Preventivka =) (ntb posl. dobou pomalejší)

[deathmiss]

Dobrý den, prosím o preventivní kontrolu. Předem děkuji. (Nejde mi to sem vložit celý najednou, tak tady je 1.část logu)

Logfile of random's system information tool 1.08 (written by random/random)
Run by cc at 2011-03-16 19:09:12
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 67 GB (26%) free of 259 GB
Total RAM: 3037 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:12:33, on 16.3.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\windows\system32\Dwm.exe
C:\windows\system32\taskhost.exe
C:\windows\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Lenovo\Energy Management\utility.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\windows\system32\conhost.exe
C:\Program Files\Lenovo\Energy Management\Energy Management.exe
C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
C:\windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 3\IObitUpdate.exe
C:\Program Files\QIP Infium\infium.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\system32\rundll32.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\Desktop\RSIT.exe
C:\Program Files\trend micro\cc.exe
C:\Users\cc\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\cc\Desktop\RSIT.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://lenovo.live.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhosz
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe
O4 - HKLM\..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\windows\system32\nvvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\windows\system32\IoctlSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Airytec Switch Off - Task Scheduler (SwOffScheduler) - Airytec - C:\Program Files\Airytec\Switch Off\swoff.exe
O23 - Service: Airytec Switch Off - Web Interface (SwOffWeb) - Airytec - C:\Program Files\Airytec\Switch Off\swoff.exe

--
End of file - 10045 bytes

======Scheduled tasks folder======

C:\windows\tasks\AWC Update.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2010-11-25 1252304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-06-22 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-06-22 520192]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2010-11-25 1252304]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2008-03-26 163840]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-02-23 3451496]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2009-07-31 4114336]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2009-06-25 5064520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\windows\system32\NvCpl.dll [2009-07-27 13797920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^cc^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2009-02-26 97680]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-03-16 19:09:12 ----D---- C:\rsit
2011-03-09 00:05:48 ----SHD---- C:\Config.Msi
2011-03-09 00:04:18 ----A---- C:\windows\system32\FntCache.dll
2011-03-09 00:04:17 ----A---- C:\windows\system32\DWrite.dll
2011-03-09 00:04:17 ----A---- C:\windows\system32\d2d1.dll
2011-03-09 00:04:16 ----A---- C:\windows\system32\sbe.dll
2011-03-09 00:04:16 ----A---- C:\windows\system32\EncDec.dll
2011-03-09 00:04:16 ----A---- C:\windows\system32\CPFilters.dll
2011-03-05 10:55:32 ----D---- C:\Program Files\WinRAR
2011-03-04 22:36:13 ----D---- C:\windows\cs
2011-03-04 22:35:16 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2011-03-04 22:34:06 ----D---- C:\Program Files\Windows Live
2011-03-04 22:33:02 ----A---- C:\windows\system32\XAudio2_5.dll
2011-03-04 22:33:02 ----A---- C:\windows\system32\XAPOFX1_3.dll
2011-03-04 22:33:01 ----A---- C:\windows\system32\d3dx10_42.dll
2011-03-04 22:27:26 ----D---- C:\Program Files\Common Files\Windows Live
2011-02-27 18:35:20 ----D---- C:\windows\system32\SPReview
2011-02-27 18:33:54 ----D---- C:\windows\system32\EventProviders
2011-02-27 18:31:17 ----A---- C:\windows\system32\dfshim.dll
2011-02-27 18:31:13 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-02-27 18:31:13 ----A---- C:\windows\system32\mstscax.dll
2011-02-27 18:31:13 ----A---- C:\windows\system32\drivers\TsUsbFlt.sys
2011-02-27 18:31:10 ----A---- C:\windows\system32\mfc40u.dll
2011-02-27 18:31:10 ----A---- C:\windows\system32\mfc40.dll
2011-02-27 18:31:10 ----A---- C:\windows\system32\d3d10warp.dll
2011-02-27 18:31:08 ----A---- C:\windows\system32\sysmain.dll
2011-02-27 18:31:07 ----A---- C:\windows\system32\shell32.dll
2011-02-27 18:31:07 ----A---- C:\windows\system32\secproc_isv.dll
2011-02-27 18:31:06 ----A---- C:\windows\system32\secproc.dll
2011-02-27 18:31:06 ----A---- C:\windows\system32\RMActivate_isv.exe
2011-02-27 18:31:06 ----A---- C:\windows\system32\ieframe.dll
2011-02-27 18:31:05 ----A---- C:\windows\system32\RMActivate.exe
2011-02-27 18:31:04 ----A---- C:\windows\system32\spwizui.dll
2011-02-27 18:31:03 ----A---- C:\windows\system32\mscoree.dll
2011-02-27 18:31:02 ----A---- C:\windows\system32\ntkrnlpa.exe
2011-02-27 18:31:02 ----A---- C:\windows\system32\mf.dll
2011-02-27 18:31:02 ----A---- C:\windows\system32\mcupdate_GenuineIntel.dll
2011-02-27 18:31:01 ----A---- C:\windows\system32\CertEnroll.dll
2011-02-27 18:31:00 ----A---- C:\windows\system32\wmp.dll
2011-02-27 18:31:00 ----A---- C:\windows\system32\mssrch.dll
2011-02-27 18:31:00 ----A---- C:\windows\system32\iertutil.dll
2011-02-27 18:30:59 ----A---- C:\windows\system32\PresentationHostProxy.dll
2011-02-27 18:30:59 ----A---- C:\windows\system32\PresentationHost.exe
2011-02-27 18:30:59 ----A---- C:\windows\system32\esent.dll
2011-02-27 18:30:59 ----A---- C:\windows\system32\drivers\msiscsi.sys
2011-02-27 18:30:59 ----A---- C:\windows\system32\drivers\hwpolicy.sys
2011-02-27 18:30:58 ----A---- C:\windows\system32\tquery.dll
2011-02-27 18:30:58 ----A---- C:\windows\system32\schedsvc.dll
2011-02-27 18:30:58 ----A---- C:\windows\system32\ntoskrnl.exe
2011-02-27 18:30:57 ----A---- C:\windows\system32\RacEngn.dll
2011-02-27 18:30:56 ----A---- C:\windows\system32\AuthFWSnapin.dll
2011-02-27 18:30:55 ----A---- C:\windows\system32\ntdll.dll
2011-02-27 18:30:54 ----A---- C:\windows\system32\rdpdd.dll
2011-02-27 18:30:53 ----A---- C:\windows\system32\wininet.dll
2011-02-27 18:30:53 ----A---- C:\windows\system32\qmgr.dll
2011-02-27 18:30:52 ----A---- C:\windows\system32\ole32.dll
2011-02-27 18:30:52 ----A---- C:\windows\system32\ExplorerFrame.dll
2011-02-27 18:30:51 ----A---- C:\windows\system32\wevtsvc.dll
2011-02-27 18:30:51 ----A---- C:\windows\system32\urlmon.dll
2011-02-27 18:30:50 ----A---- C:\windows\system32\vssapi.dll
2011-02-27 18:30:50 ----A---- C:\windows\system32\SearchFolder.dll
2011-02-27 18:30:50 ----A---- C:\windows\system32\drivers\tcpip.sys
2011-02-27 18:30:50 ----A---- C:\windows\system32\d3d9.dll
2011-02-27 18:30:50 ----A---- C:\windows\explorer.exe
2011-02-27 18:30:49 ----A---- C:\windows\system32\taskschd.dll
2011-02-27 18:30:49 ----A---- C:\windows\system32\IKEEXT.DLL
2011-02-27 18:30:48 ----A---- C:\windows\system32\spreview.exe
2011-02-27 18:30:48 ----A---- C:\windows\system32\spinstall.exe
2011-02-27 18:30:48 ----A---- C:\windows\system32\mstsc.exe
2011-02-27 18:30:48 ----A---- C:\windows\system32\kernel32.dll
2011-02-27 18:30:48 ----A---- C:\windows\system32\drivers\ntfs.sys
2011-02-27 18:30:48 ----A---- C:\windows\system32\crypt32.dll
2011-02-27 18:30:47 ----A---- C:\windows\system32\wer.dll
2011-02-27 18:30:47 ----A---- C:\windows\system32\termsrv.dll
2011-02-27 18:30:47 ----A---- C:\windows\system32\certcli.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\rpcrt4.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\odbc32.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\msxml6.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\lsasrv.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\gpsvc.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\dwmcore.dll
2011-02-27 18:30:46 ----A---- C:\windows\system32\diagperf.dll
2011-02-27 18:30:45 ----A---- C:\windows\system32\WinSAT.exe
2011-02-27 18:30:45 ----A---- C:\windows\system32\wbengine.exe
2011-02-27 18:30:45 ----A---- C:\windows\system32\scavengeui.dll
2011-02-27 18:30:45 ----A---- C:\windows\system32\mstime.dll
2011-02-27 18:30:45 ----A---- C:\windows\system32\MPSSVC.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\winhttp.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\TSWorkspace.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\tsmf.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\setupapi.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\quartz.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\msfeeds.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\localspl.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\iedkcs32.dll
2011-02-27 18:30:44 ----A---- C:\windows\system32\drivers\nvstor.sys
2011-02-27 18:30:44 ----A---- C:\windows\system32\dot3api.dll
2011-02-27 18:30:43 ----A---- C:\windows\system32\apphelp.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\WindowsCodecs.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\VSSVC.exe
2011-02-27 18:30:42 ----A---- C:\windows\system32\netlogon.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\netcfgx.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\MSVidCtl.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\dbgeng.dll
2011-02-27 18:30:42 ----A---- C:\windows\system32\d3d11.dll
2011-02-27 18:30:41 ----A---- C:\windows\system32\WMVDECOD.DLL
2011-02-27 18:30:41 ----A---- C:\windows\system32\winlogon.exe
2011-02-27 18:30:41 ----A---- C:\windows\system32\webio.dll
2011-02-27 18:30:41 ----A---- C:\windows\system32\user32.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\WsmSvc.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\upnp.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\schannel.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\Query.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\DShowRdpFilter.dll
2011-02-27 18:30:40 ----A---- C:\windows\system32\drivers\srv2.sys
2011-02-27 18:30:40 ----A---- C:\windows\system32\drivers\srv.sys
2011-02-27 18:30:40 ----A---- C:\windows\system32\drivers\rdpwd.sys
2011-02-27 18:30:40 ----A---- C:\windows\system32\drivers\nvraid.sys
2011-02-27 18:30:40 ----A---- C:\windows\system32\advapi32.dll
2011-02-27 18:30:39 ----A---- C:\windows\system32\netfxperf.dll
2011-02-27 18:30:39 ----A---- C:\windows\system32\msv1_0.dll
2011-02-27 18:30:39 ----A---- C:\windows\system32\mmcndmgr.dll
2011-02-27 18:30:39 ----A---- C:\windows\system32\lsm.exe
2011-02-27 18:30:38 ----A---- C:\windows\system32\usp10.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\sppobjs.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\shlwapi.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\SessEnv.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\PortableDeviceApi.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\msdrm.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\mcbuilder.exe
2011-02-27 18:30:38 ----A---- C:\windows\system32\KernelBase.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\imapi2fs.dll
2011-02-27 18:30:38 ----A---- C:\windows\system32\authui.dll
2011-02-27 18:30:37 ----A---- C:\windows\system32\userenv.dll
2011-02-27 18:30:37 ----A---- C:\windows\system32\certmgr.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\xpsservices.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\winload.exe
2011-02-27 18:30:36 ----A---- C:\windows\system32\WebClnt.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\umpnpmgr.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\sppwinob.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\rpcss.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\iphlpsvc.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\comdlg32.dll
2011-02-27 18:30:36 ----A---- C:\windows\system32\cmd.exe
2011-02-27 18:30:36 ----A---- C:\windows\system32\audiosrv.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\Wldap32.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\win32spl.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\propsys.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\framedynos.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\dnsapi.dll
2011-02-27 18:30:35 ----A---- C:\windows\system32\BFE.DLL
2011-02-27 18:30:34 ----A---- C:\windows\system32\wucltux.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\wuaueng.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\winresume.exe
2011-02-27 18:30:34 ----A---- C:\windows\system32\samsrv.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\profsvc.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\nlasvc.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\ncsi.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\mfds.dll
2011-02-27 18:30:34 ----A---- C:\windows\system32\drivers\volsnap.sys
2011-02-27 18:30:34 ----A---- C:\windows\system32\drivers\netio.sys
2011-02-27 18:30:34 ----A---- C:\windows\system32\drivers\ndis.sys
2011-02-27 18:30:34 ----A---- C:\windows\system32\azroles.dll
2011-02-27 18:30:33 ----A---- C:\windows\system32\werconcpl.dll
2011-02-27 18:30:33 ----A---- C:\windows\system32\themeui.dll
2011-02-27 18:30:33 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2011-02-27 18:30:32 ----A---- C:\windows\system32\wintrust.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\taskeng.exe
2011-02-27 18:30:32 ----A---- C:\windows\system32\spp.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\msxml3.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\mswsock.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\mfreadwrite.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\inetcomm.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\dxgi.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\drivers\storport.sys
2011-02-27 18:30:32 ----A---- C:\windows\system32\drivers\http.sys
2011-02-27 18:30:32 ----A---- C:\windows\system32\dhcpcore.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\dbghelp.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\credui.dll
2011-02-27 18:30:32 ----A---- C:\windows\system32\basecsp.dll
2011-02-27 18:30:31 ----A---- C:\windows\system32\taskcomp.dll
2011-02-27 18:30:31 ----A---- C:\windows\system32\NaturalLanguage6.dll
2011-02-27 18:30:31 ----A---- C:\windows\system32\evr.dll
2011-02-27 18:30:31 ----A---- C:\windows\system32\drivers\mrxdav.sys
2011-02-27 18:30:30 ----A---- C:\windows\system32\WinSATAPI.dll
2011-02-27 18:30:30 ----A---- C:\windows\system32\vpnike.dll
2011-02-27 18:30:30 ----A---- C:\windows\system32\srvsvc.dll
2011-02-27 18:30:30 ----A---- C:\windows\system32\sqlsrv32.dll
2011-02-27 18:30:30 ----A---- C:\windows\system32\spoolsv.exe
2011-02-27 18:30:30 ----A---- C:\windows\system32\QAGENTRT.DLL
2011-02-27 18:30:30 ----A---- C:\windows\system32\gdi32.dll
2011-02-27 18:30:30 ----A---- C:\windows\system32\drivers\amdsata.sys
2011-02-27 18:30:30 ----A---- C:\windows\system32\drivers\1394ohci.sys
2011-02-27 18:30:30 ----A---- C:\windows\system32\calc.exe
2011-02-27 18:30:29 ----A---- C:\windows\system32\UIRibbon.dll
2011-02-27 18:30:29 ----A---- C:\windows\system32\lpksetup.exe
2011-02-27 18:30:29 ----A---- C:\windows\system32\fveapi.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\ws2_32.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\sxs.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\stobject.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\netshell.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\ie4uinit.exe
2011-02-27 18:30:28 ----A---- C:\windows\system32\hgprint.dll
2011-02-27 18:30:28 ----A---- C:\windows\system32\drivers\rdbss.sys
2011-02-27 18:30:28 ----A---- C:\windows\system32\drivers\msdsm.sys
2011-02-27 18:30:28 ----A---- C:\windows\system32\drivers\fvevol.sys
2011-02-27 18:30:28 ----A---- C:\windows\system32\cryptsvc.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\prncache.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\printui.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\msi.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\inetpp.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\dps.dll
2011-02-27 18:30:27 ----A---- C:\windows\system32\comctl32.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\WSDApi.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\wmpeffects.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\rpchttp.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\net1.exe
2011-02-27 18:30:26 ----A---- C:\windows\system32\FXSSVC.exe
2011-02-27 18:30:26 ----A---- C:\windows\system32\drivers\pci.sys
2011-02-27 18:30:26 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2011-02-27 18:30:26 ----A---- C:\windows\system32\dnsrslvr.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\ci.dll
2011-02-27 18:30:26 ----A---- C:\windows\system32\aitagent.exe
2011-02-27 18:30:26 ----A---- C:\windows\system32\aepdu.dll
2011-02-27 18:30:25 ----A---- C:\windows\system32\vds.exe
2011-02-27 18:30:25 ----A---- C:\windows\system32\scansetting.dll
2011-02-27 18:30:25 ----A---- C:\windows\system32\mfc42u.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\wpdshext.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\WMVCORE.DLL
2011-02-27 18:30:24 ----A---- C:\windows\system32\wlangpui.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\t2embed.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\QSHVHOST.DLL
2011-02-27 18:30:24 ----A---- C:\windows\system32\pnidui.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\MMDevAPI.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\IPSECSVC.DLL
2011-02-27 18:30:24 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2011-02-27 18:30:24 ----A---- C:\windows\system32\davclnt.dll
2011-02-27 18:30:24 ----A---- C:\windows\system32\consent.exe
2011-02-27 18:30:24 ----A---- C:\windows\system32\aaclient.dll
2011-02-27 18:30:23 ----A---- C:\windows\system32\webservices.dll
2011-02-27 18:30:23 ----A---- C:\windows\system32\netdiagfx.dll
2011-02-27 18:30:23 ----A---- C:\windows\system32\fde.dll
2011-02-27 18:30:23 ----A---- C:\windows\system32\drivers\termdd.sys
2011-02-27 18:30:23 ----A---- C:\windows\system32\drivers\amdxata.sys
2011-02-27 18:30:22 ----A---- C:\windows\system32\wuapi.dll
2011-02-27 18:30:22 ----A---- C:\windows\system32\wscapi.dll
2011-02-27 18:30:22 ----A---- C:\windows\system32\TsUsbGDCoInstaller.dll
2011-02-27 18:30:22 ----A---- C:\windows\system32\SyncCenter.dll
2011-02-27 18:30:22 ----A---- C:\windows\system32\sdengin2.dll
2011-02-27 18:30:22 ----A---- C:\windows\system32\drivers\sbp2port.sys
2011-02-27 18:30:21 ----A---- C:\windows\system32\wisptis.exe
2011-02-27 18:30:21 ----A---- C:\windows\system32\WinSCard.dll
2011-02-27 18:30:21 ----A---- C:\windows\system32\WFS.exe
2011-02-27 18:30:21 ----A---- C:\windows\system32\pla.dll
2011-02-27 18:30:21 ----A---- C:\windows\system32\msasn1.dll
2011-02-27 18:30:21 ----A---- C:\windows\system32\mcmde.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\WUDFSvc.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\winsta.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\wiaservc.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\setupcl.exe
2011-02-27 18:30:20 ----A---- C:\windows\system32\rdpcore.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\ntshrui.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\MSMPEG2ENC.DLL
2011-02-27 18:30:20 ----A---- C:\windows\system32\imapi2.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\iepeers.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\DXPTaskRingtone.dll
2011-02-27 18:30:20 ----A---- C:\windows\system32\drivers\vhdmp.sys
2011-02-27 18:30:20 ----A---- C:\windows\system32\drivers\msahci.sys
2011-02-27 18:30:20 ----A---- C:\windows\system32\conhost.exe
2011-02-27 18:30:20 ----A---- C:\windows\system32\aeinv.dll
2011-02-27 18:30:19 ----A---- C:\windows\system32\gameux.dll
2011-02-27 18:30:19 ----A---- C:\windows\system32\drivers\Diskdump.sys
2011-02-27 18:30:18 ----A---- C:\windows\system32\WMPEncEn.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\winmm.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\vaultsvc.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\TabSvc.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\shsvcs.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\rasmans.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\onex.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\mssvp.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\hbaapi.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\dwmredir.dll
2011-02-27 18:30:18 ----A---- C:\windows\system32\drivers\udfs.sys
2011-02-27 18:30:18 ----A---- C:\windows\system32\drivers\acpi.sys
2011-02-27 18:30:17 ----A---- C:\windows\system32\netiohlp.dll
2011-02-27 18:30:17 ----A---- C:\windows\system32\Narrator.exe
2011-02-27 18:30:17 ----A---- C:\windows\system32\bootres.dll
2011-02-27 18:30:17 ----A---- C:\windows\system32\autofmt.exe
2011-02-27 18:30:17 ----A---- C:\windows\system32\audiodg.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\thumbcache.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\srchadmin.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\schtasks.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\samcli.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\regapi.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\proquota.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\msutb.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\msinfo32.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\mimefilt.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\ipsmsnap.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\IPHLPAPI.DLL
2011-02-27 18:30:16 ----A---- C:\windows\system32\halmacpi.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\hal.dll
2011-02-27 18:30:16 ----A---- C:\windows\system32\autochk.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\autoconv.exe
2011-02-27 18:30:16 ----A---- C:\windows\system32\AudioSes.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\wcncsvc.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\tcpipcfg.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\sspicli.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\powercpl.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\msihnd.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\FXSCOVER.exe
2011-02-27 18:30:15 ----A---- C:\windows\system32\framedyn.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\eapphost.dll
2011-02-27 18:30:15 ----A---- C:\windows\system32\drivers\winusb.sys
2011-02-27 18:30:15 ----A---- C:\windows\system32\drivers\volmgr.sys
2011-02-27 18:30:15 ----A---- C:\windows\system32\drivers\srvnet.sys
2011-02-27 18:30:14 ----A---- C:\windows\system32\wdc.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\umpo.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\QAGENT.DLL
2011-02-27 18:30:14 ----A---- C:\windows\system32\netid.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\mscorier.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\DXP.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\drivers\USBSTOR.SYS
2011-02-27 18:30:14 ----A---- C:\windows\system32\drivers\partmgr.sys
2011-02-27 18:30:14 ----A---- C:\windows\system32\drivers\netbt.sys
2011-02-27 18:30:14 ----A---- C:\windows\system32\AuxiliaryDisplayCpl.dll
2011-02-27 18:30:14 ----A---- C:\windows\system32\actxprxy.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\untfs.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\StructuredQuery.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\scesrv.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\rastls.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\oleaut32.dll
2011-02-27 18:30:13 ----A---- C:\windows\system32\drivers\ataport.sys
2011-02-27 18:30:12 ----A---- C:\windows\system32\WMNetMgr.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\wlanpref.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\Vault.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\sppsvc.exe
2011-02-27 18:30:12 ----A---- C:\windows\system32\sdclt.exe
2011-02-27 18:30:12 ----A---- C:\windows\system32\RpcRtRemote.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\nci.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\ListSvc.dll
2011-02-27 18:30:12 ----A---- C:\windows\system32\licmgr10.dll
2011-02-27 18:30:11 ----A---- C:\windows\system32\Robocopy.exe
2011-02-27 18:30:11 ----A---- C:\windows\system32\drivers\FWPKCLNT.SYS
2011-02-27 18:30:10 ----A---- C:\windows\system32\XpsRasterService.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\userinit.exe
2011-02-27 18:30:10 ----A---- C:\windows\system32\taskmgr.exe
2011-02-27 18:30:10 ----A---- C:\windows\system32\sharemediacpl.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\puiobj.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\mtxclu.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\mssphtb.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\msdri.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\DxpTaskSync.dll
2011-02-27 18:30:10 ----A---- C:\windows\system32\drivers\usbvideo.sys
2011-02-27 18:30:10 ----A---- C:\windows\system32\drivers\mpio.sys
2011-02-27 18:30:10 ----A---- C:\windows\system32\drivers\mountmgr.sys
2011-02-27 18:30:10 ----A---- C:\windows\system32\Display.dll
2011-02-27 18:30:09 ----A---- C:\windows\system32\termmgr.dll
2011-02-27 18:30:09 ----A---- C:\windows\system32\eudcedit.exe
2011-02-27 18:30:09 ----A---- C:\windows\system32\drivers\scsiport.sys
2011-02-27 18:30:09 ----A---- C:\windows\system32\drivers\iaStorV.sys
2011-02-27 18:30:09 ----A---- C:\windows\system32\DiagCpl.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\wiadefui.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\sppcomapi.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\shsetup.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\rasppp.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\msdtctm.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\msconfig.exe
2011-02-27 18:30:08 ----A---- C:\windows\system32\logoncli.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\cabview.dll
2011-02-27 18:30:08 ----A---- C:\windows\system32\biocpl.dll
2011-02-27 18:30:07 ----A---- C:\windows\system32\SensorsCpl.dll
2011-02-27 18:30:07 ----A---- C:\windows\system32\FirewallControlPanel.dll
2011-02-27 18:30:06 ----A---- C:\windows\system32\wpccpl.dll
2011-02-27 18:30:06 ----A---- C:\windows\system32\themecpl.dll
2011-02-27 18:30:06 ----A---- C:\windows\system32\hgcpl.dll
2011-02-27 18:30:06 ----A---- C:\windows\system32\FWPUCLNT.DLL
2011-02-27 18:30:06 ----A---- C:\windows\system32\drivers\rdyboost.sys
2011-02-27 18:30:06 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-02-27 18:30:06 ----A---- C:\windows\system32\dnscmmc.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\winsrv.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\tapisrv.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\scecli.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\mscories.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\mscms.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\fontext.dll
2011-02-27 18:30:05 ----A---- C:\windows\system32\drivers\ksecdd.sys
2011-02-27 18:30:04 ----A---- C:\windows\system32\wlanui.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\wkssvc.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\VAN.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\usercpl.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\srcore.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\SndVolSSO.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\qedit.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\prntvpt.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\PerfCenterCPL.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\mprddm.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\localsec.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\KMSVC.DLL
2011-02-27 18:30:04 ----A---- C:\windows\system32\iasacct.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\drivers\usbhub.sys
2011-02-27 18:30:04 ----A---- C:\windows\system32\bcdsrv.dll
2011-02-27 18:30:04 ----A---- C:\windows\system32\batmeter.dll
2011-02-27 18:30:03 ----A---- C:\windows\system32\wpdbusenum.dll
2011-02-27 18:30:03 ----A---- C:\windows\system32\wksprt.exe
2011-02-27 18:30:03 ----A---- C:\windows\system32\w32tm.exe
2011-02-27 18:30:03 ----A---- C:\windows\system32\spwizeng.dll
2011-02-27 18:30:03 ----A---- C:\windows\system32\SndVol.exe
2011-02-27 18:30:03 ----A---- C:\windows\system32\qdvd.dll
2011-02-27 18:30:03 ----A---- C:\windows\system32\netcenter.dll
2011-02-27 18:30:03 ----A---- C:\windows\system32\mblctr.exe
2011-02-27 18:30:03 ----A---- C:\windows\system32\azroleui.dll
2011-02-27 18:30:02 ----A---- C:\windows\system32\zipfldr.dll
2011-02-27 18:30:02 ----A---- C:\windows\system32\drivers\ks.sys
2011-02-27 18:30:02 ----A---- C:\windows\system32\drivers\afd.sys
2011-02-27 18:30:02 ----A---- C:\windows\system32\accessibilitycpl.dll
2011-02-27 18:30:01 ----A---- C:\windows\system32\netjoin.dll
2011-02-27 18:30:01 ----A---- C:\windows\system32\MSAC3ENC.DLL
2011-02-27 18:30:01 ----A---- C:\windows\system32\fdeploy.dll
2011-02-27 18:30:01 ----A---- C:\windows\system32\cryptui.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\wusa.exe
2011-02-27 18:30:00 ----A---- C:\windows\system32\prnfldr.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\networkmap.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\mspbda.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\MCEWMDRMNDBootstrap.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\Faultrep.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\cfgmgr32.dll
2011-02-27 18:30:00 ----A---- C:\windows\system32\adsldp.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\sud.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\photowiz.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\OnLineIDCpl.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\msieftp.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\MediaMetadataHandler.dll
2011-02-27 18:29:59 ----A---- C:\windows\system32\ActionCenter.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\taskhost.exe
2011-02-27 18:29:58 ----A---- C:\windows\system32\taskbarcpl.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\slui.exe
2011-02-27 18:29:58 ----A---- C:\windows\system32\sisbkup.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\rdpcorekmts.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\iprtrmgr.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\ieUnatt.exe
2011-02-27 18:29:58 ----A---- C:\windows\system32\iasrad.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\halacpi.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\ftp.exe
2011-02-27 18:29:58 ----A---- C:\windows\system32\drivers\hidclass.sys
2011-02-27 18:29:58 ----A---- C:\windows\system32\dot3cfg.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\defaultlocationcpl.dll
2011-02-27 18:29:58 ----A---- C:\windows\system32\credssp.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\wpd_ci.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\syncui.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\shwebsvc.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\sdcpl.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\recovery.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\odbcjt32.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\ifsutil.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\iesysprep.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\efscore.dll
2011-02-27 18:29:57 ----A---- C:\windows\system32\ActionCenterCPL.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\wmpmde.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\vdsutil.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\sppnp.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\rtutils.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\rdpwsx.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\OobeFldr.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\ntlanman.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\fsquirt.exe
2011-02-27 18:29:56 ----A---- C:\windows\system32\dskquoui.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\DeviceCenter.dll
2011-02-27 18:29:56 ----A---- C:\windows\system32\bcdedit.exe
2011-02-27 18:29:56 ----A---- C:\windows\system32\autoplay.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\systemcpl.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\SmartcardCredentialProvider.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\sethc.exe
2011-02-27 18:29:55 ----A---- C:\windows\system32\rstrui.exe
2011-02-27 18:29:55 ----A---- C:\windows\system32\riched20.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\recdisc.exe
2011-02-27 18:29:55 ----A---- C:\windows\system32\ntprint.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\nshwfp.dll
2011-02-27 18:29:55 ----A---- C:\windows\system32\drivers\tdx.sys
2011-02-27 18:29:55 ----A---- C:\windows\system32\bcdboot.exe
2011-02-27 18:29:54 ----A---- C:\windows\system32\wmpsrcwp.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\netplwiz.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\NAPHLPR.DLL
2011-02-27 18:29:54 ----A---- C:\windows\system32\migisol.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\httpapi.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\fms.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\drivers\tssecsrv.sys
2011-02-27 18:29:54 ----A---- C:\windows\system32\dot3svc.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\cdosys.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\blackbox.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\AxInstSv.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\AuxiliaryDisplayServices.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\asycfilt.dll
2011-02-27 18:29:54 ----A---- C:\windows\system32\activeds.dll
2011-02-27 18:29:53 ----A---- C:\windows\system32\wsqmcons.exe
2011-02-27 18:29:53 ----A---- C:\windows\system32\nshipsec.dll
2011-02-27 18:29:53 ----A---- C:\windows\system32\nlaapi.dll
2011-02-27 18:29:53 ----A---- C:\windows\system32\msftedit.dll
2011-02-27 18:29:53 ----A---- C:\windows\system32\isoburn.exe
2011-02-27 18:29:52 ----A---- C:\windows\system32\wvc.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\wuwebv.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\wtsapi32.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\wlanmsm.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\wimgapi.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\wavemsp.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\tzutil.exe
2011-02-27 18:29:52 ----A---- C:\windows\system32\sysclass.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\ReAgent.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\provsvc.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\ocsetup.exe
2011-02-27 18:29:52 ----A---- C:\windows\system32\dsuiext.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\drivers\ndproxy.sys
2011-02-27 18:29:52 ----A---- C:\windows\system32\dot3ui.dll
2011-02-27 18:29:52 ----A---- C:\windows\system32\dfrgui.exe
2011-02-27 18:29:52 ----A---- C:\windows\system32\appinfo.dll
2011-02-27 18:29:51 ----A---- C:\windows\system32\webcheck.dll
2011-02-27 18:29:51 ----A---- C:\windows\system32\twext.dll
2011-02-27 18:29:51 ----A---- C:\windows\system32\mstask.dll
2011-02-27 18:29:51 ----A---- C:\windows\system32\certprop.dll
2011-02-27 18:29:50 ----A---- C:\windows\twain_32.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\uxlib.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\srrstr.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\slwga.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\shdocvw.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\setupugc.exe
2011-02-27 18:29:50 ----A---- C:\windows\system32\qcap.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\qasf.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\occache.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\msrating.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\msfeedsbs.dll
2011-02-27 18:29:50 ----A---- C:\windows\system32\imm32.dll
2011-02-27 18:29:49 ----A---- C:\windows\system32\wwanconn.dll
2011-02-27 18:29:49 ----A---- C:\windows\system32\msvfw32.dll
2011-02-27 18:29:49 ----A---- C:\windows\system32\mciavi32.dll
2011-02-27 18:29:49 ----A---- C:\windows\system32\imgutil.dll
2011-02-27 18:29:49 ----A---- C:\windows\system32\audiodev.dll
2011-02-27 18:29:48 ----A---- C:\windows\system32\WPDShServiceObj.dll
2011-02-27 18:29:48 ----A---- C:\windows\system32\wmdrmsdk.dll
2011-02-27 18:29:48 ----A---- C:\windows\system32\nslookup.exe
2011-02-27 18:29:48 ----A---- C:\windows\system32\msscp.dll
2011-02-27 18:29:48 ----A---- C:\windows\system32\DevicePairingFolder.dll
2011-02-27 18:29:48 ----A---- C:\windows\system32\clusapi.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\wimserv.exe
2011-02-27 18:29:47 ----A---- C:\windows\system32\TSpkg.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\remotepg.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\rdpencom.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\raschap.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\QUTIL.DLL
2011-02-27 18:29:47 ----A---- C:\windows\system32\perfmon.exe
2011-02-27 18:29:47 ----A---- C:\windows\system32\input.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\drmmgrtn.dll
2011-02-27 18:29:47 ----A---- C:\windows\system32\diskraid.exe
2011-02-27 18:29:47 ----A---- C:\windows\system32\acppage.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\wpdwcn.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\wmpdxm.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\WindowsAnytimeUpgradeResults.exe
2011-02-27 18:29:46 ----A---- C:\windows\system32\vpnikeapi.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\vdsbas.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\UserAccountControlSettings.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\sdrsvc.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\onexui.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\olepro32.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\odbccp32.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\ocsetapi.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\nltest.exe
2011-02-27 18:29:46 ----A---- C:\windows\system32\networkexplorer.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\NAPCRYPT.DLL
2011-02-27 18:29:46 ----A---- C:\windows\system32\iTVData.dll
2011-02-27 18:29:46 ----A---- C:\windows\system32\browser.dll
2011-02-27 18:29:46 ----A---- C:\windows\bfsvc.exe
2011-02-27 18:29:45 ----A---- C:\windows\system32\sspisrv.dll
2011-02-27 18:29:45 ----A---- C:\windows\system32\runonce.exe
2011-02-27 18:29:45 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2011-02-27 18:29:45 ----A---- C:\windows\system32\Mcx2Svc.dll
2011-02-27 18:29:45 ----A---- C:\windows\system32\logagent.exe
2011-02-27 18:29:45 ----A---- C:\windows\system32\inseng.dll
2011-02-27 18:29:45 ----A---- C:\windows\system32\dxdiagn.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\wmpshell.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\wmdrmdev.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\shacct.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\PnPUnattend.exe
2011-02-27 18:29:44 ----A---- C:\windows\system32\msvidc32.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\msiexec.exe
2011-02-27 18:29:44 ----A---- C:\windows\system32\MFPlay.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\lsmproxy.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\eapp3hst.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\drivers\rmcast.sys
2011-02-27 18:29:44 ----A---- C:\windows\system32\d3d10level9.dll
2011-02-27 18:29:44 ----A---- C:\windows\system32\bitsadmin.exe
2011-02-27 18:29:43 ----A---- C:\windows\system32\wudriver.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\unimdmat.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\tabcal.exe
2011-02-27 18:29:43 ----A---- C:\windows\system32\sqlcese30.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\rdpd3d.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\mprapi.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\iscsium.dll
2011-02-27 18:29:43 ----A---- C:\windows\system32\cscapi.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\wwanprotdim.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\WUDFPlatform.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\WPDSp.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\tsgqec.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\srvcli.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\QSVRMGMT.DLL
2011-02-27 18:29:42 ----A---- C:\windows\system32\PortableDeviceSyncProvider.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\PortableDeviceStatus.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\pdh.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\OpcServices.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\olethk32.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\odbctrac.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\ncryptui.dll
2011-02-27 18:29:42 ----A---- C:\windows\system32\MdSched.exe
2011-02-27 18:29:42 ----A---- C:\windows\system32\lpremove.exe
2011-02-27 18:29:42 ----A---- C:\windows\system32\logman.exe
2011-02-27 18:29:42 ----A---- C:\windows\system32\djoin.exe
2011-02-27 18:29:42 ----A---- C:\windows\system32\ActionQueue.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\WMPhoto.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\WMADMOD.DLL
2011-02-27 18:29:41 ----A---- C:\windows\system32\wiavideo.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\utildll.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\mshtmled.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\mapistub.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\mapi32.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\fphc.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\dot3msm.dll
2011-02-27 18:29:41 ----A---- C:\windows\system32\avifil32.dll
2011-02-27 18:29:40 ----A---- C:\windows\system32\WMVSDECD.DLL
2011-02-27 18:29:40 ----A---- C:\windows\system32\wmdrmnet.dll
2011-02-27 18:29:40 ----A---- C:\windows\system32\WindowsAnytimeUpgrade.exe
2011-02-27 18:29:40 ----A---- C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2011-02-27 18:29:40 ----A---- C:\windows\system32\takeown.exe
2011-02-27 18:29:40 ----A---- C:\windows\system32\sqmapi.dll
2011-02-27 18:29:40 ----A---- C:\windows\system32\iyuv_32.dll
2011-02-27 18:29:40 ----A---- C:\windows\system32\imagehlp.dll
2011-02-27 18:29:39 ----A---- C:\windows\system32\sppinst.dll
2011-02-27 18:29:39 ----A---- C:\windows\system32\qdv.dll
2011-02-27 18:29:39 ----A---- C:\windows\system32\msnetobj.dll
2011-02-27 18:29:39 ----A---- C:\windows\system32\EhStorAPI.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\WUDFx.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\WUDFHost.exe
2011-02-27 18:29:38 ----A---- C:\windows\system32\wsnmp32.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\WMSPDMOD.DLL
2011-02-27 18:29:38 ----A---- C:\windows\system32\vfwwdm32.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\unattend.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\umb.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\setupcln.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\RelPost.exe
2011-02-27 18:29:38 ----A---- C:\windows\system32\QCLIPROV.DLL
2011-02-27 18:29:38 ----A---- C:\windows\system32\pdhui.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\MuiUnattend.exe
2011-02-27 18:29:38 ----A---- C:\windows\system32\msyuv.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\msrle32.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\drivers\tcpipreg.sys
2011-02-27 18:29:38 ----A---- C:\windows\system32\drivers\bthport.sys
2011-02-27 18:29:38 ----A---- C:\windows\system32\cmstp.exe
2011-02-27 18:29:38 ----A---- C:\windows\system32\cca.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\basesrv.dll
2011-02-27 18:29:38 ----A---- C:\windows\system32\AzSqlExt.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\wuauclt.exe
2011-02-27 18:29:37 ----A---- C:\windows\system32\WavDest.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\tsbyuv.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\relog.exe
2011-02-27 18:29:37 ----A---- C:\windows\system32\PrintIsolationProxy.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\netiougc.exe
2011-02-27 18:29:37 ----A---- C:\windows\system32\msorcl32.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\iscsicli.exe
2011-02-27 18:29:37 ----A---- C:\windows\system32\iasrecst.dll
2011-02-27 18:29:37 ----A---- C:\windows\system32\drivers\ndisuio.sys
2011-02-27 18:29:36 ----A---- C:\windows\system32\wkscli.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\syssetup.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\sppuinotify.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\spbcd.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\setbcdlocale.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\secproc_ssp_isv.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\secproc_ssp.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\resutils.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\rastapi.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\nrpsrv.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\netbtugc.exe
2011-02-27 18:29:36 ----A---- C:\windows\system32\mydocs.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\MultiDigiMon.exe
2011-02-27 18:29:36 ----A---- C:\windows\system32\itircl.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\diskpart.exe
2011-02-27 18:29:36 ----A---- C:\windows\system32\CertPolEng.dll
2011-02-27 18:29:36 ----A---- C:\windows\system32\amstream.dll
2011-02-27 18:29:35 ----A---- C:\windows\system32\wuapp.exe
2011-02-27 18:29:35 ----A---- C:\windows\system32\wmpps.dll
2011-02-27 18:29:35 ----A---- C:\windows\system32\WerFaultSecure.exe
2011-02-27 18:29:35 ----A---- C:\windows\system32\secur32.dll
2011-02-27 18:29:35 ----A---- C:\windows\system32\RMActivate_ssp_isv.exe
2011-02-27 18:29:35 ----A---- C:\windows\system32\ReAgentc.exe
2011-02-27 18:29:35 ----A---- C:\windows\system32\FXSTIFF.dll
2011-02-27 18:29:35 ----A---- C:\windows\system32\eappgnui.dll
2011-02-27 18:29:35 ----A---- C:\windows\system32\drivers\usbccgp.sys
2011-02-27 18:29:34 ----A---- C:\windows\system32\wiarpc.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\tlscsp.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\sppc.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\RMActivate_ssp.exe
2011-02-27 18:29:34 ----A---- C:\windows\system32\netutils.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\netapi32.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\muifontsetup.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\mobsync.exe
2011-02-27 18:29:34 ----A---- C:\windows\system32\mciqtz32.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\iccvid.dll
2011-02-27 18:29:34 ----A---- C:\windows\system32\findstr.exe
2011-02-27 18:29:34 ----A---- C:\windows\system32\dnscacheugc.exe
2011-02-27 18:29:34 ----A---- C:\windows\system32\cabinet.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\wdiasqmmodule.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\unlodctr.exe
2011-02-27 18:29:33 ----A---- C:\windows\system32\spopk.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\shimgvw.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\repair-bde.exe
2011-02-27 18:29:33 ----A---- C:\windows\system32\prevhost.exe
2011-02-27 18:29:33 ----A---- C:\windows\system32\manage-bde.exe
2011-02-27 18:29:33 ----A---- C:\windows\system32\luainstall.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\HotStartUserAgent.dll
2011-02-27 18:29:33 ----A---- C:\windows\system32\drivers\usbrpm.sys
2011-02-27 18:29:33 ----A---- C:\windows\system32\drivers\tdi.sys
2011-02-27 18:29:33 ----A---- C:\windows\system32\drivers\CompositeBus.sys
2011-02-27 18:29:33 ----A---- C:\windows\system32\dosx.exe
2011-02-27 18:29:32 ----A---- C:\windows\system32\WUDFCoinstaller.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\UIRibbonRes.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\rdprefdrvapi.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\profprov.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\odbcconf.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\netcfg.exe
2011-02-27 18:29:32 ----A---- C:\windows\system32\msdmo.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\inetmib1.dll
2011-02-27 18:29:32 ----A---- C:\windows\system32\drivers\cdrom.sys
2011-02-27 18:29:32 ----A---- C:\windows\system32\browcli.dll
2011-02-27 18:29:31 ----A---- C:\windows\system32\wups.dll
2011-02-27 18:29:31 ----A---- C:\windows\system32\perfts.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\wshbth.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\TRAPI.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\schedcli.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\RDPENCDD.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\msfeedssync.exe
2011-02-27 18:29:30 ----A---- C:\windows\system32\icaapi.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\FXSMON.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\elsTrans.dll
2011-02-27 18:29:30 ----A---- C:\windows\system32\drivers\tunnel.sys
2011-02-27 18:29:30 ----A---- C:\windows\system32\drivers\dfsc.sys
2011-02-27 18:29:30 ----A---- C:\windows\system32\bitsperf.dll
2011-02-27 18:29:29 ----A---- C:\windows\system32\napdsnap.dll
2011-02-27 18:29:29 ----A---- C:\windows\system32\LogonUI.exe
2011-02-27 18:29:29 ----A---- C:\windows\system32\dsauth.dll
2011-02-27 18:29:29 ----A---- C:\windows\system32\cscdll.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\wups2.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\wsdchngr.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\sscore.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\shgina.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\riched32.dll
2011-02-27 18:29:28 ----A---- C:\windows\system32\drivers\ndiswan.sys
2011-02-27 18:29:28 ----A---- C:\windows\system32\drivers\acpipmi.sys
2011-02-27 18:29:27 ----A---- C:\windows\system32\rdpcfgex.dll
2011-02-27 18:29:27 ----A---- C:\windows\system32\drivers\hidusb.sys
2011-02-27 18:29:27 ----A---- C:\windows\system32\drivers\appid.sys
2011-02-27 18:29:26 ----A---- C:\windows\system32\wshirda.dll
2011-02-27 18:29:26 ----A---- C:\windows\system32\drivers\WUDFRd.sys
2011-02-27 18:29:26 ----A---- C:\windows\system32\drivers\IPMIDrv.sys
2011-02-27 18:29:25 ----A---- C:\windows\system32\drivers\USBCAMD2.sys
2011-02-27 18:29:25 ----A---- C:\windows\system32\drivers\USBCAMD.sys
2011-02-27 18:29:25 ----A---- C:\windows\system32\drivers\tdtcp.sys
2011-02-27 18:29:25 ----A---- C:\windows\system32\drivers\kbdhid.sys
2011-02-27 18:29:25 ----A---- C:\windows\system32\browseui.dll
2011-02-27 18:29:24 ----A---- C:\windows\system32\spwmp.dll
2011-02-27 18:29:24 ----A---- C:\windows\system32\RDPREFDD.dll
2011-02-27 18:29:24 ----A---- C:\windows\system32\drivers\wanarp.sys
2011-02-27 18:29:24 ----A---- C:\windows\system32\drivers\umbus.sys
2011-02-27 18:29:24 ----A---- C:\windows\system32\drivers\tdpipe.sys
2011-02-27 18:29:24 ----A---- C:\windows\system32\drivers\HdAudio.sys
2011-02-27 18:29:24 ----A---- C:\windows\system32\drivers\hdaudbus.sys
2011-02-27 18:29:24 ----A---- C:\windows\system32\C_ISCII.DLL
2011-02-27 18:29:23 ----A---- C:\windows\system32\shunimpl.dll
2011-02-27 18:29:23 ----A---- C:\windows\system32\dxmasf.dll
2011-02-27 18:29:23 ----A---- C:\windows\system32\drivers\WUDFPf.sys
2011-02-27 18:29:23 ----A---- C:\windows\system32\drivers\sffp_sd.sys
2011-02-27 18:29:23 ----A---- C:\windows\system32\drivers\scfilter.sys
2011-02-27 18:29:23 ----A---- C:\windows\system32\drivers\RDPCDD.sys
2011-02-27 18:29:22 ----A---- C:\windows\system32\wmploc.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDUS.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDUGHR1.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDTURME.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDTAJIK.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDMON.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDMAORI.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDLT1.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDINTEL.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDINORI.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDINKAN.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDGEO.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDBULG.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDBLR.DLL
2011-02-27 18:29:21 ----A---- C:\windows\system32\KBDBASH.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\tzres.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\spwizres.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\pifmgr.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\nlsbres.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDTUQ.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDTUF.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDSG.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDSF.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDPO.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDNEPR.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\kbdlk41a.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDINTAM.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDINMAR.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDINHIN.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDINBEN.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDGR1.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDGKL.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\KBDCZ1.DLL
2011-02-27 18:29:20 ----A---- C:\windows\system32\dpnaddr.dll
2011-02-27 18:29:20 ----A---- C:\windows\system32\BlbEvents.dll
2011-02-27 18:28:57 ----A---- C:\windows\system32\wmicmiplugin.dll
2011-02-27 18:28:57 ----A---- C:\windows\system32\wbemcomn.dll
2011-02-27 18:28:53 ----A---- C:\windows\system32\SmiEngine.dll
2011-02-27 18:28:52 ----A---- C:\windows\system32\wdscore.dll
2011-02-27 18:28:52 ----A---- C:\windows\system32\PkgMgr.exe
2011-02-27 18:28:40 ----A---- C:\windows\system32\drvstore.dll
2011-02-27 18:28:40 ----A---- C:\windows\system32\dpx.dll
2011-02-23 23:53:28 ----A---- C:\windows\system32\d3d10_1core.dll
2011-02-23 23:53:28 ----A---- C:\windows\system32\d3d10_1.dll
2011-02-23 23:41:46 ----A---- C:\windows\system32\drivers\aswSnx.sys
2011-02-22 20:17:22 ----A---- C:\windows\system32\XpsPrint.dll
2011-02-22 20:17:22 ----A---- C:\windows\system32\XpsGdiConverter.dll
2011-02-17 11:21:24 ----D---- C:\Program Files\Common Files\Java
2011-02-17 11:21:02 ----A---- C:\windows\system32\javaws.exe
2011-02-17 11:21:02 ----A---- C:\windows\system32\javaw.exe
2011-02-17 11:21:02 ----A---- C:\windows\system32\java.exe

[deathmiss]

2.část logu


======List of files/folders modified in the last 1 months======

2011-03-16 19:12:33 ----D---- C:\Program Files\trend micro
2011-03-16 19:12:32 ----D---- C:\windows\Temp
2011-03-16 19:09:34 ----D---- C:\windows\Prefetch
2011-03-16 19:06:07 ----D---- C:\Program Files\QIP Infium
2011-03-16 14:55:59 ----D---- C:\windows\system32\config
2011-03-16 14:51:44 ----D---- C:\windows\System32
2011-03-16 14:51:44 ----D---- C:\windows\inf
2011-03-16 14:51:44 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-03-16 10:10:30 ----A---- C:\AtmApInit.txt
2011-03-15 18:12:06 ----SHD---- C:\System Volume Information
2011-03-13 22:52:18 ----D---- C:\Users\cc\AppData\Roaming\Winamp
2011-03-12 13:25:20 ----D---- C:\windows\system32\catroot2
2011-03-12 11:10:29 ----D---- C:\ProgramData\Spyware Terminator
2011-03-12 11:10:14 ----D---- C:\Users\cc\AppData\Roaming\Spyware Terminator
2011-03-12 10:07:45 ----D---- C:\Windows
2011-03-12 09:54:07 ----D---- C:\windows\debug
2011-03-09 18:50:52 ----D---- C:\windows\winsxs
2011-03-09 00:06:51 ----A---- C:\windows\system32\MRT.exe
2011-03-09 00:06:44 ----SHD---- C:\windows\Installer
2011-03-09 00:06:42 ----D---- C:\ProgramData\Microsoft Help
2011-03-09 00:04:12 ----D---- C:\windows\system32\catroot
2011-03-05 11:08:15 ----D---- C:\windows\Panther
2011-03-05 11:08:15 ----D---- C:\windows\Logs
2011-03-05 10:55:32 ----RD---- C:\Program Files
2011-03-04 22:36:16 ----RSD---- C:\windows\assembly
2011-03-04 22:34:38 ----SD---- C:\ProgramData\Microsoft
2011-03-04 22:33:11 ----D---- C:\Program Files\Common Files\microsoft shared
2011-03-04 22:27:26 ----D---- C:\Program Files\Common Files
2011-03-04 22:08:23 ----D---- C:\Users\cc\AppData\Roaming\Skype
2011-02-27 20:15:28 ----D---- C:\windows\rescache
2011-02-27 19:58:58 ----D---- C:\windows\Microsoft.NET
2011-02-27 18:54:29 ----D---- C:\windows\system32\DriverStore
2011-02-27 18:50:16 ----D---- C:\Program Files\Windows Sidebar
2011-02-27 18:50:16 ----D---- C:\Program Files\Windows Portable Devices
2011-02-27 18:50:16 ----D---- C:\Program Files\Windows Media Player
2011-02-27 18:50:16 ----D---- C:\Program Files\Windows Mail
2011-02-27 18:50:16 ----D---- C:\Program Files\Windows Journal
2011-02-27 18:50:16 ----D---- C:\Program Files\Internet Explorer
2011-02-27 18:50:16 ----D---- C:\Program Files\DVD Maker
2011-02-27 18:50:15 ----D---- C:\windows\servicing
2011-02-27 18:50:15 ----D---- C:\windows\ehome
2011-02-27 18:50:15 ----D---- C:\Program Files\Windows Photo Viewer
2011-02-27 18:50:15 ----D---- C:\Program Files\Windows Defender
2011-02-27 18:50:12 ----D---- C:\windows\system32\oobe
2011-02-27 18:50:12 ----D---- C:\windows\system32\en-US
2011-02-27 18:50:12 ----D---- C:\windows\system32\da-DK
2011-02-27 18:50:12 ----D---- C:\windows\PolicyDefinitions
2011-02-27 18:50:11 ----D---- C:\windows\system32\sysprep
2011-02-27 18:50:11 ----D---- C:\windows\system32\Setup
2011-02-27 18:50:11 ----D---- C:\windows\system32\migration
2011-02-27 18:50:11 ----D---- C:\windows\system32\cs
2011-02-27 18:50:11 ----D---- C:\windows\system32\AdvancedInstallers
2011-02-27 18:50:08 ----D---- C:\windows\system32\cs-CZ
2011-02-27 18:50:07 ----D---- C:\windows\system32\wbem
2011-02-27 18:50:07 ----D---- C:\windows\system32\sppui
2011-02-27 18:50:07 ----D---- C:\windows\system32\migwiz
2011-02-27 18:50:07 ----D---- C:\windows\system32\manifeststore
2011-02-27 18:50:07 ----D---- C:\windows\system32\es-ES
2011-02-27 18:50:07 ----D---- C:\windows\system32\drivers\cs-CZ
2011-02-27 18:50:07 ----D---- C:\windows\system32\drivers
2011-02-27 18:50:07 ----D---- C:\windows\system32\Dism
2011-02-27 18:49:53 ----RSD---- C:\windows\Fonts
2011-02-27 18:49:53 ----D---- C:\windows\AppPatch
2011-02-27 18:49:45 ----D---- C:\windows\system32\Boot
2011-02-27 18:39:43 ----A---- C:\windows\system32\msclmd.dll
2011-02-27 18:14:45 ----D---- C:\Program Files\CCleaner
2011-02-23 16:04:17 ----A---- C:\windows\system32\aswBoot.exe
2011-02-17 11:20:52 ----A---- C:\windows\system32\deployJava1.dll
2011-02-17 10:48:52 ----D---- C:\Users\cc\AppData\Roaming\Dropbox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-06-04 330264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2010-02-06 691696]
R1 aswRdr;aswRdr; C:\windows\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; C:\windows\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; C:\windows\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; C:\windows\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 funfrm;funfrm; C:\windows\system32\drivers\funfrm.sys [2009-10-08 54800]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\windows\system32\drivers\sp_rsdrv2.sys [2010-02-04 142592]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\windows\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2010-02-06 25888]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2010-01-20 23136]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\windows\system32\DRIVERS\Apfiltr.sys [2008-03-14 169008]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-05-31 260648]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2010-11-20 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT32.sys [2009-06-15 475648]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\windows\system32\DRIVERS\NETw5s32.sys [2009-09-15 6114816]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda32v.sys [2009-06-26 66080]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-03-13 1759616]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2010-02-07 278984]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2010-11-20 393216]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-05-14 4231680]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-07-30 171520]
S3 RtsUIR;Realtek IR Driver; C:\windows\system32\DRIVERS\Rts516xIR.sys []
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\windows\system32\DRIVERS\RtsUCcid.sys []
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;Ovladač procesoru VIA C7; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-02-23 42184]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2009-07-01 582944]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2009-07-27 211488]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-11-14 496128]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-01-14 136176]
S2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
S2 SwOffScheduler;Airytec Switch Off - Task Scheduler; C:\Program Files\Airytec\Switch Off\swoff.exe [2010-01-11 114176]
S2 SwOffWeb;Airytec Switch Off - Web Interface; C:\Program Files\Airytec\Switch Off\swoff.exe [2010-01-11 114176]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-13 136120]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-07-28 414984]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-07-28 472328]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-05-27 1343400]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]

-----------------EOF-----------------

[Roli]

Zdravím, pro začátek smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

čištění registru je třeba několikrát zopakovat !

Nástroje - tady lze odinstalovat programy, upravit co se spustí po Startu systému a obnovit systém


Pak použij Mbam z mého podpisu a dej mi sem z něj log, předem nic nemazat !!!

[deathmiss]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6079

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

16.3.2011 22:20:59
mbam-log-2011-03-16 (22-20-59).txt

Typ kontroly: Rychlý test
Testované objekty: 145943
Uplynulý čas: 14 minut, 8 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Roli]

Stáhni a ulož na plochu ComboFix,

spusť aplikaci jako Administrátor a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.


V případě nejasností je ZDE obrázkový návod.

[deathmiss]

ComboFix 11-03-16.06 - cc 17.03.2011 23:55:06.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3037.2092 [GMT 1:00]
Spuštěný z: c:\users\cc\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\hpe2321.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-02-17 do 2011-03-17 )))))))))))))))))))))))))))))))
.
.
2011-03-17 23:00 . 2011-03-17 23:00 -------- d-----w- c:\users\cc\AppData\Local\temp
2011-03-17 23:00 . 2011-03-17 23:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-03-16 21:42 . 2011-03-16 21:43 -------- d-----w- c:\users\cc\AppData\Local\{A19D6053-A0D9-4DC6-ABB3-227AD4D02AE9}
2011-03-16 21:42 . 2011-03-16 21:42 -------- d-----w- c:\users\cc\AppData\Local\{065C00F6-32DA-4650-B313-2FCF198B22A0}
2011-03-16 21:06 . 2011-03-16 21:06 -------- d-----w- c:\users\cc\AppData\Roaming\Malwarebytes
2011-03-16 21:04 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-03-16 21:04 . 2011-03-16 21:04 -------- d-----w- c:\programdata\Malwarebytes
2011-03-16 21:04 . 2011-03-16 21:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-03-16 21:04 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-03-16 19:51 . 2011-03-16 19:51 -------- d-----w- c:\program files\Common Files\Skype
2011-03-16 19:51 . 2011-03-16 19:51 -------- d-----r- c:\program files\Skype
2011-03-16 18:09 . 2011-03-16 18:13 -------- d-----w- C:\rsit
2011-03-16 16:06 . 2011-03-16 16:06 -------- d-----w- c:\users\cc\AppData\Local\Microsoft Games
2011-03-15 17:12 . 2011-02-11 06:54 5943120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D7E13C50-0FA9-4451-80FE-AC75FC453EA1}\mpengine.dll
2011-03-12 08:52 . 2011-03-12 08:52 376480 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-03-08 23:04 . 2011-02-19 06:30 805376 ----a-w- c:\windows\system32\FntCache.dll
2011-03-08 23:04 . 2011-02-19 06:30 1076736 ----a-w- c:\windows\system32\DWrite.dll
2011-03-08 23:04 . 2011-02-19 06:30 739840 ----a-w- c:\windows\system32\d2d1.dll
2011-03-08 23:04 . 2010-12-23 05:54 850944 ----a-w- c:\windows\system32\sbe.dll
2011-03-08 23:04 . 2010-12-23 05:54 642048 ----a-w- c:\windows\system32\CPFilters.dll
2011-03-08 23:04 . 2010-12-23 05:54 534528 ----a-w- c:\windows\system32\EncDec.dll
2011-03-08 23:04 . 2010-12-23 05:50 199680 ----a-w- c:\windows\system32\mpg2splt.ax
2011-03-04 21:39 . 2011-03-04 21:39 -------- d-----w- c:\users\cc\AppData\Local\{771E7F6C-C25D-4358-88D7-F384807364C1}
2011-03-04 21:36 . 2011-03-04 21:36 -------- d-----w- c:\windows\cs
2011-03-04 21:35 . 2011-03-04 21:35 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-03-04 21:34 . 2011-03-04 21:35 -------- d-----w- c:\program files\Windows Live
2011-03-04 21:33 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-03-04 21:33 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2011-03-04 21:33 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2011-03-04 21:27 . 2011-03-16 21:42 -------- d-----w- c:\users\cc\AppData\Local\Windows Live
2011-03-04 21:27 . 2011-03-04 21:27 -------- d-----w- c:\program files\Common Files\Windows Live
2011-02-27 17:35 . 2011-02-27 17:35 -------- d-----w- c:\windows\system32\SPReview
2011-02-27 17:33 . 2011-02-27 17:33 -------- d-----w- c:\windows\system32\EventProviders
2011-02-27 17:30 . 2010-11-20 12:30 233344 ----a-w- c:\windows\system32\drivers\msiscsi.sys
2011-02-27 17:29 . 2010-11-20 12:21 755200 ----a-w- c:\windows\system32\sud.dll
2011-02-27 17:28 . 2010-11-20 12:21 351232 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-02-27 17:28 . 2010-11-20 12:21 780288 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-02-27 17:28 . 2010-11-20 12:21 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2011-02-27 17:28 . 2010-11-20 12:19 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2011-02-27 17:28 . 2010-11-20 12:21 697344 ----a-w- c:\windows\system32\SmiEngine.dll
2011-02-27 17:28 . 2010-11-20 12:21 189952 ----a-w- c:\windows\system32\wdscore.dll
2011-02-27 17:28 . 2010-11-20 12:17 209920 ----a-w- c:\windows\system32\PkgMgr.exe
2011-02-27 17:28 . 2010-11-20 12:18 323072 ----a-w- c:\windows\system32\drvstore.dll
2011-02-27 17:28 . 2010-11-20 12:18 257024 ----a-w- c:\windows\system32\dpx.dll
2011-02-23 22:53 . 2011-01-17 05:47 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2011-02-23 22:53 . 2010-11-20 12:18 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2011-02-23 22:41 . 2011-02-23 14:56 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-02-22 23:51 . 2011-02-22 23:51 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2011-02-22 19:17 . 2011-01-07 07:46 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2011-02-22 19:17 . 2011-01-07 07:46 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2011-02-17 10:21 . 2011-02-17 10:21 -------- d-----w- c:\program files\Common Files\Java
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-09 17:51 . 2010-06-24 10:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-27 17:39 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2011-02-23 15:04 . 2010-06-29 16:36 40648 ----a-w- c:\windows\avastSS.scr
2011-02-23 15:04 . 2010-02-01 20:41 190016 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-23 14:56 . 2010-02-01 20:42 301528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-23 14:55 . 2010-02-01 20:42 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-23 14:55 . 2010-02-01 20:42 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-23 14:55 . 2010-02-01 20:42 53592 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-02-23 14:54 . 2010-02-01 20:42 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-17 10:20 . 2010-04-16 10:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-03 05:54 . 2011-02-09 19:35 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2011-02-02 16:11 . 2010-02-01 19:48 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-07 07:45 . 2011-02-09 19:35 34304 ----a-w- c:\windows\system32\atmlib.dll
2011-01-07 06:01 . 2011-02-09 19:35 1638912 ----a-w- c:\windows\system32\mshtml.tlb
2011-01-07 05:43 . 2011-02-09 19:35 294400 ----a-w- c:\windows\system32\atmfd.dll
2011-01-05 05:55 . 2011-02-09 19:35 428032 ----a-w- c:\windows\system32\vbscript.dll
2011-01-05 03:51 . 2011-02-09 19:36 2330624 ----a-w- c:\windows\system32\win32k.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 15:04 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\cc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\cc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\cc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2010-10-06 23:36 94208 ----a-w- c:\users\cc\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SharingPrivate]
@="{08244EE6-92F0-47f2-9FC9-929BAA2E7235}"
[HKEY_CLASSES_ROOT\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}]
2010-11-20 12:20 442880 ----a-w- c:\windows\System32\ntshrui.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2010-12-11 3318784]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2008-03-26 163840]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-02-23 3451496]
"EnergyUtility"="c:\program files\Lenovo\Energy Management\utility.exe" [2009-07-31 4114336]
"Energy Management"="c:\program files\Lenovo\Energy Management\Energy Management.exe" [2009-06-25 5064520]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2009-7-1 795936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer5"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]
@="IEEE 1394 Bus host controllers"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]
@="SBP2 IEEE 1394 Devices"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]
@="SecurityDevices"
.
[HKLM\~\startupfolder\C:^Users^cc^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
backupExtension=.Startup
backup=c:\windows\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2009-07-27 18:39 13797920 ----a-w- c:\windows\System32\nvcpl.dll
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-14 136176]
R2 MMCSS;Služba Plánovač multimédií;c:\windows\system32\svchost.exe [2009-07-14 20992]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 sppsvc;Ochrana softwaru;c:\windows\system32\sppsvc.exe [2010-11-20 3179520]
R2 SwOffScheduler;Airytec Switch Off - Task Scheduler;c:\program files\Airytec\Switch Off\swoff.exe [2010-01-11 114176]
R2 SwOffWeb;Airytec Switch Off - Web Interface;c:\program files\Airytec\Switch Off\swoff.exe [2010-01-11 114176]
R3 1394ohci;Hostitelský řadič pro rozhraní OHCI standardu 1394;c:\windows\system32\drivers\1394ohci.sys [2010-11-20 164864]
R3 AcpiPmi;Ovladač měřiče napájení standardu ACPI;c:\windows\system32\drivers\acpipmi.sys [2010-11-20 10240]
R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [2009-07-14 422976]
R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [2009-07-14 297552]
R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [2010-11-20 80256]
R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [2009-07-14 159312]
R3 AppID;Ovladač AppID;c:\windows\system32\drivers\appid.sys [2010-11-20 50176]
R3 AppIDSvc;Identita aplikace;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 Appinfo;Informace o aplikaci;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [2009-07-14 86608]
R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbdx.sys [2009-07-13 430080]
R3 BDESVC;Služba BitLocker Drive Encryption;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 BrFiltLo;Ovladač dolního filtru velkokapacitního paměťového zařízení USB Brother;c:\windows\system32\DRIVERS\BrFiltLo.sys [2009-07-13 13568]
R3 BrFiltUp;Ovladač horního filtru velkokapacitního paměťového zařízení USB Brother;c:\windows\system32\DRIVERS\BrFiltUp.sys [2009-07-13 5248]
R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
R3 Brserid;Ovladač rozhraní sériového portu Brother MFC (WDM);c:\windows\System32\Drivers\Brserid.sys [2009-07-14 272128]
R3 BrSerWdm;Sériový ovladač Brother WDM;c:\windows\System32\Drivers\BrSerWdm.sys [2009-07-13 62336]
R3 BrUsbMdm;Brother MFC USB - modem pouze pro fax;c:\windows\System32\Drivers\BrUsbMdm.sys [2009-07-13 12160]
R3 circlass;Uživatelská infračervená zařízení;c:\windows\system32\DRIVERS\circlass.sys [2009-07-13 37888]
R3 defragsvc;Defragmentace disku;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbdx.sys [2009-07-13 3100160]
R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [2009-07-14 453712]
R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [2009-07-13 28160]
R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [2009-07-14 46160]
R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [2009-07-13 26624]
R3 HomeGroupListener;Naslouchací proces domácí skupiny;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 HpSAMD;HpSAMD;c:\windows\system32\drivers\HpSAMD.sys [2009-07-14 67152]
R3 iaStorV;Řadič Intel diskového pole RAID – Windows 7;c:\windows\system32\drivers\iaStorV.sys [2010-11-20 332160]
R3 IKEEXT;Služba IKE and AuthIP IPsec Keying Modules;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 IPBusEnum;Rozpoznávací modul sběrnice PnP-X IP;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [2010-11-20 65536]
R3 iScsiPrt;Ovladač iScsiPort;c:\windows\system32\drivers\msiscsi.sys [2010-11-20 233344]
R3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-13 229888]
R3 KtmRm;Služba KTMRM pro koordinátor DTC;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe [2009-07-28 414984]
R3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [2009-07-28 472328]
R3 lltdsvc;Mapovač zjišťování topologie linkové vrstvy;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 95824]
R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 89168]
R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 54864]
R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 96848]
R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [2009-07-14 30800]
R3 mpio;Ovladač sběrnice Microsoft Multi-Path;c:\windows\system32\drivers\mpio.sys [2010-11-20 130432]
R3 msahci;msahci;c:\windows\system32\drivers\msahci.sys [2010-11-20 28032]
R3 msdsm;Specifický modul zařízení Microsoft Multi-Path;c:\windows\system32\drivers\msdsm.sys [2010-11-20 116096]
R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [2009-07-13 4096]
R3 MSiSCSI;Služba iniciátoru iSCSI společnosti Microsoft;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 MsRPC;MsRPC; [x]
R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [2009-07-13 12288]
R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [2009-07-13 27136]
R3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-05-14 4231680]
R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [2009-07-14 44624]
R3 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [2010-11-20 143744]
R3 pla;Výstrahy a protokolování výkonu;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 PNRPAutoReg;Služba publikování názvu počítače pomocí protokolu PNRP;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 PS_MDP;ReadyComm Presentation Space Helper Service;c:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [2009-07-14 1383488]
R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [2009-07-14 106064]
R3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [2009-07-14 18944]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-07-30 171520]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\DRIVERS\s1018bus.sys [2009-03-25 86824]
R3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s1018mdfl.sys [2009-03-25 15016]
R3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s1018mdm.sys [2009-03-25 114728]
R3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s1018mgmt.sys [2009-03-25 106208]
R3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\DRIVERS\s1018nd5.sys [2009-03-25 26024]
R3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s1018obex.sys [2009-03-25 104744]
R3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\DRIVERS\s1018unic.sys [2009-03-25 109864]
R3 scfilter;Ovladač filtru čipových karet třídy PnP;c:\windows\system32\DRIVERS\scfilter.sys [2010-11-20 26624]
R3 SDRSVC;Windows Zálohování;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 SensrSvc;Adaptivní jas;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 SessionEnv;Konfigurace vzdálené plochy;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 sffp_mmc;Ovladač protokolu úložiště SFF pro konzolu MMC;c:\windows\system32\drivers\sffp_mmc.sys [2009-07-13 12288]
R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [2009-07-14 77888]
R3 Smb;Protokol TCP/IP a TCP/IPv6 orientovaný na zprávy (relace SMB);c:\windows\system32\DRIVERS\smb.sys [2009-07-13 71168]
R3 sppuinotify;Služba Oznámení platformy SPP;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [2009-07-14 21072]
R3 TabletInputService;Služba Vstupní panel počítače Tablet PC;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 TBS;Služba TPM Base Services;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 THREADORDER;Server pro řazení podprocesů;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 TrustedInstaller;Instalační služba modulů systému Windows;c:\windows\servicing\TrustedInstaller.exe [2010-11-20 204800]
R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [2010-11-20 31232]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 UI0Detect;Zjišťování interaktivních služeb;c:\windows\system32\UI0Detect.exe [2009-07-14 35840]
R3 uliagpkx;Filtr sběrnice Uli AGP;c:\windows\system32\drivers\uliagpkx.sys [2009-07-14 57424]
R3 usbcir;Infračervený přijímač eHome (USBCIR);c:\windows\system32\drivers\usbcir.sys [2009-07-13 86016]
R3 VaultSvc;Správce pověření;c:\windows\system32\lsass.exe [2009-07-14 22528]
R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [2010-11-20 160128]
R3 ViaC7;Ovladač procesoru VIA C7;c:\windows\system32\DRIVERS\viac7.sys [2009-07-13 52736]
R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [2009-07-14 141904]
R3 WacomPen;Ovladač Wacom Serial Pen HID;c:\windows\system32\DRIVERS\wacompen.sys [2009-07-13 21632]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-05-27 1343400]
R3 wbengine;Služba jádra pro zálohování dat na úrovni bloků;c:\windows\system32\wbengine.exe [2010-11-20 1203200]
R3 WbioSrvc;Biometrická služba systému Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 wcncsvc;Technologie Windows Connect Now – Registrátor konfigurací;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WcsPlugInService;Systém barev systému Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [2009-07-14 19024]
R3 WdiSystemHost;Hostitel diagnostického systému;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 Wecsvc;Sběr událostí systému Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 wercplsupport;Podpora ovládacího panelu Oznámení a řešení problémů;c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 19008]
R3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe [2009-07-14 20992]
R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 WPDBusEnum;Služba Výčet přenosných zařízení;c:\windows\system32\svchost.exe [2009-07-14 20992]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]
R3 WwanSvc;Automatická konfigurace sítě WWAN;c:\windows\system32\svchost.exe [2009-07-14 20992]
R4 CertPropSvc;Šíření certifikátů;c:\windows\system32\svchost.exe [2009-07-14 20992]
R4 iphlpsvc;Pomocná služba protokolu IP;c:\windows\System32\svchost.exe [2009-07-14 20992]
R4 Mcx2Svc;Služba zařízení Media Center Extender;c:\windows\system32\svchost.exe [2009-07-14 20992]
R4 SCPolicySvc;Zásady odebrání čipové karty;c:\windows\system32\svchost.exe [2009-07-14 20992]
S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [2010-11-20 22400]
S0 CLFS;Systém souborů CLFS;c:\windows\System32\CLFS.sys [2009-07-14 249408]
S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [2009-07-14 369568]
S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [2009-07-14 58448]
S0 fvevol;Ovladač filtru nástroje Bitlocker Drive Encryption;c:\windows\System32\DRIVERS\fvevol.sys [2010-11-20 194800]
S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [2010-11-20 14208]
S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [2009-07-14 133200]
S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [2009-07-14 13888]
S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [2009-07-14 43088]
S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
S0 spldr;Security Processor Loader Driver; [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-06 691696]
S0 vdrvroot;Ovladač rozpoznávacího modulu virtuální jednotky společnosti Microsoft;c:\windows\system32\drivers\vdrvroot.sys [2009-07-14 32832]
S0 volmgr;Ovladač správce svazků;c:\windows\system32\drivers\volmgr.sys [2010-11-20 53120]
S0 volmgrx;Správce dynamických svazků;c:\windows\System32\drivers\volmgrx.sys [2009-07-14 297040]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [2009-07-13 35328]
S1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [2010-11-20 78336]
S1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [2009-07-13 32256]
S1 funfrm;funfrm; [x]
S1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [2009-07-13 16896]
S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [2009-07-14 6656]
S1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [2009-07-14 7168]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2010-02-04 142592]
S1 tdx;Ovladač pro podporu zastaralého rozhraní TDI NetIO;c:\windows\system32\DRIVERS\tdx.sys [2010-11-20 74752]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S1 Wanarpv6;Ovladač pro vzdálený přístup IPv6 ARP;c:\windows\system32\DRIVERS\wanarp.sys [2010-11-20 63488]
S1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [2009-07-13 9728]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-02-23 53592]
S2 AudioEndpointBuilder;Koncové vytváření služby Windows Audio;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 BFE;Služba BFE (Base Filtering Engine);c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 DPS;Služba DPS (Diagnostic Policy Service);c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 FDResPub;Publikování prostředků rozpoznávání funkcí;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 FontCache;Mezipaměť písem Windows;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 gpsvc;Klient zásad skupiny;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 IGRS;IGRS;c:\program files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [2009-07-13 48128]
S2 luafv;Virtualizace souborů nástroje Řízení uživatelských účtů;c:\windows\system32\drivers\luafv.sys [2009-07-13 86528]
S2 MpsSvc;Brána Windows Firewall;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 NlaSvc;Sledování umístění v síti (NLA);c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 nsi;Služba rozhraní síťového úložiště;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [2009-07-14 586752]
S2 Power;Napájení;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 ProfSvc;Služba Profil uživatele;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter;c:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
S2 RpcEptMapper;Mapovač koncových bodů protokolu RPC;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [2010-11-20 35328]
S2 UxSms;Správce relací správce oken plochy;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 WerSvc;Služba Zasílání zpráv o chybách systému Windows;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 20992]
S2 Wlansvc;Automatická konfigurace sítě WLAN;c:\windows\system32\svchost.exe [2009-07-14 20992]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [2010-01-20 23136]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60x.sys [2009-05-31 260648]
S3 bowser;Ovladač podpory prohlížeče;c:\windows\system32\DRIVERS\bowser.sys [2009-07-13 69632]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 CompositeBus;Ovladač rozpoznávacího modulu složené sběrnice;c:\windows\system32\drivers\CompositeBus.sys [2010-11-20 31232]
S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [2010-11-20 728448]
S3 fdPHost;Hostitel poskytovatele rozpoznávání funkce;c:\windows\system32\svchost.exe [2009-07-14 20992]
S3 HomeGroupProvider;Zprostředkovatel domácích skupin;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 KeyIso;Izolace klíče CNG;c:\windows\system32\lsass.exe [2009-07-14 22528]
S3 monitor;Služba ovladače funkce třídy monitorů Microsoft;c:\windows\system32\DRIVERS\monitor.sys [2009-07-13 23552]
S3 mpsdrv;Ovladač ověření brány Windows Firewall;c:\windows\system32\drivers\mpsdrv.sys [2009-07-13 60416]
S3 mrxsmb10;Mini-přesměrovač SMB 1.x;c:\windows\system32\DRIVERS\mrxsmb10.sys [2010-11-20 223232]
S3 mrxsmb20;Mini-přesměrovač SMB 2.0;c:\windows\system32\DRIVERS\mrxsmb20.sys [2010-11-20 96768]
S3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [2009-07-13 267264]
S3 netprofm;Služba seznamu sítí;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2009-09-15 6114816]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2009-06-26 66080]
S3 PcaSvc;Program Compatibility Assistant Service;c:\windows\system32\svchost.exe [2009-07-14 20992]
S3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [2009-07-13 49152]
S3 srv2;Ovladač pro server SMB 2.xxx;c:\windows\system32\DRIVERS\srv2.sys [2010-11-20 309248]
S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [2010-11-20 114176]
S3 tunnel;Microsoft Tunnel Miniport Adapter Driver;c:\windows\system32\DRIVERS\tunnel.sys [2010-11-20 108544]
S3 umbus;Ovladač sběrnice UMBus Enumerator;c:\windows\system32\drivers\umbus.sys [2010-11-20 39936]
S3 vwifibus;Ovladač sběrnice Virtual WiFi;c:\windows\System32\drivers\vwifibus.sys [2009-07-13 19968]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
S3 WdiServiceHost;Hostitel diagnostické služby;c:\windows\System32\svchost.exe [2009-07-14 20992]
S3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
RPCSS REG_MULTI_SZ RpcEptMapper RpcSs
defragsvc REG_MULTI_SZ defragsvc
WerSvcGroup REG_MULTI_SZ wersvc
LocalServiceNoNetwork REG_MULTI_SZ DPS PLA BFE mpssvc WwanSvc
swprv REG_MULTI_SZ swprv
LocalServicePeerNet REG_MULTI_SZ PNRPSvc p2pimsvc p2psvc PnrpAutoReg
NetworkServiceAndNoImpersonation REG_MULTI_SZ KtmRm
regsvc REG_MULTI_SZ RemoteRegistry
LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS FontCache fdrespub AppIDSvc QWAVE wcncsvc SensrSvc Mcx2Svc
DcomLaunch REG_MULTI_SZ Power PlugPlay DcomLaunch
NetworkServiceNetworkRestricted REG_MULTI_SZ PolicyAgent
sdrsvc REG_MULTI_SZ sdrsvc
WbioSvcGroup REG_MULTI_SZ WbioSrvc
wcssvc REG_MULTI_SZ WcsPlugInService
AxInstSVGroup REG_MULTI_SZ AxInstSV
secsvcs REG_MULTI_SZ WinDefend
IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter PS_MDP
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
AeLookupSvc
CertPropSvc
SCPolicySvc
lanmanserver
gpsvc
IKEEXT
AudioSrv
FastUserSwitchingCompatibility
Nla
NWCWorkstation
SRService
Wmi
WmdmPmSp
TermService
wuauserv
BITS
ShellHWDetection
LogonHours
PCAudit
helpsvc
uploadmgr
iphlpsvc
seclogon
AppInfo
msiscsi
MMCSS
wercplsupport
EapHost
ProfSvc
schedule
hkmsvc
SessionEnv
winmgmt
browser
Themes
BDESVC
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalSystemNetworkRestricted
homegrouplistener
.
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
WdiServiceHost
sppuinotify
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetworkService
lanmanworkstation
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalServiceNetworkRestricted
BthHFSrv
homegroupprovider
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-03-17 c:\windows\Tasks\AWC Update.job
- c:\program files\IObit\Advanced SystemCare 3\IObitUpdate.exe [2010-08-28 09:08]
.
2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-14 13:27]
.
2011-03-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-14 13:27]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://lenovo.live.com/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
FF - ProfilePath - c:\users\cc\AppData\Roaming\Mozilla\Firefox\Profiles\2bwpnmuq.default\
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
SafeBoot-mcmscsvc
SafeBoot-MCODS
SafeBoot-sacsvr
SafeBoot-vmms
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-03-18 00:00
Windows 6.1.7601 Service Pack 1 NTFS
.
detected NTDLL code modification:
ZwEnumerateKey 0 != 116, ZwQueryKey 0 != 244, ZwOpenKey 0 != 182, ZwClose 0 != 50, ZwEnumerateValueKey 0 != 119, ZwQueryValueKey 0 != 266, ZwOpenFile 0 != 179, ZwQueryDirectoryFile 0 != 223, ZwQuerySystemInformation 0 != 261Initialization error
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory:
.
**************************************************************************
.
Celkový čas: 2011-03-18 00:02:57
ComboFix-quarantined-files.txt 2011-03-17 23:02
.
Před spuštěním: Volných bajtů: 79 067 418 624
Po spuštění: Volných bajtů: 78 966 652 928
.
- - End Of File - - 0B00FE79B0C760FE7C099A5875F19F35

[Roli]

Stáhni Gmer rozbal archiv a spusť

proběhne sken kdy po jeho ukončení na tebe vypadne výsledek

poté klikni na Save tím se log uloží, zkopíruj ho sem.

Pokud není něco jasné je ZDE návod.

[deathmiss]

první log:


GMER 1.0.15.15530 - http://www.gmer.net
Rootkit quick scan 2011-03-18 13:54:16
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.FB4O
Running: gmer.exe; Driver: C:\Users\cc\AppData\Local\Temp\uxldrpod.sys


---- System - GMER 1.0.15 ----

Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0x91EA98DE]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject

---- Devices - GMER 1.0.15 ----

Device \Driver\iaStor \Device\Ide\iaStor0 [8BA5D360] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\iaStor \Device\Ide\IAAStorageDevice-0 [8BA5D360] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\iaStor \Device\Ide\IAAStorageDevice-1 [8BA5D360] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \FileSystem\Ntfs \Ntfs 859661F8

AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)

---- EOF - GMER 1.0.15 ----



Bohužel druhý sken mi nikdy nedoběhl do konce, protože v průběhu mi najednou problikla modrá obrazovka s nějakou hláškou "A problem has...." a pak se pc restartoval. Zkoušela jsem to i podruhé a zase to samé:(

[Roli]

Zkus spustit Gmer v Nouzovém režimu.

Dále stáhni TDSSKiller a ulož ho na plochu.

Spusť aplikaci, dej volbu Spustit kontrolu a potvrď Start sken

Pokud aplikace najde infikovaný soubor, ukáže se Ti předvolená akce Cure,

v tom případě potvrď tlačítko Continue

Pokud bude chtít apliakce restartovat počítač, klikni na tlačítko Reboot Now

Pokud si restart nevyžádá, klikni na tlačítko Report.

Po té na Tebe vypadne log, zkopíruj ho sem.

Pokud se log nezobrazí, je uložený na C:\TDSSKiller


P.S. doporučuji aby sis zálohovala důležitá data.