort0 sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdePort1 sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\prohlp02 \Device\ProHlp02 E1638AC0

AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xD7 0xC9 0x38 0x28 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xBA 0x8B 0x96 0x5E ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xDD 0xE3 0x6E 0x24 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x12 0x15 0x77 0x05 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@p0 C:\Program Files\Alcohol Soft\Alcohol 120\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xB9 0x10 0x96 0x4C ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001@ujdew 0x50 0x55 0xB1 0x56 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04\00000001\jdgg40@ujdew 0xFF 0xFD 0x63 0xF6 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xBA 0x8B 0x96 0x5E ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xDD 0xE3 0x6E 0x24 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x12 0x15 0x77 0x05 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@h0 1
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04@ujdew 0xD7 0xC9 0x38 0x28 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Program Files\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xBA 0x8B 0x96 0x5E ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xDD 0xE3 0x6E 0x24 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x12 0x15 0x77 0x05 ...
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp@ FlashProp Class
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp\CurVer
Reg HKLM\SOFTWARE\Classes\FlashProp.FlashProp\CurVer@ FlashProp.FlashProp.1

---- EOF - GMER 1.0.15 ----

#30 Příspěvek od **vyosek** » 04 Říj 2010 16:09

Skript pro SystemLook

Kód: Vybrat vše

:filefind
PROCEXP113.SYS
RKREVEAL150.SYS
IsDrv122.sys
senfilt.sys

VIRY.CZ

Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska

Re: Pro vyoska