Zmizeli ikony i lišta se Start :( Pomozte prosím :(

[Poruon13]

Ahoj všichni.Nevěděl jsem do jaké sekce tohle zařadit,tak jsem to dal sem.
Už jsem to tu párkrát zhlédl ale,mně stále nic nepomohlo.Zkrátka,po raním spuštěním PC trvalo déle spuštění plochy.Když se spustila,nenaběhly ikony ani lišta.Z příspěvků na tomto fóru jsem pochopil,že se nejspíš jedná o vir,tak jsem udělal mnoho tipů.Začal jsem Ctrl+Alt+Delete ..naběhl Správce úloh a v Procesy nebyl spuštěn explorer.exe. Tak jsem ho spustil,ale nic to neudělalo.Začal jsem tedy čistit PC CCleanerem,Avastem,Combofixem,ale nic to nenašlo.Podle rad jsem stáhl Malwarebytes' Anti-Malware Po rychlém testu mi to našlo 3x pravděbodobně trojské koně.Odstranil jsem jej,restartoval,ale pořád se nic nedělo,a opět jsem čekal dlouho na spuštění.Už si nevím rady Poradíte prosím ? Předem moc děkuji za odpověď

P.S.Odstraňování a kontroly jsem dělal v Nouzovém režimu

[Rudy]

Nejprve dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 .

[Poruon13]

Vkládám log z RSIT


Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondra at 2011-05-18 13:58:00
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (33%) free of 19 GB
Total RAM: 1023 MB (69% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:58:12, on 18.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17095)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Ondra\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Ondra.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60076
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = www.google.cz:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
R3 - URLSearchHook: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
O3 - Toolbar: BitTorrentBar Toolbar - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "D:\Software\Bezpečnost PC\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Software\Bezpečnost PC\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

--
End of file - 8542 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Norton Security Scan for Uživatel.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2008-06-19 1190912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}]
Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2007-07-31 1933256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{68F9551E-0411-48E4-9AAF-4BC42A6A46BE}]
EWPBrowseObject Class - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-04-18 34304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
BitTorrentBar Toolbar - C:\Program Files\BitTorrentBar\tbBitT.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll [2008-04-22 325048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-28 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2006-04-18 552960]
{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - Megaupload Toolbar - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL [2007-07-31 1933256]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2008-06-19 1190912]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll []
{88c7f2aa-f93f-432c-8f0e-b7d85967a527} - BitTorrentBar Toolbar - C:\Program Files\BitTorrentBar\tbBitT.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-11-17 421160]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-02-23 3451496]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-08-10 421888]
"Malwarebytes Anti-Malware (reboot)"=D:\Software\Bezpečnost PC\Malwarebytes' Anti-Malware\mbam.exe [2010-03-29 1086856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=D:\Software\Bezpečnost PC\Malwarebytes' Anti-Malware\mbamgui.exe [2010-03-29 437584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"BitTorrent"=C:\Program Files\BitTorrent\BitTorrent.exe [2011-04-07 400760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe /boot []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

C:\Documents and Settings\Ondra\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.3.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Disabled:Windows Media Player"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe"="C:\Documents and Settings\Ondra\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-05-18 13:58:01 ----D---- C:\Program Files\trend micro
2011-05-18 13:58:00 ----D---- C:\rsit
2011-05-17 18:13:54 ----D---- C:\Documents and Settings\Ondra\Data aplikací\Malwarebytes
2011-05-17 18:13:46 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-05-17 18:13:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-05-17 18:13:44 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-05-17 18:00:10 ----D---- C:\WINDOWS\temp
2011-05-17 18:00:08 ----A---- C:\ComboFix.txt
2011-05-17 17:47:44 ----A---- C:\WINDOWS\system32\CF20522.exe
2011-05-17 17:30:01 ----A---- C:\WINDOWS\system32\CF17009.exe
2011-05-17 15:42:23 ----A---- C:\WINDOWS\ntbtlog.txt
2011-05-17 15:34:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-05-16 19:42:11 ----D---- C:\WINDOWS\system32\AGEIA
2011-05-16 19:41:52 ----D---- C:\Program Files\Common Files\BioWare
2011-05-16 18:44:19 ----D---- C:\Config.Msi
2011-05-10 14:55:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-05-10 14:50:12 ----D---- C:\Program Files\GameSpy Arcade
2011-05-08 17:50:36 ----A---- C:\WINDOWS\system32\pbsvc.exe
2011-05-06 19:37:35 ----A---- C:\WINDOWS\IS_FLOCX.exe
2011-05-06 19:37:31 ----D---- C:\WINDOWS\2011 Gabriela Guncikova Uninstaller
2011-05-01 20:35:15 ----D---- C:\Program Files\Common Files\EasyInfo
2011-05-01 19:32:52 ----D---- C:\Program Files\GameSpy
2011-05-01 19:28:41 ----D---- C:\WINDOWS\system32\URTTEMP
2011-04-29 17:50:22 ----D---- C:\Program Files\Take2Interactive
2011-04-28 19:18:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Buena Vista Games
2011-04-27 15:42:58 ----D---- C:\Program Files\Rockstar Games
2011-04-20 15:02:26 ----D---- C:\WINDOWS\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
11008-11-13 23:55:50 ----SHD---- C:\WINDOWS\CSC

======List of files/folders modified in the last 1 months======

2011-05-18 13:58:01 ----RD---- C:\Program Files
2011-05-18 13:55:47 ----D---- C:\WINDOWS\system32
2011-05-18 07:57:33 ----D---- C:\WINDOWS\Prefetch
2011-05-18 07:43:12 ----AD---- C:\WINDOWS
2011-05-18 07:43:00 ----D---- C:\WINDOWS\system32\LogFiles
2011-05-17 18:23:00 ----D---- C:\WINDOWS\system32\drivers
2011-05-17 18:00:11 ----D---- C:\Qoobox
2011-05-17 17:59:21 ----SD---- C:\WINDOWS\Tasks
2011-05-17 17:58:10 ----A---- C:\WINDOWS\system.ini
2011-05-17 17:57:59 ----D---- C:\WINDOWS\system32\drivers\etc
2011-05-17 17:54:47 ----D---- C:\WINDOWS\AppPatch
2011-05-17 17:54:44 ----D---- C:\Program Files\Common Files
2011-05-17 17:51:15 ----D---- C:\WINDOWS\system32\CatRoot2
2011-05-17 17:45:17 ----HD---- C:\WINDOWS\inf
2011-05-17 16:52:27 ----D---- C:\Documents and Settings
2011-05-17 15:02:39 ----D---- C:\Documents and Settings\Ondra\Data aplikací\BitTorrent
2011-05-16 21:21:06 ----A---- C:\WINDOWS\WINCMD.INI
2011-05-16 21:13:37 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-05-16 19:43:30 ----D---- C:\WINDOWS\system32\config
2011-05-16 19:42:56 ----D---- C:\WINDOWS\system32\wbem
2011-05-16 19:42:54 ----D---- C:\WINDOWS\Registration
2011-05-16 19:42:26 ----SHD---- C:\WINDOWS\Installer
2011-05-16 19:42:11 ----D---- C:\Program Files\AGEIA Technologies
2011-05-16 19:42:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-05-16 17:21:51 ----D---- C:\WINDOWS\Minidump
2011-05-15 14:58:27 ----D---- C:\Program Files\NVIDIA Corporation
2011-05-15 14:58:03 ----D---- C:\WINDOWS\WinSxS
2011-05-15 14:56:05 ----D---- C:\WINDOWS\system32\DirectX
2011-05-15 13:41:36 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-05-12 18:18:43 ----HD---- C:\Program Files\InstallShield Installation Information
2011-05-10 15:31:39 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-05-10 15:29:37 ----RSD---- C:\WINDOWS\assembly
2011-05-10 14:30:57 ----A---- C:\WINDOWS\NeroDigital.ini
2011-05-08 17:50:43 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-05-08 17:50:37 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2011-05-01 19:29:46 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-27 20:42:22 ----D---- C:\Program Files\Movie Maker
2011-04-27 20:42:00 ----D---- C:\WINDOWS\RegisteredPackages
2011-04-26 18:34:00 ----D---- C:\Documents and Settings\Ondra\Data aplikací\MEGAUPLOADTOOLBAR
2011-04-26 18:33:36 ----D---- C:\Program Files\Crawler
2011-04-26 18:33:16 ----D---- C:\Program Files\ICQToolbar
2011-04-25 17:30:02 ----D---- C:\Documents and Settings\Ondra\Data aplikací\Ahead
11008-11-09 19:49:43 ----AC---- C:\WINDOWS\DUMP53d4.tmp

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 imagedrv;imagedrv; C:\WINDOWS\System32\Drivers\imagedrv.sys [2005-08-15 5888]
R0 imagesrv;imagesrv; C:\WINDOWS\system32\DRIVERS\imagesrv.sys [2005-08-15 127488]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-01-26 95552]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-02-23 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2004-12-03 20544]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2002-07-23 32128]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-24 218688]
R1 VIAPFD;VIAPFD; C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 3279]
R3 FETNDIS;VIA Rhine Family Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2002-09-11 40448]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S0 adtn;adtn; C:\WINDOWS\System32\drivers\xfjm.sys []
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
S1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
S1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-01-26 52224]
S1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
S1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2011-04-01 5632]
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
S2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
S2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
S2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
S3 catchme;catchme; \??\C:\DOCUME~1\Ondra\LOCALS~1\Temp\catchme.sys []
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-02-23 9888384]
S3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2005-08-30 58320]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2005-08-30 8336]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2005-08-30 94000]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VIAudio;VIA AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\viaudio.sys [2002-09-15 64128]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-10-16 37664]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-02-23 42184]
S2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-10-07 345376]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-03-28 153376]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
S2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-05-08 66872]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2008-11-16 570880]
S2 UserAccess7;SecuROM User Access Service (V7); C:\WINDOWS\system32\UAService7.exe [2011-03-27 126976]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-22 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-11-17 820008]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Zajímal by mne obsah tohoto souboru: C:\ComboFix.txt . Spouštět ComboFix nedoporučujeme laikům, mohl by se poškodit systém. Log sem zkopírujte.

[Poruon13]

Dobře Kopíruji ComboFix.txt, ale je poněkud dlouhý

ComboFix 11-05-16.04 - Ondra 17.05.2011 17:51:55.3.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.788 [GMT 2:00]
Spuštěný z: d:\software\Bezpečnost PC\ComboFix.exe
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Antivirus *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Ondra\Data aplikací\PriceGong
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\1.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\a.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\b.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\c.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\d.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\e.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\f.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\g.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\h.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\i.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\J.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\k.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\l.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\m.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\mru.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\n.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\o.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\p.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\q.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\r.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\s.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\t.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\u.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\v.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\w.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\x.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\y.xml
c:\documents and settings\Ondra\Data aplikací\PriceGong\Data\z.xml
c:\documents and settings\Uživatel\WINDOWS
C:\RECYCLER(2)
c:\recycler(2)\S-1-5-21-2000478354-1563985344-1060284298-1004(2)\INFO2
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-17 do 2011-05-17 )))))))))))))))))))))))))))))))
.
.
2011-05-17 15:47 . 2011-05-17 15:46 390144 ----a-w- c:\windows\system32\CF20522.exe
2011-05-17 15:30 . 2011-05-17 15:28 390144 ----a-w- c:\windows\system32\CF17009.exe
2011-05-17 14:52 . 2011-05-17 14:52 -------- d-----w- c:\documents and settings\Nový
2011-05-16 17:42 . 2011-05-16 17:42 -------- d-----w- c:\windows\system32\wbem\Repository
2011-05-16 17:42 . 2011-05-16 17:42 -------- d-----w- c:\windows\system32\AGEIA
2011-05-16 17:41 . 2011-05-16 17:41 -------- d-----w- c:\program files\Common Files\BioWare
2011-05-10 12:55 . 2011-05-10 12:55 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Trymedia
2011-05-10 12:50 . 2005-11-13 21:22 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-05-10 12:50 . 2005-11-13 21:21 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-05-10 12:50 . 2005-11-13 21:20 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-05-10 12:50 . 2011-05-10 12:50 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-05-10 12:50 . 2005-11-13 21:22 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-05-10 12:50 . 2011-05-10 12:50 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-05-10 12:50 . 2011-05-10 12:50 -------- d-----w- c:\program files\GameSpy Arcade
2011-05-08 15:50 . 2011-05-08 15:50 669184 ----a-w- c:\windows\system32\pbsvc.exe
2011-05-06 17:37 . 2011-04-29 10:33 2871968 ----a-w- c:\windows\IS_FLOCX.exe
2011-05-06 17:37 . 2011-05-06 17:37 -------- d-----w- c:\windows\2011 Gabriela Guncikova Uninstaller
2011-05-06 17:37 . 2011-05-02 06:49 14200497 ----a-w- c:\windows\2011 Gabriela Guncikova.scr
2011-05-01 18:35 . 2011-05-01 18:35 -------- d-----w- c:\program files\Common Files\EasyInfo
2011-05-01 17:32 . 2011-05-01 17:32 -------- d-----w- c:\program files\GameSpy
2011-05-01 17:28 . 2011-05-01 17:28 -------- d-----w- c:\windows\system32\URTTEMP
2011-04-29 15:50 . 2011-04-29 15:50 -------- d-----w- c:\program files\Take2Interactive
2011-04-28 17:18 . 2011-04-28 17:18 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Buena Vista Games
2011-04-27 19:01 . 2011-04-27 19:01 -------- d-----w- c:\documents and settings\Ondra\Local Settings\Data aplikací\WMTools Downloaded Files
2011-04-27 18:43 . 2011-04-27 18:43 49975 ----a-w- c:\program files\Movie Maker\1033\Odinstaluj.exe
2011-04-27 13:42 . 2011-04-27 13:42 -------- d-----w- c:\program files\Rockstar Games
2011-04-25 11:24 . 2011-04-25 11:24 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\BitTorrentBar
2011-04-25 11:24 . 2011-04-25 11:24 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Apple
2011-04-20 13:02 . 2011-04-20 13:02 -------- d-----w- c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-10 13:31 . 2008-09-28 06:29 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-05-08 15:50 . 2011-03-30 18:25 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-05-08 15:50 . 2011-03-30 18:25 22328 ----a-w- c:\documents and settings\Ondra\Data aplikací\PnkBstrK.sys
2011-05-08 15:50 . 2011-03-30 18:25 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-05-08 15:50 . 2011-03-30 18:25 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-04-12 16:56 . 2011-04-12 16:56 409600 ----a-w- c:\windows\system32\wrap_oal.dll
2011-04-12 16:56 . 2011-04-12 16:56 114688 ----a-w- c:\windows\system32\OpenAL32.dll
2011-04-03 13:13 . 2011-04-03 13:14 728858 ----a-w- c:\program files\Common Files\unins000.exe
2011-04-01 12:43 . 2011-04-01 12:34 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2011-03-28 15:52 . 2011-03-28 15:52 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-03-28 15:52 . 2011-03-28 15:52 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-27 13:43 . 2011-03-27 13:43 126976 ----a-w- c:\windows\system32\UAService7.exe
2011-03-24 16:08 . 2011-03-24 16:08 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-03-23 17:30 . 2011-03-23 17:30 107134 -c--a-w- c:\windows\UninstallFirefox.exe
2011-03-17 17:32 . 2011-03-26 15:43 15592 ----a-w- c:\windows\system32\roboot.exe
2011-02-23 14:04 . 2011-04-07 14:20 40648 -c--a-w- c:\windows\avastSS.scr
2011-02-23 14:04 . 2008-04-22 17:49 190016 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-23 13:56 . 2011-04-07 15:27 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-02-23 13:56 . 2008-04-22 17:49 301528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-23 13:55 . 2008-04-22 17:49 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-23 13:55 . 2008-04-22 17:49 102232 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-02-23 13:55 . 2008-04-22 17:49 96344 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-02-23 13:55 . 2008-04-22 17:49 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-23 13:54 . 2008-04-22 17:49 30680 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-02-23 13:54 . 2008-04-22 17:49 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-23 06:27 . 2011-03-29 12:18 61440 -c--a-w- c:\windows\system32\OpenCL.dll
2011-02-23 06:27 . 2011-03-29 12:18 941160 -c--a-w- c:\windows\system32\nvdispco322090.dll
2011-02-23 06:27 . 2011-03-29 12:18 837736 -c--a-w- c:\windows\system32\nvgenco322040.dll
2011-02-23 06:27 . 2011-03-29 12:18 2916968 -c--a-w- c:\windows\system32\nvcuvid.dll
2011-02-23 06:27 . 2011-03-29 12:18 2251368 -c--a-w- c:\windows\system32\nvcuvenc.dll
2011-02-23 06:27 . 2011-03-29 12:18 13004800 -c--a-w- c:\windows\system32\nvcompiler.dll
2011-02-23 06:27 . 2008-04-22 00:59 9888384 -c--a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-02-23 06:27 . 2008-04-22 00:59 6398720 ----a-w- c:\windows\system32\nv4_disp.dll
2011-02-23 06:27 . 2007-12-04 23:41 4980736 -c--a-w- c:\windows\system32\nvcuda.dll
2011-02-23 06:27 . 2007-12-04 23:41 1958400 -c--a-w- c:\windows\system32\nvapi.dll
2011-02-23 06:27 . 2007-12-04 23:41 14671872 -c--a-w- c:\windows\system32\nvoglnt.dll
11008-11-09 17:49 . 2008-04-22 00:48 90112 -c--a-w- c:\windows\DUMP53d4.tmp
.
.
((((((((((((((((((((((((((((( SnapShot@2011-04-11_19.23.13 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-04-12 12:21 . 2005-08-25 22:50 77312 c:\windows\system32\ztvunace26.dll
+ 2011-04-12 12:21 . 2006-06-19 10:01 69632 c:\windows\system32\ztvcabinet.dll
+ 2003-02-21 03:16 . 2003-02-21 03:16 49152 c:\windows\system32\URTTEMP\regtlib.exe
+ 2011-04-12 12:21 . 2002-03-05 22:00 75264 c:\windows\system32\unacev2.dll
+ 2001-10-25 12:00 . 2011-05-01 17:29 71642 c:\windows\system32\perfc009.dat
+ 2001-10-25 12:00 . 2011-05-01 17:29 83204 c:\windows\system32\perfc005.dat
+ 2008-04-21 23:02 . 2001-10-25 12:00 19429 c:\windows\system32\MsDtc\Trace\msdtcvtr.bat
+ 2011-03-21 17:57 . 2011-05-02 08:18 50576 c:\windows\system32\GDIPFONTCACHEV1.DAT
+ 2008-04-21 23:04 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
- 2011-03-24 09:42 . 2010-10-11 14:59 45568 c:\windows\system32\dllcache\wab.exe
+ 2004-08-17 14:49 . 2009-06-15 10:45 81408 c:\windows\system32\dllcache\tlntsess.exe
- 2009-06-15 10:45 . 2009-06-15 10:45 81408 c:\windows\system32\dllcache\tlntsess.exe
- 2009-06-15 10:45 . 2009-06-15 10:45 78336 c:\windows\system32\dllcache\telnet.exe
+ 2004-08-17 14:49 . 2009-06-15 10:45 78336 c:\windows\system32\dllcache\telnet.exe
+ 2004-08-17 14:48 . 2008-04-14 03:11 24064 c:\windows\system32\dllcache\pidgen.dll
- 2008-04-14 03:11 . 2008-04-14 03:11 24064 c:\windows\system32\dllcache\pidgen.dll
- 2008-06-12 14:24 . 2008-06-12 14:24 91648 c:\windows\system32\dllcache\mtxoci.dll
+ 2008-04-21 23:02 . 2008-06-12 14:24 91648 c:\windows\system32\dllcache\mtxoci.dll
+ 2008-04-21 23:02 . 2008-06-12 14:24 58880 c:\windows\system32\dllcache\msdtclog.dll
- 2008-06-12 14:24 . 2008-06-12 14:24 58880 c:\windows\system32\dllcache\msdtclog.dll
+ 2008-04-21 23:04 . 2010-11-18 18:15 81920 c:\windows\system32\dllcache\isign32.dll
- 2010-11-18 18:15 . 2010-11-18 18:15 81920 c:\windows\system32\dllcache\isign32.dll
- 2010-12-20 23:06 . 2010-12-20 23:06 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-17 14:49 . 2010-12-20 23:06 17408 c:\windows\system32\dllcache\corpol.dll
+ 2004-08-17 14:49 . 2010-01-13 14:02 86016 c:\windows\system32\dllcache\cabview.dll
- 2010-01-13 14:02 . 2010-01-13 14:02 86016 c:\windows\system32\dllcache\cabview.dll
+ 2003-02-20 18:10 . 2003-02-20 18:10 31744 c:\windows\Microsoft.NET\Framework\v1.1.4322\WMINet_Utils.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 57344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.RegularExpressions.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 64000 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.Thunk.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 65536 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.Design.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.DirectoryServices.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Configuration.Install.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 12288 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
+ 2003-02-21 05:26 . 2003-02-21 05:26 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegCode.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
+ 2003-02-20 17:09 . 2003-02-20 17:09 90112 c:\windows\Microsoft.NET\Framework\v1.1.4322\PerfCounter.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\ngen.exe
+ 2003-02-20 16:43 . 2003-02-20 16:43 22528 c:\windows\Microsoft.NET\Framework\v1.1.4322\MUI\0409\mscorsecr.dll
+ 2003-02-20 17:18 . 2003-02-20 17:18 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\mtxoci8.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsec.dll
+ 2003-02-20 17:06 . 2003-02-20 17:06 65536 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorpe.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 98304 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbc.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
+ 2003-02-21 05:25 . 2003-02-21 05:25 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
+ 2003-02-21 05:25 . 2003-02-21 05:25 11264 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.Vsa.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.Vsa.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\jsc.exe
+ 2003-02-21 05:24 . 2003-02-21 05:24 26112 c:\windows\Microsoft.NET\Framework\v1.1.4322\ISymWrapper.dll
+ 2003-02-20 17:22 . 2003-02-20 17:22 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtilLib.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 15872 c:\windows\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
+ 2003-02-21 05:24 . 2003-02-21 05:24 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEHost.dll
+ 2003-02-21 02:12 . 2003-02-21 02:12 28672 c:\windows\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
+ 2003-02-21 05:24 . 2003-02-21 05:24 33792 c:\windows\Microsoft.NET\Framework\v1.1.4322\CustomMarshalers.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 12288 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscompmgd.dll
+ 2003-02-21 08:20 . 2003-02-21 08:20 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\csc.exe
+ 2003-02-20 17:09 . 2003-02-20 17:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 49152 c:\windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
+ 2003-02-21 05:24 . 2003-02-21 05:24 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
+ 2003-02-20 17:19 . 2003-02-20 17:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2003-02-20 17:19 . 2003-02-20 17:19 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
+ 2003-02-20 17:19 . 2003-02-20 17:19 20480 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
+ 2003-02-20 17:19 . 2003-02-20 17:19 40960 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_rc.dll
+ 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2003-02-21 03:00 . 2003-02-21 03:00 98304 c:\windows\Microsoft.NET\Framework\v1.1.4322\alink.dll
+ 2003-02-21 01:55 . 2003-02-21 01:55 94208 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\cscompui.dll
+ 2003-02-21 00:59 . 2003-02-21 00:59 16896 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\alinkui.dll
+ 2008-07-29 20:07 . 2008-07-29 20:07 23040 c:\windows\Installer\aaf7b4.msp
+ 2011-03-21 16:57 . 2011-03-21 16:57 88576 c:\windows\Installer\a76016.msi
+ 2008-11-16 12:34 . 2008-11-16 12:34 23552 c:\windows\Installer\209e04.msi
+ 2008-11-16 12:34 . 2008-11-16 12:34 26112 c:\windows\Installer\209dfe.msi
+ 2011-04-08 17:45 . 2011-04-08 17:45 38400 c:\windows\Installer\14fbbd3.msi
+ 2008-07-30 04:07 . 2008-07-30 04:07 23040 c:\windows\Installer\1051cd0.msp
+ 2011-05-01 17:33 . 2011-05-01 17:33 53248 c:\windows\Installer\{E7391464-6939-413C-B427-32F33FE13484}\NewShortcut8_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
+ 2011-05-01 17:33 . 2011-05-01 17:33 53248 c:\windows\Installer\{E7391464-6939-413C-B427-32F33FE13484}\NewShortcut7_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
+ 2011-05-01 17:33 . 2011-05-01 17:33 53248 c:\windows\Installer\{E7391464-6939-413C-B427-32F33FE13484}\Comrade.exe_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
+ 2011-05-01 17:33 . 2011-05-01 17:33 53248 c:\windows\Installer\{E7391464-6939-413C-B427-32F33FE13484}\ARPPRODUCTICON.exe
+ 2011-04-27 18:42 . 2011-04-27 18:42 65536 c:\windows\Installer\{49FC50FC-F965-40D9-89B4-CBFF80941033}\ARPPRODUCTICON.exe
+ 2011-05-01 17:30 . 2011-05-01 17:30 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_74278ee1\System.Drawing.Design.dll
+ 2011-05-01 17:30 . 2011-05-01 17:30 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_9698f185\CustomMarshalers.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 57344 c:\windows\assembly\GAC\System.Web.RegularExpressions\1.0.5000.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 77824 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 64000 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.Thunk.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 65536 c:\windows\assembly\GAC\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 86016 c:\windows\assembly\GAC\System.DirectoryServices\1.0.5000.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 77824 c:\windows\assembly\GAC\System.Configuration.Install\1.0.5000.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 32768 c:\windows\assembly\GAC\Regcode\1.0.5000.0__b03f5f7f11d50a3a\RegCode.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 32768 c:\windows\assembly\GAC\Microsoft.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 11264 c:\windows\assembly\GAC\Microsoft.Vsa.Vb.CodeDOMProcessor\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 28672 c:\windows\assembly\GAC\Microsoft.VisualBasic.Vsa\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 26112 c:\windows\assembly\GAC\ISymWrapper\1.0.5000.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 32768 c:\windows\assembly\GAC\IEHost\1.0.5000.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 33792 c:\windows\assembly\GAC\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 12288 c:\windows\assembly\GAC\cscompmgd\7.0.5000.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2003-02-20 16:43 . 2003-02-20 16:43 4096 c:\windows\system32\mui\0409\mscoreer.dll
+ 2008-04-22 00:57 . 2001-10-25 12:00 9936 c:\windows\system32\dllcache\lzexpand.dll
- 2001-10-25 12:00 . 2001-10-25 12:00 9936 c:\windows\system32\dllcache\lzexpand.dll
+ 2008-01-18 15:13 . 2008-01-18 15:13 2247 c:\windows\ServicePackFiles\i386\tscdsbl.bat
+ 2003-02-20 17:09 . 2003-02-20 17:09 9216 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscortim.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 6656 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft_VsaVb.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 6144 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualC.Dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 4608 c:\windows\Microsoft.NET\Framework\v1.1.4322\IIEHost.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 7168 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExecRemote.dll
+ 2003-02-21 05:24 . 2003-02-21 05:24 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
+ 2003-02-21 05:24 . 2003-02-21 05:24 7680 c:\windows\Microsoft.NET\Framework\v1.1.4322\Accessibility.dll
+ 2008-01-18 15:13 . 2008-01-18 15:13 2247 c:\windows\Installer\tsclientmsitrans\tscdsbl.bat
+ 2011-05-01 17:33 . 2011-05-01 17:33 8854 c:\windows\Installer\{E7391464-6939-413C-B427-32F33FE13484}\UNINST_Uninstall_Com_CD7D16AA9DCA4A66A4ABF9C1BE60B1B5.exe
+ 2011-05-01 17:28 . 2011-05-01 17:28 6656 c:\windows\assembly\GAC\Microsoft_VsaVb\7.0.5000.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 6144 c:\windows\assembly\GAC\Microsoft.VisualC\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualC.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 4608 c:\windows\assembly\GAC\IIEHost\1.0.5000.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 7168 c:\windows\assembly\GAC\IEExecRemote\1.0.5000.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 7680 c:\windows\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-04-12 12:21 . 2006-05-25 12:52 162304 c:\windows\system32\ztvunrar36.dll
+ 2011-04-12 12:21 . 2003-02-02 17:06 153088 c:\windows\system32\UNRAR3.dll
+ 2001-10-25 12:00 . 2011-05-01 17:29 441708 c:\windows\system32\perfh009.dat
+ 2001-10-25 12:00 . 2011-05-01 17:29 438534 c:\windows\system32\perfh005.dat
+ 2011-05-06 17:37 . 2011-05-06 17:37 235168 c:\windows\system32\Macromed\Flash\FlashUtil10p_ActiveX.exe
+ 2011-05-06 17:37 . 2011-05-06 17:37 311456 c:\windows\system32\Macromed\Flash\FlashUtil10p_ActiveX.dll
+ 2008-04-22 00:55 . 2011-05-02 07:46 226408 c:\windows\system32\FNTCACHE.DAT
- 2008-05-08 11:24 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
+ 2004-08-17 14:49 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
- 2011-03-24 10:14 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
+ 2008-04-21 23:04 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
- 2008-06-20 11:08 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
+ 2004-08-03 22:07 . 2010-02-11 12:02 226880 c:\windows\system32\dllcache\tcpip6.sys
+ 2001-10-25 12:00 . 2008-05-08 14:02 203136 c:\windows\system32\dllcache\rmcast.sys
- 2008-06-14 07:00 . 2008-05-08 14:02 203136 c:\windows\system32\dllcache\rmcast.sys
- 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
+ 2008-04-21 23:04 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
- 2008-06-12 14:24 . 2008-06-12 14:24 956928 c:\windows\system32\dllcache\msdtctm.dll
+ 2008-04-21 23:02 . 2008-06-12 14:24 956928 c:\windows\system32\dllcache\msdtctm.dll
+ 2008-04-21 23:04 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
- 2010-11-09 14:52 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
- 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
+ 2008-04-21 23:04 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
- 2011-03-24 10:22 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
+ 2001-10-25 12:00 . 2010-09-18 06:53 953856 c:\windows\system32\dllcache\mfc40u.dll
- 2011-01-27 11:57 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
+ 2008-04-21 23:02 . 2011-01-27 11:57 677888 c:\windows\system32\dllcache\lhmstsc.exe
- 2010-02-12 04:35 . 2010-02-12 04:35 100864 c:\windows\system32\dllcache\6to4svc.dll
+ 2004-08-17 14:49 . 2010-02-12 04:35 100864 c:\windows\system32\dllcache\6to4svc.dll
+ 2011-05-16 17:38 . 2011-03-21 17:43 287730 c:\windows\pchealth\helpctr\Config\Cache\Professional_32_1029.dat
+ 2011-03-26 15:54 . 2011-03-26 15:54 652800 c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\vs_setup.msi
+ 2003-02-21 08:20 . 2003-02-21 08:20 737280 c:\windows\Microsoft.NET\Framework\v1.1.4322\vbc.exe
+ 2003-02-21 05:27 . 2003-02-21 05:27 569344 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Services.dll
+ 2003-02-21 05:27 . 2003-02-21 05:27 819200 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.Mobile.dll
+ 2003-02-21 05:27 . 2003-02-21 05:27 126976 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.ServiceProcess.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Serialization.Formatters.Soap.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 323584 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Runtime.Remoting.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Messaging.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 368640 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Management.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 241664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.EnterpriseServices.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 466944 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Drawing.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.OracleClient.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 319488 c:\windows\Microsoft.NET\Framework\v1.1.4322\SOS.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 122880 c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusres.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 253952 c:\windows\Microsoft.NET\Framework\v1.1.4322\shfusion.dll
+ 2003-02-21 02:42 . 2003-02-21 02:42 348160 c:\windows\Microsoft.NET\Framework\v1.1.4322\msvcr71.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 143360 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorrc.dll
+ 2003-02-20 16:43 . 2003-02-20 16:43 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscormmc.dll
+ 2003-02-20 17:06 . 2003-02-20 17:06 311296 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 233472 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscordbi.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 299008 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.VisualBasic.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 716800 c:\windows\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
+ 2003-02-20 17:09 . 2003-02-20 17:09 196608 c:\windows\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
+ 2003-02-20 17:06 . 2003-02-20 17:06 282624 c:\windows\Microsoft.NET\Framework\v1.1.4322\fusion.dll
+ 2003-02-20 17:16 . 2003-02-20 17:16 798720 c:\windows\Microsoft.NET\Framework\v1.1.4322\EventLogMessages.dll
+ 2003-02-21 08:21 . 2003-02-21 08:21 524288 c:\windows\Microsoft.NET\Framework\v1.1.4322\diasymreader.dll
+ 2003-02-21 08:21 . 2003-02-21 08:21 626688 c:\windows\Microsoft.NET\Framework\v1.1.4322\cscomp.dll
+ 2002-07-29 09:11 . 2002-07-29 09:11 219136 c:\windows\Microsoft.NET\Framework\v1.1.4322\c_g18030.dll
+ 2003-02-20 17:19 . 2003-02-20 17:19 253952 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2003-02-21 03:04 . 2003-02-21 03:04 155648 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\Vsavb7rtUI.dll
+ 2003-02-21 01:02 . 2003-02-21 01:02 131072 c:\windows\Microsoft.NET\Framework\v1.1.4322\1033\vbc7ui.dll
+ 2011-03-26 15:35 . 2011-03-26 15:35 331264 c:\windows\Installer\f52993.msi
+ 2008-04-21 23:28 . 2008-04-21 23:28 265216 c:\windows\Installer\eaef9.msi
+ 2011-03-28 15:53 . 2011-03-28 15:53 180224 c:\windows\Installer\aeb250.msi
+ 2011-03-28 15:52 . 2011-03-28 15:52 675840 c:\windows\Installer\aeb24a.msi
+ 2008-07-29 20:23 . 2008-07-29 20:23 250880 c:\windows\Installer\aaf7bd.msp
+ 2008-07-29 20:28 . 2008-07-29 20:28 278016 c:\windows\Installer\aaf7bb.msp
+ 2008-07-29 18:40 . 2008-07-29 18:40 291840 c:\windows\Installer\aaf7b9.msp
+ 2008-07-29 18:12 . 2008-07-29 18:12 142336 c:\windows\Installer\aaf7b3.msi
+ 2008-07-29 16:35 . 2008-07-29 16:35 553472 c:\windows\Installer\a7601b.msp
+ 2008-07-29 16:33 . 2008-07-29 16:33 506368 c:\windows\Installer\a76019.msp
+ 2008-07-29 16:37 . 2008-07-29 16:37 911360 c:\windows\Installer\a76018.msp
+ 2008-11-14 00:31 . 2008-11-14 00:31 432640 c:\windows\Installer\6c3dc0.msi
+ 2008-06-16 15:32 . 2008-06-16 15:32 564224 c:\windows\Installer\4ce5ef.msi
+ 2010-02-24 23:14 . 2010-02-24 23:14 543232 c:\windows\Installer\49f5c.msp
+ 2011-03-25 07:12 . 2011-03-25 07:12 429568 c:\windows\Installer\49f55.msi
+ 2008-04-23 18:28 . 2008-04-23 18:28 100352 c:\windows\Installer\49c0f.msi
+ 2008-10-10 09:22 . 2008-10-10 09:22 532992 c:\windows\Installer\48de2.msi
+ 2011-04-01 12:35 . 2011-04-01 12:35 167424 c:\windows\Installer\3369a3.msi
+ 2008-11-14 17:08 . 2008-11-14 17:08 301568 c:\windows\Installer\2ed1e6.msi
+ 2008-05-10 09:40 . 2008-05-10 09:40 431104 c:\windows\Installer\2c27b3.msi
+ 2011-04-08 12:20 . 2011-04-08 12:20 213504 c:\windows\Installer\256ce7.msi
+ 2008-07-05 13:41 . 2008-07-05 13:41 573440 c:\windows\Installer\161c54.msi
+ 2011-03-26 17:21 . 2011-03-26 17:21 811008 c:\windows\Installer\156ad4d.msi
+ 2011-03-29 18:40 . 2011-03-29 18:40 219648 c:\windows\Installer\1553613.msi
+ 2011-03-26 15:55 . 2011-03-26 15:55 648192 c:\windows\Installer\10763c3.msi
+ 2008-07-30 04:23 . 2008-07-30 04:23 250880 c:\windows\Installer\1051cd9.msp
+ 2008-07-30 04:28 . 2008-07-30 04:28 278016 c:\windows\Installer\1051cd7.msp
+ 2008-07-30 02:40 . 2008-07-30 02:40 291840 c:\windows\Installer\1051cd5.msp
+ 2011-03-26 15:53 . 2011-03-26 15:53 137728 c:\windows\Installer\1051ccf.msi
+ 2011-04-20 13:02 . 2011-04-20 16:01 155648 c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP\WiseCustomCalla.dll
+ 2011-04-20 16:04 . 2011-04-20 16:04 364544 c:\windows\assembly\tmp\GNRVZ37B\Microsoft.DirectX.DirectPlay.dll
+ 2011-05-01 17:30 . 2011-05-01 17:30 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_4d8538eb\System.Drawing.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 569344 c:\windows\assembly\GAC\System.Web.Services\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 819200 c:\windows\assembly\GAC\System.Web.Mobile\1.0.5000.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 126976 c:\windows\assembly\GAC\System.ServiceProcess\1.0.5000.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 131072 c:\windows\assembly\GAC\System.Runtime.Serialization.Formatters.Soap\1.0.5000.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 323584 c:\windows\assembly\GAC\System.Runtime.Remoting\1.0.5000.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 241664 c:\windows\assembly\GAC\System.Messaging\1.0.5000.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 368640 c:\windows\assembly\GAC\System.Management\1.0.5000.0__b03f5f7f11d50a3a\System.Management.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 241664 c:\windows\assembly\GAC\System.EnterpriseServices\1.0.5000.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 466944 c:\windows\assembly\GAC\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 299008 c:\windows\assembly\GAC\System.Data.OracleClient\1.0.5000.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 299008 c:\windows\assembly\GAC\Microsoft.VisualBasic\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 716800 c:\windows\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:41 . 2011-05-09 18:41 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:41 . 2011-05-09 18:41 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:41 . 2011-05-09 18:41 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:41 . 2011-05-09 18:41 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:41 . 2011-05-09 18:41 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:40 . 2011-05-09 18:40 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:40 . 2011-05-09 18:40 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2011-05-10 13:29 . 2011-05-10 13:29 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
+ 2011-05-06 17:37 . 2011-05-06 17:37 747536 c:\windows\2011 Gabriela Guncikova Uninstaller\unins000.exe
+ 2004-07-17 10:35 . 2004-07-17 10:35 1356800 c:\windows\system32\webfldrs.msi
+ 2011-05-16 16:43 . 2011-05-16 17:43 1266872 c:\windows\system32\Restore\rstrlog.dat
+ 2008-04-21 23:04 . 2002-12-20 11:06 3366912 c:\windows\system32\dllcache\moviemk.exe
- 2011-02-02 07:58 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
+ 2008-04-21 23:02 . 2011-02-02 07:58 2067456 c:\windows\system32\dllcache\lhmstscx.dll
+ 2008-10-11 14:00 . 2004-07-17 10:35 1356800 c:\windows\ServicePackFiles\i386\webfldrs.msi
+ 2011-04-27 18:42 . 2002-12-20 11:06 3366912 c:\windows\RegisteredPackages\{60BFF50D-FB2C-4498-A577-C9548C390BB9}\moviemk.exe
+ 2003-02-21 03:04 . 2003-02-21 03:04 1032192 c:\windows\Microsoft.NET\Framework\v1.1.4322\VsaVb7rt.dll
+ 2003-02-21 05:27 . 2003-02-21 05:27 1335296 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.XML.dll
+ 2003-02-21 05:27 . 2003-02-21 05:27 2039808 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Windows.Forms.dll
+ 2003-02-21 05:27 . 2003-02-21 05:27 1245184 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 1216512 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 1699840 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Design.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 1290240 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Data.dll
+ 2003-02-20 17:08 . 2003-02-20 17:08 2482176 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2003-02-20 17:07 . 2003-02-20 17:07 2494464 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2003-02-21 05:26 . 2003-02-21 05:26 2088960 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2003-02-21 05:25 . 2003-02-21 05:25 1564672 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorcfg.dll
+ 2007-10-24 22:55 . 2007-10-24 22:55 5555200 c:\windows\Installer\e7cff7.msi
+ 2008-07-29 18:26 . 2008-07-29 18:26 1043456 c:\windows\Installer\aaf7bc.msp
+ 2008-07-29 19:37 . 2008-07-29 19:37 2679808 c:\windows\Installer\aaf7ba.msp
+ 2008-07-29 20:15 . 2008-07-29 20:15 3697664 c:\windows\Installer\aaf7b8.msp
+ 2008-07-29 18:34 . 2008-07-29 18:34 1448448 c:\windows\Installer\aaf7b7.msp
+ 2008-07-29 19:22 . 2008-07-29 19:22 4137984 c:\windows\Installer\aaf7b6.msp
+ 2008-07-29 18:18 . 2008-07-29 18:18 3376640 c:\windows\Installer\aaf7b5.msp
+ 2008-06-16 17:13 . 2008-06-16 17:13 1479168 c:\windows\Installer\a946d2.msi
+ 2008-07-29 16:45 . 2008-07-29 16:45 2543616 c:\windows\Installer\a7601f.msp
+ 2008-07-29 16:29 . 2008-07-29 16:29 2926080 c:\windows\Installer\a7601e.msp
+ 2008-07-29 16:41 . 2008-07-29 16:41 6487040 c:\windows\Installer\a7601d.msp
+ 2008-07-29 16:39 . 2008-07-29 16:39 3403264 c:\windows\Installer\a7601c.msp
+ 2008-07-29 16:43 . 2008-07-29 16:43 1013248 c:\windows\Installer\a7601a.msp
+ 2008-07-29 16:31 . 2008-07-29 16:31 6083072 c:\windows\Installer\a76017.msp
+ 2009-07-12 00:35 . 2009-07-12 00:35 2736640 c:\windows\Installer\66632a.msi
+ 2011-05-01 17:33 . 2011-05-01 17:33 2074112 c:\windows\Installer\65eed2.msi
+ 2011-05-01 17:29 . 2011-05-01 17:29 3443712 c:\windows\Installer\624986.msi
+ 2010-09-23 06:39 . 2010-09-23 06:39 4265472 c:\windows\Installer\49f74.msp
+ 2010-04-08 20:38 . 2010-04-08 20:38 2607104 c:\windows\Installer\49f69.msp
+ 2010-04-08 20:38 . 2010-04-08 20:38 4210688 c:\windows\Installer\49f68.msp
+ 2008-04-23 18:25 . 2008-04-23 18:25 6164480 c:\windows\Installer\49c09.msi
+ 2005-10-07 05:40 . 2005-10-07 05:40 8458196 c:\windows\Installer\3f148.msi
+ 2011-04-08 12:24 . 2011-04-08 12:24 1500160 c:\windows\Installer\256cee.msi
+ 2005-10-07 05:40 . 2005-10-07 05:40 8458196 c:\windows\Installer\23f4c.msi
+ 2008-08-16 19:06 . 2008-08-16 19:06 1396224 c:\windows\Installer\2024eb.msi
+ 2008-04-26 18:24 . 2008-04-26 18:24 3699200 c:\windows\Installer\1e84ef6.msi
+ 2008-04-26 18:08 . 2008-04-26 18:08 7200768 c:\windows\Installer\1da1a42.msi
+ 2009-11-08 23:25 . 2009-11-08 23:25 1935360 c:\windows\Installer\1ab80d.msp
+ 2011-03-26 17:28 . 2011-03-26 17:28 6237184 c:\windows\Installer\156ad69.msi
+ 2011-03-26 17:23 . 2011-03-26 17:23 1554944 c:\windows\Installer\156ad5f.msi
+ 2011-03-26 17:23 . 2011-03-26 17:23 3085312 c:\windows\Installer\156ad59.msi
+ 2011-03-26 17:22 . 2011-03-26 17:22 1984000 c:\windows\Installer\156ad53.msi
+ 2011-03-29 18:48 . 2011-03-29 18:48 2984448 c:\windows\Installer\1553617.msi
+ 2011-04-15 17:54 . 2011-04-15 17:54 9472000 c:\windows\Installer\1371772.msi
+ 2011-04-27 18:42 . 2011-04-27 18:42 5885952 c:\windows\Installer\122d7fa.msi
+ 2008-07-30 02:26 . 2008-07-30 02:26 1043456 c:\windows\Installer\1051cd8.msp
+ 2008-07-30 03:37 . 2008-07-30 03:37 2679808 c:\windows\Installer\1051cd6.msp
+ 2008-07-30 04:15 . 2008-07-30 04:15 3697664 c:\windows\Installer\1051cd4.msp
+ 2008-07-30 02:34 . 2008-07-30 02:34 1448448 c:\windows\Installer\1051cd3.msp
+ 2008-07-30 03:22 . 2008-07-30 03:22 4137984 c:\windows\Installer\1051cd2.msp
+ 2008-07-30 02:18 . 2008-07-30 02:18 3376640 c:\windows\Installer\1051cd1.msp
+ 2011-05-01 17:30 . 2011-05-01 17:30 1929216 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_b300a450\System.dll
+ 2011-05-01 17:31 . 2011-05-01 17:31 2076672 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_ad3362d1\System.Xml.dll
+ 2011-05-01 17:30 . 2011-05-01 17:30 2994176 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_fabf0f75\System.Windows.Forms.dll
+ 2011-05-01 17:30 . 2011-05-01 17:30 1462272 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_ad2ff3d0\System.Design.dll
+ 2011-05-01 17:30 . 2011-05-01 17:30 3289088 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ef7bd48d\mscorlib.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1216512 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1335296 c:\windows\assembly\GAC\System.Xml\1.0.5000.0__b77a5c561934e089\System.Xml.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 2039808 c:\windows\assembly\GAC\System.Windows.Forms\1.0.5000.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1245184 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1699840 c:\windows\assembly\GAC\System.Design\1.0.5000.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1290240 c:\windows\assembly\GAC\System.Data\1.0.5000.0__b77a5c561934e089\System.Data.dll
+ 2011-05-01 17:28 . 2011-05-01 17:28 1564672 c:\windows\assembly\GAC\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:40 . 2011-05-09 18:40 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-05-09 18:40 . 2011-05-09 18:40 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-04-08 12:22 . 2011-04-08 12:22 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2002-12-11 17:39 . 2002-12-11 17:39 10995712 c:\windows\Installer\WMEncoder.msi
+ 2010-05-19 12:08 . 2010-05-19 12:08 11408896 c:\windows\Installer\1ab7f2.msp
+ 2011-04-08 17:45 . 2011-04-08 17:45 20308992 c:\windows\Installer\14fbbda.msp
+ 2008-04-29 13:51 . 2008-05-17 14:33 58676736 c:\windows\Downloaded Installations\{66D8C376-87FE-4A10-A39A-2D775C361BDC}\Sony Ericsson PC Suite.msi
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 -c--a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\BitTorrentBar\tbBitT.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{88C7F2AA-F93F-432C-8F0E-B7D85967A527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"BitTorrent"="c:\program files\BitTorrent\BitTorrent.exe" [2011-04-07 400760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-17 421160]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-02-23 3451496]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-08-10 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\U§ivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Media Player.lnk - c:\program files\Adobe Media Player\Adobe Media Player.exe [2008-11-16 260096]
.
c:\documents and settings\Ondra\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
2011-04-12 12:22 1233856 ----a-w- c:\program files\Trojan Remover\Trjscan.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Documents and Settings\\Ondra\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [24.3.2011 18:08 218688]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [7.4.2011 17:27 371544]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.4.2008 19:49 301528]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [15.11.2008 23:01 141312]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.4.2008 19:49 19544]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15.1.2010 14:49 227232]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 10:50]
.
2011-05-15 c:\windows\Tasks\Norton Security Scan for Uživatel.job
- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 03:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Settings,ProxyServer = www.google.cz:80
uInternet Settings,ProxyOverride = *.local
IE: Crawler Search - tbr:iemenu
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\ctbr.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-17 17:58
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2000478354-1563985344-1060284298-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2000478354-1563985344-1060284298-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:00,6d,8e,30,74,07,d1,51,a1,30,71,aa,3d,68,c5,ec,e3,57,cb,5d,29,1d,00,
a7,14,5e,97,87,04,81,a7,44,f9,ad,cd,af,d8,87,e3,c9,87,77,4a,67,93,fd,9e,e1,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-05-17 18:00:08
ComboFix-quarantined-files.txt 2011-05-17 16:00
ComboFix2.txt 2011-05-16 16:43
ComboFix3.txt 2011-04-11 19:26
ComboFix4.txt 2011-03-23 18:59
.
Před spuštěním: 6 798 639 104
Po spuštění: 6 760 824 832
.
- - End Of File - - F4035FFB8705E58DDD048773D8351ACB

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\DUMP53d4.tmp

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkaz ze skriptu.

[Poruon13]

Provedeno Vkládám Log

ComboFix 11-05-16.04 - Ondra 18.05.2011 19:27:29.4.1 - x86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.783 [GMT 2:00]
Spuštěný z: d:\software\Bezpečnost PC\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Ondra\Plocha\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Antivirus *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-18 do 2011-05-18 )))))))))))))))))))))))))))))))
.
.
2011-05-18 11:58 . 2011-05-18 11:58 -------- d-----w- c:\program files\trend micro
2011-05-18 11:58 . 2011-05-18 11:58 -------- d-----w- C:\rsit
2011-05-17 16:13 . 2011-05-17 16:13 -------- d-----w- c:\documents and settings\Ondra\Data aplikací\Malwarebytes
2011-05-17 16:13 . 2010-03-29 13:24 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-05-17 16:13 . 2011-05-17 16:13 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-05-17 16:13 . 2010-03-29 13:24 20824 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-05-17 15:47 . 2011-05-17 15:46 390144 ----a-w- c:\windows\system32\CF20522.exe
2011-05-17 15:30 . 2011-05-17 15:28 390144 ----a-w- c:\windows\system32\CF17009.exe
2011-05-17 14:52 . 2011-05-17 14:52 -------- d-----w- c:\documents and settings\Nový
2011-05-16 17:42 . 2011-05-16 17:42 -------- d-----w- c:\windows\system32\wbem\Repository
2011-05-16 17:42 . 2011-05-16 17:42 -------- d-----w- c:\windows\system32\AGEIA
2011-05-16 17:41 . 2011-05-16 17:41 -------- d-----w- c:\program files\Common Files\BioWare
2011-05-10 12:55 . 2011-05-10 12:55 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Trymedia
2011-05-10 12:50 . 2005-11-13 21:22 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2011-05-10 12:50 . 2005-11-13 21:21 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2011-05-10 12:50 . 2005-11-13 21:20 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2011-05-10 12:50 . 2011-05-10 12:50 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2011-05-10 12:50 . 2005-11-13 21:22 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2011-05-10 12:50 . 2011-05-10 12:50 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2011-05-10 12:50 . 2011-05-10 12:50 -------- d-----w- c:\program files\GameSpy Arcade
2011-05-08 15:50 . 2011-05-08 15:50 669184 ----a-w- c:\windows\system32\pbsvc.exe
2011-05-06 17:37 . 2011-04-29 10:33 2871968 ----a-w- c:\windows\IS_FLOCX.exe
2011-05-06 17:37 . 2011-05-06 17:37 -------- d-----w- c:\windows\2011 Gabriela Guncikova Uninstaller
2011-05-06 17:37 . 2011-05-02 06:49 14200497 ----a-w- c:\windows\2011 Gabriela Guncikova.scr
2011-05-01 18:35 . 2011-05-01 18:35 -------- d-----w- c:\program files\Common Files\EasyInfo
2011-05-01 17:32 . 2011-05-01 17:32 -------- d-----w- c:\program files\GameSpy
2011-05-01 17:28 . 2011-05-01 17:28 -------- d-----w- c:\windows\system32\URTTEMP
2011-04-29 15:50 . 2011-04-29 15:50 -------- d-----w- c:\program files\Take2Interactive
2011-04-28 17:18 . 2011-04-28 17:18 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Buena Vista Games
2011-04-27 19:01 . 2011-04-27 19:01 -------- d-----w- c:\documents and settings\Ondra\Local Settings\Data aplikací\WMTools Downloaded Files
2011-04-27 18:43 . 2011-04-27 18:43 49975 ----a-w- c:\program files\Movie Maker\1033\Odinstaluj.exe
2011-04-27 13:42 . 2011-04-27 13:42 -------- d-----w- c:\program files\Rockstar Games
2011-04-25 11:24 . 2011-04-25 11:24 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\BitTorrentBar
2011-04-25 11:24 . 2011-04-25 11:24 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Apple
2011-04-20 13:02 . 2011-04-20 13:02 -------- d-----w- c:\windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-10 13:31 . 2008-09-28 06:29 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-05-08 15:50 . 2011-03-30 18:25 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-05-08 15:50 . 2011-03-30 18:25 22328 ----a-w- c:\documents and settings\Ondra\Data aplikací\PnkBstrK.sys
2011-05-08 15:50 . 2011-03-30 18:25 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-05-08 15:50 . 2011-03-30 18:25 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-04-12 16:56 . 2011-04-12 16:56 409600 ----a-w- c:\windows\system32\wrap_oal.dll
2011-04-12 16:56 . 2011-04-12 16:56 114688 ----a-w- c:\windows\system32\OpenAL32.dll
2011-04-03 13:13 . 2011-04-03 13:14 728858 ----a-w- c:\program files\Common Files\unins000.exe
2011-04-01 12:43 . 2011-04-01 12:34 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2011-03-28 15:52 . 2011-03-28 15:52 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-03-28 15:52 . 2011-03-28 15:52 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-27 13:43 . 2011-03-27 13:43 126976 ----a-w- c:\windows\system32\UAService7.exe
2011-03-24 16:08 . 2011-03-24 16:08 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-03-23 17:30 . 2011-03-23 17:30 107134 -c--a-w- c:\windows\UninstallFirefox.exe
2011-03-17 17:32 . 2011-03-26 15:43 15592 ----a-w- c:\windows\system32\roboot.exe
2011-02-23 14:04 . 2011-04-07 14:20 40648 -c--a-w- c:\windows\avastSS.scr
2011-02-23 14:04 . 2008-04-22 17:49 190016 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-23 13:56 . 2011-04-07 15:27 371544 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-02-23 13:56 . 2008-04-22 17:49 301528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-23 13:55 . 2008-04-22 17:49 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-23 13:55 . 2008-04-22 17:49 102232 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-02-23 13:55 . 2008-04-22 17:49 96344 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-02-23 13:55 . 2008-04-22 17:49 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-23 13:54 . 2008-04-22 17:49 30680 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-02-23 13:54 . 2008-04-22 17:49 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-23 06:27 . 2011-03-29 12:18 61440 -c--a-w- c:\windows\system32\OpenCL.dll
2011-02-23 06:27 . 2011-03-29 12:18 941160 -c--a-w- c:\windows\system32\nvdispco322090.dll
2011-02-23 06:27 . 2011-03-29 12:18 837736 -c--a-w- c:\windows\system32\nvgenco322040.dll
2011-02-23 06:27 . 2011-03-29 12:18 2916968 -c--a-w- c:\windows\system32\nvcuvid.dll
2011-02-23 06:27 . 2011-03-29 12:18 2251368 -c--a-w- c:\windows\system32\nvcuvenc.dll
2011-02-23 06:27 . 2011-03-29 12:18 13004800 -c--a-w- c:\windows\system32\nvcompiler.dll
2011-02-23 06:27 . 2008-04-22 00:59 9888384 -c--a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-02-23 06:27 . 2008-04-22 00:59 6398720 ----a-w- c:\windows\system32\nv4_disp.dll
2011-02-23 06:27 . 2007-12-04 23:41 4980736 -c--a-w- c:\windows\system32\nvcuda.dll
2011-02-23 06:27 . 2007-12-04 23:41 1958400 -c--a-w- c:\windows\system32\nvapi.dll
2011-02-23 06:27 . 2007-12-04 23:41 14671872 -c--a-w- c:\windows\system32\nvoglnt.dll
11008-11-09 17:49 . 2008-04-22 00:48 90112 -c--a-w- c:\windows\DUMP53d4.tmp
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 -c--a-w- c:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
2010-12-09 11:51 3911776 ----a-w- c:\program files\BitTorrentBar\tbBitT.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{88c7f2aa-f93f-432c-8f0e-b7d85967a527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{88C7F2AA-F93F-432C-8F0E-B7D85967A527}"= "c:\program files\BitTorrentBar\tbBitT.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"BitTorrent"="c:\program files\BitTorrent\BitTorrent.exe" [2011-04-07 400760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-11-17 421160]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-02-23 3451496]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-08-10 421888]
"Malwarebytes Anti-Malware (reboot)"="d:\software\Bezpečnost PC\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\U§ivatel\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Media Player.lnk - c:\program files\Adobe Media Player\Adobe Media Player.exe [2008-11-16 260096]
.
c:\documents and settings\Ondra\Nabˇdka Start\Programy\Po spuçtŘnˇ\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6\\ICQ.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Documents and Settings\\Ondra\\Local Settings\\Data aplikací\\Google\\Chrome\\Application\\chrome.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [24.3.2011 18:08 218688]
S0 adtn;adtn;c:\windows\system32\drivers\xfjm.sys --> c:\windows\system32\drivers\xfjm.sys [?]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [7.4.2011 17:27 371544]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.4.2008 19:49 301528]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [15.11.2008 23:01 141312]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.4.2008 19:49 19544]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15.1.2010 14:49 227232]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 10:50]
.
2011-05-15 c:\windows\Tasks\Norton Security Scan for Uživatel.job
- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 03:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Settings,ProxyServer = www.google.cz:80
uInternet Settings,ProxyOverride = *.local
IE: Crawler Search - tbr:iemenu
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\ctbr.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-TrojanScanner - c:\program files\Trojan Remover\Trjscan.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-18 19:33
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2000478354-1563985344-1060284298-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-2000478354-1563985344-1060284298-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:00,6d,8e,30,74,07,d1,51,a1,30,71,aa,3d,68,c5,ec,e3,57,cb,5d,29,1d,00,
a7,14,5e,97,87,04,81,a7,44,f9,ad,cd,af,d8,87,e3,c9,87,77,4a,67,93,fd,9e,e1,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Celkový čas: 2011-05-18 19:35:26
ComboFix-quarantined-files.txt 2011-05-18 17:35
ComboFix2.txt 2011-05-17 16:00
ComboFix3.txt 2011-05-16 16:43
ComboFix4.txt 2011-04-11 19:26
ComboFix5.txt 2011-05-18 17:26
.
Před spuštěním: 6 515 802 112
Po spuštění: 6 524 002 304
.
- - End Of File - - 7DE7B687CAA009C22359762EFA496BC6

[Rudy]

Stáhněte a spusťte Avenger: http://www.viry.cz/forum/viewtopic.php?f=11&t=19832 tímto skriptem:

Files to delete:
c:\windows\DUMP53d4.tmp

[Poruon13]

Udělal jsem,počítač se resetnul,ale nic se neobjevilo,takže jsem se opět dostal do nouzového režimu vyhledal avenger.txt a vkládám log


//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////

Platform: Windows XP (build 2600, Service Pack 3)
Wed May 18 20:29:55 2011

20:29:55: Error: Invalid script. A valid script must begin with a command directive.
Aborting execution!


//////////////////////////////////////////


//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////

Platform: Windows XP (build 2600, Service Pack 3)
Wed May 18 20:30:13 2011

20:30:13: Error: Invalid script. A valid script must begin with a command directive.
Aborting execution!


//////////////////////////////////////////


Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "c:\windows\DUMP53d4.tmp" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

[Rudy]

Omlouvám se, že jsem vás přehlédl. Soubor byl smazán. Změnilo se něco?

[Poruon13]

V Pořádku Nezměnilo se vůbec nic,stále se načítá pomalui,nakonec se plocha vůbec nenačte tak už nevím

[Rudy]

Zkuste obnovu systému k datu, kdy korketně fungoval.

[Poruon13]

To jsem zkoušel,ale také to nepomohlo,načetlo se mi to zase na den,kdy už jsem neměl ikony

[Rudy]

Proveďte ještě sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 . Dejte log. pbávám se ale, že je poškozen systém.

[Poruon13]

Dobře zkusím a dám log. A v případě poškození systému = přeinstalace systému ?