VIRY.CZ

když uložím a spustím OTM, tak se mi v pravé části ukáže sice text, ale zároveň vyskočí tabulka kde je buď OK nebo zavřít, obojí jsem zkoušela a počítač se sám zavřel a restartoval .... zkusím to ještě znovu

teď se mi rovnou zobrazuje textový soubor ..

All processes killed
========== PROCESSES ==========
Process explorer.exe killed successfully!
========== FILES ==========
File/Folder C:\DOCUME~1\ALLUSE~1\DATAAP~1\13724219 not found.
File/Folder C:\Documents and Settings\Martin\Nabídka Start\Programy\Po spuštění\zavupd32.exe not found.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\13724219 not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Kvítko
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Martin
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 590803 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 0,56 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTM by OldTimer - Version 3.0.0.6 log created on 11052009_152612

Files moved on Reboot...

Registry entries deleted on Reboot...

ok,pokracuj malwarebytes,,

už se to natahuje, mám tu ještě jeden comp, takže to mám zapnuté paraelně

dufam ze to spustas na nakazenom pocitaci<<

jasně, ty logy jsou taky z něj

Malwarebytes' Anti-Malware 1.41
Verze databáze: 3105
Windows 5.1.2600 Service Pack 3 (Safe Mode)

5.11.2009 16:00:28
mbam-log-2009-11-05 (16-00-21).txt

Typ kontroly: Kompletní kontrola (C:\|)
Zkontrolované objekty: 122873
Uplynulý čas: 11 minute(s), 44 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 1
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 5

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RList (Malware.Trace) -> No action taken.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\_OTM\MovedFiles\11042009_170610\WINDOWS\Temp\_ex-08.exe (Trojan.Dropper) -> No action taken.
C:\_OTM\MovedFiles\11052009_152221\DOCUME~1\ALLUSE~1\DATAAP~1\13724219\13724219.exe (Rogue.SystemSecurity) -> No action taken.
C:\Documents and Settings\Martin\Plocha\Security Tool.LNK (Rogue.SecurityTool) -> No action taken.
C:\Documents and Settings\Martin\Nabídka Start\Programy\Security Tool.LNK (Rogue.SecurityTool) -> No action taken.
C:\Documents and Settings\Martin\Data aplikací\wiaserva.log (Malware.Trace) -> No action taken.

ok,zmaz to >>a das este log z combofixu

PROSIM CITAJTE POZORNE NAVODY!!!,

Stáhněte na plochu, ukončete všechna aktivní okna a spusťte ComboFix -
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Suhlasit instalacio Konzoly pre zotavenie (Recovery console)


- ComboFix je třeba spustit pod účtem s právy administrátora.
- Po spuštění se zobrazí podmínky užití, potvrďte je stiskem tlačítka Ano;

A este raz >ANO<

- Dále postupujte dle pokynů, během aplikování ComboFixu neklikejte do zobrazujícího modreho okna

- Po dokončení skenování, trvajícího maximálně 10-15 minut, by měl program vytvořit log - C:\ComboFix.txt, zkopírujte celý jeho obsah do svého threadu na forum
- Před použitím ComboFixu je treba vypnout všechny rezidentní bezpečnostní programy - antiviry, firewally, antispywary. NAVOD: http://www.bleepingcomputer.com/forums/topic114351.html
Mohou zasahovat do činnosti ComboFixu, což může způsobit, že nebude fungovat korektně.
V případě detekce antiviru u ComboFixu se jedná o falešný poplach.

už to mám

ComboFix 09-11-04.05 - Administrator 05.11.2009 16:14.1.1 - NTFSx86 NETWORK
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.495.306 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\WinPCap
c:\program files\WinPCap\rpcapd.exe
c:\recycler\S-1-5-21-1243000504-2354152246-3374410921-500
c:\recycler\S-1-5-21-1390067357-842925246-854245398-500
c:\windows\system32\drivers\npf.sys
c:\windows\system32\ieuinit.inf
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Service_npf


((((((((((((((((((((((((( Soubory vytvořené od 2009-10-05 do 2009-11-05 )))))))))))))))))))))))))))))))
.

2009-11-04 15:51 . 2009-11-05 15:07 -------- d-----w- c:\documents and settings\Administrator\Plocha
2009-11-04 15:51 . 2009-11-05 14:46 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací
2009-11-04 15:51 . 2009-11-05 14:38 -------- d-----w- c:\documents and settings\Administrator\Oblíbené položky
2009-11-04 15:51 . 2009-10-12 20:19 -------- d--h--w- c:\documents and settings\Administrator\Okolní tiskárny
2009-11-04 15:51 . 2009-10-12 20:19 -------- d--h--w- c:\documents and settings\Administrator\Okolní síť
2009-11-04 15:51 . 2009-10-12 20:19 -------- d-----w- c:\documents and settings\Administrator\Dokumenty
2009-11-04 15:51 . 2009-10-12 20:19 -------- d-----r- c:\documents and settings\Administrator\Nabídka Start
2009-11-04 15:51 . 2009-10-12 18:28 -------- d--h--w- c:\documents and settings\Administrator\Šablony
2009-11-04 15:51 . 2009-11-04 15:51 -------- d-----w- c:\documents and settings\Administrator
2009-11-04 14:41 . 2009-11-04 14:41 -------- d-----w- c:\program files\CCleaner
2009-11-04 14:22 . 2009-11-04 14:22 -------- d-----w- C:\280632ba8914759328
2009-11-04 14:21 . 2009-11-04 14:22 9092032 ----a-w- c:\program files\windows-kb890830-v3.0.exe
2009-11-03 20:01 . 2009-11-03 20:01 3310608 ----a-w- c:\program files\ccsetup225.exe
2009-10-27 20:52 . 2009-10-27 20:53 -------- d-----w- c:\program files\Common Files\Adobe
2009-10-27 08:24 . 2009-10-27 08:24 -------- d-s---w- c:\documents and settings\Martin\UserData
2009-10-22 08:47 . 2009-10-22 08:47 512 ----a-w- c:\program files\outlook.reg
2009-10-21 15:11 . 2008-04-13 22:09 7552 -c--a-w- c:\windows\system32\dllcache\mskssrv.sys
2009-10-21 15:11 . 2008-04-13 22:09 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys
2009-10-21 15:11 . 2008-04-13 22:09 4992 -c--a-w- c:\windows\system32\dllcache\mspqm.sys
2009-10-21 15:11 . 2008-04-13 22:09 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys
2009-10-21 15:11 . 2008-04-13 22:09 5376 -c--a-w- c:\windows\system32\dllcache\mspclock.sys
2009-10-21 15:11 . 2008-04-13 22:09 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys
2009-10-21 15:11 . 2008-04-14 06:51 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll
2009-10-21 15:11 . 2008-04-14 06:51 4096 ----a-w- c:\windows\system32\ksuser.dll
2009-10-21 15:11 . 2008-04-13 22:49 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys
2009-10-21 15:11 . 2008-04-13 22:49 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2009-10-21 15:11 . 2008-04-13 22:15 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys
2009-10-21 15:11 . 2008-04-13 22:15 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2009-10-21 15:08 . 2002-08-13 14:36 57856 ------w- c:\windows\system32\ltremove.exe
2009-10-21 15:07 . 2002-04-03 09:51 5760 ----a-w- c:\windows\system32\drivers\srvkp.sys
2009-10-21 15:07 . 2002-04-25 15:06 32768 ----a-w- c:\windows\SiSUSBrg.exe
2009-10-21 15:07 . 2002-01-02 06:40 32768 ----a-w- c:\windows\SIS_LIB.DLL
2009-10-21 15:07 . 2001-12-07 01:11 3583 ----a-w- c:\windows\SISPORT.SYS
2009-10-15 18:45 . 2001-10-24 10:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2009-10-15 18:45 . 2008-04-14 06:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2009-10-15 18:45 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2009-10-15 18:45 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2009-10-15 18:38 . 2008-04-13 22:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-10-12 20:25 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-10-12 20:24 . 2008-04-14 07:44 58496 ----a-w- c:\windows\system32\drivers\redbook.sys
2009-10-12 20:23 . 2008-04-14 00:06 10240 ----a-w- c:\windows\system32\drivers\compbatt.sys
2009-10-12 20:23 . 2008-04-14 00:06 14208 ----a-w- c:\windows\system32\drivers\battc.sys
2009-10-12 20:23 . 2008-04-14 00:06 13952 ----a-w- c:\windows\system32\drivers\CmBatt.sys
2009-10-12 20:23 . 2008-04-13 22:05 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2009-10-12 20:23 . 2001-12-26 11:52 27136 -c--a-w- c:\windows\system32\dllcache\sisagp.sys
2009-10-12 20:23 . 2001-12-26 11:52 27136 ----a-w- c:\windows\system32\drivers\SISAGP.SYS
2009-10-12 20:23 . 2008-04-14 08:52 75264 ----a-w- c:\windows\system32\usbui.dll
2009-10-12 20:22 . 2001-08-17 21:46 6400 ----a-w- c:\windows\system32\drivers\enum1394.sys
2009-10-12 20:19 . 2009-11-05 14:45 -------- d-----w- c:\documents and settings\All Users\Plocha
2009-10-12 20:18 . 2009-11-04 15:51 -------- d-----w- C:\Documents and Settings
2009-10-12 20:18 . 2009-10-12 18:43 -------- d--h--w- c:\documents and settings\Default User
2009-10-12 20:18 . 2009-10-12 18:33 -------- d-----w- c:\documents and settings\All Users
2009-10-12 20:10 . 2009-10-12 20:16 -------- d-----w- c:\windows\system32\cs
2009-10-12 20:10 . 2009-10-12 20:13 -------- d-----w- c:\windows\system32\1029
2009-10-12 20:10 . 2009-10-12 18:28 -------- d-----w- c:\windows\system32\cs-cz
2009-10-12 18:56 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-10-12 18:55 . 2009-10-12 18:55 -------- d-----w- c:\program files\Microsoft Works
2009-10-12 18:50 . 2009-10-12 18:51 -------- d-----w- c:\windows\SHELLNEW
2009-10-12 18:49 . 2009-10-12 18:49 -------- d-----r- C:\MSOCache
2009-10-12 18:45 . 2009-11-04 14:41 -------- d-----w- c:\documents and settings\Kvítko
2009-10-12 18:42 . 2009-10-12 18:42 -------- d-sh--w- c:\documents and settings\LocalService
2009-10-12 18:42 . 2009-10-12 18:42 -------- d-----w- c:\documents and settings\LocalService\Data aplikací
2009-10-12 18:41 . 2009-10-12 18:41 -------- d-----w- c:\documents and settings\NetworkService\Data aplikací
2009-10-12 18:41 . 2009-10-12 18:41 -------- d-sh--w- c:\documents and settings\NetworkService
2009-10-12 18:39 . 2008-04-14 12:00 14336 -c--a-w- c:\windows\system32\dllcache\tsprof.exe
2009-10-12 18:38 . 2008-04-14 12:00 40960 -c--a-w- c:\windows\system32\dllcache\msiregmv.exe
2009-10-12 18:37 . 2008-04-14 12:00 8192 -c--a-w- c:\windows\system32\dllcache\httpmb51.dll
2009-10-12 18:36 . 2008-04-14 12:00 9216 -c--a-w- c:\windows\system32\dllcache\authfilt.dll
2009-10-12 18:33 . 2009-10-15 15:05 -------- d-sh--w- c:\documents and settings\All Users\DRM
2009-10-12 18:30 . 2009-10-12 18:30 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-10-12 18:28 . 2008-04-14 12:00 44544 ----a-w- c:\windows\system32\hticons.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-05 14:45 . 2009-11-05 14:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-11-05 14:45 . 2009-11-05 14:44 4045528 ----a-w- c:\program files\mbam-setup.exe
2009-11-05 14:07 . 2009-11-05 14:07 -------- d-----w- c:\program files\trend micro
2009-11-05 14:06 . 2009-11-05 14:06 781909 ----a-w- c:\program files\RSIT.exe
2009-11-04 16:01 . 2009-11-04 16:01 36278784 ----a-w- c:\program files\ess_nt32_csy.msi
2009-10-25 20:06 . 2008-04-14 12:00 46394 ----a-w- c:\windows\system32\perfc005.dat
2009-10-25 20:06 . 2008-04-14 12:00 310228 ----a-w- c:\windows\system32\perfh005.dat
2009-10-21 15:10 . 2009-10-21 15:10 -------- d-----w- c:\program files\Realtek Sound Manager
2009-10-21 15:10 . 2009-10-21 15:10 -------- d-----w- c:\program files\AvRack
2009-10-21 15:10 . 2009-10-21 15:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-21 15:10 . 2009-10-21 15:10 -------- d-----w- c:\program files\Common Files\InstallShield
2009-10-21 15:06 . 2009-10-21 15:06 -------- d-----w- c:\program files\SiS Compatible VGA V2.07k
2009-10-15 15:14 . 2009-10-15 15:09 -------- d-----w- c:\program files\Ahead
2009-10-15 15:12 . 2009-10-15 15:09 -------- d-----w- c:\program files\Common Files\Ahead
2009-10-13 17:05 . 2009-10-12 18:33 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-10-13 17:05 . 2009-10-12 18:33 2426 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-10-13 17:02 . 2009-10-12 18:34 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-10-12 18:36 . 2009-10-12 18:36 -------- d-----w- c:\program files\microsoft frontpage
2009-09-10 13:54 . 2009-11-05 14:45 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 13:53 . 2009-11-05 14:45 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SiS Tray"="c:\windows\system32\sistray.EXE" [2002-05-09 303104]
"SiS KHooker"="c:\windows\system32\khooker.exe" [2002-01-25 290816]
"SiSUSBRG"="c:\windows\sisUSBrg.exe" [2002-04-25 32768]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]
"LTSMMSG"="LTSMMSG.exe" - c:\windows\LTSMMSG.exe [2002-06-01 141880]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2004-06-18 67584]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

S3 LucentSoftModem;Lucent Technologies Soft Modem;c:\windows\system32\drivers\LTSM.sys [24.11.2008 9:26 816043]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - MBR
*Deregistered* - mbr
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-05 16:22
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2009-11-05 16:25 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-11-05 15:25

Před spuštěním: Volných bajtů: 10 268 696 576
Po spuštění: Volných bajtů: 10 213 519 360

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Odinstaluj ComboFix - Start -> Spustit - ComboFix /Uninstall -> OK

Stáhni, nainstaluj program CCleaner - http://www.ccleaner.com/download/downloadpage.aspx?f=2
- PravyKlik na kos-spustit ccleaner ->>>Cakas>>na cistenie,,
PravyKlik na kos-otvorit ccleaner-záložka Windows a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na záložku Aplikace a stiskni Analyzovat a poté Spustit Cleaner
- Klikni na Registry, stiskni Hledej problémy, po dokončení skenování klikni na Opravit vybrané problémy,
-zvol Ano pro vytvoření zálohy, ulož nabídnutý soubor a klikni na Opravit všechny problémy

Start-spustit-napis cleanmgr ok>>dalsie moznosti-obnova systemu-vycistit,,ok,,ok

Start-spustit-napis cleanmgr,,ok,ok,zafajkni
Temporary Internet Files
kos
Temporary Files
vycistit,ok
Click OK,Yes

spust OTMOVEIT3-klik cleanup-yes,yes

napis ako sa chova pc,a vloz novy log z RSIT

super,myslím, že to vypadá dobře, díky moc

Logfile of random's system information tool 1.06 (written by random/random)
Run by Martin at 2009-11-05 16:58:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (51%) free of 19 GB
Total RAM: 495 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:58:42, on 5.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\sistray.EXE
C:\WINDOWS\system32\khooker.exe
C:\WINDOWS\LTSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Martin\Local Settings\Temporary Internet Files\Content.IE5\K1YNCTYJ\RSIT[1].exe
C:\Program Files\trend micro\Martin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\system32\khooker.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\sisUSBrg.exe
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

--
End of file - 3734 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2002-05-09 303104]
"SiS KHooker"=C:\WINDOWS\system32\khooker.exe [2002-01-25 290816]
"SiSUSBRG"=C:\WINDOWS\sisUSBrg.exe [2002-04-25 32768]
"LTSMMSG"=C:\WINDOWS\LTSMMSG.exe [2002-06-01 141880]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-06-18 67584]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-11-05 16:58:37 ----D---- C:\rsit
2009-11-05 16:56:02 ----D---- C:\Documents and Settings\Martin\Data aplikací\Malwarebytes
2009-11-05 16:55:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-05 16:45:52 ----A---- C:\Bug.txt
2009-11-05 16:45:35 ----D---- C:\32788R22FWJFW
2009-11-05 16:25:43 ----A---- C:\log.txt
2009-11-05 16:25:18 ----D---- C:\WINDOWS\temp
2009-11-05 16:13:16 ----A---- C:\Boot.bak
2009-11-05 16:13:08 ----RASHD---- C:\cmdcons
2009-11-05 16:08:43 ----A---- C:\WINDOWS\PEV.exe
2009-11-05 16:08:43 ----A---- C:\WINDOWS\MBR.exe
2009-11-05 16:08:37 ----D---- C:\WINDOWS\ERDNT
2009-11-05 15:45:53 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-11-05 15:45:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2009-11-05 15:44:25 ----A---- C:\Program Files\mbam-setup.exe
2009-11-05 15:07:00 ----D---- C:\Program Files\trend micro
2009-11-05 15:06:44 ----A---- C:\Program Files\RSIT.exe
2009-11-04 15:41:02 ----D---- C:\Program Files\CCleaner
2009-11-04 15:40:18 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-04 15:36:49 ----SHD---- C:\WINDOWS\CSC
2009-11-04 15:22:15 ----D---- C:\280632ba8914759328
2009-11-04 15:21:23 ----A---- C:\Program Files\windows-kb890830-v3.0.exe
2009-11-04 14:46:59 ----D---- C:\WINDOWS\pss
2009-11-03 21:01:37 ----A---- C:\Program Files\ccsetup225.exe
2009-10-27 21:53:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2009-10-27 21:52:32 ----D---- C:\Program Files\Common Files\Adobe
2009-10-27 21:52:32 ----D---- C:\Program Files\Adobe
2009-10-22 20:51:37 ----D---- C:\Documents and Settings\Martin\Data aplikací\Macromedia
2009-10-22 20:51:13 ----D---- C:\Documents and Settings\Martin\Data aplikací\Adobe
2009-10-21 16:11:05 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-10-21 16:10:58 ----N---- C:\WINDOWS\avrack.ini
2009-10-21 16:10:58 ----D---- C:\Program Files\Realtek Sound Manager
2009-10-21 16:10:58 ----D---- C:\Program Files\AvRack
2009-10-21 16:10:49 ----A---- C:\WINDOWS\system32\RTLCPAPI.dll
2009-10-21 16:10:49 ----A---- C:\WINDOWS\system32\Audio3D.dll
2009-10-21 16:10:49 ----A---- C:\WINDOWS\system32\a3d.dll
2009-10-21 16:10:49 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2009-10-21 16:10:47 ----A---- C:\WINDOWS\system32\RTLCPL.EXE
2009-10-21 16:10:46 ----N---- C:\WINDOWS\alcupd.exe
2009-10-21 16:10:46 ----N---- C:\WINDOWS\alcrmv.exe
2009-10-21 16:10:46 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-21 16:10:42 ----D---- C:\Program Files\Common Files\InstallShield
2009-10-21 16:08:50 ----N---- C:\WINDOWS\system32\ltremove.exe
2009-10-21 16:07:30 ----A---- C:\WINDOWS\system32\sunistlog.ini
2009-10-21 16:07:30 ----A---- C:\WINDOWS\system32\schecklog.txt
2009-10-21 16:07:30 ----A---- C:\WINDOWS\system32\1_ssetup.ini
2009-10-21 16:07:24 ----A---- C:\WINDOWS\SiSUSBrg.exe
2009-10-21 16:07:24 ----A---- C:\WINDOWS\SIS_LIB.DLL
2009-10-21 16:06:31 ----RA---- C:\WINDOWS\system32\khooker.exe
2009-10-21 16:06:29 ----A---- C:\WINDOWS\system32\sistray.exe
2009-10-21 16:06:29 ----A---- C:\WINDOWS\system32\SiSParse.dll
2009-10-21 16:06:29 ----A---- C:\WINDOWS\system32\SiSInst.dll
2009-10-21 16:06:29 ----A---- C:\WINDOWS\isuninst.exe
2009-10-21 16:06:28 ----D---- C:\Program Files\SiS Compatible VGA V2.07k
2009-10-21 16:06:28 ----A---- C:\WINDOWS\system32\sisgrv.dll
2009-10-21 16:06:28 ----A---- C:\WINDOWS\system32\sisgl.dll
2009-10-21 16:06:28 ----A---- C:\WINDOWS\system32\SiSApCom.dll
2009-10-21 16:06:14 ----A---- C:\WINDOWS\system32\waitwnd.exe
2009-10-21 16:06:14 ----A---- C:\WINDOWS\system32\setuplib.dll
2009-10-21 16:06:14 ----A---- C:\WINDOWS\system32\InstFunc.dll
2009-10-21 16:06:12 ----A---- C:\WINDOWS\IsUn0405.exe
2009-10-21 15:59:32 ----A---- C:\WINDOWS\system32\wpa.bak
2009-10-15 20:00:57 ----A---- C:\WINDOWS\NeroDigital.ini
2009-10-15 19:45:48 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-10-15 19:45:47 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-10-15 16:14:40 ----N---- C:\WINDOWS\UNNMP.exe
2009-10-15 16:12:33 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2009-10-15 16:10:36 ----N---- C:\WINDOWS\UNNeroVision.exe
2009-10-15 16:10:36 ----N---- C:\WINDOWS\system32\msxml3a.dll
2009-10-15 16:09:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ahead
2009-10-15 16:09:46 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2009-10-15 16:09:46 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2009-10-15 16:09:45 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2009-10-15 16:09:45 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2009-10-15 16:09:45 ----N---- C:\WINDOWS\system32\ImagX7.dll
2009-10-15 16:09:44 ----N---- C:\WINDOWS\system32\picn20.dll
2009-10-15 16:09:44 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2009-10-15 16:09:43 ----D---- C:\Program Files\Common Files\Ahead
2009-10-15 16:09:38 ----D---- C:\Program Files\Ahead
2009-10-12 21:26:05 ----A---- C:\WINDOWS\system32\h323log.txt
2009-10-12 21:23:02 ----A---- C:\WINDOWS\system32\usbui.dll
2009-10-12 21:20:36 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-12 21:20:34 ----D---- C:\Program Files\Common Files\ODBC
2009-10-12 21:20:34 ----A---- C:\WINDOWS\ODBCINST.INI
2009-10-12 21:20:29 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-10-12 21:20:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-10-12 21:20:28 ----RD---- C:\Program Files
2009-10-12 21:20:28 ----D---- C:\Program Files\Common Files
2009-10-12 21:20:24 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-10-12 21:20:24 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-10-12 21:20:24 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-10-12 21:20:22 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-10-12 21:20:21 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-10-12 21:20:21 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-10-12 21:20:21 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-10-12 21:20:20 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-10-12 21:20:20 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-10-12 21:20:20 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-10-12 21:20:20 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-10-12 21:20:19 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-10-12 21:20:19 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-10-12 21:20:19 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-10-12 21:20:19 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-10-12 21:20:19 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdycl.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdsl.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdro.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdpl.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdhu.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\kbdcr.dll
2009-10-12 21:20:15 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2009-10-12 21:20:13 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-10-12 21:20:13 ----A---- C:\WINDOWS\system32\irclass.dll
2009-10-12 21:20:13 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-10-12 21:20:13 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-10-12 21:20:13 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-10-12 21:20:11 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-10-12 21:20:10 ----A---- C:\WINDOWS\system32\batt.dll
2009-10-12 21:20:10 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-10-12 21:20:08 ----A---- C:\WINDOWS\system32\storprop.dll
2009-10-12 21:19:51 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2009-10-12 21:19:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-10-12 21:18:51 ----D---- C:\Documents and Settings
2009-10-12 21:10:36 ----D---- C:\WINDOWS\system32\cs-cz
2009-10-12 21:10:36 ----D---- C:\WINDOWS\system32\cs
2009-10-12 21:10:36 ----D---- C:\WINDOWS\system32\1029
2009-10-12 19:56:27 ----A---- C:\WINDOWS\system32\msonpmon.dll
2009-10-12 19:55:22 ----D---- C:\Program Files\Microsoft Works
2009-10-12 19:54:41 ----D---- C:\Program Files\Common Files\DESIGNER
2009-10-12 19:50:41 ----D---- C:\WINDOWS\SHELLNEW
2009-10-12 19:50:05 ----D---- C:\Program Files\Microsoft Office
2009-10-12 19:50:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2009-10-12 19:49:33 ----RD---- C:\MSOCache
2009-10-12 19:46:35 ----D---- C:\Documents and Settings\Martin\Data aplikací\Identities
2009-10-12 19:46:28 ----SD---- C:\Documents and Settings\Martin\Data aplikací\Microsoft
2009-10-12 19:46:28 ----ASH---- C:\Documents and Settings\Martin\Data aplikací\desktop.ini
2009-10-12 19:45:50 ----HD---- C:\Program Files\Uninstall Information
2009-10-12 19:36:16 ----D---- C:\Program Files\xerox
2009-10-12 19:36:16 ----D---- C:\Program Files\microsoft frontpage
2009-10-12 19:35:32 ----A---- C:\WINDOWS\control.ini
2009-10-12 19:34:59 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-10-12 19:33:09 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-10-12 19:32:58 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-10-12 19:32:47 ----HD---- C:\Program Files\WindowsUpdate
2009-10-12 19:32:40 ----D---- C:\Program Files\Online Services
2009-10-12 19:32:11 ----A---- C:\WINDOWS\system32\atrace.dll
2009-10-12 19:32:09 ----A---- C:\WINDOWS\system32\desktop.ini
2009-10-12 19:32:09 ----A---- C:\WINDOWS\desktop.ini
2009-10-12 19:32:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-10-12 19:32:03 ----A---- C:\WINDOWS\system32\acctres.dll
2009-10-12 19:32:02 ----D---- C:\Program Files\Common Files\Services
2009-10-12 19:32:00 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-10-12 19:31:59 ----D---- C:\Program Files\Common Files\MSSoap
2009-10-12 19:31:52 ----A---- C:\WINDOWS\system32\wuweb.dll
2009-10-12 19:31:52 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-10-12 19:31:52 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-10-12 19:31:51 ----N---- C:\WINDOWS\system32\wuauclt.exe
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\wups.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2009-10-12 19:31:51 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2009-10-12 19:31:50 ----N---- C:\WINDOWS\system32\qmgr.dll
2009-10-12 19:31:50 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-10-12 19:31:47 ----D---- C:\Program Files\Movie Maker
2009-10-12 19:31:30 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-10-12 19:31:30 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-10-12 19:31:30 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-10-12 19:31:30 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-10-12 19:31:27 ----A---- C:\WINDOWS\system32\fltMc.exe
2009-10-12 19:31:27 ----A---- C:\WINDOWS\system32\fltlib.dll
2009-10-12 19:31:26 ----N---- C:\WINDOWS\system32\srsvc.dll
2009-10-12 19:31:26 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-10-12 19:31:26 ----A---- C:\WINDOWS\system32\srclient.dll
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\msconf.dll
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-10-12 19:31:25 ----A---- C:\WINDOWS\system32\ils.dll
2009-10-12 19:31:23 ----D---- C:\Program Files\NetMeeting
2009-10-12 19:31:23 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-10-12 19:31:23 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-10-12 19:31:22 ----A---- C:\WINDOWS\system32\inetres.dll
2009-10-12 19:31:22 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-10-12 19:31:20 ----N---- C:\WINDOWS\system32\schedsvc.dll
2009-10-12 19:31:20 ----D---- C:\Program Files\Outlook Express
2009-10-12 19:31:20 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-10-12 19:31:20 ----A---- C:\WINDOWS\system32\mstask.dll
2009-10-12 19:31:19 ----A---- C:\WINDOWS\system32\isign32.dll
2009-10-12 19:31:19 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-10-12 19:31:19 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-10-12 19:31:19 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-10-12 19:31:14 ----D---- C:\Program Files\Common Files\System
2009-10-12 19:31:11 ----D---- C:\Program Files\Internet Explorer
2009-10-12 19:29:55 ----D---- C:\Program Files\ComPlus Applications
2009-10-12 19:29:51 ----A---- C:\WINDOWS\vbaddin.ini
2009-10-12 19:29:51 ----A---- C:\WINDOWS\vb.ini
2009-10-12 19:29:22 ----D---- C:\Program Files\Windows Media Player
2009-10-12 19:29:09 ----D---- C:\Program Files\Messenger
2009-10-12 19:29:06 ----D---- C:\Program Files\MSN Gaming Zone
2009-10-12 19:29:05 ----A---- C:\WINDOWS\system32\write.exe
2009-10-12 19:28:57 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-10-12 19:28:57 ----A---- C:\WINDOWS\system32\hticons.dll
2009-10-12 19:28:56 ----A---- C:\WINDOWS\system32\winchat.exe
2009-10-12 19:28:56 ----A---- C:\WINDOWS\system32\avwav.dll
2009-10-12 19:28:56 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-10-12 19:28:56 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-10-12 19:28:50 ----A---- C:\WINDOWS\system32\getuname.dll
2009-10-12 19:28:49 ----A---- C:\WINDOWS\system32\winmine.exe
2009-10-12 19:28:49 ----A---- C:\WINDOWS\system32\sol.exe
2009-10-12 19:28:49 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-10-12 19:28:49 ----A---- C:\WINDOWS\system32\charmap.exe
2009-10-12 19:28:49 ----A---- C:\WINDOWS\system32\calc.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\tskill.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\tscon.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\shadow.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\reset.exe
2009-10-12 19:28:48 ----A---- C:\WINDOWS\system32\freecell.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\regini.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\msg.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\logoff.exe
2009-10-12 19:28:47 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-10-12 19:28:41 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-10-12 19:28:40 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-10-12 19:28:40 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-10-12 19:28:40 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-10-12 19:28:39 ----D---- C:\Program Files\Windows NT
2009-10-12 19:28:39 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-10-12 19:28:39 ----A---- C:\WINDOWS\system32\hypertrm.dll
2009-10-12 19:28:39 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-10-12 19:28:38 ----A---- C:\WINDOWS\system32\tsgqec.dll
2009-10-12 19:28:38 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-10-12 19:28:38 ----A---- C:\WINDOWS\system32\spider.exe
2009-10-12 19:28:37 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2009-10-12 19:28:37 ----A---- C:\WINDOWS\system32\aaclient.dll
2009-10-12 19:28:36 ----N---- C:\WINDOWS\system32\termsrv.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-10-12 19:28:36 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\mtxoci.dll
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-10-12 19:28:35 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-10-12 19:28:34 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-10-12 19:28:34 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-10-12 19:28:34 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-10-12 19:28:34 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\stclient.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-10-12 19:28:33 ----A---- C:\WINDOWS\system32\colbact.dll
2009-10-12 19:28:32 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-10-12 19:28:32 ----A---- C:\WINDOWS\system32\catsrvut.dll
2009-10-12 19:28:32 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-10-12 19:28:32 ----A---- C:\WINDOWS\system32\catsrv.dll
2009-10-12 19:28:31 ----A---- C:\WINDOWS\system32\comuid.dll
2009-10-12 19:28:31 ----A---- C:\WINDOWS\system32\comsvcs.dll
2009-10-12 19:28:30 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-10-12 19:28:30 ----A---- C:\WINDOWS\system32\clbcatq.dll
2009-10-12 19:28:24 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-10-12 19:28:24 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-10-12 19:28:24 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-10-12 19:28:24 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-10-12 19:05:53 ----D---- C:\WINDOWS\setup.pss

======List of files/folders modified in the last 1 months======

2009-11-05 16:58:36 ----D---- C:\WINDOWS\Prefetch
2009-11-05 16:55:59 ----D---- C:\WINDOWS
2009-11-05 16:50:12 ----D---- C:\WINDOWS\Debug
2009-11-05 16:46:08 ----D---- C:\WINDOWS\system32\drivers
2009-11-05 16:44:58 ----D---- C:\WINDOWS\system32
2009-11-05 16:44:56 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-05 16:22:14 ----A---- C:\WINDOWS\system.ini
2009-11-05 16:18:15 ----D---- C:\WINDOWS\system32\config
2009-11-05 16:17:33 ----SHD---- C:\RECYCLER
2009-11-05 16:16:31 ----D---- C:\WINDOWS\AppPatch
2009-11-05 16:13:16 ----RASH---- C:\boot.ini
2009-11-03 22:00:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-10-27 21:54:25 ----SHD---- C:\WINDOWS\Installer
2009-10-21 16:11:45 ----HD---- C:\WINDOWS\inf
2009-10-21 16:11:36 ----D---- C:\WINDOWS\system
2009-10-21 16:08:50 ----D---- C:\WINDOWS\Driver Cache
2009-10-21 16:07:22 ----D---- C:\WINDOWS\SiSAGP
2009-10-21 16:07:17 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-10-21 16:07:05 ----D---- C:\WINDOWS\SiSInf
2009-10-21 16:06:47 ----D---- C:\WINDOWS\SiS
2009-10-21 16:06:30 ----D---- C:\WINDOWS\system32\trayres
2009-10-15 20:01:00 ----D---- C:\WINDOWS\Help
2009-10-15 15:37:14 ----D---- C:\WINDOWS\SoftwareDistribution
2009-10-12 21:17:49 ----D---- C:\WINDOWS\system32\Setup
2009-10-12 21:17:42 ----D---- C:\WINDOWS\l2schemas
2009-10-12 21:17:41 ----D---- C:\WINDOWS\system32\usmt
2009-10-12 21:17:32 ----D---- C:\WINDOWS\ehome
2009-10-12 21:17:31 ----D---- C:\WINDOWS\ime
2009-10-12 21:17:30 ----D---- C:\WINDOWS\network diagnostic
2009-10-12 21:17:30 ----D---- C:\WINDOWS\Media
2009-10-12 21:17:17 ----D---- C:\WINDOWS\PeerNet
2009-10-12 21:17:03 ----D---- C:\WINDOWS\system32\npp
2009-10-12 21:16:55 ----D---- C:\WINDOWS\msagent
2009-10-12 21:13:13 ----D---- C:\WINDOWS\twain_32
2009-10-12 21:12:46 ----D---- C:\WINDOWS\system32\ras
2009-10-12 21:12:08 ----D---- C:\WINDOWS\system32\icsxml
2009-10-12 21:11:37 ----D---- C:\WINDOWS\system32\1033
2009-10-12 21:10:36 ----D---- C:\WINDOWS\system32\mui
2009-10-12 21:10:34 ----D---- C:\WINDOWS\WBEM
2009-10-12 21:10:34 ----D---- C:\WINDOWS\system32\XPSViewer
2009-10-12 21:10:28 ----D---- C:\WINDOWS\system32\inetsrv
2009-10-12 21:10:28 ----D---- C:\WINDOWS\system32\en-us
2009-10-12 21:10:25 ----D---- C:\WINDOWS\system32\de-de
2009-10-12 21:10:25 ----D---- C:\WINDOWS\system32\de
2009-10-12 21:10:24 ----D---- C:\WINDOWS\system32\bits
2009-10-12 21:10:23 ----D---- C:\WINDOWS\system32\1031
2009-10-12 21:10:07 ----HDC---- C:\WINDOWS\ie7
2009-10-12 21:10:03 ----RSD---- C:\WINDOWS\assembly
2009-10-12 21:10:03 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2009-10-12 21:10:03 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-10-12 21:10:03 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2009-10-12 21:10:03 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2009-10-12 21:10:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-10-12 19:55:10 ----D---- C:\WINDOWS\WinSxS
2009-10-12 19:54:14 ----RSD---- C:\WINDOWS\Fonts
2009-10-12 19:42:12 ----SHD---- C:\System Volume Information
2009-10-12 19:42:12 ----D---- C:\WINDOWS\system32\Restore
2009-10-12 19:42:10 ----SD---- C:\WINDOWS\Tasks
2009-10-12 19:36:15 ----D---- C:\WINDOWS\repair
2009-10-12 19:35:32 ----A---- C:\WINDOWS\win.ini
2009-10-12 19:34:50 ----D---- C:\WINDOWS\Registration
2009-10-12 19:34:28 ----D---- C:\WINDOWS\system32\ias
2009-10-12 19:33:16 ----RD---- C:\WINDOWS\Web
2009-10-12 19:33:10 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-10-12 19:33:10 ----RD---- C:\WINDOWS\Offline Web Pages
2009-10-12 19:32:25 ----D---- C:\WINDOWS\srchasst
2009-10-12 19:31:34 ----D---- C:\WINDOWS\system32\oobe
2009-10-12 19:30:14 ----D---- C:\WINDOWS\system32\Com
2009-10-12 19:29:37 ----D---- C:\WINDOWS\system32\MsDtc
2009-10-12 19:29:02 ----D---- C:\WINDOWS\Cursors
2009-10-12 19:28:46 ----D---- C:\WINDOWS\system32\wbem
2009-10-12 19:02:08 ----D---- C:\WINDOWS\system32\CatRoot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2002-04-03 5760]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-06-21 626204]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 LucentSoftModem;Lucent Technologies Soft Modem; C:\WINDOWS\system32\DRIVERS\LTSM.sys [2002-08-02 816043]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2002-05-16 194176]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

ok,, az na to ze nevidim antivir a firewall,takze bolo by to dobre doinstalovat ,,
nemas zaco,

ale mám, s tímhle bych si sama rozhodně neporadila ... no to je totiž přítelovo počítač, mám ho sotva pár dní, hned mu to tam nainstaluju, ještě jednou děkuji a alespoň virtuálně posílám jedno plzeňské pivko

dakujem za plzen
Nemas zaco,,

měj se fajníkově, pa