Detekována neočekávaná data v protokolu

Zpráva

petr0266 · #1 Příspěvek od **petr0266** » 12 bře 2011 19:19

Dnes mi najednou vypadl internet, podíval jsem se do logů v esetu, v protokolu záznamů firewallu jsem měl tohle report.xml. Počítač je řádně aktualizovaný, nelegální software v PC nemám, PC kontrolování testem eset smart security, avptool a mbr - vše v pořádku.

RSIT: LOG

Logfile of random's system information tool 1.08 (written by random/random)
Run by Lukáš at 2011-03-12 19:15:10
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 109 GB (72%) free of 153 GB
Total RAM: 2046 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:15:15, on 12.3.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Download\RSIT.exe
C:\Program Files\trend micro\Lukáš.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7883147312
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 7883218593
O17 - HKLM\System\CCS\Services\Tcpip\..\{58B904BE-97AC-4745-9EAF-8AA656175B66}: NameServer = 192.168.10.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 5433 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-20 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-11-02 19580520]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-26 98304]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2007-05-15 204800]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-12-09 74752]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-01-12 2219184]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Steam"=C:\Program Files\Steam\steam.exe [2011-03-05 1242448]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

C:\Documents and Settings\Lukáš\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2011-01-26 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\steamapps\common\call of duty black ops\BlackOps.exe"="C:\Program Files\Steam\steamapps\common\call of duty black ops\BlackOps.exe:*:Enabled:Call of Duty: Black Ops"
"C:\Program Files\Steam\steamapps\common\call of duty black ops\BlackOpsMP.exe"="C:\Program Files\Steam\steamapps\common\call of duty black ops\BlackOpsMP.exe:*:Enabled:Call of Duty: Black Ops - Multiplayer"
"C:\Program Files\Steam\steamapps\common\left 4 dead\left4dead.exe"="C:\Program Files\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-03-12 19:15:11 ----D---- C:\Program Files\trend micro
2011-03-12 19:15:10 ----D---- C:\rsit
2011-03-12 14:51:55 ----D---- C:\Program Files\Duty Calls
2011-03-12 14:45:25 ----SHD---- C:\Config.Msi
2011-03-12 11:26:12 ----D---- C:\Program Files\World of Warcraft
2011-03-12 11:26:12 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-03-12 11:26:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-03-11 22:35:15 ----D---- C:\Program Files\Deep Silver
2011-03-11 22:34:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Solidshield
2011-03-11 22:31:09 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2011-03-11 22:30:55 ----D---- C:\Program Files\DAEMON Tools Lite
2011-03-11 22:30:15 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\DAEMON Tools Lite
2011-03-11 22:30:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2011-03-11 22:26:00 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Mozilla
2011-03-09 15:40:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-03-09 15:39:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-03-05 19:44:47 ----D---- C:\Program Files\Steam
2011-02-28 17:01:41 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Sun
2011-02-26 20:17:26 ----D---- C:\Program Files\CCleaner
2011-02-25 21:29:21 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2011-02-25 21:29:21 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2011-02-23 15:46:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-02-20 16:36:30 ----D---- C:\Program Files\Common Files\Java
2011-02-20 16:36:17 ----A---- C:\WINDOWS\system32\javaws.exe
2011-02-20 16:36:17 ----A---- C:\WINDOWS\system32\javaw.exe
2011-02-20 16:36:17 ----A---- C:\WINDOWS\system32\java.exe
2011-02-20 16:36:07 ----D---- C:\Program Files\Java
2011-02-19 19:11:11 ----D---- C:\Program Files\Jasc Software Inc
2011-02-19 16:36:29 ----D---- C:\Program Files\Common Files\Hewlett-Packard
2011-02-19 16:35:57 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2011-02-19 16:35:34 ----D---- C:\Program Files\HP
2011-02-19 16:34:22 ----A---- C:\WINDOWS\system32\drivers\HPZius12.sys
2011-02-19 16:34:22 ----A---- C:\WINDOWS\system32\drivers\HPZipr12.sys
2011-02-19 16:34:21 ----A---- C:\WINDOWS\system32\drivers\hpzid412.sys
2011-02-19 16:34:19 ----A---- C:\WINDOWS\system32\HPZc3212.dll
2011-02-19 16:34:19 ----A---- C:\WINDOWS\system32\hpovst08.dll
2011-02-19 16:34:19 ----A---- C:\WINDOWS\system32\hpotscl.dll
2011-02-19 16:34:19 ----A---- C:\WINDOWS\system32\hpgwiamd.dll
2011-02-19 16:34:17 ----A---- C:\WINDOWS\system32\hpzsnt10.dll
2011-02-19 16:34:17 ----A---- C:\WINDOWS\system32\hpzcon10.dll
2011-02-19 16:34:17 ----A---- C:\WINDOWS\system32\hpzcoi10.dll
2011-02-19 16:34:15 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2011-02-19 15:27:00 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\OpenOffice.org
2011-02-18 21:02:41 ----D---- C:\Program Files\Defraggler
2011-02-17 22:57:07 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2011-02-17 22:00:28 ----D---- C:\WINDOWS\Sun
2011-02-17 19:25:55 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\WinRAR
2011-02-17 18:02:09 ----D---- C:\Program Files\IrfanView
2011-02-16 21:46:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-02-16 21:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-02-16 21:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-02-16 21:42:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-02-16 21:41:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2011-02-16 21:37:12 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\ESET
2011-02-16 21:36:28 ----D---- C:\Program Files\ESET
2011-02-16 21:36:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-02-16 21:31:14 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2011-02-16 21:31:14 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-02-16 21:13:42 ----D---- C:\WINDOWS\SxsCaPendDel
2011-02-16 20:47:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-02-16 20:47:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-02-16 20:47:27 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-02-16 20:47:24 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-02-16 20:47:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-02-16 20:47:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-02-16 20:47:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-02-16 20:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2011-02-16 20:47:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-02-16 20:46:59 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-02-16 20:46:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2011-02-16 20:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-02-16 20:46:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-02-16 20:46:46 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-02-16 20:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-02-16 20:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2485376$
2011-02-16 20:46:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-02-16 20:46:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-02-16 20:46:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-02-16 20:46:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-02-16 20:46:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-02-16 20:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-02-16 20:46:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-02-16 20:46:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-02-16 20:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-02-16 20:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-02-16 20:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-02-16 20:45:55 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-02-16 20:45:52 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-02-16 20:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-02-16 20:43:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-02-16 20:43:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-02-16 20:43:19 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-02-16 20:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-02-16 20:39:46 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-02-16 20:39:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-02-16 20:39:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-02-16 20:39:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-02-16 20:39:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-02-16 20:39:24 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-02-16 20:39:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-02-16 20:39:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-02-16 20:39:13 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-02-16 20:39:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-02-16 20:39:07 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-02-16 20:39:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-02-16 20:38:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-02-16 20:38:56 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-02-16 20:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-02-16 20:38:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-02-16 20:38:44 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-02-16 20:38:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-02-16 20:37:57 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-16 20:37:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-02-16 20:37:33 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-02-16 20:37:30 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-02-16 20:37:27 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-02-16 20:37:24 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-02-16 20:37:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-02-16 20:37:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-02-16 20:37:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-02-16 20:37:07 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-02-16 20:37:05 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-02-16 20:36:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-02-16 20:36:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-02-16 20:36:47 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-02-16 20:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-02-16 20:36:26 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-02-16 20:36:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-02-16 20:36:18 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-02-16 20:36:15 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-02-16 20:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-02-16 20:36:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-02-16 20:36:06 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-02-16 20:36:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-02-16 20:36:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-02-16 20:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-02-16 20:35:54 ----D---- C:\WINDOWS\ie8updates
2011-02-16 20:35:50 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-02-16 20:35:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-02-16 20:35:40 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-02-16 20:35:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-02-16 20:35:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-02-16 20:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-02-16 20:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-02-16 20:35:21 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-02-16 20:35:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-02-16 20:35:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-02-16 20:33:07 ----D---- C:\Program Files\OpenOffice.org 3
2011-02-16 20:30:10 ----D---- C:\Program Files\WinRAR
2011-02-16 20:24:04 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-02-16 20:20:48 ----D---- C:\Program Files\Webteh
2011-02-16 20:20:48 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\BSplayer Pro
2011-02-16 20:20:48 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\BSplayer
2011-02-16 20:17:14 ----D---- C:\Program Files\Winamp Detect
2011-02-16 20:16:51 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-02-16 20:16:51 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-02-16 20:16:51 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2011-02-16 20:16:51 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2011-02-16 20:16:51 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\vxblock.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxwave.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxsfs.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxmas.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-02-16 20:16:50 ----N---- C:\WINDOWS\system32\px.dll
2011-02-16 20:16:47 ----D---- C:\Program Files\Winamp
2011-02-16 20:16:47 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Winamp
2011-02-16 20:08:47 ----D---- C:\WINDOWS\system32\PreInstall
2011-02-16 20:08:45 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-02-16 20:06:16 ----A---- C:\WINDOWS\system32\wups2.dll
2011-02-16 20:06:15 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-02-16 20:06:15 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2011-02-16 20:06:15 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2011-02-16 20:06:15 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2011-02-16 20:05:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-02-16 20:05:25 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-02-16 20:03:35 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-16 20:02:14 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-02-16 20:02:08 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Macromedia
2011-02-16 20:02:08 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Adobe
2011-02-16 20:01:43 ----D---- C:\WINDOWS\system32\Adobe
2011-02-16 19:59:43 ----D---- C:\Program Files\Common Files\Adobe
2011-02-16 19:59:43 ----D---- C:\Program Files\Adobe
2011-02-16 19:59:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-02-16 19:54:08 ----D---- C:\Download
2011-02-16 19:53:25 ----D---- C:\Program Files\Mozilla Firefox
2011-02-16 19:50:55 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-02-16 19:50:52 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-02-16 19:50:44 ----D---- C:\Program Files\Windows Media Connect 2
2011-02-16 19:50:37 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2011-02-16 19:50:13 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-02-16 19:49:59 ----D---- C:\WINDOWS\system32\LogFiles
2011-02-16 19:49:59 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-02-16 19:49:52 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-02-16 19:48:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-02-16 19:45:28 ----D---- C:\WINDOWS\WBEM
2011-02-16 19:44:42 ----HDC---- C:\WINDOWS\ie8
2011-02-16 18:22:37 ----D---- C:\Program Files\A4Tech
2011-02-16 18:20:02 ----SHD---- C:\RECYCLER
2011-02-16 18:19:45 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\ATI
2011-02-16 18:19:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-02-16 18:18:30 ----D---- C:\Program Files\ATI Stream
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ativvamv.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atitvo32.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ATIODE.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atimpc32.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atikvmag.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\aticalrt.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\aticaldd.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\aticalcl.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atibtmon.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2011-02-16 18:18:06 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-02-16 18:17:50 ----D---- C:\Program Files\ATI Technologies
2011-02-16 18:17:48 ----D---- C:\Program Files\ATI
2011-02-16 18:15:59 ----D---- C:\WINDOWS\system32\Lang
2011-02-16 18:14:47 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-02-16 18:14:46 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-02-16 18:14:44 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-02-16 18:14:43 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-02-16 18:14:42 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-02-16 18:14:41 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-02-16 18:14:40 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-02-16 18:14:39 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-02-16 18:14:37 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011-02-16 18:14:36 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2011-02-16 18:14:35 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011-02-16 18:14:29 ----D---- C:\WINDOWS\system32\RTCOM
2011-02-16 18:14:27 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-02-16 18:14:27 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-02-16 18:14:27 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-02-16 18:14:22 ----A---- C:\WINDOWS\system32\RHCoInstXP.dll
2011-02-16 18:14:22 ----A---- C:\WINDOWS\system32\drivers\RtKHDMI.sys
2011-02-16 18:14:22 ----A---- C:\WINDOWS\RtaUpd.exe
2011-02-16 18:14:21 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2011-02-16 18:14:21 ----A---- C:\WINDOWS\system32\drivers\Monfilt.sys
2011-02-16 18:14:20 ----A---- C:\WINDOWS\vncutil.exe
2011-02-16 18:14:20 ----A---- C:\WINDOWS\system32\drivers\Ambfilt.sys
2011-02-16 18:14:20 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2011-02-16 18:14:20 ----A---- C:\WINDOWS\SkyTel.exe
2011-02-16 18:14:20 ----A---- C:\WINDOWS\RtlUpd.exe
2011-02-16 18:14:20 ----A---- C:\WINDOWS\RTLCPL.EXE
2011-02-16 18:14:20 ----A---- C:\WINDOWS\RtkAudioService.exe
2011-02-16 18:14:19 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2011-02-16 18:14:19 ----A---- C:\WINDOWS\RTHDCPL.EXE
2011-02-16 18:14:19 ----A---- C:\WINDOWS\MicCal.exe
2011-02-16 18:14:19 ----A---- C:\WINDOWS\ALCWZRD.EXE
2011-02-16 18:14:19 ----A---- C:\WINDOWS\ALCMTR.EXE
2011-02-16 18:14:07 ----A---- C:\WINDOWS\RtlExUpd.dll
2011-02-16 18:14:05 ----D---- C:\Program Files\Common Files\InstallShield
2011-02-16 18:09:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-02-16 18:09:45 ----A---- C:\WINDOWS\system32\CSVer.dll
2011-02-16 18:09:44 ----D---- C:\Program Files\Intel
2011-02-16 18:03:08 ----D---- C:\Program Files\Microsoft.NET
2011-02-16 17:59:13 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-02-16 17:58:01 ----D---- C:\Program Files\MSBuild
2011-02-16 17:57:58 ----D---- C:\WINDOWS\system32\XPSViewer
2011-02-16 17:57:56 ----D---- C:\WINDOWS\system32\en-us
2011-02-16 17:57:56 ----D---- C:\Program Files\Reference Assemblies
2011-02-16 17:57:39 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-02-16 17:57:13 ----RSD---- C:\WINDOWS\assembly
2011-02-16 17:56:59 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-16 17:51:31 ----A---- C:\WINDOWS\system32\wpa.bak
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-02-16 17:49:51 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-02-16 17:49:50 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-02-16 17:49:50 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-02-16 17:49:50 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-02-16 17:49:50 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-02-16 17:49:50 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-02-16 17:49:49 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-02-16 17:49:49 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-02-16 17:49:49 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-02-16 17:49:48 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-02-16 17:49:48 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-02-16 17:49:48 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-02-16 17:49:47 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-02-16 17:49:47 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-02-16 17:49:47 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-02-16 17:49:47 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-02-16 17:49:47 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-02-16 17:49:46 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-02-16 17:49:45 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-02-16 17:49:45 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-02-16 17:49:45 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-02-16 17:49:45 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-02-16 17:49:45 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-02-16 17:49:44 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-02-16 17:49:43 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-02-16 17:49:42 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-02-16 17:49:42 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-02-16 17:49:42 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-02-16 17:49:42 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-02-16 17:49:41 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-02-16 17:49:40 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-02-16 17:49:40 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-02-16 17:49:40 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-02-16 17:49:40 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-02-16 17:49:39 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-02-16 17:49:39 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-02-16 17:49:39 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-02-16 17:49:39 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-02-16 17:49:39 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-02-16 17:49:38 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-02-16 17:49:38 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-02-16 17:49:38 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-02-16 17:49:37 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-02-16 17:49:37 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-02-16 17:49:36 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-02-16 17:49:36 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-02-16 17:49:36 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-02-16 17:49:36 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-02-16 17:49:35 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-02-16 17:49:34 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-02-16 17:49:34 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-02-16 17:49:34 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-02-16 17:49:34 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2011-02-16 17:49:33 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-02-16 17:49:33 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-02-16 17:49:33 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-02-16 17:49:33 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-02-16 17:49:33 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2011-02-16 17:49:32 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2011-02-16 17:49:32 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-02-16 17:47:39 ----HD---- C:\WINDOWS\msdownld.tmp
2011-02-16 17:47:24 ----D---- C:\WINDOWS\Logs
2011-02-16 17:44:23 ----A---- C:\WINDOWS\system32\RTNUninst32.dll
2011-02-16 17:44:23 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2011-02-16 17:44:23 ----A---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2011-02-16 17:44:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-16 17:44:19 ----D---- C:\Program Files\Realtek
2011-02-16 17:44:00 ----A---- C:\WINDOWS\system32\h323log.txt
2011-02-16 17:42:52 ----D---- C:\WINDOWS\Prefetch
2011-02-16 17:42:22 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-02-16 17:41:27 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-02-16 17:40:38 ----A---- C:\WINDOWS\system32\usbui.dll
2011-02-16 17:39:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-16 17:39:47 ----SHD---- C:\WINDOWS\Installer
2011-02-16 17:39:47 ----D---- C:\Program Files\Common Files\ODBC
2011-02-16 17:39:47 ----A---- C:\WINDOWS\ODBCINST.INI
2011-02-16 17:39:45 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-02-16 17:39:44 ----RD---- C:\Program Files
2011-02-16 17:39:44 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-02-16 17:39:44 ----D---- C:\Program Files\Common Files
2011-02-16 17:39:42 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-02-16 17:39:42 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-02-16 17:39:42 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-02-16 17:39:40 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-02-16 17:39:39 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-02-16 17:39:38 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-02-16 17:39:38 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-02-16 17:39:38 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-02-16 17:39:38 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-02-16 17:39:38 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdsl.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdro.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdpl.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdhu.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\kbdcr.dll
2011-02-16 17:39:36 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2011-02-16 17:39:35 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-02-16 17:39:35 ----A---- C:\WINDOWS\system32\kbdycl.dll
2011-02-16 17:39:35 ----A---- C:\WINDOWS\system32\irclass.dll
2011-02-16 17:39:35 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-02-16 17:39:35 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-02-16 17:39:34 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-02-16 17:39:33 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-02-16 17:39:33 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-02-16 17:39:33 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-02-16 17:39:33 ----A---- C:\WINDOWS\system32\batt.dll
2011-02-16 17:39:32 ----A---- C:\WINDOWS\notepad.exe
2011-02-16 17:39:29 ----A---- C:\WINDOWS\system32\storprop.dll
2011-02-16 17:39:23 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-02-16 17:39:18 ----N---- C:\WINDOWS\system32\msxml6r.dll
2011-02-16 17:39:18 ----N---- C:\WINDOWS\system32\msxml6.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\credssp.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\azroles.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2011-02-16 17:39:10 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-02-16 17:39:10 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-02-16 17:39:10 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-02-16 17:39:10 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-02-16 17:39:10 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-02-16 17:39:09 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\onex.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\napstat.exe
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mssha.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-02-16 17:39:08 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\slserv.exe
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\slrundll.exe
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\slgen.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\slextspk.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\slcoinst.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\setupn.exe
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\s3gnb.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\qutil.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\qagent.dll
2011-02-16 17:39:07 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\wmphoto.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-02-16 17:39:06 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-02-16 17:39:05 ----N---- C:\WINDOWS\slrundll.exe
2011-02-16 17:39:05 ----D---- C:\WINDOWS\system32\cs-cz
2011-02-16 17:39:05 ----A---- C:\WINDOWS\system32\xmllite.dll
2011-02-16 17:39:04 ----D---- C:\WINDOWS\system32\cs
2011-02-16 17:39:04 ----D---- C:\WINDOWS\system32\bits
2011-02-16 17:39:04 ----D---- C:\WINDOWS\l2schemas
2011-02-16 17:38:13 ----RA---- C:\WINDOWS\SET21.tmp
2011-02-16 17:38:12 ----D---- C:\WINDOWS\ServicePackFiles
2011-02-16 17:37:42 ----RA---- C:\WINDOWS\SET8.tmp
2011-02-16 17:37:40 ----RA---- C:\WINDOWS\SET4.tmp
2011-02-16 17:37:39 ----RA---- C:\WINDOWS\SET3.tmp
2011-02-16 17:37:34 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-16 17:37:34 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-16 17:37:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-02-16 17:37:10 ----D---- C:\Documents and Settings
2011-02-16 17:37:09 ----SHD---- C:\System Volume Information
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2011-02-16 17:37:06 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2011-02-16 17:37:06 ----D---- C:\WINDOWS\network diagnostic
2011-02-16 17:37:06 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2011-02-16 17:37:05 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-02-16 17:37:04 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-02-16 17:36:17 ----SH---- C:\boot.ini
2011-02-16 17:36:16 ----A---- C:\WINDOWS\002550_.tmp
2011-02-16 17:36:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-02-16 17:36:08 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-02-16 17:35:01 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-02-16 17:35:01 ----D---- C:\WINDOWS\EHome
2011-02-16 17:31:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-16 17:31:54 ----RSD---- C:\WINDOWS\Fonts
2011-02-16 17:31:54 ----RD---- C:\WINDOWS\Web
2011-02-16 17:31:54 ----HD---- C:\WINDOWS\inf
2011-02-16 17:31:54 ----D---- C:\WINDOWS\WinSxS
2011-02-16 17:31:54 ----D---- C:\WINDOWS\twain_32
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Temp
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\wins
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\wbem
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\usmt
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\spool
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\ShellExt
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\Setup
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\ras
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\oobe
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\npp
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\mui
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\IME
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\icsxml
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\ias
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\export
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\drivers
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\dhcp
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\config
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\3com_dmi
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\3076
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\2052
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1054
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1042
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1041
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1037
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1033
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1031
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1029
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1028
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32\1025
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system32
2011-02-16 17:31:54 ----D---- C:\WINDOWS\system
2011-02-16 17:31:54 ----D---- C:\WINDOWS\security
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Resources
2011-02-16 17:31:54 ----D---- C:\WINDOWS\repair
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Provisioning
2011-02-16 17:31:54 ----D---- C:\WINDOWS\pchealth
2011-02-16 17:31:54 ----D---- C:\WINDOWS\PeerNet
2011-02-16 17:31:54 ----D---- C:\WINDOWS\mui
2011-02-16 17:31:54 ----D---- C:\WINDOWS\msapps
2011-02-16 17:31:54 ----D---- C:\WINDOWS\msagent
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Media
2011-02-16 17:31:54 ----D---- C:\WINDOWS\java
2011-02-16 17:31:54 ----D---- C:\WINDOWS\ime
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Help
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Driver Cache
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Debug
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Cursors
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Connection Wizard
2011-02-16 17:31:54 ----D---- C:\WINDOWS\Config
2011-02-16 17:31:54 ----D---- C:\WINDOWS\AppPatch
2011-02-16 17:31:54 ----D---- C:\WINDOWS\addins
2011-02-16 17:31:54 ----D---- C:\WINDOWS
2011-02-16 17:31:54 ----ASH---- C:\pagefile.sys
2011-02-16 16:52:25 ----D---- C:\Documents and Settings\Lukáš\Data aplikací\Identities
2011-02-16 16:52:24 ----HD---- C:\Program Files\Uninstall Information
2011-02-16 16:52:09 ----ASH---- C:\Documents and Settings\Lukáš\Data aplikací\desktop.ini
2011-02-16 16:52:08 ----SD---- C:\Documents and Settings\Lukáš\Data aplikací\Microsoft
2011-02-16 16:51:37 ----D---- C:\WINDOWS\SoftwareDistribution
2011-02-16 16:51:34 ----SD---- C:\WINDOWS\system32\Microsoft
2011-02-16 16:51:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-16 16:48:38 ----D---- C:\WINDOWS\system32\xircom
2011-02-16 16:48:38 ----D---- C:\Program Files\xerox
2011-02-16 16:48:38 ----D---- C:\Program Files\microsoft frontpage
2011-02-16 16:48:29 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-16 16:48:16 ----RASH---- C:\MSDOS.SYS
2011-02-16 16:48:16 ----RASH---- C:\IO.SYS
2011-02-16 16:48:16 ----A---- C:\WINDOWS\control.ini
2011-02-16 16:48:16 ----A---- C:\CONFIG.SYS
2011-02-16 16:48:16 ----A---- C:\AUTOEXEC.BAT
2011-02-16 16:48:04 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-02-16 16:47:27 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-02-16 16:47:27 ----RD---- C:\WINDOWS\Offline Web Pages
2011-02-16 16:47:27 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-02-16 16:47:23 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-02-16 16:47:19 ----HD---- C:\Program Files\WindowsUpdate
2011-02-16 16:47:15 ----D---- C:\Program Files\Online Services
2011-02-16 16:47:03 ----D---- C:\WINDOWS\system32\DirectX
2011-02-16 16:46:50 ----A---- C:\WINDOWS\system32\atrace.dll
2011-02-16 16:46:48 ----A---- C:\WINDOWS\system32\desktop.ini
2011-02-16 16:46:48 ----A---- C:\WINDOWS\desktop.ini
2011-02-16 16:46:43 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-02-16 16:46:42 ----D---- C:\Program Files\Common Files\Services
2011-02-16 16:46:42 ----A---- C:\WINDOWS\system32\acctres.dll
2011-02-16 16:46:40 ----SD---- C:\WINDOWS\Tasks
2011-02-16 16:46:40 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-02-16 16:46:39 ----D---- C:\Program Files\Common Files\MSSoap
2011-02-16 16:46:37 ----D---- C:\WINDOWS\srchasst
2011-02-16 16:46:36 ----D---- C:\WINDOWS\system32\Macromed
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wups.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-02-16 16:46:34 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-02-16 16:46:33 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-02-16 16:46:33 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-02-16 16:46:31 ----D---- C:\Program Files\Movie Maker
2011-02-16 16:46:28 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-02-16 16:46:28 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-02-16 16:46:28 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-02-16 16:46:28 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-02-16 16:46:26 ----D---- C:\WINDOWS\system32\Restore
2011-02-16 16:46:26 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-02-16 16:46:26 ----A---- C:\WINDOWS\system32\fltmc.exe
2011-02-16 16:46:26 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-02-16 16:46:26 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\srclient.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\msconf.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\ils.dll
2011-02-16 16:46:25 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-02-16 16:46:23 ----D---- C:\Program Files\NetMeeting
2011-02-16 16:46:23 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-02-16 16:46:23 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-02-16 16:46:22 ----A---- C:\WINDOWS\system32\inetres.dll
2011-02-16 16:46:22 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-02-16 16:46:21 ----D---- C:\Program Files\Outlook Express
2011-02-16 16:46:21 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\mstask.dll
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\isign32.dll
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-02-16 16:46:20 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-02-16 16:46:16 ----D---- C:\Program Files\Common Files\System
2011-02-16 16:46:15 ----D---- C:\Program Files\Internet Explorer
2011-02-16 16:46:04 ----D---- C:\Program Files\ComPlus Applications
2011-02-16 16:46:03 ----A---- C:\WINDOWS\vbaddin.ini
2011-02-16 16:46:03 ----A---- C:\WINDOWS\vb.ini
2011-02-16 16:45:58 ----D---- C:\WINDOWS\Registration
2011-02-16 16:45:35 ----D---- C:\Program Files\Windows Media Player
2011-02-16 16:45:31 ----D---- C:\Program Files\Messenger
2011-02-16 16:45:28 ----D---- C:\Program Files\MSN Gaming Zone
2011-02-16 16:45:28 ----A---- C:\WINDOWS\system32\write.exe
2011-02-16 16:45:22 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-02-16 16:45:22 ----A---- C:\WINDOWS\system32\hticons.dll
2011-02-16 16:45:22 ----A---- C:\WINDOWS\system32\avwav.dll
2011-02-16 16:45:22 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-02-16 16:45:22 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-02-16 16:45:21 ----A---- C:\WINDOWS\system32\winchat.exe
2011-02-16 16:45:17 ----A---- C:\WINDOWS\system32\charmap.exe
2011-02-16 16:45:17 ----A---- C:\WINDOWS\system32\getuname.dll
2011-02-16 16:45:17 ----A---- C:\WINDOWS\system32\calc.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\winmine.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\tskill.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\tscon.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\sol.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\shadow.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\reset.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-02-16 16:45:16 ----A---- C:\WINDOWS\system32\freecell.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\regini.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\msg.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\logoff.exe
2011-02-16 16:45:15 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\stclient.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-02-16 16:45:14 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-02-16 16:45:11 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-02-16 16:45:10 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-02-16 16:45:10 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-02-16 16:45:10 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-02-16 16:45:10 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-02-16 16:45:09 ----D---- C:\Program Files\Windows NT
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\spider.exe
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-02-16 16:45:09 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-02-16 16:45:08 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-02-16 16:45:07 ----D---- C:\WINDOWS\system32\MsDtc
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-02-16 16:45:07 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-02-16 16:45:06 ----D---- C:\WINDOWS\system32\Com
2011-02-16 16:45:06 ----A---- C:\WINDOWS\system32\colbact.dll
2011-02-16 16:45:06 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-02-16 16:45:06 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-02-16 16:45:06 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-02-16 16:45:06 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-02-16 16:45:05 ----A---- C:\WINDOWS\system32\comuid.dll
2011-02-16 16:45:05 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-02-16 16:45:05 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-02-16 16:45:02 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-02-16 16:45:02 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-02-16 16:45:02 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-02-16 16:45:02 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-02-16 16:44:55 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2011-02-16 16:44:55 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 months======

2011-02-16 19:50:47 ----A---- C:\WINDOWS\win.ini
2011-02-16 17:39:43 ----A---- C:\WINDOWS\system.ini
2011-02-16 16:47:56 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\Amfilter.sys [2007-05-14 9216]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2010-08-03 55256]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-02-25 281760]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2010-12-21 134000]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-02-25 25888]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amusbprt.sys [2007-05-14 14336]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-01-27 6406656]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-11 218688]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2010-12-21 33120]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-11-02 6188648]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtKHDMI.sys [2010-05-25 4003008]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2011-01-14 277352]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-06-22 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-06-22 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-06-22 21744]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2011-01-26 638976]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-01-12 810144]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-02-20 153376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2011-01-12 33584]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 12 bře 2011 19:45

I když nic nebezpečného není vidět, dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

petr0266 · #3 Příspěvek od **petr0266** » 12 bře 2011 20:04

Po 3-5 minutách scanování to na me vybaflo něco ve stylu MSG okno: Combofix detekoval rootkit, je vyžadován restart počítače... pod okliknutí se PC samo restartovalo a začal se provádět test (fáze 1-50) a vyhodilo mi to tento log.

ComboFix 11-03-11.02 - Lukáš 12.03.2011 19:55:38.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1638 [GMT 1:00]
Spuštěný z: c:\documents and settings\Lukáš\Plocha\ComboFix.exe
AV: ESET Smart Security 4.2 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezidentní štít AV je zapnutý
.
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-12 do 2011-03-12 )))))))))))))))))))))))))))))))
.
.
2011-03-12 18:15 . 2011-03-12 18:15 -------- d-----w- C:\rsit
2011-02-16 18:54 . 2011-03-12 18:46 -------- d-----w- C:\Download
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-09 13:53 . 2006-03-02 12:00 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2006-03-02 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-02 13:31 . 2011-02-02 13:31 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-02-02 13:31 . 2011-02-02 13:31 348160 ----a-w- c:\windows\system32\msvcr71.dll
2011-01-21 14:44 . 2006-03-02 12:00 8466432 ----a-w- c:\windows\system32\shell32.dll
2011-01-21 14:44 . 2006-03-02 12:00 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2006-03-02 12:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 2006-03-02 12:00 1854976 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2006-03-02 12:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-21 14:04 . 2010-12-21 14:04 141264 ----a-w- c:\windows\system32\drivers\eamon.sys
2010-12-21 14:04 . 2010-12-21 14:04 115008 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2010-12-21 12:47 . 2010-12-21 12:47 33120 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2010-12-21 12:47 . 2010-12-21 12:47 134000 ----a-w- c:\windows\system32\drivers\epfw.sys
2010-12-20 23:52 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:52 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-12-20 23:52 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 17:25 . 2006-03-02 12:00 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-03-04 11:52 . 2011-03-11 21:25 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2011-03-05 1242448]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2010-11-02 19580520]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-26 98304]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2007-05-15 204800]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-12-09 74752]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-01-12 2219184]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Luk ç\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\call of duty black ops\\BlackOps.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\call of duty black ops\\BlackOpsMP.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\left 4 dead\\left4dead.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [21.12.2010 15:04 115008]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [12.1.2011 16:41 810144]
R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [11.3.2011 22:31 218688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [16.2.2011 18:14 1691480]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
.
------- Doplňkový sken -------
.
TCP: {58B904BE-97AC-4745-9EAF-8AA656175B66} = 192.168.10.1
FF - ProfilePath - c:\documents and settings\Lukáš\Data aplikací\Mozilla\Firefox\Profiles\rzcjea60.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-12 20:01
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1124)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2011-03-12 20:02:29
ComboFix-quarantined-files.txt 2011-03-12 19:02
.
Před spuštěním: Volných bajtů: 114 612 539 392
Po spuštění: Volných bajtů: 114 579 292 160
.
- - End Of File - - EE38A16C289B01B2F50218375A1F57DF

#4 Příspěvek od **Rudy** » 12 bře 2011 20:23

V logu CF není o rootkitu ani zmínka. I jinak vypadá čistý. Nastala nějaká změna?

petr0266 · #5 Příspěvek od **petr0266** » 12 bře 2011 21:12

já tu změnu nepoznám (tím myslím, že tento problém může zachytit firewall zase a shodit sít)... dle toho logu z esetu, na který jsem dával odkaz je v síti pravděpodobně nějaký problém, pokud jste si všiml, tak jeden ze záznamů z firewallu byl i arp cache poisoning z druhého počítače doma, tne je čiště naformátovaný, zkoušeno přes mbr a přehrán bootovaci sektor pres bootkit a jsou tam jen nějaké základní programy jako ovladače, mozilla firefox a adobe flash player, jinak nic.

Zkoušel jsem Bootkit Remover

Bootkit Remover
(c) 2009 eSage Lab
http://www.esagelab.com

Program version: 1.2.0.0
OS Version: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)

System volume is \\.\C:
\\.\C: -> \\.\PhysicalDrive0 at offset 0x00000000`00007e00
Boot sector MD5 is: 6def5ffcbcdbdb4082f1015625e597bd

Size Device Name MBR Status
--------------------------------------------
149 GB \\.\PhysicalDrive0 OK (DOS/Win32 Boot code found)

Done;
Press any key to quit...

Dále TDSSKILLER

2011/03/12 21:44:28.0125 2412 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/03/12 21:44:28.0406 2412 ================================================================================
2011/03/12 21:44:28.0406 2412 SystemInfo:
2011/03/12 21:44:28.0406 2412
2011/03/12 21:44:28.0406 2412 OS Version: 5.1.2600 ServicePack: 3.0
2011/03/12 21:44:28.0406 2412 Product type: Workstation
2011/03/12 21:44:28.0406 2412 ComputerName: DOMOV-742668764
2011/03/12 21:44:28.0406 2412 UserName: Lukáš
2011/03/12 21:44:28.0406 2412 Windows directory: C:\WINDOWS
2011/03/12 21:44:28.0406 2412 System windows directory: C:\WINDOWS
2011/03/12 21:44:28.0406 2412 Processor architecture: Intel x86
2011/03/12 21:44:28.0406 2412 Number of processors: 2
2011/03/12 21:44:28.0406 2412 Page size: 0x1000
2011/03/12 21:44:28.0406 2412 Boot type: Normal boot
2011/03/12 21:44:28.0406 2412 ================================================================================
2011/03/12 21:44:28.0562 2412 Initialize success
2011/03/12 21:44:29.0953 1700 ================================================================================
2011/03/12 21:44:29.0953 1700 Scan started
2011/03/12 21:44:29.0953 1700 Mode: Manual;
2011/03/12 21:44:29.0953 1700 ================================================================================
2011/03/12 21:44:31.0890 1700 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/03/12 21:44:31.0984 1700 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/03/12 21:44:32.0093 1700 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/03/12 21:44:32.0218 1700 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys
2011/03/12 21:44:32.0515 1700 Ambfilt (267fc636801edc5ab28e14036349e3be) C:\WINDOWS\system32\drivers\Ambfilt.sys
2011/03/12 21:44:32.0750 1700 Amfilter (d716473c4f66c1173d3ca4e679f68743) C:\WINDOWS\system32\DRIVERS\Amfilter.sys
2011/03/12 21:44:32.0796 1700 Amusbprt (0e264a9acb592f3fd91e742983db6a96) C:\WINDOWS\system32\DRIVERS\Amusbprt.sys
2011/03/12 21:44:33.0000 1700 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/03/12 21:44:33.0093 1700 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/03/12 21:44:33.0656 1700 ati2mtag (c2b6f2161abd498d2b453050ffc81812) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
2011/03/12 21:44:34.0093 1700 atksgt (f0d933b42cd0594048e4d5200ae9e417) C:\WINDOWS\system32\DRIVERS\atksgt.sys
2011/03/12 21:44:34.0171 1700 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/03/12 21:44:34.0218 1700 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/03/12 21:44:34.0265 1700 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/03/12 21:44:34.0328 1700 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/03/12 21:44:34.0406 1700 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/03/12 21:44:34.0468 1700 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/03/12 21:44:34.0562 1700 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/03/12 21:44:34.0765 1700 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/03/12 21:44:34.0843 1700 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
2011/03/12 21:44:34.0890 1700 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
2011/03/12 21:44:34.0953 1700 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/03/12 21:44:35.0078 1700 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/03/12 21:44:35.0171 1700 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/03/12 21:44:35.0296 1700 dtsoftbus01 (555e54ac2f601a8821cef58961653991) C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys
2011/03/12 21:44:35.0437 1700 eamon (d42dd9021acd47683b33adf21bca49aa) C:\WINDOWS\system32\DRIVERS\eamon.sys
2011/03/12 21:44:35.0484 1700 ehdrv (fe7824239d132ad9ebd8645fe1199b30) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
2011/03/12 21:44:35.0546 1700 epfw (73411c14a8c6062bb6a510772cf2f38c) C:\WINDOWS\system32\DRIVERS\epfw.sys
2011/03/12 21:44:35.0656 1700 Epfwndis (490329bf80f333e788df9596a752a915) C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
2011/03/12 21:44:35.0734 1700 epfwtdi (bdde7dd8fcdb1de7e879bb320b0605c0) C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
2011/03/12 21:44:35.0859 1700 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/03/12 21:44:35.0921 1700 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/03/12 21:44:35.0968 1700 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
2011/03/12 21:44:36.0062 1700 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/03/12 21:44:36.0109 1700 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/03/12 21:44:36.0156 1700 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/03/12 21:44:36.0203 1700 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/03/12 21:44:36.0265 1700 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/03/12 21:44:36.0359 1700 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/03/12 21:44:36.0406 1700 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/03/12 21:44:36.0765 1700 HPZid412 (5faba4775d4c61e55ec669d643ffc71f) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
2011/03/12 21:44:36.0812 1700 HPZipr12 (a3c43980ee1f1beac778b44ea65dbdd4) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
2011/03/12 21:44:37.0421 1700 HPZius12 (2906949bd4e206f2bb0dd1896ce9f66f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
2011/03/12 21:44:37.0531 1700 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/03/12 21:44:37.0937 1700 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/03/12 21:44:37.0968 1700 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/03/12 21:44:38.0984 1700 IntcAzAudAddService (0503eb6f3359e1c6e4c46fef376405ef) C:\WINDOWS\system32\drivers\RtkHDAud.sys
2011/03/12 21:44:39.0734 1700 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/03/12 21:44:39.0828 1700 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/03/12 21:44:39.0859 1700 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/03/12 21:44:39.0921 1700 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/03/12 21:44:40.0015 1700 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/03/12 21:44:40.0078 1700 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/03/12 21:44:40.0156 1700 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/03/12 21:44:40.0234 1700 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/03/12 21:44:40.0359 1700 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/03/12 21:44:40.0468 1700 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/03/12 21:44:40.0500 1700 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/03/12 21:44:40.0609 1700 lirsgt (f8a7212d0864ef5e9185fb95e6623f4d) C:\WINDOWS\system32\DRIVERS\lirsgt.sys
2011/03/12 21:44:40.0671 1700 MBAMSwissArmy (d68e165c3123aba3b1282eddb4213bd8) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011/03/12 21:44:40.0750 1700 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/03/12 21:44:40.0875 1700 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
2011/03/12 21:44:40.0984 1700 Monfilt (c7d9f9717916b34c1b00dd4834af485c) C:\WINDOWS\system32\drivers\Monfilt.sys
2011/03/12 21:44:41.0203 1700 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/03/12 21:44:41.0296 1700 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/03/12 21:44:41.0328 1700 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/03/12 21:44:41.0437 1700 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/03/12 21:44:41.0562 1700 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/03/12 21:44:41.0687 1700 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/03/12 21:44:41.0828 1700 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/03/12 21:44:41.0921 1700 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/03/12 21:44:41.0984 1700 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/03/12 21:44:42.0078 1700 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/03/12 21:44:42.0156 1700 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
2011/03/12 21:44:42.0375 1700 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2011/03/12 21:44:42.0468 1700 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/03/12 21:44:42.0687 1700 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/03/12 21:44:42.0937 1700 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/03/12 21:44:43.0203 1700 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/03/12 21:44:43.0421 1700 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/03/12 21:44:44.0015 1700 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/03/12 21:44:44.0750 1700 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/03/12 21:44:45.0500 1700 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/03/12 21:44:46.0359 1700 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/03/12 21:44:46.0875 1700 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/03/12 21:44:47.0265 1700 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/03/12 21:44:47.0546 1700 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/03/12 21:44:48.0140 1700 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/03/12 21:44:48.0609 1700 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/03/12 21:44:49.0156 1700 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/03/12 21:44:49.0687 1700 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/03/12 21:44:50.0125 1700 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/03/12 21:44:51.0968 1700 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/03/12 21:44:52.0250 1700 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/03/12 21:44:52.0421 1700 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/03/12 21:44:52.0890 1700 PxHelp20 (153d02480a0a2f45785522e814c634b6) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/03/12 21:44:54.0296 1700 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/03/12 21:44:54.0484 1700 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/03/12 21:44:54.0531 1700 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/03/12 21:44:54.0578 1700 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/03/12 21:44:54.0640 1700 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/03/12 21:44:54.0718 1700 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/03/12 21:44:54.0765 1700 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/03/12 21:44:54.0812 1700 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/03/12 21:44:55.0484 1700 RTHDMIAzAudService (eb5a4e5437c643517f9d0fa0535310af) C:\WINDOWS\system32\drivers\RtKHDMI.sys
2011/03/12 21:44:56.0890 1700 RTLE8023xp (1323ba3ca4e8d863eb00cd81c0aaf356) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
2011/03/12 21:44:57.0046 1700 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/03/12 21:44:57.0093 1700 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/03/12 21:44:57.0171 1700 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/03/12 21:44:57.0250 1700 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/03/12 21:44:57.0453 1700 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/03/12 21:44:57.0593 1700 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/03/12 21:44:57.0687 1700 Srv (0f6aefad3641a657e18081f52d0c15af) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/03/12 21:44:57.0796 1700 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/03/12 21:44:57.0875 1700 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/03/12 21:44:58.0031 1700 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/03/12 21:44:58.0125 1700 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/03/12 21:44:58.0265 1700 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/03/12 21:44:58.0312 1700 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/03/12 21:44:58.0406 1700 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/03/12 21:44:58.0546 1700 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/03/12 21:44:58.0796 1700 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/03/12 21:44:58.0921 1700 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/03/12 21:44:58.0984 1700 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/03/12 21:44:59.0140 1700 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/03/12 21:44:59.0203 1700 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/03/12 21:44:59.0265 1700 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2011/03/12 21:44:59.0328 1700 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/03/12 21:44:59.0406 1700 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/03/12 21:44:59.0468 1700 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/03/12 21:44:59.0531 1700 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/03/12 21:44:59.0578 1700 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/03/12 21:44:59.0750 1700 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/03/12 21:44:59.0937 1700 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/03/12 21:45:00.0015 1700 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/03/12 21:45:00.0671 1700 ================================================================================
2011/03/12 21:45:00.0671 1700 Scan finished
2011/03/12 21:45:00.0671 1700 ================================================================================
2011/03/12 21:45:03.0968 3456 Deinitialize success

MBAM

Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org

Verze databáze: 6037

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12.3.2011 21:56:36
mbam-log-2011-03-12 (21-56-36).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 181850
Uplynulý čas: 30 minut, 4 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

MBR.EXE bez traceroutu

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: WDC_WD1600AAJS-00PSA0 rev.05.06H05 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-16

device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user & kernel MBR OK

MBR.EXE s traceroutem

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: WDC_WD1600AAJS-00PSA0 rev.05.06H05 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-16

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
1 ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Harddisk0\DR0[0x89D75AB8]
3 CLASSPNP[0xBA0E8FD7] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\0000006a[0x89DDFE00]
5 ACPI[0xB9F7F620] -> ntkrnlpa!IofCallDriver[0x804EF1A6] -> \Device\Ide\IdeDeviceP2T0L0-16[0x89D77D98]
kernel: MBR read successfully
user & kernel MBR OK

#6 Příspěvek od **Rudy** » 12 bře 2011 22:04

Pro jistotu ještě spusťte TDSSKiller: http://support.kaspersky.com/viruses/utility a uložte ho na plochu. Dále postupujte podle kolegova návodu:

2x-klik na TDSSKiller.exe- spustiť aplikáciu, potom na Spustiť kontrolu-klik- Start Scan.
Ak je infikovaný súbor detekovaný, bude predvolená akcia Cure, kliknite na tlačidlo Continue.
Ak podozrivý[suspicious] súbor je detekovaný, bude predvolená akcia Skip, kliknite na Continue.
Môže vás požiadať, aby ste reštartovali počítač na dokončenie procesu. Kliknite na Reboot Now.
Ak nevyžaduje reštart, kliknite na tlačidlo Report. Log súbor by sa mal objaviť. Prosím, skopírujte a vložte obsah súboru tu.
Ak je vyžadované reštartovanie počítača, správa je k dispozícii vo vašom koreňovom adresári (zvyčajne C:\ zložka) vo forme "TDSSKiller. _log.txt". Prosím, skopírujte a vložte obsah súboru tu.

Jde o to, že log CF vypadá čistý a jediný rootkit, který se může před ním skrýt. je právě tento. K té hlášce jsem, bohužel nikde nic nenašel.

petr0266 · #7 Příspěvek od **petr0266** » 12 bře 2011 22:06

tdsskiller uz jsem daval z vlastni iniciativy drive, scroll up. Spolu s logy z mbamu, bootkit removerem a mbr.exe s traceroutem i bez.

petr0266 · #8 Příspěvek od **petr0266** » 12 bře 2011 22:11

http://forums.majorgeeks.com/showthread.php?t=168152

V podstatě to co píše v prvním postu, narozdíl tomu, že mě test probíhal dál, ale vyhodilo mu to stejnou hlášku.

#9 Příspěvek od **Rudy** » 12 bře 2011 22:12

Bohužel tu hlášku jsem nikdy neviděl. Podle všech logů, které jste předložil, je nade vší pochybnost PC čistý. Problém tedy musí být někde mimo PC.

petr0266 · #10 Příspěvek od **petr0266** » 12 bře 2011 22:14

Nelze nějak pročistit cesta mezi počítačem a switchem (routerem) softwarově? Něco jako program dial-up (pouze jsem o něm slyšel, nikdy jsem ho neaplikoval), který by mohl pročistit mezipaměti DNS a další drobnůstky.

Originální hláška, kterou mi hodil combofix (mě to hodilo v češtině).

"Combofix has detected presence of a Rootkit activity, and will restart the computer"

V qoobox v záložní složce combofixu jsem měl registr tcpip.reg (což možná má nějakou souvistlost s TCP/IP protokolem).

#11 Příspěvek od **Rudy** » 12 bře 2011 22:20

Lze použít WinsockFix: http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=22 . Utilita reinstalujte TCP/IP protokol. V případě, že máte parametry sítě ručně zadány, budete je muset po restartu PC znovu zadat.

petr0266 · #12 Příspěvek od **petr0266** » 12 bře 2011 22:23

Zkusím, doufám, že to nebude mít vliv na ovladač sítové karty.

Co si myslíte o tom, že ARP CACHE POISONING provádí počítač v mé síti (je zdrojem) na můj počítač (cíl), který je podle všeho zcela čistý a o "detekci neočekávaných dat v protokolu" z mé ip adresy na zcela neznámou 0.255.0.255 vypadá skoro jako maska podsíte, ta je ale jiná.

#13 Příspěvek od **Rudy** » 13 bře 2011 10:13

Na protokol TCP/IP to nemá žádný vliv, pouze ten, že bude obnoven do výchozího stavu. Pokud jsou IP adresy zadány ručně, budou se muset po restartu znovu zadat. IP 0.255.0.255 je registrována jako speciální a není na ni žádná doména. Jinými slovy, v síti k níž jste připojen se používá k nějakému účelu. O tom bude určitě něco vědět provider, nebo správce sítě.

petr0266 · #14 Příspěvek od **petr0266** » 13 bře 2011 10:46

Děkuji, ještě bych prosil o nějaké programy na pročištění po čištění, aby zmizely vsechny soubory od combofixu, mbamu, bootkitu, mbr, rsitu (hjt), tdsskilleru atd (ccleaner + CleanUp používám pravidelně).

#15 Příspěvek od **Rudy** » 13 bře 2011 11:09

CCleaner zde doporučujeme: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 . Jinak by mělo stačit občas udělat antivirový sken.

VIRY.CZ

Detekována neočekávaná data v protokolu

Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu

Re: Detekována neočekávaná data v protokolu