Neznáme processy.

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Neznáme processy.

#1 Příspěvek od lolek169 »

Dobré odpoledne.Poslední dobou tu mám něak moc processu,pamatuju když sem mněl 35processu a teď jich mám i někdy dokonce 50!Přitom to sou processy např.CLI.exe sou tam 2x někdy i 3x lsass.exe taky víc než jednou.Je tam prostě moc processu a myslím si že bez nich by mohl počítač pracovat rychleji.Stejné je to i s windowsema,zapnu tento počítač a trva asi 10sekund než se to zapne.Někdy i stupidní fotka trva cca 3-4sekundy,přitom na stroj kterej mám by to nemnělo snad trvat ani tu blbou sekundu.Možná mám pc přecpaný blbostma,možná tu mám škodlivou havěť.Tady je log z RSIT.Logfile of random's system information tool 1.08 (written by random/random)
Run by komp at 2010-02-05 12:23:19
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 4 GB (12%) free of 31 GB
Total RAM: 2559 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:23:37, on 5.2.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\komp\Plocha\RSIT.exe
C:\Program Files\trend micro\komp.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: &Download All using 4shared Desktop - C:\Program Files\4shared Desktop\down_all.htm
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: MSSQLServerADHelper - Unknown owner - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe (file missing)
O23 - Service: NMSAccessU - Unknown owner - C:\Documents and Settings\komp\Local Settings\temp\{DE676DF5-CA49-4ADA-8D27-47C85D494414}\NMSAccessU.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Secunia Update Agent - Unknown owner - C:\Program Files\Secunia\PSI\sua.exe (file missing)

--
End of file - 7898 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\MpIdleTask.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{0348DB9B-2D6C-4C98-98EB-DA2B88995C6B}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{C96DABC5-EA7D-4D6D-9759-57EBB3F88E89}.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-01-09 65536]
"Ptipbmf"=ptipbmf.dll,SetWriteCacheMode []
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-02-08 488984]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam10\QuickCam10.exe [2007-02-08 774168]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"MDS_Menu"=C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe [2009-05-19 222504]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2010-12-10 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Olympus ib]
C:\Program Files\Olympus\ib\olycamdetect.exe [2009-10-30 93376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-12-03 14944136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2002-01-08 395640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^komp^Nabídka Start^Programy^Po spuštění^Registration Heroes of Might & Magic 5.LNK]
C:\Program Files\Ubisoft\Heroes of Might and Magic V\registration\RegistrationReminder.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutorun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Wolfenstein - Enemy Territory\ET.exe"="C:\Program Files\Wolfenstein - Enemy Territory\ET.exe:*:Disabled:ET"
"C:\Documents and Settings\komp\Local Settings\Data aplikací\Kamuse\KCSTrayDownloader\KCSTrayDownloaderEngine.exe"="C:\Documents and Settings\komp\Local Settings\Data aplikací\Kamuse\KCSTrayDownloader\KCSTrayDownloaderEngine.exe:*:Enabled:KCSTrayDownloaderEngine"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Riot Games\League of Legends\air\LolClient.exe"="C:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Riot Games\League of Legends\game\League of Legends.exe"="C:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

======List of files/folders created in the last 1 months======

2011-01-29 18:51:59 ----D---- C:\Program Files\GamersFirst
2011-01-26 14:02:25 ----D---- C:\Program Files\Microsoft Security Client
2011-01-24 21:43:18 ----D---- C:\Program Files\Sony Setup
2011-01-21 20:58:22 ----D---- C:\Documents and Settings\komp\Data aplikací\Dofus-4.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2011-01-17 19:06:04 ----D---- C:\Documents and Settings\komp\Data aplikací\Dofus-3.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2011-01-16 15:20:15 ----D---- C:\Documents and Settings\komp\Data aplikací\ATI
2011-01-16 14:55:12 ----D---- C:\ATI
2011-01-16 14:37:56 ----D---- C:\Documents and Settings\komp\Data aplikací\LolClient
2011-01-16 14:36:14 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-01-16 14:36:14 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-01-16 14:36:00 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-01-16 14:36:00 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-01-16 14:35:47 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-01-16 14:35:30 ----D---- C:\WINDOWS\Logs
2011-01-16 14:23:17 ----D---- C:\Riot Games
2011-01-16 13:57:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-01-16 13:56:37 ----D---- C:\Program Files\Pando Networks
2011-01-16 00:52:05 ----D---- C:\Documents and Settings\komp\Data aplikací\Avnex
2011-01-16 00:46:47 ----D---- C:\AV_LOGS
2011-01-16 00:45:59 ----A---- C:\WINDOWS\system32\drivers\vcsvad.sys
2011-01-13 20:23:32 ----SHD---- C:\RECYCLER
2011-01-13 19:58:55 ----A---- C:\ComboFix.txt
2011-01-13 19:37:16 ----A---- C:\WINDOWS\zip.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\SWSC.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\SWREG.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\sed.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\PEV.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\NIRCMD.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\MBR.exe
2011-01-13 19:37:16 ----A---- C:\WINDOWS\grep.exe
2011-01-13 19:37:04 ----D---- C:\WINDOWS\ERDNT
2011-01-13 19:36:51 ----D---- C:\Qoobox
2011-01-13 12:30:51 ----D---- C:\Program Files\Dofus 2
2011-01-12 23:46:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-01-09 20:17:21 ----D---- C:\Documents and Settings\komp\Data aplikací\SLAnticheat
2011-01-09 14:50:46 ----D---- C:\Program Files\Secunia
2011-01-08 14:18:09 ----D---- C:\Program Files\Dofus
2011-01-05 18:45:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2011-01-01 23:39:51 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-01-01 23:30:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-01-01 13:09:42 ----D---- C:\TEXCACHE
2011-01-01 13:04:43 ----D---- C:\Program Files\Cenega
2011-01-01 11:11:03 ----D---- C:\rsit
2010-12-31 16:01:43 ----D---- C:\Documents and Settings\komp\Data aplikací\TS3Client
2010-12-31 11:27:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-31 11:27:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-31 11:26:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-31 11:23:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-31 11:23:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-12-31 11:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-31 11:23:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-31 11:22:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-30 17:34:10 ----A---- C:\WINDOWS\system32\javaws.exe
2010-12-30 17:34:09 ----A---- C:\WINDOWS\system32\javaw.exe
2010-12-30 17:34:09 ----A---- C:\WINDOWS\system32\java.exe
2010-12-11 00:37:24 ----A---- C:\WINDOWS\system32\VB5DB.DLL
2010-12-10 21:41:56 ----D---- C:\Program Files\ICQ6Toolbar
2010-12-10 21:41:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-12-10 21:41:23 ----D---- C:\Documents and Settings\komp\Data aplikací\ICQ
2010-12-10 21:40:59 ----D---- C:\Program Files\ICQ7.2
2010-12-09 23:47:54 ----D---- C:\WINDOWS\pss
2010-12-09 23:35:38 ----D---- C:\WINDOWS\Minidump
2010-12-09 16:36:21 ----D---- C:\Program Files\Common Files\Skype
2010-12-03 16:28:25 ----D---- C:\Download
2010-12-03 01:43:21 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-12-02 20:52:54 ----A---- C:\WINDOWS\DJ Music Mixer Uninstaller.exe
2010-12-02 20:51:10 ----D---- C:\Program Files\Common Files\Program4Pc
2010-11-30 15:59:03 ----D---- C:\562dabf31c3f002d52de92f10d8160
2010-11-19 23:11:59 ----D---- C:\WINDOWS\SxsCaPendDel
2010-11-17 15:28:23 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2010-11-15 19:30:53 ----A---- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2010-11-15 19:29:16 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-11-15 18:21:12 ----D---- C:\WINDOWS\Sun
2010-11-15 18:20:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-11-15 18:19:56 ----D---- C:\Program Files\Common Files\Java
2010-11-15 18:19:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-11-15 18:18:06 ----D---- C:\Program Files\Java
2010-11-15 18:16:47 ----D---- C:\Documents and Settings\komp\Data aplikací\Sun
2010-11-14 02:25:09 ----D---- C:\Program Files\Conduit
2010-11-14 02:24:57 ----D---- C:\Program Files\ConduitEngine
2010-11-14 02:20:55 ----D---- C:\WINDOWS\Freecorder
2010-11-14 02:12:24 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-11-13 11:11:09 ----D---- C:\Documents and Settings\komp\Data aplikací\mIRC
2010-11-13 11:11:07 ----D---- C:\Program Files\mIRC
2010-11-12 20:58:21 ----D---- C:\Documents and Settings\komp\Data aplikací\MAGIX
2010-11-12 20:57:47 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2010-11-12 20:57:46 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2010-11-12 20:53:41 ----A---- C:\WINDOWS\system32\TTIC32.dll
2010-11-12 20:53:41 ----A---- C:\WINDOWS\system32\TTI32.dll
2010-11-12 20:53:41 ----A---- C:\WINDOWS\system32\MXRestore.exe
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\STRING32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\mgxcdr.txt
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLTPO32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLRES32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLRD32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLPTL32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLPRJ32.dll
2010-11-12 20:53:40 ----A---- C:\WINDOWS\system32\DLLPRF32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLPNT32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLMSC32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLIX.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLISO32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLIO32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLIMG32.dll
2010-11-12 20:53:39 ----A---- C:\WINDOWS\system32\DLLDRV32.dll
2010-11-12 20:53:38 ----A---- C:\WINDOWS\system32\DLLDIR32.dll
2010-11-12 20:53:38 ----A---- C:\WINDOWS\system32\DLLDEV32.dll
2010-11-12 20:53:38 ----A---- C:\WINDOWS\system32\DLLCPY32.dll
2010-11-12 20:53:38 ----A---- C:\WINDOWS\system32\DLLCDF32.dll
2010-11-12 20:53:38 ----A---- C:\WINDOWS\system32\DLLCDA32.dll
2010-11-12 20:53:37 ----A---- C:\WINDOWS\system32\DLLAV32.dll
2010-11-12 20:50:42 ----A---- C:\WINDOWS\system32\msxml4a.dll
2010-11-12 20:48:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\MAGIX
2010-11-12 20:45:01 ----A---- C:\WINDOWS\system32\DLLDEV32i.dll
2010-11-12 20:43:25 ----D---- C:\Program Files\Common Files\MAGIX Services
2010-11-06 00:32:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-11-05 22:57:21 ----D---- C:\WINDOWS\system32\appmgmt
2010-11-05 22:43:28 ----SHD---- C:\WINDOWS\ftpcache
2010-11-02 14:19:12 ----D---- C:\Documents and Settings\komp\Data aplikací\OpenOffice.org2
2010-10-30 14:07:51 ----D---- C:\Documents and Settings\komp\Data aplikací\OpenCandy
2010-10-30 13:50:37 ----D---- C:\Program Files\CCleaner
2010-10-29 23:35:50 ----D---- C:\Documents and Settings\komp\Data aplikací\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2010-10-29 23:35:50 ----D---- C:\Documents and Settings\komp\Data aplikací\app
2010-10-29 23:35:38 ----D---- C:\Documents and Settings\komp\Data aplikací\Dofus.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2010-10-29 23:34:57 ----D---- C:\Documents and Settings\komp\Data aplikací\Dofus-2.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1
2010-10-29 23:34:57 ----D---- C:\Documents and Settings\komp\Data aplikací\Dofus 2
2010-10-29 21:23:30 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-10-29 16:36:18 ----D---- C:\Program Files\MSECache
2010-10-28 19:51:50 ----A---- C:\WINDOWS\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.0.1600.22.dll
2010-10-28 19:51:12 ----A---- C:\WINDOWS\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.0.1600.22.dll
2010-10-28 19:49:03 ----D---- C:\WINDOWS\system32\RsFx
2010-10-28 19:46:21 ----D---- C:\Program Files\MSXML 6.0
2010-10-28 19:40:32 ----D---- C:\Program Files\Microsoft Silverlight
2010-10-28 19:40:17 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-10-28 19:33:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-10-28 19:32:44 ----D---- C:\Program Files\Microsoft SDKs
2010-10-24 13:34:23 ----A---- C:\WINDOWS\ALCFDRTM.EXE
2010-10-24 13:34:18 ----D---- C:\WINDOWS\system32\Lang
2010-10-21 19:56:09 ----A---- C:\WINDOWS\holzed.ini
2010-10-20 15:42:53 ----D---- C:\Documents and Settings\komp\Data aplikací\TeamViewer
2010-10-19 13:51:29 ----A---- C:\WINDOWS\system32\psfind.dll
2010-10-19 12:28:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2010-10-18 11:32:24 ----A---- C:\WINDOWS\system32\unicows.dll
2010-10-18 10:51:57 ----D---- C:\Documents and Settings\komp\Data aplikací\GetRightToGo
2010-10-18 09:46:43 ----D---- C:\Sounds
2010-10-18 09:40:52 ----D---- C:\Temp
2010-10-18 09:36:12 ----A---- C:\WINDOWS\system32\drivers\lgusbmodem.sys
2010-10-18 09:36:12 ----A---- C:\WINDOWS\system32\drivers\lgusbdiag.sys
2010-10-18 09:36:12 ----A---- C:\WINDOWS\system32\drivers\lgusbbus.sys
2010-10-18 09:36:10 ----D---- C:\Program Files\LG Electronics
2010-10-18 09:34:24 ----D---- C:\Documents and Settings\komp\Data aplikací\LG Electronics
2010-10-17 19:51:02 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-10-17 19:50:25 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-10-17 19:49:46 ----D---- C:\Program Files\DAEMON Tools Lite
2010-10-17 19:49:15 ----D---- C:\Documents and Settings\komp\Data aplikací\DAEMON Tools Lite
2010-10-17 19:49:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2010-10-17 10:34:23 ----D---- C:\Program Files\uTorrent
2010-10-17 10:32:52 ----D---- C:\Documents and Settings\komp\Data aplikací\uTorrent
2010-10-13 21:31:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-13 21:31:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-10-13 21:31:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-13 21:31:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-13 21:30:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-13 21:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-13 21:30:39 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-13 21:29:54 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-13 21:29:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-10-11 08:42:02 ----A---- C:\WINDOWS\system32\d3dx9.dll
2010-10-11 08:42:01 ----A---- C:\WINDOWS\system32\D3DX81ab.dll
2010-10-06 16:09:38 ----A---- C:\WINDOWS\AutoScreenRecorder.INI
2010-10-04 16:24:53 ----A---- C:\WINDOWS\system32\kbdur666.dll
2010-10-04 16:24:53 ----A---- C:\WINDOWS\system32\kbdru668.dll
2010-10-04 16:24:53 ----A---- C:\WINDOWS\system32\kbdru667.dll
2010-10-04 16:24:53 ----A---- C:\WINDOWS\system32\kbdru666.dll
2010-10-04 16:24:52 ----A---- C:\WINDOWS\unins000.exe
2010-10-04 08:35:33 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-10-04 08:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-10-04 08:35:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-10-03 08:44:54 ----D---- C:\WINDOWS\ie8updates
2010-10-03 08:44:22 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-10-03 08:44:04 ----D---- C:\WINDOWS\system32\KB905474
2010-10-03 08:43:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-10-03 08:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-10-03 08:41:32 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-10-03 08:39:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-10-03 08:39:31 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-10-03 08:28:28 ----D---- C:\Program Files\MSXML 4.0
2010-10-03 08:27:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-10-03 08:26:52 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-10-02 19:58:34 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-10-02 19:27:43 ----D---- C:\Documents and Settings\komp\Data aplikací\Publish Providers
2010-10-02 19:15:07 ----N---- C:\WINDOWS\system32\dbmsqlgc.dll
2010-10-02 19:15:07 ----N---- C:\WINDOWS\system32\dbmsgnet.dll
2010-10-02 19:14:59 ----A---- C:\WINDOWS\IsUninst.exe
2010-10-02 19:14:32 ----D---- C:\Program Files\Microsoft SQL Server
2010-10-02 19:13:59 ----D---- C:\Documents and Settings\komp\Data aplikací\Sony
2010-10-02 19:08:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony
2010-10-02 19:08:08 ----D---- C:\Program Files\Sony
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\vxblock.dll
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxsfs.dll
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxdrv.dll
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\pxafs.dll
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2010-10-02 18:23:05 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2010-10-02 18:23:04 ----N---- C:\WINDOWS\system32\pxwave.dll
2010-10-02 18:23:04 ----N---- C:\WINDOWS\system32\pxmas.dll
2010-10-02 18:23:04 ----N---- C:\WINDOWS\system32\px.dll
2010-10-02 18:21:02 ----D---- C:\Program Files\Common Files\DivX Shared
2010-10-02 18:19:20 ----D---- C:\Program Files\DivX
2010-10-02 18:18:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-10-02 16:31:29 ----D---- C:\Documents and Settings\komp\Data aplikací\Hardcore
2010-10-02 16:28:05 ----A---- C:\WINDOWS\system32\rewire.dll
2010-10-02 16:27:12 ----D---- C:\Program Files\VstPlugins
2010-10-02 16:27:07 ----D---- C:\Program Files\Outsim
2010-10-02 12:26:16 ----D---- C:\Documents and Settings\komp\Data aplikací\WinRAR
2010-10-02 12:23:09 ----D---- C:\Program Files\WinRAR
2010-10-02 08:39:38 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-10-02 08:35:30 ----D---- C:\WINDOWS\system32\PreInstall
2010-10-02 08:35:27 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-10-02 00:38:17 ----D---- C:\Program Files\Common Files\Akamai
2010-10-02 00:11:09 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-10-02 00:11:08 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-10-02 00:11:07 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-10-02 00:11:06 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-10-02 00:11:05 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-10-02 00:11:05 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll
2010-10-02 00:11:04 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-10-02 00:11:04 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-10-02 00:11:04 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-10-02 00:11:03 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-10-02 00:11:00 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-10-02 00:10:53 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-10-02 00:10:53 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-10-02 00:10:43 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-10-02 00:10:42 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-10-02 00:10:42 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-10-02 00:10:41 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-10-02 00:10:40 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-10-02 00:10:40 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-10-02 00:10:40 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-10-02 00:10:39 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-10-02 00:10:39 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-10-02 00:10:38 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-10-02 00:10:38 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-10-02 00:10:37 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-10-02 00:10:25 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-10-02 00:10:24 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-10-02 00:10:24 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-10-02 00:10:23 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-10-02 00:10:23 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-10-02 00:10:22 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-10-02 00:10:21 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-10-02 00:10:20 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-10-02 00:10:20 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-10-02 00:10:18 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-10-01 17:52:34 ----D---- C:\Documents and Settings\komp\Data aplikací\AdobeUM
2010-10-01 17:05:13 ----D---- C:\Program Files\Common Files\Adobe
2010-10-01 17:05:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-10-01 17:04:28 ----D---- C:\Program Files\Adobe

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#2 Příspěvek od lolek169 »

2010-10-01 17:01:58 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\LVUI2RC.dll
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\LVUI2.dll
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\lvcoinst.ini
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\lvcodec2.dll
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\lvci1051.dll
2010-10-01 15:39:14 ----RA---- C:\WINDOWS\system32\drivers\LVUSBSta.sys
2010-10-01 15:39:13 ----RA---- C:\WINDOWS\system32\drivers\LV561AV.SYS
2010-10-01 15:35:00 ----D---- C:\Documents and Settings\komp\Data aplikací\Real
2010-10-01 15:28:26 ----R---- C:\WINDOWS\bwUnin-8.1.1.50-8876480SL.exe
2010-10-01 15:22:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logishrd
2010-10-01 15:21:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Logitech
2010-10-01 15:21:40 ----D---- C:\Program Files\Common Files\LogiShrd
2010-10-01 15:21:37 ----D---- C:\Program Files\Logitech
2010-10-01 14:38:17 ----D---- C:\Documents and Settings\komp\Data aplikací\Adobe
2010-10-01 14:05:12 ----D---- C:\Documents and Settings\komp\Data aplikací\skypePM
2010-10-01 14:04:49 ----D---- C:\Documents and Settings\komp\Data aplikací\Mozilla
2010-10-01 14:04:38 ----D---- C:\Documents and Settings\komp\Data aplikací\Skype
2010-10-01 14:03:35 ----D---- C:\Documents and Settings\komp\Data aplikací\Macromedia
2010-10-01 14:02:15 ----RD---- C:\Program Files\Skype
2010-10-01 14:02:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-10-01 13:25:34 ----A---- C:\WINDOWS\system32\muweb.dll
2010-10-01 13:25:34 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-10-01 13:25:34 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-09-30 23:43:04 ----D---- C:\Documents and Settings\komp\Data aplikací\DivX
2010-09-30 23:42:54 ----D---- C:\Documents and Settings\komp\Data aplikací\Media Player Classic
2010-09-30 23:32:23 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-30 23:31:02 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2010-09-30 23:30:57 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2010-09-30 23:30:55 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2010-09-30 23:30:54 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2010-09-30 23:30:52 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2010-09-30 23:30:51 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2010-09-30 23:30:49 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2010-09-30 23:30:47 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2010-09-30 23:30:46 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2010-09-30 23:30:44 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2010-09-30 23:30:40 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-30 23:30:29 ----A---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-09-30 23:30:29 ----A---- C:\WINDOWS\system32\ativtmxx.dll
2010-09-30 23:30:28 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-09-30 23:30:28 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-30 23:30:27 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-09-30 23:30:00 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-30 23:29:15 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2010-09-30 23:29:14 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-09-30 23:29:14 ----A---- C:\WINDOWS\system32\ati3duag.dll
2010-09-30 23:29:14 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2010-09-30 23:29:14 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2010-09-30 23:29:14 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2010-09-30 23:29:10 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2010-09-30 23:29:01 ----A---- C:\WINDOWS\system32\drivers\intelide.sys
2010-09-30 23:28:54 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-30 23:28:51 ----A---- C:\WINDOWS\system32\drivers\agp440.sys
2010-09-30 23:27:47 ----A---- C:\WINDOWS\imsins.BAK
2010-09-30 23:27:44 ----SHD---- C:\WINDOWS\Installer
2010-09-30 23:27:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-30 23:27:43 ----D---- C:\Program Files\Common Files\ODBC
2010-09-30 23:27:43 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-30 23:27:40 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-30 23:27:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-30 23:27:39 ----D---- C:\Program Files\Common Files
2010-09-30 23:27:39 ----D---- C:\Program Files
2010-09-30 23:27:36 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-30 23:27:36 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-30 23:27:36 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-30 23:27:35 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-30 23:27:34 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-30 23:27:34 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-30 23:27:34 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-30 23:27:34 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-30 23:27:33 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-30 23:27:32 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-30 23:27:32 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-30 23:27:32 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-30 23:27:32 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-30 23:27:32 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-09-30 23:27:29 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-30 23:27:28 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-09-30 23:27:28 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-09-30 23:27:28 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-09-30 23:27:28 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-30 23:27:27 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-30 23:27:27 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-30 23:27:27 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-30 23:27:27 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-30 23:27:26 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-30 23:27:25 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-30 23:27:25 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-30 23:27:24 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-30 23:27:24 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-30 23:27:24 ----A---- C:\WINDOWS\notepad.exe
2010-09-30 23:27:23 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-30 23:27:14 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-09-30 23:27:10 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-30 23:27:07 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-30 23:27:06 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-30 23:27:00 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-30 23:27:00 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-30 23:26:55 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-09-30 23:26:35 ----A---- C:\WINDOWS\setuplog.txt
2010-09-30 23:26:31 ----SHD---- C:\System Volume Information
2010-09-30 23:26:31 ----D---- C:\Documents and Settings
2010-09-30 23:25:38 ----RASH---- C:\boot.ini
2010-09-30 23:19:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-30 23:19:54 ----RSD---- C:\WINDOWS\Fonts
2010-09-30 23:19:54 ----RD---- C:\WINDOWS\Web
2010-09-30 23:19:54 ----HD---- C:\WINDOWS\inf
2010-09-30 23:19:54 ----D---- C:\WINDOWS\WinSxS
2010-09-30 23:19:54 ----D---- C:\WINDOWS\twain_32
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Temp
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\wins
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\wbem
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\usmt
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\spool
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\Setup
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\ras
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\oobe
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\npp
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\mui
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\IME
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\icsxml
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\ias
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\export
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\drivers
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\dhcp
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\config
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\3076
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\2052
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1054
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1042
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1041
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1037
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1033
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1031
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1029
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1028
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32\1025
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system32
2010-09-30 23:19:54 ----D---- C:\WINDOWS\system
2010-09-30 23:19:54 ----D---- C:\WINDOWS\security
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Resources
2010-09-30 23:19:54 ----D---- C:\WINDOWS\repair
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Provisioning
2010-09-30 23:19:54 ----D---- C:\WINDOWS\pchealth
2010-09-30 23:19:54 ----D---- C:\WINDOWS\PeerNet
2010-09-30 23:19:54 ----D---- C:\WINDOWS\mui
2010-09-30 23:19:54 ----D---- C:\WINDOWS\msapps
2010-09-30 23:19:54 ----D---- C:\WINDOWS\msagent
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Media
2010-09-30 23:19:54 ----D---- C:\WINDOWS\java
2010-09-30 23:19:54 ----D---- C:\WINDOWS\ime
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Help
2010-09-30 23:19:54 ----D---- C:\WINDOWS\ehome
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Driver Cache
2010-09-30 23:19:54 ----D---- C:\WINDOWS\dell
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Debug
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Cursors
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Connection Wizard
2010-09-30 23:19:54 ----D---- C:\WINDOWS\Config
2010-09-30 23:19:54 ----D---- C:\WINDOWS\AppPatch
2010-09-30 23:19:54 ----D---- C:\WINDOWS\addins
2010-09-30 23:19:54 ----D---- C:\WINDOWS
2010-09-30 23:19:54 ----ASH---- C:\pagefile.sys
2010-09-30 23:05:54 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-30 23:02:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-09-30 22:58:06 ----A---- C:\WINDOWS\system32\wpa.bak
2010-09-30 22:40:56 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2010-09-30 22:40:13 ----D---- C:\WINDOWS\$968930Uinstall_KB968930$
2010-09-30 22:40:08 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2010-09-30 22:40:07 ----D---- C:\WINDOWS\system32\winrm
2010-09-30 22:40:07 ----D---- C:\WINDOWS\system32\GroupPolicy
2010-09-30 22:39:57 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2010-09-30 22:29:31 ----D---- C:\Program Files\Microsoft.NET
2010-09-30 22:17:06 ----D---- C:\Program Files\Google
2010-09-30 22:16:23 ----D---- C:\WINDOWS\system32\XPSViewer
2010-09-30 22:16:09 ----D---- C:\Program Files\MSBuild
2010-09-30 22:16:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-09-30 22:16:04 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-09-30 22:16:03 ----D---- C:\WINDOWS\system32\en-US
2010-09-30 22:15:54 ----D---- C:\Program Files\Reference Assemblies
2010-09-30 22:15:12 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-09-30 22:14:45 ----D---- C:\Program Files\ATI Technologies
2010-09-30 22:14:43 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-09-30 22:14:43 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-09-30 22:14:43 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-09-30 22:14:43 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-09-30 22:14:41 ----A---- C:\WINDOWS\system32\unrar.dll
2010-09-30 22:14:41 ----A---- C:\WINDOWS\avisplitter.ini
2010-09-30 22:14:39 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-09-30 22:14:38 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-09-30 22:14:38 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-09-30 22:14:38 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-09-30 22:14:34 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-09-30 22:14:34 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-09-30 22:14:31 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-30 22:14:31 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-09-30 22:14:31 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-09-30 22:14:21 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-09-30 22:14:20 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-09-30 22:14:20 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-09-30 22:14:19 ----D---- C:\faf7f6c4e90b58e7b1dd1d
2010-09-30 22:13:13 ----RSD---- C:\WINDOWS\assembly

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#3 Příspěvek od lolek169 »

2010-09-30 22:12:32 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-30 22:09:26 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-30 22:09:23 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-09-30 22:09:10 ----D---- C:\Program Files\Windows Media Connect 2
2010-09-30 22:09:00 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-09-30 22:08:22 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-09-30 22:07:53 ----D---- C:\WINDOWS\system32\LogFiles
2010-09-30 22:07:53 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-09-30 22:07:45 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2010-09-30 22:05:04 ----D---- C:\WINDOWS\WBEM
2010-09-30 22:04:05 ----HDC---- C:\WINDOWS\ie8
2010-09-30 22:03:19 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-09-30 22:03:19 ----A---- C:\WINDOWS\system32\wups2.dll
2010-09-30 22:03:19 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-09-30 22:03:19 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-09-30 22:03:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-09-30 22:02:19 ----D---- C:\WINDOWS\Prefetch
2010-09-30 21:56:52 ----N---- C:\WINDOWS\system32\msxml6r.dll
2010-09-30 21:56:52 ----N---- C:\WINDOWS\system32\msxml6.dll
2010-09-30 21:56:43 ----N---- C:\WINDOWS\system32\smtpapi.dll
2010-09-30 21:56:43 ----N---- C:\WINDOWS\system32\rwnh.dll
2010-09-30 21:56:43 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2010-09-30 21:56:43 ----N---- C:\WINDOWS\system32\comsdupd.exe
2010-09-30 21:56:41 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2010-09-30 21:56:41 ----N---- C:\WINDOWS\system32\aaclient.dll
2010-09-30 21:56:40 ----N---- C:\WINDOWS\system32\credssp.dll
2010-09-30 21:56:40 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2010-09-30 21:56:40 ----N---- C:\WINDOWS\system32\azroles.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eapsvc.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eapqec.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eappprxy.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eapphost.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eappgnui.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eappcfg.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\eapolqec.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3ui.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3svc.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3msm.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dot3api.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dimsroam.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2010-09-30 21:56:39 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\mssha.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\mmcperf.exe
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\mmcex.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\kmsvc.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\kbdpash.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2010-09-30 21:56:38 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\slserv.exe
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\slrundll.exe
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\slgen.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\slextspk.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\slcoinst.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\setupn.exe
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\s3gnb.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\rasqec.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\qutil.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\qcliprov.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\qagentrt.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\qagent.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\onex.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\napstat.exe
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\napmontr.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\napipsec.dll
2010-09-30 21:56:37 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2010-09-30 21:56:36 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2010-09-30 21:56:36 ----N---- C:\WINDOWS\system32\verclsid.exe
2010-09-30 21:56:36 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-09-30 21:56:36 ----N---- C:\WINDOWS\system32\tspkg.dll
2010-09-30 21:56:36 ----N---- C:\WINDOWS\system32\tsgQec.dll
2010-09-30 21:56:35 ----N---- C:\WINDOWS\system32\wmphoto.dll
2010-09-30 21:56:35 ----N---- C:\WINDOWS\system32\wlanapi.dll
2010-09-30 21:56:35 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2010-09-30 21:56:35 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2010-09-30 21:56:34 ----N---- C:\WINDOWS\slrundll.exe
2010-09-30 21:56:34 ----D---- C:\WINDOWS\system32\cs-cz
2010-09-30 21:56:34 ----D---- C:\WINDOWS\l2schemas
2010-09-30 21:56:34 ----A---- C:\WINDOWS\system32\xmllite.dll
2010-09-30 21:56:33 ----D---- C:\WINDOWS\system32\cs
2010-09-30 21:56:33 ----D---- C:\WINDOWS\system32\bits
2010-09-30 21:54:56 ----D---- C:\WINDOWS\ServicePackFiles
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2010-09-30 21:53:11 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2010-09-30 21:53:11 ----D---- C:\WINDOWS\network diagnostic
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-09-30 21:53:10 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-09-30 21:53:09 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2010-09-30 21:53:08 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-09-30 21:51:52 ----A---- C:\WINDOWS\000001_.tmp
2010-09-30 21:51:43 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-30 21:47:36 ----RA---- C:\WINDOWS\system32\ptipbmf.dll
2010-09-30 21:47:36 ----RA---- C:\WINDOWS\system32\drivers\Fasttx2k.sys
2010-09-30 21:46:27 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-30 21:46:25 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-30 21:46:24 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2010-09-30 21:46:19 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-30 21:46:17 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-30 21:46:16 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-30 21:46:15 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-30 21:46:13 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-30 21:46:06 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-30 21:46:06 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\drivers\ALCXSENS.SYS
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\Audio3D.dll
2010-09-30 21:46:00 ----A---- C:\WINDOWS\system32\a3d.dll
2010-09-30 21:46:00 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-09-30 21:45:59 ----N---- C:\WINDOWS\alcupd.exe
2010-09-30 21:45:59 ----N---- C:\WINDOWS\alcrmv.exe
2010-09-30 21:45:59 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-30 21:45:27 ----D---- C:\Program Files\Marvell
2010-09-30 21:45:15 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-30 21:44:05 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys
2010-09-30 21:43:26 ----D---- C:\Documents and Settings\komp\Data aplikací\Identities
2010-09-30 21:43:24 ----HD---- C:\Program Files\Uninstall Information
2010-09-30 21:43:16 ----ASH---- C:\Documents and Settings\komp\Data aplikací\desktop.ini
2010-09-30 21:43:15 ----SD---- C:\Documents and Settings\komp\Data aplikací\Microsoft
2010-09-30 21:43:14 ----ASH---- C:\hiberfil.sys
2010-09-30 21:41:55 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-30 21:41:53 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-30 21:41:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-30 21:38:31 ----D---- C:\WINDOWS\system32\xircom
2010-09-30 21:38:31 ----D---- C:\Program Files\xerox
2010-09-30 21:38:31 ----D---- C:\Program Files\microsoft frontpage
2010-09-30 21:38:15 ----D---- C:\DELL
2010-09-30 21:38:03 ----RASH---- C:\MSDOS.SYS
2010-09-30 21:38:03 ----RASH---- C:\IO.SYS
2010-09-30 21:38:03 ----A---- C:\WINDOWS\control.ini
2010-09-30 21:38:03 ----A---- C:\CONFIG.SYS
2010-09-30 21:37:47 ----A---- C:\WINDOWS\OEWABLog.txt
2010-09-30 21:37:41 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-30 21:36:42 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-30 21:36:42 ----RD---- C:\WINDOWS\Offline Web Pages
2010-09-30 21:36:42 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-30 21:36:35 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-30 21:36:29 ----HD---- C:\Program Files\WindowsUpdate
2010-09-30 21:36:25 ----D---- C:\Program Files\Online Services
2010-09-30 21:36:11 ----D---- C:\WINDOWS\system32\DirectX
2010-09-30 21:35:56 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-30 21:35:54 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-30 21:35:54 ----A---- C:\WINDOWS\desktop.ini
2010-09-30 21:35:49 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-30 21:35:48 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-30 21:35:47 ----D---- C:\Program Files\Common Files\Services
2010-09-30 21:35:46 ----SD---- C:\WINDOWS\Tasks
2010-09-30 21:35:46 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-30 21:35:45 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-30 21:35:42 ----D---- C:\WINDOWS\srchasst
2010-09-30 21:35:41 ----D---- C:\WINDOWS\system32\Macromed
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-30 21:35:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-30 21:35:38 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-30 21:35:38 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-30 21:35:38 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-30 21:35:38 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-30 21:35:35 ----D---- C:\Program Files\Movie Maker
2010-09-30 21:35:32 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-30 21:35:32 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-30 21:35:32 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-30 21:35:32 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-30 21:35:30 ----A---- C:\WINDOWS\system32\fltmc.exe
2010-09-30 21:35:30 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-30 21:35:30 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2010-09-30 21:35:29 ----D---- C:\WINDOWS\system32\Restore
2010-09-30 21:35:29 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-30 21:35:29 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-30 21:35:29 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-30 21:35:29 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-30 21:35:29 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-30 21:35:28 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-30 21:35:28 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-30 21:35:28 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-30 21:35:28 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-30 21:35:28 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-30 21:35:26 ----D---- C:\Program Files\NetMeeting
2010-09-30 21:35:26 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-30 21:35:26 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-30 21:35:25 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-30 21:35:25 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-30 21:35:24 ----D---- C:\Program Files\Outlook Express
2010-09-30 21:35:24 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-30 21:35:24 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-30 21:35:24 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-30 21:35:23 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-30 21:35:23 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-30 21:35:23 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-30 21:35:23 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-30 21:35:19 ----D---- C:\Program Files\Common Files\System
2010-09-30 21:35:18 ----D---- C:\Program Files\Internet Explorer
2010-09-30 21:34:40 ----D---- C:\Program Files\ComPlus Applications
2010-09-30 21:34:38 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-30 21:34:38 ----A---- C:\WINDOWS\vb.ini
2010-09-30 21:34:33 ----D---- C:\WINDOWS\Registration
2010-09-30 21:34:25 ----D---- C:\Program Files\Windows Media Player
2010-09-30 21:34:19 ----D---- C:\Program Files\Messenger
2010-09-30 21:34:16 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-30 21:34:16 ----A---- C:\WINDOWS\system32\write.exe
2010-09-30 21:34:09 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-30 21:34:09 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-30 21:34:08 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-30 21:34:08 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-30 21:34:08 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-30 21:34:08 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-30 21:34:03 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-30 21:34:03 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-30 21:34:03 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-30 21:34:03 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-30 21:34:02 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-30 21:34:01 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-30 21:34:00 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-30 21:33:56 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-30 21:33:55 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-30 21:33:55 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-30 21:33:55 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-30 21:33:54 ----D---- C:\Program Files\Windows NT
2010-09-30 21:33:54 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-30 21:33:54 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-30 21:33:54 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-30 21:33:54 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-30 21:33:53 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-30 21:33:52 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-30 21:33:52 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-30 21:33:51 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-30 21:33:50 ----D---- C:\WINDOWS\system32\Com
2010-09-30 21:33:50 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-30 21:33:50 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-30 21:33:50 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-30 21:33:50 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-30 21:33:50 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-30 21:33:49 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-30 21:33:49 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-30 21:33:49 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-30 21:33:44 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-30 21:33:44 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-30 21:33:44 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-30 21:33:44 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-30 21:33:40 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2010-09-30 21:33:39 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-06-15 03:16:24 ----A---- C:\WINDOWS\system32\frapsvid.dll
2010-03-25 20:30:22 ----A---- C:\WINDOWS\system32\drivers\MpFilter.sys
2010-03-18 15:47:22 ----A---- C:\WINDOWS\system32\aspnet_counters.dll
2010-03-18 12:16:28 ----A---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2010-03-18 12:16:28 ----A---- C:\WINDOWS\system32\evr.dll
2010-03-18 12:16:28 ----A---- C:\WINDOWS\system32\dxva2.dll
2010-03-18 09:09:00 ----A---- C:\WINDOWS\system32\PresentationHostProxy.dll
2010-03-18 09:09:00 ----A---- C:\WINDOWS\system32\PresentationHost.exe
2010-03-18 09:09:00 ----A---- C:\WINDOWS\system32\netfxperf.dll
2010-03-18 09:09:00 ----A---- C:\WINDOWS\system32\mscoree.dll
2010-03-10 20:29:32 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-02-20 17:20:18 ----A---- C:\WINDOWS\system32\FM20ENU.DLL
2010-02-19 20:27:36 ----A---- C:\WINDOWS\system32\DivX.dll
2010-02-19 20:27:16 ----A---- C:\WINDOWS\system32\divx_xx16.dll
2010-02-19 20:27:16 ----A---- C:\WINDOWS\system32\divx_xx11.dll
2010-02-19 20:27:16 ----A---- C:\WINDOWS\system32\divx_xx0c.dll
2010-02-19 20:27:16 ----A---- C:\WINDOWS\system32\divx_xx0a.dll
2010-02-19 20:27:16 ----A---- C:\WINDOWS\system32\divx_xx07.dll
2010-02-04 21:16:38 ----D---- C:\Program Files\FinalWire
2010-02-04 18:16:23 ----D---- C:\Program Files\Counter-Strike Source
2010-02-04 14:05:11 ----SHD---- C:\Config.Msi
2010-01-09 20:17:40 ----A---- C:\WINDOWS\system32\FM20.DLL

======List of files/folders modified in the last 1 months======

2011-01-17 21:30:50 ----D---- C:\Program Files\LG PC Suite II
2011-01-13 19:52:49 ----A---- C:\WINDOWS\system.ini
2011-01-08 11:43:02 ----D---- C:\Program Files\CamStudio
2010-11-19 22:54:46 ----A---- C:\WINDOWS\win.ini
2010-11-09 15:52:35 ----A---- C:\WINDOWS\system32\odbc32.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\wininet.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\urlmon.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\occache.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\mstime.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\mshtmled.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\licmgr10.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\jsproxy.dll
2010-11-06 01:23:36 ----A---- C:\WINDOWS\system32\iertutil.dll
2010-11-06 01:23:36 ----A---- C:\WINDOWS\system32\iepeers.dll
2010-11-06 01:23:36 ----A---- C:\WINDOWS\system32\ieframe.dll
2010-11-06 01:23:35 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2010-11-03 13:26:18 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2010-10-28 14:09:00 ----A---- C:\WINDOWS\system32\atmfd.dll
2010-09-30 21:37:31 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-09-30 21:32:28 ----A---- C:\Boot.bak
2010-09-18 11:23:38 ----A---- C:\WINDOWS\system32\mfc42u.dll
2010-09-18 07:53:37 ----A---- C:\WINDOWS\system32\mfc42.dll
2010-09-18 07:53:37 ----A---- C:\WINDOWS\system32\mfc40u.dll
2010-09-18 07:53:37 ----A---- C:\WINDOWS\system32\mfc40.dll
2010-08-27 09:03:42 ----A---- C:\WINDOWS\system32\t2embed.dll
2010-08-27 06:54:10 ----A---- C:\WINDOWS\system32\srvsvc.dll
2010-08-27 02:43:50 ----A---- C:\WINDOWS\system32\xpsp4res.dll
2010-08-25 22:36:02 ----A---- C:\WINDOWS\system32\wmp.dll
2010-08-23 17:12:35 ----A---- C:\WINDOWS\system32\comctl32.dll
2010-08-17 14:17:06 ----A---- C:\WINDOWS\system32\spoolsv.exe
2010-08-16 09:45:05 ----A---- C:\WINDOWS\system32\rpcrt4.dll
2010-07-27 07:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-16 13:00:53 ----A---- C:\WINDOWS\system32\ole32.dll
2010-06-30 13:33:04 ----A---- C:\WINDOWS\system32\schannel.dll
2010-06-18 18:47:41 ----A---- C:\WINDOWS\system32\winsrv.dll
2010-06-17 15:03:52 ----A---- C:\WINDOWS\system32\iccvid.dll
2010-06-14 08:43:17 ----A---- C:\WINDOWS\system32\msxml3.dll
2010-04-28 19:15:40 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2010-04-28 06:45:38 ----A---- C:\WINDOWS\system32\ntkrnlpa.exe
2010-04-16 16:38:42 ----A---- C:\WINDOWS\system32\usp10.dll
2010-04-06 03:52:46 ----A---- C:\WINDOWS\system32\WMVCore.dll
2010-03-30 11:24:40 ----N---- C:\WINDOWS\system32\mp4sdecd.dll
2010-03-10 07:17:40 ----A---- C:\WINDOWS\system32\vbscript.dll
2010-03-05 15:42:09 ----A---- C:\WINDOWS\system32\asycfilt.dll
2010-02-12 05:35:01 ----A---- C:\WINDOWS\system32\6to4svc.dll
2010-02-05 19:27:40 ----A---- C:\WINDOWS\system32\quartz.dll
2010-02-05 12:23:31 ----D---- C:\Program Files\trend micro
2010-02-04 18:03:52 ----D---- C:\Program Files\Valve
2010-01-13 15:02:00 ----A---- C:\WINDOWS\system32\cabview.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 fasttx2k;fasttx2k; C:\WINDOWS\system32\DRIVERS\fasttx2k.sys [2003-08-06 159744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-17 691696]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKsl7c6ad781;MpKsl7c6ad781; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{81639109-6FE6-4521-971C-F5EFF8459433}\MpKsl7c6ad781.sys []
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-12-11 391424]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-01-09 601100]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608]
R3 atinrvxx;ATI WDM Rage Theater Video; C:\WINDOWS\system32\DRIVERS\atinrvxx.sys [2004-08-04 105984]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2007-02-06 25632]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-02-03 41504]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 MVDCODEC;ATI WDM Specialized MVD Codec; C:\WINDOWS\system32\DRIVERS\atinmdxx.sys [2004-08-04 13824]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2007-02-03 490784]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\yukonwxp.sys [2003-10-23 174336]
S0 cercsr6;cercsr6; C:\WINDOWS\system32\drivers\cercsr6.sys [2005-04-06 39904]
S1 MpKsl5ccb6cd2;MpKsl5ccb6cd2; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{27669FE2-F1D4-4D65-B912-76E7CFF2B670}\MpKsl5ccb6cd2.sys []
S1 MpKslbbe536ab;MpKslbbe536ab; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{81639109-6FE6-4521-971C-F5EFF8459433}\MpKslbbe536ab.sys []
S2 AsusGIO;AsusGIO; \??\C:\Program Files\ASUS\Ai Booster\AsusGIO.sys []
S3 a21u056z;a21u056z; C:\WINDOWS\system32\drivers\a21u056z.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2007-02-06 1691808]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2007-02-06 1964064]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PSI;PSI; C:\WINDOWS\system32\DRIVERS\psi_mf.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2008-11-11 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2008-11-11 19968]
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2008-11-11 24832]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 xhunter1;xhunter1; \??\C:\WINDOWS\xhunter1.sys []
S4 RsFx0102;RsFx0102 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-12 153376]
R2 LVPrcSrv;Process Monitor; c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe [2007-02-06 109344]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2008-07-11 40999448]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-03 75136]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-07-10 258072]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-02-06 105248]
S2 NMSAccessU;NMSAccessU; C:\Documents and Settings\komp\Local Settings\temp\{DE676DF5-CA49-4ADA-8D27-47C85D494414}\NMSAccessU.exe []
S2 Secunia Update Agent;Secunia Update Agent; C:\Program Files\Secunia\PSI\sua.exe --start-service []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe []
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#4 Příspěvek od motji »

Ahoj,
běží Ti tam spousta zbytečností, ale hlavně máš už i málo místa na disku
System drive C: has 4 GB (12%) free of 31 GB

Přes CCleaner - start si povypínej zbytečné spouštění programů po startu.

Před 14 dny jsi použil combofix, kdo ti to poradil? Můžeš mi sem vložit log, najdeš ho na C:\combofix.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#5 Příspěvek od lolek169 »

Ano tady na foru sem posílal log rádcovy kvůli tomu že jsem mněl v pc něakou havěť z internetu.


ComboFix 11-01-12.04 - komp 13.01.2011 19:40:50.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.555 [GMT 1:00]
Spuštěný z: c:\documents and settings\komp\Plocha\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\sshnas21.dll
c:\windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_SSHNAS


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-13 do 2011-01-13 )))))))))))))))))))))))))))))))
.

2011-01-13 18:28 . 2011-01-13 18:28 228864 ----a-w- c:\windows\Squsea.exe
2011-01-13 11:30 . 2011-01-13 11:31 -------- d-----w- c:\program files\Dofus 2
2011-01-12 13:14 . 2010-11-10 04:33 6273872 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3208AAC3-A6C0-4FB7-ACB4-DA3A94793A3A}\mpengine.dll
2011-01-09 19:17 . 2011-01-09 19:21 -------- d-----w- c:\documents and settings\komp\Data aplikací\SLAnticheat
2011-01-09 13:51 . 2011-01-09 13:51 -------- d-----w- c:\documents and settings\komp\Local Settings\Data aplikací\Secunia PSI
2011-01-09 13:50 . 2011-01-09 13:50 -------- d-----w- c:\program files\Secunia
2011-01-08 13:18 . 2011-01-08 14:49 -------- d-----w- c:\program files\Dofus
2011-01-08 11:25 . 2011-01-13 18:52 -------- d-----w- c:\documents and settings\komp\Local Settings\Data aplikací\LogMeIn Hamachi
2011-01-08 11:25 . 2011-01-13 18:52 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
2011-01-08 11:24 . 2011-01-08 11:24 -------- d-----w- c:\program files\LogMeIn Hamachi
2011-01-07 23:22 . 2011-01-07 23:26 -------- d-----w- c:\program files\Zrychleni Pocitace
2011-01-05 17:45 . 2011-01-05 17:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\CyberLink
2011-01-01 22:39 . 2011-01-08 08:16 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2011-01-01 22:30 . 2011-01-01 22:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Blizzard Entertainment
2011-01-01 12:25 . 2011-01-01 12:25 -------- d-----w- c:\program files\3DO
2011-01-01 12:09 . 2011-01-01 12:09 -------- d-----w- C:\TEXCACHE
2011-01-01 12:04 . 2011-01-01 12:23 -------- d-----w- c:\program files\Cenega
2011-01-01 10:11 . 2011-01-01 10:11 -------- d-----w- C:\rsit
2010-12-31 15:01 . 2011-01-10 16:52 -------- d-----w- c:\documents and settings\komp\Data aplikací\TS3Client
2010-12-31 15:01 . 2010-12-31 15:01 -------- d-----w- c:\program files\TeamSpeak 3 Client
2010-12-30 21:48 . 2011-01-01 09:43 -------- d-----w- c:\program files\Steam
2010-12-30 15:51 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2010-12-30 15:44 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-10 20:33 . 2010-12-03 00:43 268952 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-01-10 20:33 . 2010-11-15 18:29 268952 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-01-10 20:31 . 2010-11-15 18:30 137176 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-01-10 20:30 . 2010-12-03 00:43 268952 ----a-w- c:\windows\system32\PnkBstrB.ex0
2010-12-20 17:09 . 2002-01-04 23:23 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 17:08 . 2002-01-04 23:23 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-03 00:43 . 2010-11-15 18:29 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-12-02 19:52 . 2010-12-02 19:52 274261 ----a-w- c:\windows\DJ Music Mixer Uninstaller.exe
2010-11-18 18:15 . 2010-09-30 20:35 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-12 17:53 . 2010-11-15 17:19 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-12 15:34 . 2010-11-15 17:19 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-11-10 04:33 . 2010-10-01 12:41 6273872 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-11-09 14:52 . 2004-08-18 12:00 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:23 . 2004-08-18 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:23 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:23 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2004-08-18 12:00 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2004-08-18 12:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 18:38 . 2010-10-28 18:38 416 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\MSDN\9.0\1033\ResourceCache.dll
2010-10-28 13:09 . 2004-08-18 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2004-08-18 12:00 1853312 ----a-w- c:\windows\system32\win32k.sys
2010-10-24 12:34 . 2010-10-24 12:34 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2010-10-19 20:51 . 2010-09-30 21:40 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-18 10:32 . 2010-10-18 10:32 258352 ----a-w- c:\windows\system32\unicows.dll
2010-10-17 18:50 . 2010-10-17 18:50 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Olympus ib"="c:\program files\Olympus\ib\olycamdetect.exe" [2009-10-30 93376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-01-09 65536]
"Ptipbmf"="ptipbmf.dll" [2003-06-20 118784]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-02-07 488984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam10\QuickCam10.exe" [2007-02-07 774168]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"MDS_Menu"="c:\program files\Olympus\ib\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-12-06 1910152]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2010-01-09 519584]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-24 29696]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2010-10-1 67128]
Secunia PSI Tray.lnk - c:\program files\Secunia\PSI\psi_tray.exe [2011-1-5 291896]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^komp^Nabídka Start^Programy^Po spuštění^Registration Heroes of Might & Magic 5.LNK]
path=c:\documents and settings\komp\Nabídka Start\Programy\Po spuštění\Registration Heroes of Might & Magic 5.LNK
backup=c:\windows\pss\Registration Heroes of Might & Magic 5.LNKStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-09-16 20:04 1164584 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-12-10 20:41 133432 ----a-w- c:\program files\ICQ7.2\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2010-12-03 15:46 14944136 ----a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-12-30 21:49 1242448 ----a-w- c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2002-01-08 04:05 395640 ----a-w- c:\program files\uTorrent\uTorrent.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"c:\\Documents and Settings\\komp\\Local Settings\\Data aplikací\\Kamuse\\KCSTrayDownloader\\KCSTrayDownloaderEngine.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
"1034:TCP"= 1034:TCP:Akamai NetSession Interface

R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17.10.2010 19:50 691696]
R2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files\Common Files\MAGIX Services\Database\bin\FABS.exe [27.8.2009 17:09 1253376]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [6.12.2010 8:31 1238408]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [10.12.2010 21:41 247096]
R2 Secunia PSI Agent;Secunia PSI Agent;c:\program files\Secunia\PSI\psia.exe [5.1.2011 11:31 988216]
R2 Secunia Update Agent;Secunia Update Agent;c:\program files\Secunia\PSI\sua.exe [5.1.2011 11:31 399416]
R3 PSI;PSI;c:\windows\system32\drivers\psi_mf.sys [1.9.2010 9:30 15544]
S2 AsusGIO;AsusGIO;\??\c:\program files\ASUS\Ai Booster\AsusGIO.sys --> c:\program files\ASUS\Ai Booster\AsusGIO.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 12:16 130384]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\Common Files\MAGIX Services\Database\bin\fbserver.exe [7.8.2008 11:10 3276800]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [18.8.2004 13:00 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 12:16 753504]
S3 xhunter1;xhunter1;\??\c:\windows\xhunter1.sys --> c:\windows\xhunter1.sys [?]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\sqladhlp.exe [11.7.2008 1:28 47128]
S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [10.7.2008 1:49 242712]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [11.7.2008 1:28 369688]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'

2011-01-13 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2010-03-25 19:40]

2011-01-13 c:\windows\Tasks\User_Feed_Synchronization-{0348DB9B-2D6C-4C98-98EB-DA2B88995C6B}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2011-01-13 c:\windows\Tasks\User_Feed_Synchronization-{C96DABC5-EA7D-4D6D-9759-57EBB3F88E89}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

2011-01-13 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-10-03 20:18]
.
.
------- Doplňkový sken -------
.
IE: &Download All using 4shared Desktop - c:\program files\4shared Desktop\down_all.htm
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Od&oslať do programu OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-13 19:53
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(784)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(8164)
c:\program files\Common Files\Logishrd\LVMVFM\LVPrcInj.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Microsoft Security Essentials\MsMpEng.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
c:\windows\SOUNDMAN.EXE
c:\program files\Common Files\LogiShrd\LComMgr\LVComSX.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2011-01-13 19:58:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-13 18:58

Před spuštěním: Volných bajtů: 15 774 412 800
Po spuštění: Volných bajtů: 16 624 603 136

- - End Of File - - 856C12B575DE6B6EAFE7190C2C2AB546

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#6 Příspěvek od motji »

Otestujte na www.virustotal.com
c:\windows\Squsea.exe
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#7 Příspěvek od lolek169 »

Nemůže ho to najít.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#8 Příspěvek od motji »

Dělala jste ten druhý skript, jak radil kolega?
http://www.viry.cz/forum/viewtopic.php? ... 69#p946169
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#9 Příspěvek od lolek169 »

Ne bohužel nebyl čas na to.A až ted sem si na to vzpomněl.Mám to tedy udělat?

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#10 Příspěvek od motji »

Stahněte si nový combofix a provedte to
:)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#11 Příspěvek od lolek169 »

Aplikoval sem script vše proběhlo jak mnělo.Ukazala se černá obrazovka,tak sem to restartoval.A když se mi zapnul počítač tak nikde není log.C:\combofix.txt

Nemůže to najít.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#12 Příspěvek od motji »

:o to se má restartovat samo. Spust combofix bez skriptu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
lolek169
5. stupeň - BAN
Příspěvky: 158
Registrován: 28 Pro 2010 23:02
Místo/Bydliště: Praha

Re: Neznáme processy.

#13 Příspěvek od lolek169 »

Aha dobře.Jenože že se to docela dlouho už nerestartovalo.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#14 Příspěvek od motji »

Pokud to dělá nějakou činnost a jde vidět že combofix pracuje, tak do něj nezasahovat :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Neznáme processy.

#15 Příspěvek od motji »

Jak to tu vypadá?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět