Prosím o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Nordal
Návštěvník
Návštěvník
Příspěvky: 5
Registrován: 22 Říj 2007 21:53

Prosím o kontrolu logu

#1 Příspěvek od Nordal »

Hezký den, moc prosím o kontrolu logu. Zabrousil jsem na jistou web stránku, kde mi začaly vyskakovat okna ve smyslu že můj PC je infikovaný a je třeba cosi naistalovat pro jeho ochranu atd. Na to jsem samozřejmě neskočil, ihned jsem vytáhnul lan kabel a restartoval PC, ale nevím jestli jsem přece jen v tom okamžiku už něco nechytil.




Logfile of random's system information tool 1.08 (written by random/random)
Run by Zdenek at 2011-06-08 12:55:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 403 GB (84%) free of 477 GB
Total RAM: 4079 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:55:43, on 8.6.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10s_ActiveX.exe
C:\Program Files\trend micro\Zdenek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Úložná technologie Intel(R) Rapid (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5993 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10s_ActiveX.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Zdenek\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-01-04 11772520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-11-05 283160]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-04-19 336384]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-06-08 12:55:38 ----D---- C:\rsit
2011-06-08 12:55:38 ----D---- C:\Program Files\trend micro
2011-05-29 18:14:51 ----D---- C:\ProgramData\CCP
2011-05-29 18:08:40 ----D---- C:\EVE
2011-05-28 16:39:32 ----D---- C:\Zdenek
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-05-28 16:31:44 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-05-28 16:31:44 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-05-28 16:31:43 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-05-28 16:31:43 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-05-28 16:31:42 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-05-28 16:31:41 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2011-05-28 16:31:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-05-28 16:31:40 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-05-28 16:31:39 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\xinput1_3.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-05-28 16:31:38 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-05-28 16:31:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\d3dx10.dll
2011-05-28 16:31:37 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-05-28 16:31:36 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\xinput1_2.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\xinput1_1.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-05-28 16:31:36 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-05-28 16:31:35 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-05-28 16:31:35 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-05-28 16:31:35 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-05-28 16:31:35 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-05-28 16:31:35 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-05-28 16:31:35 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-05-28 16:31:35 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-05-28 16:31:35 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-05-28 16:31:35 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-05-28 16:31:35 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-05-28 16:25:55 ----D---- C:\Windows\SYSWOW64\directx
2011-05-28 16:25:27 ----D---- C:\Users\Zdenek\AppData\Roaming\Rift
2011-05-28 16:20:35 ----D---- C:\RIFT Game
2011-05-28 16:19:29 ----D---- C:\Windows\Panther
2011-05-28 16:17:16 ----D---- C:\Program Files (x86)\Adobe
2011-05-28 16:17:07 ----D---- C:\ProgramData\Adobe
2011-05-28 16:11:32 ----D---- C:\Windows\SYSWOW64\Wat
2011-05-28 16:11:32 ----D---- C:\Windows\system32\Wat
2011-05-28 16:08:29 ----A---- C:\Windows\system32\MRT.exe
2011-05-28 16:08:25 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2011-05-28 16:08:25 ----A---- C:\Windows\system32\poqexec.exe
2011-05-28 16:07:15 ----A---- C:\Windows\system32\EncDec.dll
2011-05-28 16:07:14 ----A---- C:\Windows\SYSWOW64\sbe.dll
2011-05-28 16:07:14 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-05-28 16:07:14 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-05-28 16:07:14 ----A---- C:\Windows\system32\sbe.dll
2011-05-28 16:07:14 ----A---- C:\Windows\system32\CPFilters.dll
2011-05-28 16:07:13 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-05-28 16:07:13 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-05-28 16:07:12 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-05-28 16:07:12 ----A---- C:\Windows\system32\win32k.sys
2011-05-28 16:07:12 ----A---- C:\Windows\system32\mfc42u.dll
2011-05-28 16:07:11 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2011-05-28 16:07:11 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2011-05-28 16:07:11 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-05-28 16:07:11 ----A---- C:\Windows\system32\mfc42.dll
2011-05-28 16:07:11 ----A---- C:\Windows\system32\kerberos.dll
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-05-28 16:07:10 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\winresume.exe
2011-05-28 16:07:10 ----A---- C:\Windows\system32\winload.exe
2011-05-28 16:07:10 ----A---- C:\Windows\system32\kdusb.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\kdcom.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\kd1394.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\inetcomm.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\fontsub.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\dnsrslvr.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\dnscacheugc.exe
2011-05-28 16:07:10 ----A---- C:\Windows\system32\dnsapi.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\atmlib.dll
2011-05-28 16:07:10 ----A---- C:\Windows\system32\atmfd.dll
2011-05-28 16:07:09 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-05-28 16:07:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-05-28 16:07:09 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-05-28 16:07:09 ----A---- C:\Windows\system32\drivers\bowser.sys
2011-05-28 16:07:08 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-05-28 16:07:08 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-05-28 16:07:08 ----A---- C:\Windows\system32\drivers\srv.sys
2011-05-28 16:07:02 ----A---- C:\Windows\system32\FXSCOVER.exe
2011-05-28 16:04:25 ----D---- C:\Users\Zdenek\AppData\Roaming\Macromedia
2011-05-28 16:04:25 ----D---- C:\Users\Zdenek\AppData\Roaming\Adobe
2011-05-28 16:04:23 ----D---- C:\Windows\SYSWOW64\Macromed
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\wextract.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\url.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\occache.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\msrating.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\msls31.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\mshta.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\inseng.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieakui.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieaksie.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ieakeng.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\ie4uinit.exe
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\icardie.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2011-05-28 16:00:28 ----A---- C:\Windows\SYSWOW64\admparse.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\wininet.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\wextract.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\webcheck.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\vbscript.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\urlmon.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\url.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\pngfilt.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\occache.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\msrating.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\msls31.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\mshtmler.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\mshtmled.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\mshtml.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\mshta.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\msfeedssync.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\msfeeds.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\licmgr10.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\jsproxy.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\jscript9.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\jscript.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\inseng.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\imgutil.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iexpress.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieUnatt.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieui.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iesysprep.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iesetup.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iertutil.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iernonce.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iepeers.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieframe.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\iedkcs32.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieapfltr.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieakui.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieaksie.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ieakeng.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\IEAdvpack.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\ie4uinit.exe
2011-05-28 16:00:28 ----A---- C:\Windows\system32\icardie.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\dxtrans.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\dxtmsft.dll
2011-05-28 16:00:28 ----A---- C:\Windows\system32\admparse.dll
2011-05-28 15:53:12 ----D---- C:\Users\Zdenek\AppData\Roaming\ATI
2011-05-28 15:53:12 ----D---- C:\ProgramData\ATI
2011-05-28 15:52:23 ----D---- C:\Program Files (x86)\AMD APP
2011-05-28 15:52:22 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-05-28 15:52:12 ----D---- C:\Program Files (x86)\ATI Technologies
2011-05-28 15:52:05 ----D---- C:\Program Files\ATI
2011-05-28 15:51:52 ----D---- C:\Program Files\ATI Technologies
2011-05-28 15:51:27 ----D---- C:\ATI
2011-05-28 15:46:41 ----A---- C:\Windows\system32\RTNUninst64.dll
2011-05-28 15:46:41 ----A---- C:\Windows\system32\RtNicProp64.dll
2011-05-28 15:46:41 ----A---- C:\Windows\system32\drivers\Rt64win7.sys
2011-05-28 15:44:52 ----D---- C:\Windows\SYSWOW64\RTCOM
2011-05-28 15:44:52 ----D---- C:\Program Files\Realtek
2011-05-28 15:44:41 ----A---- C:\Windows\system32\WavesGUILib.dll
2011-05-28 15:44:40 ----A---- C:\Windows\SYSWOW64\SFCOM.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SRSWOW64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SRSTSX64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SRSTSH64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SRSHP64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SFSS_APO.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SFNHK64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SFCOM64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\SFAPO64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\RtlCPAPI64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\RtkCfg64.dll
2011-05-28 15:44:40 ----A---- C:\Windows\system32\RtkApi64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RtPgEx64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RtkAPO64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RTEEP64A.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RTEEL64A.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RTEEG64A.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RTEED64A.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RTCOM64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RP3DHT64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RP3DAA64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\RCoInst64.dll
2011-05-28 15:44:39 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys
2011-05-28 15:44:38 ----A---- C:\Windows\system32\R4EEP64A.dll
2011-05-28 15:44:38 ----A---- C:\Windows\system32\R4EEL64A.dll
2011-05-28 15:44:38 ----A---- C:\Windows\system32\R4EEG64A.dll
2011-05-28 15:44:38 ----A---- C:\Windows\system32\R4EED64A.dll
2011-05-28 15:44:38 ----A---- C:\Windows\system32\R4EEA64A.dll
2011-05-28 15:44:38 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2011-05-28 15:44:37 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2011-05-28 15:44:37 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2011-05-28 15:44:37 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2011-05-28 15:44:37 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2011-05-28 15:44:35 ----D---- C:\Program Files (x86)\Realtek
2011-05-28 15:44:35 ----A---- C:\Windows\system32\FMAPO64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSLFXAPO64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSGFXAPO64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSBoostDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\AERTAR64.dll
2011-05-28 15:44:35 ----A---- C:\Windows\system32\AERTAC64.dll
2011-05-28 15:44:26 ----HD---- C:\Program Files (x86)\Temp
2011-05-28 15:44:24 ----R---- C:\Windows\RtlExUpd.dll
2011-05-28 15:42:32 ----D---- C:\Program Files\GIGABYTE
2011-05-28 15:42:32 ----D---- C:\Program Files (x86)\GIGABYTE
2011-05-28 15:42:32 ----A---- C:\Windows\system32\drivers\AppleCharger.sys
2011-05-28 15:42:32 ----A---- C:\Windows\system32\AppleChargerSrv.exe
2011-05-28 15:42:08 ----D---- C:\Program Files (x86)\Renesas Electronics
2011-05-28 15:41:53 ----SHD---- C:\Windows\Installer
2011-05-28 15:39:48 ----D---- C:\Users\Zdenek\AppData\Roaming\Intel Corporation
2011-05-28 15:38:55 ----A---- C:\Windows\system32\drivers\iaStor.sys
2011-05-28 15:38:34 ----D---- C:\Program Files (x86)\Marvell
2011-05-28 15:38:20 ----A---- C:\Windows\SYSWOW64\drivers\IntelMEFWVer.dll
2011-05-28 15:38:20 ----A---- C:\Windows\system32\drivers\IntelMEFWVer.dll
2011-05-28 15:38:07 ----A---- C:\Windows\system32\drivers\HECIx64.sys
2011-05-28 15:38:05 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-05-28 15:38:05 ----D---- C:\Users\Zdenek\AppData\Roaming\InstallShield
2011-05-28 15:35:57 ----RA---- C:\Windows\SYSWOW64\CSVer.dll
2011-05-28 15:35:57 ----D---- C:\Program Files (x86)\Intel
2011-05-28 15:35:44 ----D---- C:\Intel
2011-05-28 15:35:22 ----A---- C:\Windows\GSetup.ini
2011-05-28 15:32:56 ----D---- C:\Users\Zdenek\AppData\Roaming\Identities
2011-05-28 15:32:48 ----SD---- C:\Users\Zdenek\AppData\Roaming\Microsoft
2011-05-28 15:32:48 ----D---- C:\Users\Zdenek\AppData\Roaming\Media Center Programs
2011-05-28 15:32:43 ----SHD---- C:\Recovery
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Šablony
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Plocha
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Oblíbené položky
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Nabídka Start
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Dokumenty
2011-05-28 15:32:43 ----SHD---- C:\ProgramData\Data aplikací
2011-05-28 15:32:41 ----D---- C:\Windows\SoftwareDistribution
2011-05-28 15:20:22 ----D---- C:\Windows\Prefetch
2011-05-28 15:19:54 ----SHD---- C:\System Volume Information
2011-05-28 15:19:54 ----ASH---- C:\pagefile.sys
2011-05-28 15:19:54 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2011-06-08 12:55:40 ----D---- C:\Windows\Temp
2011-06-08 12:55:38 ----RD---- C:\Program Files
2011-06-08 12:52:27 ----D---- C:\Windows\System32
2011-06-08 12:52:27 ----D---- C:\Windows\inf
2011-06-08 12:52:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-06-08 12:47:42 ----D---- C:\Windows\system32\config
2011-06-06 18:43:15 ----D---- C:\Windows\system32\LogFiles
2011-06-02 09:04:25 ----D---- C:\Windows\rescache
2011-05-30 13:50:51 ----D---- C:\Windows\Microsoft.NET
2011-05-30 13:50:47 ----RSD---- C:\Windows\assembly
2011-05-29 20:52:41 ----D---- C:\Windows\system32\catroot2
2011-05-29 18:23:08 ----D---- C:\Windows\winsxs
2011-05-29 18:22:54 ----D---- C:\Windows\system32\catroot
2011-05-29 18:14:51 ----HD---- C:\ProgramData
2011-05-28 16:31:44 ----D---- C:\Windows\SysWOW64
2011-05-28 16:31:35 ----D---- C:\Windows
2011-05-28 16:25:55 ----D---- C:\Windows\Logs
2011-05-28 16:18:23 ----RD---- C:\Program Files (x86)
2011-05-28 16:18:22 ----D---- C:\Windows\Downloaded Program Files
2011-05-28 16:17:16 ----D---- C:\Program Files (x86)\Common Files
2011-05-28 16:09:10 ----D---- C:\Windows\system32\drivers
2011-05-28 16:09:10 ----D---- C:\Windows\system32\Boot
2011-05-28 16:08:29 ----D---- C:\Windows\debug
2011-05-28 16:05:12 ----D---- C:\Program Files\Internet Explorer
2011-05-28 16:01:00 ----D---- C:\Windows\servicing
2011-05-28 16:01:00 ----D---- C:\Program Files (x86)\Internet Explorer
2011-05-28 16:00:54 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-05-28 16:00:54 ----D---- C:\Windows\system32\cs-CZ
2011-05-28 16:00:39 ----D---- C:\Windows\SYSWOW64\migration
2011-05-28 16:00:38 ----D---- C:\Windows\SYSWOW64\en-US
2011-05-28 16:00:38 ----D---- C:\Windows\system32\migration
2011-05-28 16:00:38 ----D---- C:\Windows\PolicyDefinitions
2011-05-28 16:00:37 ----D---- C:\Windows\system32\en-US
2011-05-28 15:52:22 ----D---- C:\Program Files\Common Files
2011-05-28 15:52:18 ----D---- C:\Windows\system32\DriverStore
2011-05-28 15:52:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-05-28 15:38:20 ----D---- C:\Windows\SYSWOW64\drivers
2011-05-28 15:33:39 ----D---- C:\Windows\system32\CodeIntegrity
2011-05-28 15:32:55 ----SHD---- C:\$Recycle.Bin
2011-05-28 15:32:48 ----RD---- C:\Users
2011-05-28 15:32:43 ----SD---- C:\ProgramData\Microsoft
2011-05-28 15:32:43 ----D---- C:\Program Files\Windows NT
2011-05-28 15:22:39 ----D---- C:\Windows\system32\sysprep
2011-05-24 19:14:10 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-11-05 438808]
R0 mv91cons;Marvell 91xx Config Device Driver; C:\Windows\system32\DRIVERS\mv91cons.sys [2010-11-22 24880]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2011-01-10 21104]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-20 9319936]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-20 306176]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2011-03-30 114704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-01-04 2697448]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-11-19 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-11-19 181248]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-12-24 412264]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-20 203776]
R2 IAStorDataMgrSvc;Úložná technologie Intel(R) Rapid; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-05 13336]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-28 1255736]

-----------------EOF-----------------

Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#2 Příspěvek od chodnik74 »

Dobrý den :welcome:
Log vypadá čistý :) Jsou s PC nějaké problémy?

preventivně pohledáme havěť..

:arrow: Malwarebytes' Anti-Malware Obrázek
  • Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
  • Vybereme Úplná kontrola a klikneme na tlačítko ProhledatObrázek
  • Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
  • Objeví se vám log,který mi sem vložte
  • NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci :twisted:
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:
Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2

Nordal
Návštěvník
Návštěvník
Příspěvky: 5
Registrován: 22 Říj 2007 21:53

Re: Prosím o kontrolu logu

#3 Příspěvek od Nordal »

Moc děkuju, přikládám log z Malwarebytes' Anti-Malware. Jinak PC se chová normálně, tak snad je všechno jak má být :)




Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Verze databáze: 6808

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

8.6.2011 13:40:25
mbam-log-2011-06-08 (13-40-25).txt

Typ: Úplná kontrola (C:\|)
Kontrolované objekty: 225371
Uplynulý čas: 5 minut, 41 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#4 Příspěvek od chodnik74 »

:arrow: Znovu si spustíme HijackThisObrázek

Kód: Vybrat vše

C:\Program Files\trend micro\Zdenek.exe
(Pokud nenajdeme nebo nemáme,tak stáhneme ZDE )
  • Dále klikneme na tlačítko Do a system scan only
  • Najdeme a označíme následující položky:

    Kód: Vybrat vše

    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    
  • klikneme na položku Fix checked a potvrdíme tlačítkem Ano
:arrow: Obrázek TFC
  • Stáhneme a spustíme program
  • Klikneme na Start a potvrdíme OK
  • Program začne uklízet,poté restartuje pc
  • po použití program smažte

Jinak je to vše :)
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:
Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2

Nordal
Návštěvník
Návštěvník
Příspěvky: 5
Registrován: 22 Říj 2007 21:53

Re: Prosím o kontrolu logu

#5 Příspěvek od Nordal »

Ještě jednou moc děkuju :)

Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:

Re: Prosím o kontrolu logu

#6 Příspěvek od chodnik74 »

Nemáte za co :) rádo se stalo,hezký zbytek dne :bye: :closed:
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:
Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2

Odpovědět