VIRY.CZ

Přesintaloval sem samo jen jeden disk-kde byl OS. druhej mohl byt klidne zavirovanej.......nechapu proc mne CF smazal Flasch get?? jinak je to v cajku?



ComboFix 10-04-15.05 - Danikoof 17.04.2010 15:30:02.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2761 [GMT 2:00]
Spuštěný z: c:\documents and settings\Danikoof\Plocha\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\FlashGet Network
c:\program files\FlashGet Network\FlashGet 3\adns.dll
c:\program files\FlashGet Network\FlashGet 3\btcoreu.dll
c:\program files\FlashGet Network\FlashGet 3\BugReport.dll
c:\program files\FlashGet Network\FlashGet 3\BugReport.exe
c:\program files\FlashGet Network\FlashGet 3\cd1.ico
c:\program files\FlashGet Network\FlashGet 3\ckcore.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\14_43260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\28_83260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\atrc.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\Codecs.zip
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\cook.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\ddnt3260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\dnet3260.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drv1.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drv2.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\drvc.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\hxltcolor.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\raac.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\ralf.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv10.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv20.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv30.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\rv40.dll
c:\program files\FlashGet Network\FlashGet 3\codec\real\Codecs\sipr.dll
c:\program files\FlashGet Network\FlashGet 3\commonlib.dll
c:\program files\FlashGet Network\FlashGet 3\componentskrnl.dll
c:\program files\FlashGet Network\FlashGet 3\config\clients.met
c:\program files\FlashGet Network\FlashGet 3\config\clients.met.bak
c:\program files\FlashGet Network\FlashGet 3\config\cryptkey.dat
c:\program files\FlashGet Network\FlashGet 3\config\emfriends.met
c:\program files\FlashGet Network\FlashGet 3\config\known.met
c:\program files\FlashGet Network\FlashGet 3\config\known2_64.met
c:\program files\FlashGet Network\FlashGet 3\config\preferences.dat
c:\program files\FlashGet Network\FlashGet 3\config\preferences.ini
c:\program files\FlashGet Network\FlashGet 3\config\server.met
c:\program files\FlashGet Network\FlashGet 3\config\upload.met
c:\program files\FlashGet Network\FlashGet 3\corestat.dll
c:\program files\FlashGet Network\FlashGet 3\dat\Appsetting.cfg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_33665566.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_4-L.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_5-04400194A.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_5_4504_1.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_duoyukunshou112.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_fenshouxin121.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_icon01.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_icon03.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_icon04.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_logo.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_Nona33me.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\client_Nona55me.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\dian.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\directui_new_1271314662.zip
c:\program files\FlashGet Network\FlashGet 3\dat\directui\gameall.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\gametop.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\newgame.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\newmovie.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p1.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p2.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p3.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p4.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p5.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p6.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p7.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\p8.gif
c:\program files\FlashGet Network\FlashGet 3\dat\directui\reom.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\rescenter.txt
c:\program files\FlashGet Network\FlashGet 3\dat\directui\soft.jpg
c:\program files\FlashGet Network\FlashGet 3\dat\directui\tab.gif
c:\program files\FlashGet Network\FlashGet 3\dat\FlashGet3db.bak
c:\program files\FlashGet Network\FlashGet 3\dat\FlashGet3db.db
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\domain_url_list_en.zip
c:\program files\FlashGet Network\FlashGet 3\dat\stat\advertisement\port.ini
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_blue.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_classic.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\skinpreview\preview_white.png
c:\program files\FlashGet Network\FlashGet 3\dat\stat\statdata\statinfo.dat
c:\program files\FlashGet Network\FlashGet 3\dbghelp.dll
c:\program files\FlashGet Network\FlashGet 3\fg.ico
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\default.htm
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\FGResDetector.conf
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\banner.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\bullet.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\close.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\closelabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\download-icon.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\explorer.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\ftp.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\image.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\introTextBg.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\loading.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\nextlabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\prevlabel.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\software.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\data\images\vod.gif
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\FGResDetector.exe
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\about.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\ftplist_tree_icon.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\option_icon.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\quickop_hide.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\quickop_show.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\statusbar_bk.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\tasktab_close.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_back.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_bk.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_close.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_forward.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\image\toolbar_refresh.png
c:\program files\FlashGet Network\FlashGet 3\FGResDetector_I\lang\l.eng.xml
c:\program files\FlashGet Network\FlashGet 3\FGSoftware.exe
c:\program files\FlashGet Network\FlashGet 3\Flashget3.exe
c:\program files\FlashGet Network\FlashGet 3\FlashGet3.xpi
c:\program files\FlashGet Network\FlashGet 3\FlashGetBHO3.dll
c:\program files\FlashGet Network\FlashGet 3\FlashGetHook.dll
c:\program files\FlashGet Network\FlashGet 3\fnsArchive.dll
c:\program files\FlashGet Network\FlashGet 3\fnsDirectuix.dll
c:\program files\FlashGet Network\FlashGet 3\fnsLanguage.dll
c:\program files\FlashGet Network\FlashGet 3\fnslanguage_en.dll
c:\program files\FlashGet Network\FlashGet 3\fnsSecurity.dll
c:\program files\FlashGet Network\FlashGet 3\fnsScheduler.dll
c:\program files\FlashGet Network\FlashGet 3\fnsSkinX.dll
c:\program files\FlashGet Network\FlashGet 3\fnsStatistics.dll
c:\program files\FlashGet Network\FlashGet 3\game.ico
c:\program files\FlashGet Network\FlashGet 3\gb2312-unicode.dic
c:\program files\FlashGet Network\FlashGet 3\gdiplus.dll
c:\program files\FlashGet Network\FlashGet 3\GetAllUrl.htm
c:\program files\FlashGet Network\FlashGet 3\GetUrl.htm
c:\program files\FlashGet Network\FlashGet 3\GoogleToolbarInstaller_download_signed.exe
c:\program files\FlashGet Network\FlashGet 3\libem.dll
c:\program files\FlashGet Network\FlashGet 3\license.txt
c:\program files\FlashGet Network\FlashGet 3\lst_tz.bin
c:\program files\FlashGet Network\FlashGet 3\P2PCfg.ini
c:\program files\FlashGet Network\FlashGet 3\p2pcore.dll
c:\program files\FlashGet Network\FlashGet 3\p2score.dll
c:\program files\FlashGet Network\FlashGet 3\perf.ini
c:\program files\FlashGet Network\FlashGet 3\pncrt.dll
c:\program files\FlashGet Network\FlashGet 3\pstat.dat
c:\program files\FlashGet Network\FlashGet 3\pup.dat
c:\program files\FlashGet Network\FlashGet 3\RdOldDb.dll
c:\program files\FlashGet Network\FlashGet 3\RealMediaSplitter.ax
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\BarSet.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_check.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_normal.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\btn_radio.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\desktoplink.ico
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\login_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\menu_icon.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\option_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\option_page_line.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\skin.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\SuspendLogo.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\SuspendNoLogo.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_backgrand.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_cancle.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_catgroy.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_group.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_new.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_open.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_option.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_pause.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_recly.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbar_start.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_left.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_middle.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\toolbarbutton_right.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\top_logotitle.gif
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\torrent.ico
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\userinfo_head.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\image\VistaStyleListItems.bmp
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\preview.png
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\skin.xml
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\sound\loginfailed.wav
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\sound\loginsucc.wav
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\sound\msgnotify.wav
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\sound\notify.wav
c:\program files\FlashGet Network\FlashGet 3\skin\international\default\topmain.png
c:\program files\FlashGet Network\FlashGet 3\SnapShot.dll
c:\program files\FlashGet Network\FlashGet 3\storage.dll
c:\program files\FlashGet Network\FlashGet 3\SysOptimize.exe
c:\program files\FlashGet Network\FlashGet 3\uninst.exe
c:\program files\FlashGet Network\FlashGet 3\VodCore.dll
c:\program files\FlashGet Network\FlashGet 3\zlib.dll
c:\windows\system32\secustat.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-17 do 2010-04-17 )))))))))))))))))))))))))))))))
.

2010-04-17 10:30 . 2010-04-17 10:30 -------- d-sh--w- c:\documents and settings\Danikoof\IETldCache
2010-04-16 23:58 . 2010-02-25 09:48 11070976 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-04-16 23:58 . 2010-02-25 06:18 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-04-16 23:58 . 2010-02-25 06:18 594432 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-04-16 23:58 . 2010-02-25 06:18 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-04-16 23:58 . 2010-02-25 06:18 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-04-16 23:58 . 2010-02-25 06:18 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-04-16 23:58 . 2010-04-16 23:58 -------- d-----w- c:\windows\ie8updates
2010-04-16 23:58 . 2010-02-16 04:50 64000 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-04-16 23:57 . 2010-04-16 23:58 -------- dc-h--w- c:\windows\ie8
2010-04-15 18:09 . 2010-04-15 18:09 -------- d-----w- c:\program files\Webteh

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-16 23:56 . 2001-10-25 14:00 76516 ----a-w- c:\windows\system32\perfc005.dat
2010-04-16 23:56 . 2001-10-25 14:00 424082 ----a-w- c:\windows\system32\perfh005.dat
2010-04-16 23:48 . 2010-04-15 16:05 -------- d-----w- c:\program files\AVerMedia
2010-04-15 17:16 . 2010-04-15 17:16 -------- d-----w- c:\program files\CoreCodec
2010-04-15 16:46 . 2010-04-15 16:46 -------- d-----w- c:\program files\Combined Community Codec Pack
2010-04-15 16:19 . 2010-04-15 16:19 0 ----a-w- c:\windows\nsreg.dat
2010-04-15 16:05 . 2010-04-15 16:05 -------- d-----w- c:\program files\Common Files\AVerMedia
2010-04-15 15:59 . 2010-04-15 15:59 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-15 15:57 . 2010-04-15 15:57 -------- d-----w- c:\program files\GIGABYTE
2010-04-15 15:54 . 2010-04-15 15:54 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-04-15 15:53 . 2010-04-15 15:53 -------- d-----w- c:\program files\NVIDIA Corporation
2010-04-15 15:44 . 2010-04-15 15:44 -------- d-----w- c:\program files\microsoft frontpage
2010-04-15 15:41 . 2010-04-15 15:41 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-02-25 06:18 . 2004-08-17 13:49 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-24 13:11 . 2004-08-03 21:15 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-16 19:08 . 2004-08-17 15:45 2026496 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-16 19:08 . 2004-08-17 13:45 2148352 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-12 04:35 . 2004-08-17 13:49 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:02 . 2004-08-03 21:07 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2009-11-19 13:00 . 2009-11-19 13:00 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-10-23 202024]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2009-07-08 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-14 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-07-14 86016]
"RTHDCPL"="RTHDCPL.EXE" [2006-09-06 16262656]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-05-25 303376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Danikoof\Nabˇdka Start\Programy\Po spuçtŘnˇ\
GIGABYTE Gamer HUD Lite.lnk - c:\program files\GIGABYTE\Gamer HUD Lite\HUD.exe [2009-6-30 1678848]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
AVerQuick.lnk - c:\program files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe [2010-4-15 606208]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [15.12.2008 21:41 33808]
R0 mv614x;mv614x;c:\windows\system32\drivers\mv614x.sys [19.11.2009 13:02 63232]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter;c:\windows\system32\drivers\atl01_xp.sys [19.11.2009 13:02 35712]
R3 AVerBDA3x;AVerMedia SAA713x BDA Service;c:\windows\system32\drivers\AVerBDA3x.sys [15.4.2010 18:06 1171456]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [13.5.2009 18:46 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16.5.2009 21:59 19472]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://google.flashget.com/
IE: Download all by FlashGet3 - c:\documents and settings\Danikoof\Data aplikací\FlashGetBHO\GetAllUrl.htm
IE: Download by FlashGet3 - c:\documents and settings\Danikoof\Data aplikací\FlashGetBHO\GetUrl.htm
Trusted Zone: kuaiche.com\software
FF - ProfilePath - c:\documents and settings\Danikoof\Data aplikací\Mozilla\Firefox\Profiles\tzonfdqg.default\
FF - prefs.js: browser.startup.homepage - www.google.com
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-FlashGet 3.3 - c:\program files\FlashGet Network\FlashGet 3\uninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-17 15:34
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(2280)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\RTHDCPL.EXE
c:\windows\system32\wdfmgr.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
.
**************************************************************************
.
Celkový čas: 2010-04-17 15:35:26 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-04-17 13:35

Před spuštěním: 3 218 178 048
Po spuštění: 3 240 230 912

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 7A24C33405E9D7F6FBEBA8933BE99254

Zdravím

Nedoporučuji používat ComboFix z vlastní iniciativy, může dojít k poškození systému!


Dejte log z RSIT http://www.viry.cz/forum/viewtopic.php?f=13&t=82743

ja mam v kompabilite vsechny op.s. krom XP, tak sem to spustil tak. co řikate da se to uz? fakt tam bylo pred tim tolik sracek a ani sem nemel admin prava ze sem to musel preinstalovat. ten FlaschGet tam hodim znovu ale:)



Logfile of random's system information tool 1.06 (written by random/random)
Run by Danikoof at 2010-04-17 16:24:42
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (32%) free of 10 GB
Total RAM: 3327 MB (89% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:24:47, on 17.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\GIGABYTE\Gamer HUD Lite\HUD.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Danikoof\Plocha\RSIT.exe
C:\Program Files\trend micro\Danikoof.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.flashget.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Documents and Settings\Danikoof\Data aplikací\FlashGetBHO\FlashGetBHO3.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MST" WISE_SETUP_EXE_PATH="e:\driver\2k_xp\190.38\PhysX_9.09.0428_SystemSoftware.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: GIGABYTE Gamer HUD Lite.lnk = C:\Program Files\GIGABYTE\Gamer HUD Lite\HUD.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AVerQuick.lnk = C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe
O8 - Extra context menu item: Download all by FlashGet3 - C:\Documents and Settings\Danikoof\Data aplikací\FlashGetBHO\GetAllUrl.htm
O8 - Extra context menu item: Download by FlashGet3 - C:\Documents and Settings\Danikoof\Data aplikací\FlashGetBHO\GetUrl.htm
O9 - Extra button: &Virtual keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: http://software.kuaiche.com
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5442 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-05-25 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]
FlashGetBHO - C:\Documents and Settings\Danikoof\Data aplikací\FlashGetBHO\FlashGetBHO3.dll [2009-12-22 157232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-11-19 264720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2009-07-09 1657376]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-07-14 13877248]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-07-14 86016]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-09-06 16262656]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]
"avp"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-05-25 303376]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WISB83FC356B7C0441F8A4DD71E088E7974_9_09_0428.MST WISE_SETUP_EXE_PATH=e:\driver\2k_xp\190.38\PhysX_9.09.0428_SystemSoftware.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
AVerQuick.lnk - C:\Program Files\Common Files\AVerMedia\AVerQuick\AVerQuick.exe

C:\Documents and Settings\Danikoof\Nabídka Start\Programy\Po spuštění
GIGABYTE Gamer HUD Lite.lnk - C:\Program Files\GIGABYTE\Gamer HUD Lite\HUD.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\WINDOWS\system32\klogon.dll [2009-05-25 219664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-17 16:24:42 ----D---- C:\rsit
2010-04-17 16:24:42 ----D---- C:\Program Files\trend micro
2010-04-17 15:36:42 ----SHD---- C:\RECYCLER
2010-04-17 15:35:29 ----D---- C:\WINDOWS\temp
2010-04-17 15:35:27 ----A---- C:\ComboFix.txt
2010-04-17 15:29:40 ----A---- C:\Boot.bak
2010-04-17 15:29:38 ----RASHD---- C:\cmdcons
2010-04-17 15:28:23 ----A---- C:\WINDOWS\zip.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\SWSC.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\SWREG.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\sed.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\PEV.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\MBR.exe
2010-04-17 15:28:23 ----A---- C:\WINDOWS\grep.exe
2010-04-17 15:28:18 ----D---- C:\WINDOWS\ERDNT
2010-04-17 15:28:06 ----D---- C:\Qoobox
2010-04-17 01:58:51 ----A---- C:\WINDOWS\Ascd_tmp.ini
2010-04-17 01:58:49 ----D---- C:\WINDOWS\ie8updates
2010-04-17 01:58:25 ----D---- C:\WINDOWS\WBEM
2010-04-17 01:57:37 ----HDC---- C:\WINDOWS\ie8
2010-04-17 01:56:37 ----A---- C:\WINDOWS\system32\MRT.exe
2010-04-17 01:37:59 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-04-17 01:37:55 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-04-17 01:37:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-04-17 01:37:48 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-04-17 01:37:44 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-04-17 01:37:41 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-04-17 01:37:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-04-17 01:37:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-04-17 01:37:28 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-17 01:37:25 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-04-17 01:37:22 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-17 01:37:18 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9$
2010-04-17 01:37:14 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-04-17 01:37:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-04-17 01:37:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-04-17 01:37:02 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-04-17 01:36:58 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-17 01:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-04-17 01:36:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-04-17 01:36:48 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-04-17 01:36:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-04-17 01:36:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-04-17 01:36:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-17 01:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-04-17 01:36:31 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-04-17 01:36:27 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-04-17 01:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-04-17 01:36:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-04-17 01:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-04-17 01:36:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-04-17 01:36:04 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-04-17 01:36:00 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-04-17 01:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-04-17 01:35:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-04-17 01:35:49 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-04-17 01:35:45 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-04-17 01:35:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-04-17 01:35:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-04-17 01:35:32 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-04-17 01:35:16 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-17 01:35:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-04-17 01:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-04-17 01:35:00 ----HDC---- C:\WINDOWS\$NtUninstallKB980182$
2010-04-17 01:34:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-17 01:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-04-17 01:34:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-04-17 01:34:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-04-17 01:34:40 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-04-17 01:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-04-17 01:34:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-04-17 01:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-04-17 01:34:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-04-17 01:34:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-04-17 01:34:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-04-17 01:34:14 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-04-17 01:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-04-17 01:34:02 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-04-17 01:33:58 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-17 01:33:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-04-17 01:33:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-04-17 01:33:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-04-17 01:33:44 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-04-17 01:33:40 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-04-17 01:33:37 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-04-17 01:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-04-17 01:33:30 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-04-17 01:33:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-04-17 01:33:22 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-04-17 01:33:16 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-04-17 01:33:10 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-04-16 00:28:46 ----A---- C:\WINDOWS\AVerText.ini
2010-04-15 20:09:34 ----D---- C:\Documents and Settings\Danikoof\Data aplikací\BSplayer Pro
2010-04-15 20:09:33 ----D---- C:\Program Files\Webteh
2010-04-15 19:39:01 ----A---- C:\WINDOWS\system32\h323log.txt
2010-04-15 19:31:14 ----A---- C:\WINDOWS\system32\usbui.dll
2010-04-15 19:30:16 ----A---- C:\WINDOWS\imsins.BAK
2010-04-15 19:30:14 ----SHD---- C:\WINDOWS\Installer
2010-04-15 19:30:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-15 19:30:13 ----D---- C:\Program Files\Common Files\ODBC
2010-04-15 19:30:13 ----A---- C:\WINDOWS\ODBCINST.INI
2010-04-15 19:30:10 ----RD---- C:\Program Files
2010-04-15 19:30:10 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-04-15 19:30:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-04-15 19:30:10 ----D---- C:\Program Files\Common Files
2010-04-15 19:30:06 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-04-15 19:30:06 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-04-15 19:30:06 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-04-15 19:30:04 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-04-15 19:30:01 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-04-15 19:30:00 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-04-15 19:30:00 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-04-15 19:30:00 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-04-15 19:30:00 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-04-15 19:29:59 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-04-15 19:29:56 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-04-15 19:29:55 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-04-15 19:29:55 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-04-15 19:29:55 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-04-15 19:29:55 ----A---- C:\WINDOWS\system32\irclass.dll
2010-04-15 19:29:54 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-04-15 19:29:54 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-04-15 19:29:54 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-04-15 19:29:54 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-04-15 19:29:52 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-04-15 19:29:51 ----A---- C:\WINDOWS\system32\batt.dll
2010-04-15 19:29:50 ----A---- C:\WINDOWS\notepad.exe
2010-04-15 19:29:49 ----A---- C:\WINDOWS\system32\storprop.dll
2010-04-15 19:29:43 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-04-15 19:28:02 ----RA---- C:\WINDOWS\SET8.tmp
2010-04-15 19:27:59 ----RA---- C:\WINDOWS\SET4.tmp
2010-04-15 19:27:58 ----RA---- C:\WINDOWS\SET3.tmp
2010-04-15 19:27:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-15 19:27:54 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-15 19:27:49 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-15 19:27:28 ----A---- C:\WINDOWS\setuplog.txt
2010-04-15 19:27:26 ----SHD---- C:\System Volume Information
2010-04-15 19:27:26 ----D---- C:\Documents and Settings
2010-04-15 19:26:31 ----RASH---- C:\boot.ini
2010-04-15 19:21:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-15 19:21:13 ----RSD---- C:\WINDOWS\Fonts
2010-04-15 19:21:13 ----RD---- C:\WINDOWS\Web
2010-04-15 19:21:13 ----HD---- C:\WINDOWS\inf
2010-04-15 19:21:13 ----D---- C:\WINDOWS\WinSxS
2010-04-15 19:21:13 ----D---- C:\WINDOWS\twain_32
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\wins
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\wbem
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\usmt
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\spool
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\ShellExt
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\Setup
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\ras
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\oobe
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\npp
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\mui
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\inetsrv
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\IME
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\icsxml
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\ias
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\export
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\drivers
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\dhcp
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\config
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\3com_dmi
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\3076
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\2052
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1054
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1042
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1041
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1037
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1033
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1031
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1029
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1028
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32\1025
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system32
2010-04-15 19:21:13 ----D---- C:\WINDOWS\system
2010-04-15 19:21:13 ----D---- C:\WINDOWS\security
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Resources
2010-04-15 19:21:13 ----D---- C:\WINDOWS\repair
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Provisioning
2010-04-15 19:21:13 ----D---- C:\WINDOWS\pchealth
2010-04-15 19:21:13 ----D---- C:\WINDOWS\PeerNet
2010-04-15 19:21:13 ----D---- C:\WINDOWS\mui
2010-04-15 19:21:13 ----D---- C:\WINDOWS\msapps
2010-04-15 19:21:13 ----D---- C:\WINDOWS\msagent
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Media
2010-04-15 19:21:13 ----D---- C:\WINDOWS\java
2010-04-15 19:21:13 ----D---- C:\WINDOWS\ime
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Help
2010-04-15 19:21:13 ----D---- C:\WINDOWS\ehome
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Driver Cache
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Debug
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Cursors
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Connection Wizard
2010-04-15 19:21:13 ----D---- C:\WINDOWS\Config
2010-04-15 19:21:13 ----D---- C:\WINDOWS\AppPatch
2010-04-15 19:21:13 ----D---- C:\WINDOWS\addins
2010-04-15 19:21:13 ----AD---- C:\WINDOWS
2010-04-15 19:17:47 ----D---- C:\Documents and Settings\Danikoof\Data aplikací\Media Player Classic
2010-04-15 19:17:04 ----A---- C:\Documents and Settings\Danikoof\Data aplikací\coreavc.ini
2010-04-15 19:16:36 ----D---- C:\Program Files\CoreCodec
2010-04-15 19:10:53 ----D---- C:\Program Files\WinRAR
2010-04-15 18:46:29 ----D---- C:\Program Files\Combined Community Codec Pack
2010-04-15 18:19:42 ----D---- C:\Documents and Settings\Danikoof\Data aplikací\Mozilla
2010-04-15 18:19:30 ----D---- C:\Program Files\Mozilla Firefox
2010-04-15 18:12:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-04-15 18:11:30 ----D---- C:\Program Files\Adobe
2010-04-15 18:07:12 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-15 18:06:33 ----A---- C:\WINDOWS\system32\psisdecd.dll
2010-04-15 18:06:32 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-04-15 18:06:32 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-04-15 18:06:27 ----A---- C:\WINDOWS\system32\TVRate.dll
2010-04-15 18:06:27 ----A---- C:\WINDOWS\system32\34CoInstaller.dll
2010-04-15 18:05:48 ----R---- C:\WINDOWS\system32\AVerIO.dll
2010-04-15 18:05:47 ----R---- C:\WINDOWS\system32\CardID.dll
2010-04-15 18:05:43 ----R---- C:\WINDOWS\system32\sptlib02.dll
2010-04-15 18:05:43 ----R---- C:\WINDOWS\system32\sptlib01.dll
2010-04-15 18:05:37 ----D---- C:\Program Files\Common Files\AVerMedia
2010-04-15 18:05:37 ----D---- C:\Program Files\AVerMedia
2010-04-15 18:04:15 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-15 17:59:17 ----D---- C:\Program Files\Common Files\Adobe
2010-04-15 17:58:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\nView_Profiles
2010-04-15 17:57:04 ----D---- C:\Program Files\GIGABYTE
2010-04-15 17:54:43 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-04-15 17:53:21 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-04-15 17:53:09 ----D---- C:\Program Files\NVIDIA Corporation
2010-04-15 17:53:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-04-15 17:52:28 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-04-15 17:51:54 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2010-04-15 17:49:36 ----D---- C:\Documents and Settings\Danikoof\Data aplikací\Identities
2010-04-15 17:49:20 ----SD---- C:\Documents and Settings\Danikoof\Data aplikací\Microsoft
2010-04-15 17:49:20 ----ASH---- C:\Documents and Settings\Danikoof\Data aplikací\desktop.ini
2010-04-15 17:48:15 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-15 17:48:13 ----SD---- C:\WINDOWS\system32\Microsoft
2010-04-15 17:48:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-15 17:44:15 ----D---- C:\WINDOWS\system32\xircom
2010-04-15 17:44:15 ----D---- C:\Program Files\xerox
2010-04-15 17:44:15 ----D---- C:\Program Files\microsoft frontpage
2010-04-15 17:43:58 ----A---- C:\WINDOWS\control.ini
2010-04-15 17:43:58 ----A---- C:\AUTOEXEC.BAT
2010-04-15 17:43:50 ----A---- C:\WINDOWS\OEWABLog.txt
2010-04-15 17:43:46 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-04-15 17:43:07 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-15 17:43:07 ----RD---- C:\WINDOWS\Offline Web Pages
2010-04-15 17:43:07 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-04-15 17:43:03 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-04-15 17:42:56 ----D---- C:\Program Files\Online Services
2010-04-15 17:42:41 ----D---- C:\WINDOWS\system32\DirectX
2010-04-15 17:42:18 ----A---- C:\WINDOWS\system32\atrace.dll
2010-04-15 17:42:15 ----A---- C:\WINDOWS\system32\desktop.ini
2010-04-15 17:42:15 ----A---- C:\WINDOWS\desktop.ini
2010-04-15 17:42:08 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-04-15 17:42:06 ----A---- C:\WINDOWS\system32\acctres.dll
2010-04-15 17:42:05 ----D---- C:\Program Files\Common Files\Services
2010-04-15 17:42:02 ----SD---- C:\WINDOWS\Tasks
2010-04-15 17:42:02 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-04-15 17:42:00 ----D---- C:\Program Files\Common Files\MSSoap
2010-04-15 17:41:56 ----D---- C:\WINDOWS\system32\Macromed
2010-04-15 17:41:56 ----D---- C:\WINDOWS\srchasst
2010-04-15 17:41:53 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-04-15 17:41:53 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-04-15 17:41:53 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-04-15 17:41:53 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-04-15 17:41:52 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-04-15 17:41:51 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-04-15 17:41:51 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-04-15 17:41:48 ----D---- C:\Program Files\Movie Maker
2010-04-15 17:41:43 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-04-15 17:41:43 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-04-15 17:41:43 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-04-15 17:41:43 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-04-15 17:41:40 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-04-15 17:41:39 ----D---- C:\WINDOWS\system32\Restore
2010-04-15 17:41:39 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-04-15 17:41:39 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-04-15 17:41:39 ----A---- C:\WINDOWS\system32\srclient.dll
2010-04-15 17:41:39 ----A---- C:\WINDOWS\system32\fltmc.exe
2010-04-15 17:41:38 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-04-15 17:41:38 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-04-15 17:41:38 ----A---- C:\WINDOWS\system32\ils.dll
2010-04-15 17:41:37 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-04-15 17:41:37 ----A---- C:\WINDOWS\system32\msconf.dll
2010-04-15 17:41:37 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-04-15 17:41:34 ----D---- C:\Program Files\NetMeeting
2010-04-15 17:41:34 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-04-15 17:41:34 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-04-15 17:41:33 ----A---- C:\WINDOWS\system32\inetres.dll
2010-04-15 17:41:32 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-04-15 17:41:30 ----D---- C:\Program Files\Outlook Express
2010-04-15 17:41:30 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-04-15 17:41:30 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-04-15 17:41:30 ----A---- C:\WINDOWS\system32\mstask.dll
2010-04-15 17:41:30 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-04-15 17:41:29 ----A---- C:\WINDOWS\system32\isign32.dll
2010-04-15 17:41:29 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-04-15 17:41:29 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-04-15 17:41:23 ----D---- C:\Program Files\Common Files\System
2010-04-15 17:41:22 ----D---- C:\Program Files\Internet Explorer
2010-04-15 17:40:55 ----A---- C:\WINDOWS\vbaddin.ini
2010-04-15 17:40:55 ----A---- C:\WINDOWS\vb.ini
2010-04-15 17:40:52 ----D---- C:\WINDOWS\Registration
2010-04-15 17:40:45 ----D---- C:\Program Files\Windows Media Player
2010-04-15 17:40:40 ----D---- C:\Program Files\Messenger
2010-04-15 17:40:36 ----D---- C:\Program Files\MSN Gaming Zone
2010-04-15 17:40:36 ----A---- C:\WINDOWS\system32\write.exe
2010-04-15 17:40:26 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-04-15 17:40:26 ----A---- C:\WINDOWS\system32\hticons.dll
2010-04-15 17:40:25 ----A---- C:\WINDOWS\system32\winchat.exe
2010-04-15 17:40:25 ----A---- C:\WINDOWS\system32\avwav.dll
2010-04-15 17:40:25 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-04-15 17:40:25 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-04-15 17:40:17 ----A---- C:\WINDOWS\system32\getuname.dll
2010-04-15 17:40:16 ----A---- C:\WINDOWS\system32\sol.exe
2010-04-15 17:40:16 ----A---- C:\WINDOWS\system32\charmap.exe
2010-04-15 17:40:16 ----A---- C:\WINDOWS\system32\calc.exe
2010-04-15 17:40:15 ----A---- C:\WINDOWS\system32\winmine.exe
2010-04-15 17:40:15 ----A---- C:\WINDOWS\system32\reset.exe
2010-04-15 17:40:15 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-04-15 17:40:15 ----A---- C:\WINDOWS\system32\freecell.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\tskill.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\tscon.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\shadow.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\regini.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-04-15 17:40:14 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-04-15 17:40:13 ----A---- C:\WINDOWS\system32\msg.exe
2010-04-15 17:40:13 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-04-15 17:40:13 ----A---- C:\WINDOWS\system32\logoff.exe
2010-04-15 17:40:13 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-04-15 17:40:12 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-04-15 17:40:11 ----A---- C:\WINDOWS\system32\stclient.dll
2010-04-15 17:40:11 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-04-15 17:40:06 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-04-15 17:40:05 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-04-15 17:40:04 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-04-15 17:40:04 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-04-15 17:40:04 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-04-15 17:40:03 ----D---- C:\Program Files\Windows NT
2010-04-15 17:40:03 ----A---- C:\WINDOWS\system32\spider.exe
2010-04-15 17:40:03 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-04-15 17:40:03 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-04-15 17:40:02 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-04-15 17:40:02 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-04-15 17:40:01 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-04-15 17:40:00 ----D---- C:\WINDOWS\system32\MsDtc
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-04-15 17:40:00 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-04-15 17:39:59 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-04-15 17:39:58 ----D---- C:\WINDOWS\system32\Com
2010-04-15 17:39:58 ----A---- C:\WINDOWS\system32\colbact.dll
2010-04-15 17:39:57 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-04-15 17:39:57 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-04-15 17:39:57 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-04-15 17:39:57 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-04-15 17:39:56 ----A---- C:\WINDOWS\system32\comuid.dll
2010-04-15 17:39:56 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-04-15 17:39:56 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-04-15 17:39:49 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-04-15 17:39:49 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-04-15 17:39:49 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-04-15 17:39:49 ----A---- C:\WINDOWS\system32\cmprops.dll

======List of files/folders modified in the last 1 months======

2010-04-17 16:23:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
2010-04-17 15:48:13 ----D---- C:\WINDOWS\Prefetch
2010-04-17 15:33:34 ----A---- C:\WINDOWS\system.ini
2010-04-17 12:30:30 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-17 01:59:00 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-17 01:58:58 ----A---- C:\WINDOWS\AS_Debug.txt
2010-04-17 01:32:53 ----D---- C:\Documents and Settings\Danikoof\Data aplikací\Adobe
2010-04-15 17:43:58 ----A---- C:\WINDOWS\win.ini
2010-03-19 19:05:50 ----A---- C:\WINDOWS\system32\wmp.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-11-19 296976]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [2006-08-22 35712]
R3 AVerBDA3x;AVerMedia SAA713x BDA Service; C:\WINDOWS\system32\DRIVERS\AVerBDA3x.sys [2006-12-14 1171456]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-09-06 4377600]
R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2009-05-13 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [2009-05-16 19472]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-07-14 7741664]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-11-19 47360]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-07-14 168004]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2009-05-25 303376]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------

Doporučuji odinstalovat:
C:\Program Files\uTorrent\uTorrent.exe

P2P sítě a jejich klienti jsou potenciálním bezpečnostním rizikem, prakticky neustále jsou zdrojem virů, zbytečně se vystavujete riziku.


Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

• Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
• Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte TFC http://oldtimer.geekstogo.com/TFC.exe

• Spusťte.
• Klikněte na "Start". Potvrďte hlášku kliknutím na "Ok" (Bude následovat restart)

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky kliknutím na "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

Jsou s PC nějaké problémy

ten ComboFix nejde odintalovat. prej nemuze najit CF uninstall

jinak s compem je to ted v poho, ale pred tim sem tady stravil dva dny a nic moc. chcu aby to bylo cisty, ten Utorrent sem odinst.diky moc

t-Cleaner combofix nejspis smazal sam. jinak diky moc

Nemáte zač