VIRY.CZ

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 11:43 on 29/01/2010 by Janinka (Administrator - Elevation successful)

========== regfind ==========

Searching for "{7C21A4C9-F61F-4AC4-B722-A6E19C16F220}"
No data found.

Searching for "{E10A9785-9598-4754-B552-92431C1C35F8}"
No data found.

Searching for "7C21A4C9-F61F-4AC4-B722-A6E19C16F220"
No data found.

Searching for "E10A9785-9598-4754-B552-92431C1C35F8"
No data found.

-=End Of File=-

Prosím o nový ComboFix log. Co ten Norton? Už je pryč?

Vypadá to, že pryč není, teď jsem pustila CF a Nortona mi hlásí....

ComboFix 10-01-27.02 - Janinka 30.01.2010 19:07:56.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.894.300 [GMT 1:00]
Spuštěný z: c:\documents and settings\Janinka\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: Norton Internet Security 2006 *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security 2006 *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat

----- BITS: Možné infikované stránky -----

hxxp://armmf.adobe.com
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-28 do 2010-01-30 )))))))))))))))))))))))))))))))
.

2010-01-29 10:20 . 2010-01-29 10:22 -------- dc-h--w- c:\windows\ie8
2010-01-28 22:01 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-01-28 22:01 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-01-28 22:01 . 2009-02-13 10:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-01-28 22:01 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-01-28 22:01 . 2010-01-28 22:01 -------- d-----w- c:\program files\Avira
2010-01-28 22:01 . 2010-01-28 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2010-01-27 18:43 . 2010-01-28 22:15 -------- d-----w- c:\program files\trend micro
2010-01-27 18:43 . 2010-01-27 18:44 -------- d-----w- C:\rsit
2010-01-02 18:36 . 2009-12-16 13:42 43008 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-01-02 18:36 . 2009-12-16 13:42 340480 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-01-02 18:36 . 2009-12-16 13:42 872960 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-01-02 18:36 . 2009-12-16 13:41 346624 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-01-01 19:34 . 2010-01-01 19:34 -------- d-----w- c:\program files\uTorrent

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-29 19:02 . 2007-10-10 12:39 1 ----a-w- c:\documents and settings\Janinka\Application Data\OpenOffice.org2\user\uno_packages\cache\stamp.sys
2010-01-29 19:02 . 2007-10-10 12:37 -------- d-----w- c:\documents and settings\Janinka\Application Data\OpenOffice.org2
2010-01-28 20:48 . 2007-08-18 09:31 -------- d-----w- c:\documents and settings\Janinka\Application Data\uTorrent
2010-01-28 13:19 . 2008-10-31 07:42 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-25 21:07 . 2007-07-25 14:41 -------- d-----w- c:\documents and settings\Janinka\Application Data\Skype
2010-01-25 15:01 . 2009-01-28 17:29 -------- d-----w- c:\documents and settings\Janinka\Application Data\skypePM
2010-01-15 17:52 . 2008-06-05 13:19 -------- d-----w- c:\program files\AVG
2009-12-21 19:14 . 2004-09-10 14:57 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 15:51 . 2004-09-10 14:56 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-04 12:21 . 2009-11-04 12:21 152576 ----a-w- c:\documents and settings\Janinka\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2007-12-25 18:29 . 2007-12-25 18:29 18481024 -c--a-w- c:\program files\setupcze.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-01-27_20.21.49 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-07 01:19 . 2007-11-07 01:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
+ 2008-07-29 05:07 . 2008-07-29 05:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
+ 2008-07-29 05:07 . 2008-07-29 05:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
+ 2010-01-30 08:38 . 2010-01-30 08:38 16384 c:\windows\temp\Perflib_Perfdata_9ec.dat
- 2007-01-24 18:44 . 2009-01-07 16:21 26144 c:\windows\system32\spupdsvc.exe
+ 2007-01-24 18:44 . 2009-01-07 17:21 26144 c:\windows\system32\spupdsvc.exe
+ 2009-07-28 06:20 . 2009-01-07 17:20 16928 c:\windows\system32\spmsg.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 46592 c:\windows\system32\pngfilt.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 46592 c:\windows\system32\pngfilt.dll
- 2004-09-10 14:57 . 2009-12-13 12:52 71394 c:\windows\system32\perfc009.dat
+ 2004-09-10 14:57 . 2010-01-29 10:11 71394 c:\windows\system32\perfc009.dat
+ 2006-06-29 07:05 . 2009-01-07 17:20 23552 c:\windows\system32\normaliz.dll
- 2006-06-29 07:05 . 2009-01-07 16:20 23552 c:\windows\system32\normaliz.dll
- 2006-06-28 16:59 . 2009-01-07 16:20 24576 c:\windows\system32\nlsdl.dll
+ 2006-06-28 16:59 . 2009-01-07 17:20 24576 c:\windows\system32\nlsdl.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 48128 c:\windows\system32\mshtmler.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 48128 c:\windows\system32\mshtmler.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 66560 c:\windows\system32\mshtmled.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 66560 c:\windows\system32\mshtmled.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 45568 c:\windows\system32\mshta.exe
+ 2004-09-10 14:57 . 2009-03-08 03:31 45568 c:\windows\system32\mshta.exe
+ 2007-08-13 17:36 . 2009-03-08 03:31 13312 c:\windows\system32\msfeedssync.exe
- 2007-08-13 17:36 . 2009-03-08 02:31 13312 c:\windows\system32\msfeedssync.exe
+ 2004-09-10 14:57 . 2009-03-08 03:34 43008 c:\windows\system32\licmgr10.dll
- 2004-09-10 14:57 . 2009-03-08 02:34 43008 c:\windows\system32\licmgr10.dll
- 2004-09-10 14:57 . 2009-03-08 02:32 94720 c:\windows\system32\inseng.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 94720 c:\windows\system32\inseng.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 34816 c:\windows\system32\imgutil.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 34816 c:\windows\system32\imgutil.dll
- 2007-08-13 17:39 . 2009-03-08 02:32 36864 c:\windows\system32\ieudinit.exe
+ 2007-08-13 17:39 . 2009-03-08 03:32 36864 c:\windows\system32\ieudinit.exe
- 2004-09-10 14:57 . 2009-03-08 02:32 71680 c:\windows\system32\iesetup.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 71680 c:\windows\system32\iesetup.dll
- 2004-09-10 14:57 . 2009-03-08 02:32 55808 c:\windows\system32\iernonce.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 55808 c:\windows\system32\iernonce.dll
- 2006-06-29 07:05 . 2009-01-07 16:20 26112 c:\windows\system32\idndl.dll
+ 2006-06-29 07:05 . 2009-01-07 17:20 26112 c:\windows\system32\idndl.dll
+ 2007-08-13 17:36 . 2009-03-08 03:31 59904 c:\windows\system32\icardie.dll
- 2007-08-13 17:36 . 2009-03-08 02:31 59904 c:\windows\system32\icardie.dll
+ 2010-01-28 22:01 . 2009-05-11 08:12 28520 c:\windows\system32\drivers\ssmdrv.sys
+ 2007-01-24 18:58 . 2009-03-08 03:31 46592 c:\windows\system32\dllcache\pngfilt.dll
- 2007-01-24 18:58 . 2009-03-08 02:31 46592 c:\windows\system32\dllcache\pngfilt.dll
- 2007-08-13 17:01 . 2009-03-08 02:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-08-13 17:01 . 2009-03-08 03:31 48128 c:\windows\system32\dllcache\mshtmler.dll
- 2007-01-24 18:58 . 2009-03-08 02:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-01-24 18:58 . 2009-03-08 03:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 2007-08-13 17:32 . 2009-03-08 03:31 45568 c:\windows\system32\dllcache\mshta.exe
- 2007-08-13 17:32 . 2009-03-08 02:31 45568 c:\windows\system32\dllcache\mshta.exe
- 2004-09-10 14:57 . 2009-03-08 02:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2004-09-10 14:57 . 2009-03-08 03:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 94720 c:\windows\system32\dllcache\inseng.dll
- 2004-09-10 14:57 . 2009-03-08 02:32 94720 c:\windows\system32\dllcache\inseng.dll
+ 2007-08-13 17:36 . 2009-03-08 03:31 34816 c:\windows\system32\dllcache\imgutil.dll
- 2007-08-13 17:36 . 2009-03-08 02:31 34816 c:\windows\system32\dllcache\imgutil.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 71680 c:\windows\system32\dllcache\iesetup.dll
- 2004-09-10 14:57 . 2009-03-08 02:32 71680 c:\windows\system32\dllcache\iesetup.dll
- 2007-08-13 17:39 . 2009-03-08 02:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2007-08-13 17:39 . 2009-03-08 03:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2009-07-09 05:03 . 2009-12-11 08:38 69120 c:\windows\system32\dllcache\iecompat.dll
+ 2007-12-11 19:38 . 2009-03-08 03:31 59904 c:\windows\system32\dllcache\icardie.dll
- 2007-12-11 19:38 . 2009-03-08 02:31 59904 c:\windows\system32\dllcache\icardie.dll
- 2004-09-10 15:34 . 2009-03-08 02:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2004-09-10 15:34 . 2009-03-08 03:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2009-03-08 03:33 . 2009-03-08 03:33 18944 c:\windows\system32\dllcache\corpol.dll
- 2009-03-08 02:33 . 2009-03-08 02:33 18944 c:\windows\system32\dllcache\corpol.dll
- 2004-09-10 14:56 . 2009-03-08 02:32 72704 c:\windows\system32\dllcache\admparse.dll
+ 2004-09-10 14:56 . 2009-03-08 03:32 72704 c:\windows\system32\dllcache\admparse.dll
- 2004-09-10 14:56 . 2009-03-08 02:33 18944 c:\windows\system32\corpol.dll
+ 2004-09-10 14:56 . 2009-03-08 03:33 18944 c:\windows\system32\corpol.dll
+ 2004-09-10 14:56 . 2009-03-08 03:32 72704 c:\windows\system32\admparse.dll
- 2004-09-10 14:56 . 2009-03-08 02:32 72704 c:\windows\system32\admparse.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 12800 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-01-29 10:23 . 2008-07-08 13:02 17272 c:\windows\ie8updates\KB978207-IE8\spmsg.dll
+ 2010-01-29 10:23 . 2008-07-08 13:02 26488 c:\windows\ie8updates\KB978207-IE8\spcustom.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2010-01-29 10:22 . 2009-03-08 03:33 12288 c:\windows\ie8updates\KB976325-IE8\xpshims.dll
+ 2010-01-29 10:22 . 2009-05-26 11:40 17272 c:\windows\ie8updates\KB976325-IE8\spmsg.dll
+ 2010-01-29 10:22 . 2009-05-26 11:40 26488 c:\windows\ie8updates\KB976325-IE8\spcustom.dll
- 2009-12-11 21:12 . 2009-08-29 08:08 55296 c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
+ 2010-01-29 10:22 . 2009-03-08 03:31 55296 c:\windows\ie8updates\KB976325-IE8\msfeedsbs.dll
- 2009-12-11 21:12 . 2009-08-29 08:08 25600 c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
+ 2010-01-29 10:22 . 2009-03-08 03:33 25600 c:\windows\ie8updates\KB976325-IE8\jsproxy.dll
+ 2010-01-29 20:11 . 2008-07-08 13:02 17272 c:\windows\ie8updates\KB971961-IE8\spmsg.dll
+ 2010-01-29 20:11 . 2008-07-08 13:02 26488 c:\windows\ie8updates\KB971961-IE8\spcustom.dll
- 2009-07-09 05:01 . 2009-03-08 12:23 58464 c:\windows\ie8\spuninst\iecustom.dll
+ 2010-01-29 10:21 . 2009-03-08 13:23 58464 c:\windows\ie8\spuninst\iecustom.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 44544 c:\windows\ie8\pngfilt.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 44544 c:\windows\ie8\pngfilt.dll
- 2009-07-09 04:59 . 2007-08-13 17:01 48128 c:\windows\ie8\mshtmler.dll
+ 2010-01-29 10:20 . 2007-08-13 17:01 48128 c:\windows\ie8\mshtmler.dll
+ 2010-01-29 10:20 . 2007-08-13 17:32 45568 c:\windows\ie8\mshta.exe
- 2009-07-09 04:59 . 2007-08-13 17:32 45568 c:\windows\ie8\mshta.exe
+ 2010-01-29 10:20 . 2007-08-13 17:36 12288 c:\windows\ie8\msfeedssync.exe
- 2009-07-09 04:59 . 2007-08-13 17:36 12288 c:\windows\ie8\msfeedssync.exe
+ 2010-01-29 10:20 . 2009-04-29 04:55 52224 c:\windows\ie8\msfeedsbs.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 52224 c:\windows\ie8\msfeedsbs.dll
+ 2010-01-29 10:20 . 2007-08-13 17:44 40960 c:\windows\ie8\licmgr10.dll
- 2009-07-09 04:59 . 2007-08-13 17:44 40960 c:\windows\ie8\licmgr10.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 27648 c:\windows\ie8\jsproxy.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 27648 c:\windows\ie8\jsproxy.dll
+ 2010-01-29 10:20 . 2007-08-13 17:39 92672 c:\windows\ie8\inseng.dll
- 2009-07-09 04:59 . 2007-08-13 17:39 92672 c:\windows\ie8\inseng.dll
+ 2010-01-29 10:20 . 2007-08-13 17:36 36352 c:\windows\ie8\imgutil.dll
- 2009-07-09 04:59 . 2007-08-13 17:36 36352 c:\windows\ie8\imgutil.dll
+ 2010-01-29 10:20 . 2007-08-13 17:39 55296 c:\windows\ie8\iesetup.dll
- 2009-07-09 04:59 . 2007-08-13 17:39 55296 c:\windows\ie8\iesetup.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 44544 c:\windows\ie8\iernonce.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 44544 c:\windows\ie8\iernonce.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 78336 c:\windows\ie8\ieencode.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 78336 c:\windows\ie8\ieencode.dll
- 2009-07-09 04:59 . 2009-04-28 09:05 70656 c:\windows\ie8\ie4uinit.exe
+ 2010-01-29 10:20 . 2009-04-28 09:05 70656 c:\windows\ie8\ie4uinit.exe
+ 2010-01-29 10:20 . 2009-04-29 04:55 63488 c:\windows\ie8\icardie.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 63488 c:\windows\ie8\icardie.dll
+ 2010-01-29 10:20 . 2007-08-13 17:18 60416 c:\windows\ie8\hmmapi.dll
- 2009-07-09 04:59 . 2007-08-13 17:18 60416 c:\windows\ie8\hmmapi.dll
+ 2010-01-29 10:20 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll
- 2009-07-09 04:59 . 2008-04-14 00:11 35328 c:\windows\ie8\corpol.dll
- 2009-07-09 04:59 . 2007-08-13 17:39 71680 c:\windows\ie8\admparse.dll
+ 2010-01-29 10:20 . 2007-08-13 17:39 71680 c:\windows\ie8\admparse.dll
+ 2010-01-29 10:22 . 2009-03-08 03:35 2048 c:\windows\ie8updates\KB978506-IE8\iecompat.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
+ 2008-07-29 02:54 . 2008-07-29 02:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_d01483b2\atl90.dll
+ 2007-12-11 19:36 . 2009-01-07 17:21 121856 c:\windows\system32\xmllite.dll
- 2007-12-11 19:36 . 2009-01-07 16:21 121856 c:\windows\system32\xmllite.dll
- 2007-08-13 17:45 . 2009-03-08 02:34 208384 c:\windows\system32\WinFXDocObj.exe
+ 2007-08-13 17:45 . 2009-03-08 03:34 208384 c:\windows\system32\WinFXDocObj.exe
- 2004-09-10 14:57 . 2009-03-08 02:34 236544 c:\windows\system32\webcheck.dll
+ 2004-09-10 14:57 . 2009-03-08 03:34 236544 c:\windows\system32\webcheck.dll
- 2004-09-10 14:57 . 2009-03-08 02:33 420352 c:\windows\system32\vbscript.dll
+ 2004-09-10 14:57 . 2009-03-08 03:33 420352 c:\windows\system32\vbscript.dll
+ 2004-09-10 14:57 . 2009-03-08 03:34 105984 c:\windows\system32\url.dll
- 2004-09-10 14:57 . 2009-03-08 02:34 105984 c:\windows\system32\url.dll
- 2004-09-10 14:57 . 2009-12-13 12:52 441458 c:\windows\system32\perfh009.dat
+ 2004-09-10 14:57 . 2010-01-29 10:11 441458 c:\windows\system32\perfh009.dat
- 2004-09-10 14:57 . 2009-03-08 02:32 611840 c:\windows\system32\mstime.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 611840 c:\windows\system32\mstime.dll
+ 2004-09-10 14:57 . 2009-03-08 03:34 193536 c:\windows\system32\msrating.dll
- 2004-09-10 14:57 . 2009-03-08 02:34 193536 c:\windows\system32\msrating.dll
- 2004-09-10 14:57 . 2009-03-08 02:22 156160 c:\windows\system32\msls31.dll
+ 2004-09-10 14:57 . 2009-03-08 03:22 156160 c:\windows\system32\msls31.dll
+ 2009-01-07 16:20 . 2009-01-07 17:20 265720 c:\windows\system32\msdbg2.dll
- 2009-01-07 16:20 . 2009-01-07 16:20 265720 c:\windows\system32\msdbg2.dll
+ 2007-08-13 17:54 . 2009-03-08 03:22 164352 c:\windows\system32\ieui.dll
- 2007-08-13 17:54 . 2009-03-08 02:22 164352 c:\windows\system32\ieui.dll
+ 2007-07-11 11:27 . 2009-03-08 03:11 445952 c:\windows\system32\ieapfltr.dll
- 2007-07-11 11:27 . 2009-03-08 02:11 445952 c:\windows\system32\ieapfltr.dll
+ 2004-09-10 14:57 . 2009-03-08 03:32 163840 c:\windows\system32\ieakui.dll
- 2004-09-10 14:57 . 2009-03-08 02:32 163840 c:\windows\system32\ieakui.dll
+ 2004-09-10 14:57 . 2009-03-08 03:33 229376 c:\windows\system32\ieaksie.dll
- 2004-09-10 14:57 . 2009-03-08 02:33 229376 c:\windows\system32\ieaksie.dll
+ 2004-09-10 14:57 . 2009-03-08 03:33 125952 c:\windows\system32\ieakeng.dll
- 2004-09-10 14:57 . 2009-03-08 02:33 125952 c:\windows\system32\ieakeng.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 216064 c:\windows\system32\dxtrans.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 216064 c:\windows\system32\dxtrans.dll
+ 2004-09-10 14:57 . 2009-03-08 03:31 348160 c:\windows\system32\dxtmsft.dll
- 2004-09-10 14:57 . 2009-03-08 02:31 348160 c:\windows\system32\dxtmsft.dll
+ 2007-08-13 17:54 . 2009-03-08 03:34 236544 c:\windows\system32\dllcache\webcheck.dll
- 2007-08-13 17:54 . 2009-03-08 02:34 236544 c:\windows\system32\dllcache\webcheck.dll
- 2004-09-10 15:34 . 2009-03-08 02:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2004-09-10 15:34 . 2009-03-08 03:33 759296 c:\windows\system32\dllcache\VGX.dll
- 2008-05-09 10:53 . 2009-03-08 02:33 420352 c:\windows\system32\dllcache\vbscript.dll
+ 2008-05-09 10:53 . 2009-03-08 03:33 420352 c:\windows\system32\dllcache\vbscript.dll
- 2007-08-13 17:44 . 2009-03-08 02:34 105984 c:\windows\system32\dllcache\url.dll
+ 2007-08-13 17:44 . 2009-03-08 03:34 105984 c:\windows\system32\dllcache\url.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 134144 c:\windows\system32\dllcache\sqmapi.dll
- 2009-01-07 16:20 . 2009-01-07 16:20 134144 c:\windows\system32\dllcache\sqmapi.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 474112 c:\windows\system32\dllcache\shlwapi.dll
- 2009-01-07 16:20 . 2009-01-07 16:20 474112 c:\windows\system32\dllcache\shlwapi.dll
- 2007-01-24 18:58 . 2009-03-08 02:32 611840 c:\windows\system32\dllcache\mstime.dll
+ 2007-01-24 18:58 . 2009-03-08 03:32 611840 c:\windows\system32\dllcache\mstime.dll
- 2007-01-24 18:58 . 2009-03-08 02:34 193536 c:\windows\system32\dllcache\msrating.dll
+ 2007-01-24 18:58 . 2009-03-08 03:34 193536 c:\windows\system32\dllcache\msrating.dll
- 2007-08-13 17:54 . 2009-03-08 02:22 156160 c:\windows\system32\dllcache\msls31.dll
+ 2007-08-13 17:54 . 2009-03-08 03:22 156160 c:\windows\system32\dllcache\msls31.dll
- 2007-08-13 17:43 . 2009-03-08 12:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2007-08-13 17:43 . 2009-03-08 13:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2007-12-11 19:38 . 2009-03-08 03:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
- 2007-12-11 19:38 . 2009-03-08 02:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
- 2007-08-13 16:56 . 2009-03-08 02:32 163840 c:\windows\system32\dllcache\ieakui.dll
+ 2007-08-13 16:56 . 2009-03-08 03:32 163840 c:\windows\system32\dllcache\ieakui.dll
- 2007-08-13 17:39 . 2009-03-08 02:33 229376 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-08-13 17:39 . 2009-03-08 03:33 229376 c:\windows\system32\dllcache\ieaksie.dll
- 2007-08-13 17:39 . 2009-03-08 02:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-08-13 17:39 . 2009-03-08 03:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-01-24 18:58 . 2009-03-08 03:31 216064 c:\windows\system32\dllcache\dxtrans.dll
- 2007-01-24 18:58 . 2009-03-08 02:31 216064 c:\windows\system32\dllcache\dxtrans.dll
- 2007-01-24 18:58 . 2009-03-08 02:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-01-24 18:58 . 2009-03-08 03:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-08-13 17:39 . 2009-03-08 03:32 128512 c:\windows\system32\dllcache\advpack.dll
- 2007-08-13 17:39 . 2009-03-08 02:32 128512 c:\windows\system32\dllcache\advpack.dll
+ 2004-09-10 14:56 . 2009-03-08 03:32 128512 c:\windows\system32\advpack.dll
- 2004-09-10 14:56 . 2009-03-08 02:32 128512 c:\windows\system32\advpack.dll
+ 2010-01-28 21:59 . 2010-01-28 21:59 228352 c:\windows\Installer\284ba.msi
+ 2010-01-29 10:22 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB978506-IE8\spuninst\updspapi.dll
+ 2010-01-29 10:22 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB978506-IE8\spuninst\spuninst.exe
+ 2010-01-29 10:23 . 2009-10-29 07:45 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 916480 c:\windows\ie8updates\KB978207-IE8\wininet.dll
+ 2010-01-29 10:23 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB978207-IE8\updspapi.dll
+ 2010-01-29 10:23 . 2008-07-08 13:02 755576 c:\windows\ie8updates\KB978207-IE8\update.exe
+ 2010-01-29 10:23 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
- 2010-01-22 23:51 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
- 2010-01-22 23:51 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-01-29 10:23 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-01-29 10:23 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB978207-IE8\spuninst.exe
- 2010-01-22 23:50 . 2009-10-29 07:45 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 206848 c:\windows\ie8updates\KB978207-IE8\occache.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 246272 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 184320 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 387584 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
+ 2010-01-29 10:23 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
- 2010-01-22 23:50 . 2009-10-28 14:40 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
+ 2010-01-29 10:22 . 2009-03-08 03:34 914944 c:\windows\ie8updates\KB976325-IE8\wininet.dll
+ 2010-01-29 10:22 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB976325-IE8\updspapi.dll
+ 2010-01-29 10:22 . 2009-05-26 11:40 755576 c:\windows\ie8updates\KB976325-IE8\update.exe
- 2009-12-11 21:12 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB976325-IE8\spuninst\updspapi.dll
+ 2010-01-29 10:22 . 2009-05-26 11:40 382840 c:\windows\ie8updates\KB976325-IE8\spuninst\updspapi.dll
- 2009-12-11 21:12 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB976325-IE8\spuninst\spuninst.exe
+ 2010-01-29 10:22 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB976325-IE8\spuninst\spuninst.exe
+ 2010-01-29 10:22 . 2009-05-26 11:40 231288 c:\windows\ie8updates\KB976325-IE8\spuninst.exe
+ 2010-01-29 10:22 . 2009-03-08 03:34 109568 c:\windows\ie8updates\KB976325-IE8\occache.dll
+ 2010-01-29 10:22 . 2009-03-08 03:32 594432 c:\windows\ie8updates\KB976325-IE8\msfeeds.dll
- 2009-12-11 21:12 . 2009-08-29 08:08 594432 c:\windows\ie8updates\KB976325-IE8\msfeeds.dll
+ 2010-01-29 10:22 . 2009-03-08 03:33 246784 c:\windows\ie8updates\KB976325-IE8\ieproxy.dll
+ 2010-01-29 10:22 . 2009-03-08 03:31 183808 c:\windows\ie8updates\KB976325-IE8\iepeers.dll
+ 2010-01-29 10:22 . 2009-03-08 13:09 391536 c:\windows\ie8updates\KB976325-IE8\iedkcs32.dll
+ 2010-01-29 10:22 . 2009-03-08 03:32 173056 c:\windows\ie8updates\KB976325-IE8\ie4uinit.exe
- 2009-12-11 21:12 . 2009-08-28 10:35 173056 c:\windows\ie8updates\KB976325-IE8\ie4uinit.exe
+ 2010-01-29 20:11 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\updspapi.dll
+ 2010-01-29 20:11 . 2008-07-08 13:02 755576 c:\windows\ie8updates\KB971961-IE8\update.exe
+ 2010-01-29 20:11 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
- 2009-09-10 19:23 . 2008-07-08 13:02 382840 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
- 2009-09-10 19:23 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-01-29 20:11 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-01-29 20:11 . 2008-07-08 13:02 231288 c:\windows\ie8updates\KB971961-IE8\spuninst.exe
+ 2010-01-29 20:11 . 2009-03-08 03:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
- 2009-09-10 19:23 . 2009-03-08 02:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 827392 c:\windows\ie8\wininet.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 827392 c:\windows\ie8\wininet.dll
+ 2010-01-29 10:20 . 2007-08-13 17:45 206336 c:\windows\ie8\winfxdocobj.exe
- 2009-07-09 04:59 . 2007-08-13 17:45 206336 c:\windows\ie8\winfxdocobj.exe
- 2009-07-09 04:59 . 2009-04-29 04:56 233472 c:\windows\ie8\webcheck.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 233472 c:\windows\ie8\webcheck.dll
+ 2010-01-29 10:20 . 2007-07-12 23:31 765952 c:\windows\ie8\vgx.dll
- 2009-07-09 04:59 . 2007-07-12 23:31 765952 c:\windows\ie8\vgx.dll
- 2009-07-09 04:59 . 2008-05-09 10:53 430080 c:\windows\ie8\vbscript.dll
+ 2010-01-29 10:20 . 2008-05-09 10:53 430080 c:\windows\ie8\vbscript.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 105984 c:\windows\ie8\url.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 105984 c:\windows\ie8\url.dll
- 2009-07-09 05:01 . 2009-01-07 16:21 382496 c:\windows\ie8\spuninst\updspapi.dll
+ 2010-01-29 10:21 . 2009-01-07 17:21 382496 c:\windows\ie8\spuninst\updspapi.dll
+ 2010-01-29 10:21 . 2009-01-07 17:20 231456 c:\windows\ie8\spuninst\spuninst.exe
- 2009-07-09 05:01 . 2009-01-07 16:20 231456 c:\windows\ie8\spuninst\spuninst.exe
- 2009-07-09 04:59 . 2006-09-06 16:43 213216 c:\windows\ie8\spuninst.exe
+ 2010-01-29 10:20 . 2006-09-06 16:43 213216 c:\windows\ie8\spuninst.exe
+ 2010-01-29 10:20 . 2009-04-29 04:56 102912 c:\windows\ie8\occache.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 102912 c:\windows\ie8\occache.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 671232 c:\windows\ie8\mstime.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 671232 c:\windows\ie8\mstime.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 193024 c:\windows\ie8\msrating.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 193024 c:\windows\ie8\msrating.dll
+ 2010-01-29 10:20 . 2007-08-13 17:54 156160 c:\windows\ie8\msls31.dll
- 2009-07-09 04:59 . 2007-08-13 17:54 156160 c:\windows\ie8\msls31.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 477696 c:\windows\ie8\mshtmled.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 477696 c:\windows\ie8\mshtmled.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 459264 c:\windows\ie8\msfeeds.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 459264 c:\windows\ie8\msfeeds.dll
+ 2010-01-29 10:20 . 2008-05-09 10:53 512000 c:\windows\ie8\jscript.dll
- 2009-07-09 04:59 . 2008-05-09 10:53 512000 c:\windows\ie8\jscript.dll
- 2009-07-09 04:59 . 2009-04-25 05:27 636088 c:\windows\ie8\iexplore.exe
+ 2010-01-29 10:20 . 2009-04-25 05:27 636088 c:\windows\ie8\iexplore.exe
- 2009-07-09 04:59 . 2007-08-13 17:54 180736 c:\windows\ie8\ieui.dll
+ 2010-01-29 10:20 . 2007-08-13 17:54 180736 c:\windows\ie8\ieui.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 268288 c:\windows\ie8\iertutil.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 268288 c:\windows\ie8\iertutil.dll
- 2009-07-09 04:59 . 2007-08-13 17:54 287744 c:\windows\ie8\ieproxy.dll
+ 2010-01-29 10:20 . 2007-08-13 17:54 287744 c:\windows\ie8\ieproxy.dll
+ 2010-01-29 10:20 . 2007-08-13 17:54 191488 c:\windows\ie8\iepeers.dll
- 2009-07-09 04:59 . 2007-08-13 17:54 191488 c:\windows\ie8\iepeers.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 385024 c:\windows\ie8\iedkcs32.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 385024 c:\windows\ie8\iedkcs32.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 383488 c:\windows\ie8\ieapfltr.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 383488 c:\windows\ie8\ieapfltr.dll
- 2009-07-09 04:59 . 2009-04-25 05:26 161792 c:\windows\ie8\ieakui.dll
+ 2010-01-29 10:20 . 2009-04-25 05:26 161792 c:\windows\ie8\ieakui.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 230400 c:\windows\ie8\ieaksie.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 230400 c:\windows\ie8\ieaksie.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 153088 c:\windows\ie8\ieakeng.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 153088 c:\windows\ie8\ieakeng.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 214528 c:\windows\ie8\dxtrans.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 214528 c:\windows\ie8\dxtrans.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 347136 c:\windows\ie8\dxtmsft.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 347136 c:\windows\ie8\dxtmsft.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 124928 c:\windows\ie8\advpack.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 124928 c:\windows\ie8\advpack.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 3783672 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll
+ 2008-07-29 07:05 . 2008-07-29 07:05 3768312 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll
+ 2007-02-12 15:10 . 2009-02-06 20:07 3698584 c:\windows\system32\ieapfltr.dat
- 2007-02-12 15:10 . 2009-02-06 19:07 3698584 c:\windows\system32\ieapfltr.dat
+ 2009-01-07 17:20 . 2009-01-07 17:20 1497088 c:\windows\system32\dllcache\shdocvw.dll
- 2009-01-07 16:20 . 2009-01-07 16:20 1497088 c:\windows\system32\dllcache\shdocvw.dll
+ 2007-12-11 19:38 . 2009-02-06 20:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
- 2007-12-11 19:38 . 2009-02-06 19:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
- 2009-01-07 16:20 . 2009-01-07 16:20 1022976 c:\windows\system32\dllcache\browseui.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 1022976 c:\windows\system32\dllcache\browseui.dll
+ 2010-01-28 13:20 . 2010-01-28 13:20 3948032 c:\windows\Installer\48dce1.msi
- 2010-01-22 23:50 . 2009-10-29 07:45 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 1208832 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 5940736 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2010-01-29 10:23 . 2009-10-29 07:45 1985536 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2010-01-29 10:22 . 2009-03-08 03:34 1206784 c:\windows\ie8updates\KB976325-IE8\urlmon.dll
+ 2010-01-29 10:22 . 2009-03-08 03:41 5937152 c:\windows\ie8updates\KB976325-IE8\mshtml.dll
+ 2010-01-29 10:22 . 2009-03-08 03:32 1985024 c:\windows\ie8updates\KB976325-IE8\iertutil.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 1159680 c:\windows\ie8\urlmon.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 1159680 c:\windows\ie8\urlmon.dll
+ 2010-01-29 10:20 . 2009-04-29 04:56 3596288 c:\windows\ie8\mshtml.dll
- 2009-07-09 04:59 . 2009-04-29 04:56 3596288 c:\windows\ie8\mshtml.dll
+ 2010-01-29 10:20 . 2009-04-29 04:55 6066176 c:\windows\ie8\ieframe.dll
- 2009-07-09 04:59 . 2009-04-29 04:55 6066176 c:\windows\ie8\ieframe.dll
- 2009-07-09 04:59 . 2008-07-09 14:25 2455488 c:\windows\ie8\ieapfltr.dat
+ 2010-01-29 10:20 . 2008-07-09 14:25 2455488 c:\windows\ie8\ieapfltr.dat
+ 2010-01-29 10:23 . 2009-10-29 07:45 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
- 2010-01-22 23:50 . 2009-10-29 07:45 11069952 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
+ 2010-01-29 10:22 . 2009-03-08 03:39 11063808 c:\windows\ie8updates\KB976325-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-04-28 766041]
"RTHDCPL"="RTHDCPL.EXE" [2006-07-21 16261632]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-12-25 548864]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2003-9-16 237568]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\Sony Ericsson\\Mobile4\\Sync Manager\\DXP SyncML.exe"=
"c:\\APPS\\skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [28.1.2010 23:01 108289]
R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [24.1.2007 19:52 7040]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys --> c:\windows\system32\DRIVERS\aswFsBlk.sys [?]
S2 gupdate1ca0f4e472b6f18;Služba Google Update (gupdate1ca0f4e472b6f18);c:\program files\Google\Update\GoogleUpdate.exe [28.7.2009 7:40 133104]
.
Obsah adresáře 'Naplánované úlohy'

2010-01-30 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 15:26]

2010-01-30 c:\windows\Tasks\User_Feed_Synchronization-{B4A026FB-7C97-4C4D-B3DB-C5277604FA92}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Doplňkový sken -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://www.centrum.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=42&tp=ab&q=
FF - component: c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-30 19:13
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2659652597-1416939884-1691766884-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(628)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-01-30 19:15:40
ComboFix-quarantined-files.txt 2010-01-30 18:15
ComboFix2.txt 2010-01-28 22:47
ComboFix3.txt 2010-01-28 21:05
ComboFix4.txt 2010-01-27 20:23

Před spuštěním: 19 809 529 856 bytes free
Po spuštění: 19 767 414 784 bytes free

- - End Of File - - 0B1FFA6E212F3421EB53C9C1376B34DF

Něco tam patrně zůstává...

~~~

Stáhněte SystemLook.
Dvojklikem spusťte soubor SystemLook.exe
Do bílého textového pole vkopírujte tento skript: Nyní klikněte na 'Look'.
Poté se Vám otevře Poznámkový blok, jehož obsah vkopírujte sem do tématu.

A poté můžete zkusit RAFAZON, od zdejších moderátorů sudanec-a a jamese008.

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 19:42 on 30/01/2010 by Janinka (Administrator - Elevation successful)

========== folderfind ==========

Searching for "*symantec*"
C:\Documents and Settings\Administrator\Application Data\Symantec d----- [19:25 24/01/2007]
C:\Documents and Settings\All Users\Application Data\Symantec d----- [19:14 24/01/2007]
C:\Documents and Settings\Default User\Application Data\Symantec d----- [11:47 25/07/2007]
C:\Documents and Settings\Janinka\Application Data\Symantec d----- [11:48 25/07/2007]
C:\Program Files\Common Files\Symantec Shared d----- [19:14 24/01/2007]
C:\Program Files\Symantec d----- [19:14 24/01/2007]
C:\WINDOWS\system32\config\systemprofile\Application Data\Symantec d----- [11:47 25/07/2007]

========== regfind ==========

Searching for "symantec"
[HKEY_CURRENT_USER\Software\Symantec]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{E39D1C81-7E76-4d84-9F25-E2CC76EC050B}]
"LocalService"="Symantec Core LC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{E39D1C81-7E76-4d84-9F25-E2CC76EC050B}]
"LocalService"="Symantec Core LC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{60C70E11-2B08-4798-B366-C8450CDA7B1A}\LocalServer32]
@="C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2BBBFCD7-475D-48E9-BF40-6A40E3E45486}\1.0\HELPDIR]
@="C:\Program Files\Common Files\Symantec Shared\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{54635C92-DFAF-4A99-8802-92FB068A6154}\1.0]
@="Symantec Core LC Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{54635C92-DFAF-4A99-8802-92FB068A6154}\1.0\0\win32]
@="C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{54635C92-DFAF-4A99-8802-92FB068A6154}\1.0\HELPDIR]
@="C:\Program Files\Common Files\Symantec Shared\CCPD-LC\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\31C0682E3111780479067E7CB3B8DBB4]
"00000000000000000000000000000000"="C:\Program Files\Common Files\Symantec Shared\ccCharCv.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Symantec]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\ServiceGroupOrder]
"List"="System Reserved Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Encryption FSFilter Compression FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Event Log Streams Drivers NDIS Wrapper COM Infrastructure UIGroup LocalValidation PlugPlay PNP_TDI NDIS TDI Symantec Core Services Symantec Services NetBIOSGroup ShellSvcGroup SchedulerGroup SpoolerGroup AudioGroup SmartCardGroup NetworkProvider RemoteValidation NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\ServiceGroupOrder]
"List"="System Reserved Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Encryption FSFilter Compression FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Event Log Streams Drivers NDIS Wrapper COM Infrastructure UIGroup LocalValidation PlugPlay PNP_TDI NDIS TDI Symantec Core Services Symantec Services NetBIOSGroup ShellSvcGroup SchedulerGroup SpoolerGroup AudioGroup SmartCardGroup NetworkProvider RemoteValidation NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder]
"List"="System Reserved Boot Bus Extender System Bus Extender SCSI miniport Port Primary Disk SCSI Class SCSI CDROM Class FSFilter Infrastructure FSFilter System FSFilter Bottom FSFilter Copy Protection FSFilter Security Enhancer FSFilter Open File FSFilter Physical Quota Management FSFilter Encryption FSFilter Compression FSFilter HSM FSFilter Cluster File System FSFilter System Recovery FSFilter Quota Management FSFilter Content Screener FSFilter Continuous Backup FSFilter Replication FSFilter Anti-Virus FSFilter Undelete FSFilter Activity Monitor FSFilter Top Filter Boot File System Base Pointer Port Keyboard Port Pointer Class Keyboard Class Video Init Video Video Save File System Event Log Streams Drivers NDIS Wrapper COM Infrastructure UIGroup LocalValidation PlugPlay PNP_TDI NDIS TDI Symantec Core Services Symantec Services NetBIOSGroup ShellSvcGroup SchedulerGroup SpoolerGroup AudioGroup SmartCardGroup NetworkProvider RemoteValidation NetDDEGroup Parallel arbitrator Extended Base PCI Configuration MS Transactions"
[HKEY_USERS\S-1-5-21-2659652597-1416939884-1691766884-1005\Software\Symantec]

-=End Of File=-

Jestli myslíte, že to neodstraníme, tak můžu zkusit R....

Nejdříve zkuste RAFAZON. Poté to kdyžtak odstraníme...

RFZ mi nějak nejde, už se mi asi 6x restartoval ntb a nic...Norton je tam pořád, zjistila jsem to přes spuštění CF

Tak motji mi poradila zkusit Norton odinstalátor.

Supeeer, Norton je pryč! Díky moc!!

Zavirovaný ntb tedy nemám? Nebo byl a vyčistili jsem ho???

Díky moc za spolupráci!! Jak se mohu odvěčit??

Ne, havěť jako takovou jste neměla, spíše zbytečnosti.
Teď prosím o nový ComboFix + RSIT log.

ComboFix 10-01-27.02 - Janinka 30.01.2010 22:31:26.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.894.389 [GMT 1:00]
Spuštěný z: c:\documents and settings\Janinka\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((( Soubory vytvořené od 2009-12-28 do 2010-01-30 )))))))))))))))))))))))))))))))
.

2010-01-30 19:03 . 2010-01-30 21:04 87 ----a-w- c:\windows\rafazon.bat
2010-01-29 10:20 . 2010-01-29 10:22 -------- dc-h--w- c:\windows\ie8
2010-01-28 22:01 . 2009-11-25 10:19 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-01-28 22:01 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-01-28 22:01 . 2009-02-13 10:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-01-28 22:01 . 2009-02-13 10:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-01-28 22:01 . 2010-01-28 22:01 -------- d-----w- c:\program files\Avira
2010-01-28 22:01 . 2010-01-28 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2010-01-27 18:43 . 2010-01-28 22:15 -------- d-----w- c:\program files\trend micro
2010-01-27 18:43 . 2010-01-27 18:44 -------- d-----w- C:\rsit
2010-01-02 18:36 . 2009-12-16 13:42 43008 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-01-02 18:36 . 2009-12-16 13:42 340480 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-01-02 18:36 . 2009-12-16 13:42 872960 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-01-02 18:36 . 2009-12-16 13:41 346624 ----a-w- c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-01-01 19:34 . 2010-01-01 19:34 -------- d-----w- c:\program files\uTorrent

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-30 21:12 . 2007-01-24 19:14 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-01-29 19:02 . 2007-10-10 12:39 1 ----a-w- c:\documents and settings\Janinka\Application Data\OpenOffice.org2\user\uno_packages\cache\stamp.sys
2010-01-29 19:02 . 2007-10-10 12:37 -------- d-----w- c:\documents and settings\Janinka\Application Data\OpenOffice.org2
2010-01-28 20:48 . 2007-08-18 09:31 -------- d-----w- c:\documents and settings\Janinka\Application Data\uTorrent
2010-01-28 13:19 . 2008-10-31 07:42 -------- d-----w- c:\program files\Common Files\Adobe
2010-01-25 21:07 . 2007-07-25 14:41 -------- d-----w- c:\documents and settings\Janinka\Application Data\Skype
2010-01-25 15:01 . 2009-01-28 17:29 -------- d-----w- c:\documents and settings\Janinka\Application Data\skypePM
2010-01-15 17:52 . 2008-06-05 13:19 -------- d-----w- c:\program files\AVG
2009-12-21 19:14 . 2004-09-10 14:57 916480 ------w- c:\windows\system32\wininet.dll
2009-11-21 15:51 . 2004-09-10 14:56 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-04 12:21 . 2009-11-04 12:21 152576 ----a-w- c:\documents and settings\Janinka\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2007-12-25 18:29 . 2007-12-25 18:29 18481024 -c--a-w- c:\program files\setupcze.exe
.

((((((((((((((((((((((((((((( SnapShot_2010-01-30_18.13.49 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-01-30 19:27 . 2010-01-30 19:27 16384 c:\windows\temp\Perflib_Perfdata_b8.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-08-10 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-04-28 766041]
"RTHDCPL"="RTHDCPL.EXE" [2006-07-21 16261632]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 53248]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-12-25 548864]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2003-9-16 237568]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\Sony Ericsson\\Mobile4\\Sync Manager\\DXP SyncML.exe"=
"c:\\APPS\\skype\\Phone\\Skype.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [28.1.2010 23:01 108289]
R3 X10Hid;X10 Hid Device;c:\windows\system32\drivers\x10hid.sys [24.1.2007 19:52 7040]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys --> c:\windows\system32\DRIVERS\aswFsBlk.sys [?]
S2 gupdate1ca0f4e472b6f18;Služba Google Update (gupdate1ca0f4e472b6f18);c:\program files\Google\Update\GoogleUpdate.exe [28.7.2009 7:40 133104]

--- Ostatní služby/ovladače v paměti ---

*Deregistered* - symlcbrd
.
Obsah adresáře 'Naplánované úlohy'

2010-01-30 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 15:26]

2010-01-30 c:\windows\Tasks\User_Feed_Synchronization-{B4A026FB-7C97-4C4D-B3DB-C5277604FA92}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 03:31]
.
.
------- Doplňkový sken -------
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&s ... f8&oe=utf8
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
FF - ProfilePath - c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\
FF - prefs.js: browser.search.selectedEngine - WebHledani
FF - prefs.js: browser.startup.homepage - hxxp://www.centrum.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=42&tp=ab&q=
FF - component: c:\documents and settings\Janinka\Application Data\Mozilla\Firefox\Profiles\qvkyrglc.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-30 22:37
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2659652597-1416939884-1691766884-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(568)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2424)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-01-30 22:38:57
ComboFix-quarantined-files.txt 2010-01-30 21:38
ComboFix2.txt 2010-01-30 18:15
ComboFix3.txt 2010-01-28 22:47
ComboFix4.txt 2010-01-28 21:05
ComboFix5.txt 2010-01-30 21:30

Před spuštěním: 20 264 452 096 bytes free
Po spuštění: 20 241 797 120 bytes free

- - End Of File - - 311273D8DD75F5448DB60CA78E122CE5

Logfile of random's system information tool 1.06 (written by random/random)
Run by Janinka at 2010-01-30 22:40:50
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (39%) free of 50 GB
Total RAM: 894 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:41:02, on 30.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\APPS\SMP\SmpSys.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
C:\PROGRA~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Janinka\Desktop\RSIT.exe
C:\Program Files\trend micro\Janinka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [PC Suite for Smartphones] "C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
O4 - HKCU\..\Run: [mRouterConfig] "C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate1ca0f4e472b6f18) (gupdate1ca0f4e472b6f18) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

--
End of file - 7169 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Master CD_DVD Creator.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{B4A026FB-7C97-4C4D-B3DB-C5277604FA92}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2009-07-28 312928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-09 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-29 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-10 208952]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-10 455168]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-04-28 766041]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-07-21 16261632]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"AzMixerSel"=C:\Program Files\Realtek\InstallShield\AzMixerSel.exe [2005-06-11 53248]
"DetectorApp"=C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe [2005-10-20 102400]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-07-27 81920]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]
"PC Suite for Smartphones"=C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-12-25 548864]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"=C:\APPS\SMP\SmpSys.exe [2005-12-08 975360]
"mRouterConfig"=C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe [2006-03-02 290816]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-08-10 68856]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-12-12 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-08-11 241704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\mshta.exe"="C:\WINDOWS\system32\mshta.exe:*:Disabled:Microsoft (R) HTML Application host"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe"="C:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module"
"C:\Program Files\Sony Ericsson\Mobile4\Sync Manager\DXP SyncML.exe"="C:\Program Files\Sony Ericsson\Mobile4\Sync Manager\DXP SyncML.exe:*:Enabled:DXP SyncML Module"
"C:\APPS\skype\Phone\Skype.exe"="C:\APPS\skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-01-30 22:38:57 ----A---- C:\ComboFix.txt
2010-01-30 20:03:08 ----A---- C:\WINDOWS\rafazon.bat
2010-01-29 11:20:05 ----HDC---- C:\WINDOWS\ie8
2010-01-28 23:40:04 ----D---- C:\WINDOWS\temp
2010-01-28 23:01:12 ----D---- C:\Program Files\Avira
2010-01-28 23:01:12 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2010-01-27 21:14:20 ----A---- C:\WINDOWS\zip.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\SWSC.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\SWREG.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\sed.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\PEV.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\NIRCMD.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\MBR.exe
2010-01-27 21:14:20 ----A---- C:\WINDOWS\grep.exe
2010-01-27 21:14:10 ----D---- C:\WINDOWS\ERDNT
2010-01-27 20:46:54 ----D---- C:\Qoobox
2010-01-27 19:43:32 ----D---- C:\Program Files\trend micro
2010-01-27 19:43:30 ----D---- C:\rsit
2010-01-13 21:55:42 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-13 21:55:32 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-01 20:34:43 ----D---- C:\Program Files\uTorrent

======List of files/folders modified in the last 1 months======

2010-01-30 22:40:45 ----D---- C:\WINDOWS\Prefetch
2010-01-30 22:39:35 ----D---- C:\Program Files\Mozilla Firefox
2010-01-30 22:37:04 ----D---- C:\WINDOWS
2010-01-30 22:37:04 ----A---- C:\WINDOWS\system.ini
2010-01-30 22:35:15 ----D---- C:\WINDOWS\system32\drivers
2010-01-30 22:35:15 ----D---- C:\WINDOWS\AppPatch
2010-01-30 22:35:15 ----AD---- C:\WINDOWS\system32
2010-01-30 22:35:08 ----D---- C:\Program Files\Common Files
2010-01-30 22:30:53 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-30 22:30:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-30 22:12:50 ----RD---- C:\Program Files
2010-01-30 22:12:50 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-01-30 20:27:24 ----D---- C:\WINDOWS\Registration
2010-01-30 20:06:40 ----HD---- C:\WINDOWS\inf
2010-01-29 21:11:37 ----A---- C:\WINDOWS\imsins.BAK
2010-01-29 21:11:28 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-01-29 21:11:28 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-29 21:11:24 ----D---- C:\WINDOWS\ie8updates
2010-01-29 20:02:01 ----D---- C:\Documents and Settings\Janinka\Application Data\OpenOffice.org2
2010-01-29 11:26:57 ----D---- C:\WINDOWS\system32\en-US
2010-01-29 11:26:56 ----D---- C:\WINDOWS\Media
2010-01-29 11:26:56 ----D---- C:\WINDOWS\Help
2010-01-29 11:26:56 ----D---- C:\Program Files\Internet Explorer
2010-01-29 11:22:54 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-29 11:11:50 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-29 11:10:34 ----A---- C:\WINDOWS\iis6.BAK
2010-01-29 11:10:08 ----D---- C:\Program Files\Online Services
2010-01-29 11:09:51 ----D---- C:\WINDOWS\Cursors
2010-01-29 11:09:18 ----D---- C:\Program Files\Windows NT
2010-01-29 11:09:08 ----D---- C:\WINDOWS\system32\inetsrv
2010-01-28 22:59:37 ----SHD---- C:\WINDOWS\Installer
2010-01-28 22:59:35 ----D---- C:\WINDOWS\WinSxS
2010-01-28 22:52:26 ----SD---- C:\Documents and Settings\Janinka\Application Data\Microsoft
2010-01-28 21:56:54 ----SD---- C:\WINDOWS\Tasks
2010-01-28 21:48:58 ----D---- C:\Documents and Settings\Janinka\Application Data\uTorrent
2010-01-28 14:19:29 ----D---- C:\Program Files\Common Files\Adobe
2010-01-28 14:19:28 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-01-28 14:18:46 ----D---- C:\Program Files\Adobe
2010-01-27 11:40:16 ----AC---- C:\WINDOWS\IEDIT.INI
2010-01-25 22:07:43 ----D---- C:\Documents and Settings\Janinka\Application Data\Skype
2010-01-25 16:01:38 ----D---- C:\Documents and Settings\Janinka\Application Data\skypePM
2010-01-15 18:52:11 ----D---- C:\Program Files\AVG
2010-01-15 18:50:18 ----D---- C:\WINDOWS\system32\appmgmt
2010-01-08 21:06:24 ----A---- C:\typhoon_exception.txt
2010-01-08 21:06:20 ----A---- C:\typhoon_assert.txt
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2004-10-08 35840]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-13 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-11-25 56816]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-12 1414656]
R3 catchme;catchme; \??\C:\DOCUME~1\Janinka\LOCALS~1\Temp\catchme.sys []
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-24 4353024]
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-06-16 83968]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-04-28 193056]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 X10Hid;X10 Hid Device; C:\WINDOWS\System32\Drivers\x10hid.sys [2005-11-28 7040]
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); C:\WINDOWS\system32\DRIVERS\zebrceb.sys [2008-01-15 63360]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys []
S1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys []
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys []
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys []
S2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2004-01-05 51056]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2004-01-05 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2004-01-05 21488]
S3 mbr;mbr; \??\C:\DOCUME~1\Janinka\LOCALS~1\Temp\mbr.sys []
S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 RT61;Ralink RT61 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2006-08-02 384384]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\WINDOWS\system32\DRIVERS\irstusb.sys [2001-08-17 26624]
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-12-12 393216]
R2 ehRecvr;Služba přijímače aplikace Media Center; C:\WINDOWS\eHome\ehRecvr.exe [2006-06-29 237568]
R2 ehSched;Služba plánování aplikace Media Center; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152]
R2 USBDeviceService;USBDeviceService; C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe [2005-10-20 90112]
R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
S2 gupdate1ca0f4e472b6f18;Služba Google Update (gupdate1ca0f4e472b6f18); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-28 133104]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-01 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-01-05 65795]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------