Stránka 1 z 3

Problém při procházení internetu

Napsal: 25 čer 2010 06:45
od AnYoNe
Zdravím, když se pohybuji na internetu, tak se mi občas otevře nové okno (ve firefoxu) nebo nový panel (v chromu) google, popř. yahoo...taky některé stránky po nahrání zbělají (např. http://www.leagueoflegends-wiki.com/). Mám takový pocit, že to dělají všechny PC v síti, ale teď si nejsem jistý a nemohu ověřit, jak to půjde ověřím. :)

Pro jistotu přikládám log z RSITu:
Logfile of random's system information tool 1.07 (written by random/random)
Run by Kukuksumusu at 2010-06-25 07:44:31
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 428 GB (90%) free of 477 GB
Total RAM: 1790 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:44:37, on 25.6.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Fraps\fraps.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Kukuksumusu\Plocha\Instalacky apod\RSIT.exe
C:\Program Files\trend micro\Kukuksumusu.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: BluePhone Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe

--
End of file - 5682 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
BluePhone Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{D4027C7F-154A-4066-A1AD-4243D8127440} - BluePhone Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-08-04 346320]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-30 98304]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-08-14 18702336]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2004-08-17 1667584]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-07-29 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Riot Games\League of Legends\air\LolClient.exe"="C:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Riot Games\League of Legends\game\League of Legends.exe"="C:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe"="C:\Program Files\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe:*:Enabled:Borderlands"
"C:\Program Files\League of Legends\Air\LolClient.exe"="C:\Program Files\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Program Files\League of Legends\Game\League of Legends.exe"="C:\Program Files\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-06-22 19:25:02 ----HD---- C:\WINDOWS\msdownld.tmp
2010-06-22 19:24:51 ----D---- C:\WINDOWS\LastGood
2010-06-22 19:10:09 ----A---- C:\Program Files\loleusetup.exe
2010-06-21 19:02:03 ----D---- C:\Program Files\Fraps
2010-06-18 07:03:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2010-06-18 07:02:55 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-06-18 07:02:55 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-06-18 07:02:55 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-06-18 07:02:55 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-06-18 07:02:54 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-06-18 07:02:53 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-06-18 07:02:53 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-06-18 07:02:53 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-06-18 07:02:53 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-06-18 07:02:52 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-06-18 07:02:51 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-06-18 07:02:51 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-06-18 07:02:50 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-06-18 07:02:50 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-06-18 07:02:50 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-06-18 07:02:50 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-06-18 07:02:50 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-06-18 07:02:49 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-06-18 07:02:49 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-06-18 07:02:49 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-06-18 07:02:49 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-06-18 07:02:49 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-06-18 07:02:48 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-06-18 07:02:48 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-06-18 07:02:48 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-06-18 07:02:48 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-06-18 07:02:48 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-06-18 07:02:47 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-06-18 07:02:47 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-06-18 07:02:47 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-06-18 07:02:47 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-06-18 07:02:46 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-06-18 07:02:46 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2010-06-18 07:02:46 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-06-18 07:02:46 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-06-18 07:02:46 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-06-18 07:02:45 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-06-18 07:02:45 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-06-18 07:02:44 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-06-18 07:02:44 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-06-18 07:02:43 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-06-18 07:02:43 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-06-18 07:02:42 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-06-18 07:02:42 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-06-18 07:02:42 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-06-18 07:02:42 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-06-18 07:02:41 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-06-18 07:02:41 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-06-18 07:02:41 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-06-18 07:02:40 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-06-18 07:02:40 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-06-18 07:02:40 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-06-18 07:02:32 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-06-18 07:02:31 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-06-18 07:02:31 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-06-18 07:02:31 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-06-18 07:02:30 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-06-18 07:02:30 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-06-18 07:02:30 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-06-18 07:02:29 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-06-18 07:02:29 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-06-18 07:02:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-06-18 07:02:18 ----D---- C:\Program Files\DIFX
2010-06-18 07:02:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-06-18 07:01:38 ----D---- C:\WINDOWS\system32\AGEIA
2010-06-18 07:01:37 ----D---- C:\Program Files\AGEIA Technologies
2010-06-18 07:01:31 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-06-18 06:56:17 ----D---- C:\Program Files\2K Games
2010-06-18 06:56:07 ----D---- C:\BDS
2010-06-18 06:37:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Estsoft
2010-06-18 06:36:28 ----D---- C:\Program Files\ESTsoft
2010-06-18 06:36:28 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\ESTsoft
2010-06-17 19:07:30 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\WinRAR
2010-06-16 07:26:47 ----SHD---- C:\RECYCLER
2010-06-16 07:24:33 ----D---- C:\Program Files\Valve
2010-06-16 06:44:24 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-06-16 06:43:45 ----D---- C:\Program Files\Microsoft Works
2010-06-16 06:43:37 ----D---- C:\Program Files\MSBuild
2010-06-16 06:43:19 ----D---- C:\Program Files\Microsoft Visual Studio
2010-06-16 06:43:19 ----D---- C:\Program Files\Common Files\DESIGNER
2010-06-16 06:42:08 ----D---- C:\Program Files\Microsoft.NET
2010-06-16 06:40:41 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-06-16 06:39:49 ----D---- C:\WINDOWS\SHELLNEW
2010-06-16 06:39:28 ----D---- C:\Program Files\Microsoft Office
2010-06-16 06:39:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-06-16 06:39:14 ----RHD---- C:\MSOCache
2010-06-15 07:37:25 ----D---- C:\rsit
2010-06-15 07:37:25 ----D---- C:\Program Files\trend micro
2010-06-15 07:33:20 ----D---- C:\Program Files\Ask.com
2010-06-15 04:16:24 ----A---- C:\WINDOWS\system32\frapsvid.dll
2010-06-14 23:50:12 ----A---- C:\WINDOWS\system32\h323log.txt
2010-06-14 23:46:28 ----A---- C:\WINDOWS\system32\usbui.dll
2010-06-14 23:46:03 ----A---- C:\WINDOWS\imsins.BAK
2010-06-14 23:46:00 ----D---- C:\Program Files\Common Files\ODBC
2010-06-14 23:46:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-06-14 23:46:00 ----A---- C:\WINDOWS\ODBCINST.INI
2010-06-14 23:45:57 ----RD---- C:\Program Files
2010-06-14 23:45:57 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-06-14 23:45:57 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-06-14 23:45:57 ----D---- C:\Program Files\Common Files
2010-06-14 23:45:55 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-06-14 23:45:55 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-06-14 23:45:55 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-06-14 23:45:53 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-06-14 23:45:51 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-06-14 23:45:50 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-06-14 23:45:50 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-06-14 23:45:50 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-06-14 23:45:50 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-06-14 23:45:50 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-06-14 23:45:47 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-06-14 23:45:46 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-06-14 23:45:46 ----A---- C:\WINDOWS\system32\irclass.dll
2010-06-14 23:45:46 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-06-14 23:45:46 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-06-14 23:45:45 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-06-14 23:45:45 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-06-14 23:45:43 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-06-14 23:45:43 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-06-14 23:45:43 ----A---- C:\WINDOWS\notepad.exe
2010-06-14 23:45:41 ----A---- C:\WINDOWS\system32\batt.dll
2010-06-14 23:45:40 ----A---- C:\WINDOWS\system32\storprop.dll
2010-06-14 23:45:38 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-06-14 23:45:06 ----RA---- C:\WINDOWS\SETA.tmp
2010-06-14 23:45:03 ----RA---- C:\WINDOWS\SET3.tmp
2010-06-14 23:44:58 ----D---- C:\WINDOWS\system32\CatRoot2
2010-06-14 23:44:58 ----D---- C:\WINDOWS\system32\CatRoot
2010-06-14 23:44:53 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-06-14 23:44:05 ----A---- C:\WINDOWS\setuplog.txt
2010-06-14 23:44:03 ----D---- C:\Documents and Settings
2010-06-14 23:43:08 ----RSH---- C:\boot.ini
2010-06-14 23:39:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-06-14 23:39:18 ----RSD---- C:\WINDOWS\Fonts
2010-06-14 23:39:18 ----RD---- C:\WINDOWS\Web
2010-06-14 23:39:18 ----HD---- C:\WINDOWS\inf
2010-06-14 23:39:18 ----D---- C:\WINDOWS\WinSxS
2010-06-14 23:39:18 ----D---- C:\WINDOWS\twain_32
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Temp
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\wins
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\wbem
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\usmt
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\spool
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\ShellExt
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\Setup
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\ras
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\oobe
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\npp
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\mui
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\inetsrv
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\IME
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\icsxml
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\ias
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\export
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\drivers
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\dhcp
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\config
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\3com_dmi
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\3076
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\2052
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1054
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1042
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1041
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1037
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1033
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1031
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1029
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1028
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32\1025
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system32
2010-06-14 23:39:18 ----D---- C:\WINDOWS\system
2010-06-14 23:39:18 ----D---- C:\WINDOWS\security
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Resources
2010-06-14 23:39:18 ----D---- C:\WINDOWS\repair
2010-06-14 23:39:18 ----D---- C:\WINDOWS\mui
2010-06-14 23:39:18 ----D---- C:\WINDOWS\msapps
2010-06-14 23:39:18 ----D---- C:\WINDOWS\msagent
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Media
2010-06-14 23:39:18 ----D---- C:\WINDOWS\java
2010-06-14 23:39:18 ----D---- C:\WINDOWS\ime
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Help
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Driver Cache
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Debug
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Cursors
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Connection Wizard
2010-06-14 23:39:18 ----D---- C:\WINDOWS\Config
2010-06-14 23:39:18 ----D---- C:\WINDOWS\AppPatch
2010-06-14 23:39:18 ----D---- C:\WINDOWS\addins
2010-06-14 23:39:18 ----D---- C:\WINDOWS
2010-06-14 20:39:16 ----D---- C:\Program Files\DAEMON Tools Lite
2010-06-14 20:38:53 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\DAEMON Tools Lite
2010-06-14 20:38:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2010-06-14 17:44:49 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\LolClient
2010-06-14 17:11:55 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-06-14 17:11:52 ----D---- C:\Program Files\Alwil Software
2010-06-14 17:11:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-06-14 17:08:39 ----D---- C:\Program Files\Adobe
2010-06-14 17:05:25 ----D---- C:\Riot Games
2010-06-14 17:03:20 ----D---- C:\WINDOWS\SoftwareDistribution
2010-06-14 17:03:17 ----D---- C:\WINDOWS\Prefetch
2010-06-14 16:56:23 ----N---- C:\WINDOWS\system32\comsdupd.exe
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\btpanui.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\bthserv.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\bthci.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\blastcln.exe
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\auditusr.exe
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2010-06-14 16:56:19 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\msdadiag.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\mp4sdmod.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\mp43dmod.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdukx.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdno1.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdinben.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ir50_qc.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ir50_32.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ir41_qc.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\ieencode.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\httpapi.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\fwcfg.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\fsquirt.exe
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\fltmc.exe
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\fltlib.dll
2010-06-14 16:56:18 ----N---- C:\WINDOWS\system32\extmgr.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\xpsp2res.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\xpob2res.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\w3ssl.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\twext.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\strmfilt.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\smbinst.exe
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\slserv.exe
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\slrundll.exe
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\slgen.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\slextspk.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\slcoinst.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\s3gnb.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\powercfg.exe
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\p2psvc.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\p2p.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2010-06-14 16:56:17 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wuapi.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wshbth.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wscsvc.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wscntfy.exe
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmspdmoe.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmspdmod.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmpasf.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmp.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmidx.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\wmerror.dll
2010-06-14 16:56:16 ----N---- C:\WINDOWS\system32\winshfhc.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\xmlprov.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\wuweb.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\wups.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\wucltui.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2010-06-14 16:56:15 ----N---- C:\WINDOWS\slrundll.exe
2010-06-14 16:56:15 ----D---- C:\WINDOWS\peernet
2010-06-14 16:56:14 ----D---- C:\WINDOWS\provisioning
2010-06-14 16:55:26 ----D---- C:\WINDOWS\ServicePackFiles
2010-06-14 16:53:56 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-06-14 16:53:55 ----A---- C:\WINDOWS\002212_.tmp
2010-06-14 16:53:54 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-06-14 16:53:15 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-06-14 16:53:13 ----D---- C:\WINDOWS\EHome
2010-06-14 16:51:11 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\skypePM
2010-06-14 16:48:41 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-06-14 16:48:41 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-06-14 16:48:41 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-06-14 16:48:41 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-06-14 16:48:40 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-06-14 16:48:38 ----D---- C:\WINDOWS\RegisteredPackages
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qedwipes.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qedit.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qdvd.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qdv.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qcap.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\qasf.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\mswebdvd.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\mciqtz32.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\encapi.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dswave.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmusic.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmsynth.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmstyle.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmscript.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmloader.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmime.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmcompos.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\dmband.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\d3d9.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\d3d8.dll
2010-06-14 16:48:21 ----A---- C:\WINDOWS\system32\amstream.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dxdiagn.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dxdiag.exe
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dx8vb.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dx7vb.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dsound3d.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dsdmoprp.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dsdmo.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpwsockx.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpvvox.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpvsetup.exe
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpvoice.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpvacm.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpnsvr.exe
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpnlobby.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpnhpast.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpnet.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpnaddr.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dpmodemx.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dplayx.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\dplaysvr.exe
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\ddrawex.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\ddraw.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\d3dim700.dll
2010-06-14 16:48:20 ----A---- C:\WINDOWS\system32\d3d8thk.dll
2010-06-14 16:48:16 ----D---- C:\WINDOWS\Logs
2010-06-14 16:48:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-06-14 16:45:00 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-06-14 16:44:54 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Macromedia
2010-06-14 16:44:54 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Adobe
2010-06-14 16:40:53 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Skype
2010-06-14 16:40:32 ----D---- C:\Program Files\Common Files\Skype
2010-06-14 16:40:30 ----RD---- C:\Program Files\Skype
2010-06-14 16:40:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-06-14 16:31:29 ----D---- C:\Program Files\League of Legends
2010-06-14 16:29:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2010-06-14 16:29:02 ----D---- C:\Program Files\Pando Networks
2010-06-14 16:25:48 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Mozilla
2010-06-14 16:25:45 ----D---- C:\Program Files\Mozilla Firefox
2010-06-14 16:24:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-06-14 16:21:43 ----RA---- C:\WINDOWS\system32\RtNicProp32.dll
2010-06-14 16:21:02 ----D---- C:\WINDOWS\system32\Lang
2010-06-14 16:19:40 ----D---- C:\WINDOWS\system32\RTCOM
2010-06-14 16:19:38 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-06-14 16:19:17 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-06-14 16:19:16 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXP$
2010-06-14 16:19:12 ----A---- C:\WINDOWS\vncutil.exe
2010-06-14 16:19:12 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-06-14 16:19:12 ----A---- C:\WINDOWS\SkyTel.exe
2010-06-14 16:19:12 ----A---- C:\WINDOWS\RtlUpd.exe
2010-06-14 16:19:11 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2010-06-14 16:19:11 ----A---- C:\WINDOWS\RtkAudioService.exe
2010-06-14 16:19:10 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-06-14 16:19:07 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-06-14 16:19:06 ----A---- C:\WINDOWS\MicCal.exe
2010-06-14 16:19:04 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-06-14 16:19:04 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-06-14 16:19:03 ----D---- C:\Program Files\Realtek
2010-06-14 16:19:01 ----R---- C:\WINDOWS\RtlExUpd.dll
2010-06-14 16:18:39 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\ATI
2010-06-14 16:18:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-06-14 16:17:40 ----SD---- C:\WINDOWS\system32\Microsoft
2010-06-14 16:15:34 ----RSD---- C:\WINDOWS\assembly
2010-06-14 16:15:20 ----D---- C:\WINDOWS\Microsoft.NET
2010-06-14 16:15:03 ----HDC---- C:\WINDOWS\$MSI30UninstallMSI30-KB884016$
2010-06-14 16:14:54 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2010-06-14 16:14:52 ----RA---- C:\WINDOWS\system32\ATIDEMGX.dll
2010-06-14 16:14:41 ----D---- C:\Program Files\ATI Technologies
2010-06-14 16:14:35 ----D---- C:\Program Files\Common Files\InstallShield
2010-06-14 16:14:17 ----HD---- C:\Program Files\InstallShield Installation Information
2010-06-14 16:14:17 ----HD---- C:\Program Files\DeviceVM
2010-06-14 16:13:26 ----RA---- C:\WINDOWS\GSetup.exe
2010-06-14 16:13:26 ----A---- C:\WINDOWS\GSetup.ini
2010-06-14 16:02:58 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\MSN6
2010-06-14 16:02:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\MSN6
2010-06-14 16:01:26 ----SHD---- C:\WINDOWS\Installer
2010-06-14 16:01:24 ----D---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Identities
2010-06-14 16:01:20 ----HD---- C:\Program Files\Uninstall Information
2010-06-14 16:01:13 ----SD---- C:\Documents and Settings\Kukuksumusu\Data aplikací\Microsoft
2010-06-14 16:01:13 ----ASH---- C:\Documents and Settings\Kukuksumusu\Data aplikací\desktop.ini
2010-06-14 16:00:01 ----SHD---- C:\System Volume Information
2010-06-14 16:00:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-06-14 15:57:44 ----D---- C:\WINDOWS\system32\xircom
2010-06-14 15:57:44 ----D---- C:\Program Files\xerox
2010-06-14 15:57:44 ----D---- C:\Program Files\microsoft frontpage
2010-06-14 15:56:47 ----A---- C:\WINDOWS\control.ini
2010-06-14 15:56:47 ----A---- C:\AUTOEXEC.BAT
2010-06-14 15:56:44 ----A---- C:\WINDOWS\OEWABLog.txt
2010-06-14 15:56:39 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-06-14 15:56:09 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-06-14 15:56:09 ----RD---- C:\WINDOWS\Offline Web Pages
2010-06-14 15:56:09 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-06-14 15:56:06 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-06-14 15:55:50 ----D---- C:\WINDOWS\system32\DirectX
2010-06-14 15:55:23 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-06-14 15:55:22 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-06-14 15:55:22 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-06-14 15:55:22 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-06-14 15:55:22 ----A---- C:\WINDOWS\system32\atrace.dll
2010-06-14 15:55:19 ----A---- C:\WINDOWS\system32\desktop.ini
2010-06-14 15:55:19 ----A---- C:\WINDOWS\desktop.ini
2010-06-14 15:55:13 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-06-14 15:55:13 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-06-14 15:55:12 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-06-14 15:55:11 ----A---- C:\WINDOWS\system32\acctres.dll
2010-06-14 15:55:10 ----D---- C:\Program Files\Common Files\Services
2010-06-14 15:55:10 ----A---- C:\WINDOWS\system32\inetres.dll
2010-06-14 15:55:06 ----SD---- C:\WINDOWS\Tasks
2010-06-14 15:55:06 ----A---- C:\WINDOWS\system32\isign32.dll
2010-06-14 15:55:06 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-06-14 15:55:06 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-06-14 15:55:06 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-06-14 15:55:06 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-06-14 15:55:04 ----D---- C:\Program Files\Common Files\MSSoap
2010-06-14 15:54:59 ----D---- C:\WINDOWS\srchasst
2010-06-14 15:54:58 ----D---- C:\WINDOWS\system32\Macromed
2010-06-14 15:54:58 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-06-14 15:54:57 ----D---- C:\Program Files\Movie Maker
2010-06-14 15:54:57 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-06-14 15:54:53 ----D---- C:\WINDOWS\PCHealth
2010-06-14 15:54:52 ----D---- C:\WINDOWS\system32\Restore
2010-06-14 15:54:52 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-06-14 15:54:52 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-06-14 15:54:52 ----A---- C:\WINDOWS\system32\srclient.dll
2010-06-14 15:54:52 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-06-14 15:54:52 ----A---- C:\WINDOWS\system32\ils.dll
2010-06-14 15:54:51 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-06-14 15:54:51 ----A---- C:\WINDOWS\system32\msconf.dll
2010-06-14 15:54:49 ----D---- C:\Program Files\NetMeeting
2010-06-14 15:54:49 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-06-14 15:54:49 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-06-14 15:54:48 ----D---- C:\Program Files\Outlook Express
2010-06-14 15:54:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-06-14 15:54:47 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-06-14 15:54:47 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-06-14 15:54:47 ----A---- C:\WINDOWS\system32\mstask.dll
2010-06-14 15:54:41 ----D---- C:\Program Files\Internet Explorer
2010-06-14 15:54:41 ----D---- C:\Program Files\Common Files\System
2010-06-14 15:54:29 ----D---- C:\Program Files\ComPlus Applications
2010-06-14 15:54:28 ----A---- C:\WINDOWS\vbaddin.ini
2010-06-14 15:54:28 ----A---- C:\WINDOWS\vb.ini
2010-06-14 15:54:26 ----D---- C:\WINDOWS\Registration
2010-06-14 15:54:24 ----HD---- C:\Program Files\WindowsUpdate
2010-06-14 15:54:24 ----D---- C:\Program Files\Online Services
2010-06-14 15:54:23 ----D---- C:\Program Files\Windows Media Player
2010-06-14 15:54:21 ----D---- C:\Program Files\Messenger
2010-06-14 15:54:17 ----D---- C:\Program Files\MSN Gaming Zone
2010-06-14 15:54:17 ----A---- C:\WINDOWS\system32\write.exe
2010-06-14 15:54:09 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\hticons.dll
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\avwav.dll
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-06-14 15:54:08 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-06-14 15:54:07 ----A---- C:\WINDOWS\system32\winchat.exe
2010-06-14 15:54:01 ----A---- C:\WINDOWS\system32\getuname.dll
2010-06-14 15:54:00 ----A---- C:\WINDOWS\system32\winmine.exe
2010-06-14 15:54:00 ----A---- C:\WINDOWS\system32\sol.exe
2010-06-14 15:54:00 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-06-14 15:54:00 ----A---- C:\WINDOWS\system32\charmap.exe
2010-06-14 15:54:00 ----A---- C:\WINDOWS\system32\calc.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\tskill.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\tscon.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\shadow.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\reset.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-06-14 15:53:59 ----A---- C:\WINDOWS\system32\freecell.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\regini.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\msg.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\logoff.exe
2010-06-14 15:53:58 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-06-14 15:53:57 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-06-14 15:53:56 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\stclient.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\colbact.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-06-14 15:53:55 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-06-14 15:53:54 ----A---- C:\WINDOWS\system32\comuid.dll
2010-06-14 15:53:54 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-06-14 15:53:54 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-06-14 15:53:47 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-06-14 15:53:47 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-06-14 15:53:47 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-06-14 15:53:47 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-06-14 15:53:42 ----D---- C:\Program Files\Windows NT
2010-06-14 15:53:42 ----D---- C:\Program Files\MSN
2010-06-14 15:53:42 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-06-14 15:53:42 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-06-14 15:53:41 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-06-14 15:53:41 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-06-14 15:53:41 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-06-14 15:53:41 ----A---- C:\WINDOWS\system32\spider.exe
2010-06-14 15:53:41 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-06-14 15:53:40 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-06-14 15:53:39 ----D---- C:\WINDOWS\system32\MsDtc
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-06-14 15:53:39 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-06-14 15:53:38 ----D---- C:\WINDOWS\system32\Com
2010-06-14 15:53:38 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-06-14 15:53:38 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-06-14 15:53:35 ----A---- C:\WINDOWS\system32\licwmi.dll

======List of files/folders modified in the last 1 months======

2010-06-16 06:40:10 ----A---- C:\WINDOWS\win.ini
2010-06-14 23:45:56 ----A---- C:\WINDOWS\system.ini
2010-06-14 16:54:21 ----RASH---- C:\NTDETECT.COM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2004-08-03 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2009-07-30 4411392]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2002-09-23 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-08-18 5884416]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2002-09-23 12160]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2009-06-29 142592]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 ax3rey2z;ax3rey2z; C:\WINDOWS\system32\drivers\ax3rey2z.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2009-07-29 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-08-04 219360]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

Re: Problém při procházení internetu

Napsal: 25 čer 2010 06:49
od JaRon
1. odinstaluj Ask Toolbar
2. prescanuj PC s MBAM

Re: Problém při procházení internetu

Napsal: 25 čer 2010 07:33
od AnYoNe
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

25.6.2010 8:32:01
mbam-log-2010-06-25 (08-32-01).txt

Typ skenu: Rychlý sken
Skenované objekty: 115267
Uplynulý čas: 4 minuta(y), 49 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 2
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.114.57 192.168.1.1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{778d0540-28cc-40fd-ba2f-489a6fa42ab0}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.114.57 192.168.1.1 -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Re: Problém při procházení internetu

Napsal: 25 čer 2010 07:34
od JaRon
odstran najdene polozky - restart - zopakuj kontrolu - ak bude ciste doinstaluj SP3

Re: Problém při procházení internetu

Napsal: 25 čer 2010 07:43
od AnYoNe
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

25.6.2010 8:42:39
mbam-log-2010-06-25 (08-42-39).txt

Typ skenu: Rychlý sken
Skenované objekty: 115064
Uplynulý čas: 3 minuta(y), 55 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 2
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.114.57 192.168.1.1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{778d0540-28cc-40fd-ba2f-489a6fa42ab0}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.114.57 192.168.1.1 -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

:(

Re: Problém při procházení internetu

Napsal: 25 čer 2010 07:56
od AnYoNe
zkusil jsem znovu smazat....nejde :(

Re: Problém při procházení internetu

Napsal: 25 čer 2010 09:34
od JaRon
tak to skusime inac :)
stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim


akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

Re: Problém při procházení internetu

Napsal: 25 čer 2010 11:20
od AnYoNe
ComboFix 10-06-24.03 - Kukuksumusu 25.06.2010 12:15:19.1.3 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.1790.1428 [GMT 2:00]
Spuštěný z: c:\documents and settings\Kukuksumusu\Plocha\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-05-25 do 2010-06-25 )))))))))))))))))))))))))))))))
.

2010-06-25 06:34 . 2010-06-25 06:34 -------- d--h--w- c:\windows\PIF
2010-06-25 06:26 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-25 06:26 . 2010-06-25 06:26 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-25 06:26 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-22 17:25 . 2010-06-22 17:25 -------- d--h--w- c:\windows\msdownld.tmp
2010-06-22 17:10 . 2010-06-22 17:22 814143398 ----a-w- c:\program files\loleusetup.exe
2010-06-21 17:02 . 2010-06-22 08:30 -------- d-----w- c:\program files\Fraps
2010-06-18 05:01 . 2010-06-18 05:01 -------- d-----w- c:\windows\system32\AGEIA
2010-06-18 05:01 . 2010-06-18 05:01 -------- d-----w- c:\program files\AGEIA Technologies
2010-06-18 05:01 . 2010-06-18 05:01 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-06-18 04:56 . 2010-06-18 04:56 -------- d-----w- c:\program files\2K Games
2010-06-18 04:56 . 2010-06-18 05:01 -------- d-----w- C:\BDS
2010-06-18 04:36 . 2010-06-18 04:36 -------- d-----w- c:\program files\ESTsoft
2010-06-16 05:24 . 2010-06-16 05:26 -------- d-----w- c:\program files\Valve
2010-06-16 04:44 . 2006-10-26 17:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-06-16 04:44 . 2006-10-26 17:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-06-16 04:43 . 2010-06-16 04:43 -------- d-----w- c:\program files\Microsoft Works
2010-06-16 04:43 . 2010-06-16 04:43 -------- d-----w- c:\program files\MSBuild
2010-06-16 04:42 . 2010-06-16 04:42 -------- d-----w- c:\program files\Microsoft.NET
2010-06-16 04:40 . 2010-06-16 04:40 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-06-16 04:39 . 2010-06-16 04:43 -------- d-----w- c:\windows\SHELLNEW
2010-06-16 04:39 . 2010-06-16 04:39 -------- d-----r- C:\MSOCache
2010-06-15 05:37 . 2010-06-25 05:44 -------- d-----w- c:\program files\trend micro
2010-06-15 05:37 . 2010-06-15 05:37 -------- d-----w- C:\rsit
2010-06-15 02:16 . 2010-06-15 02:16 86016 ----a-w- c:\windows\system32\frapsvid.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-22 17:30 . 2010-06-14 14:31 -------- d-----w- c:\program files\League of Legends
2010-06-18 05:02 . 2010-06-18 05:02 -------- d-----w- c:\program files\DIFX
2010-06-18 04:56 . 2010-06-14 14:14 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-06-16 04:33 . 2010-06-14 18:39 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-06-14 18:39 . 2010-06-14 18:39 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-06-14 15:11 . 2010-06-14 15:11 -------- d-----w- c:\program files\Alwil Software
2010-06-14 15:08 . 2010-06-14 14:45 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-06-14 15:04 . 2002-09-23 12:00 68736 ----a-w- c:\windows\system32\perfc005.dat
2010-06-14 15:04 . 2002-09-23 12:00 389664 ----a-w- c:\windows\system32\perfh005.dat
2010-06-14 14:59 . 2010-06-14 13:56 86327 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2010-06-14 14:59 . 2010-06-14 13:56 2724 ----a-w- c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin
2010-06-14 14:56 . 2010-06-14 13:56 8972 ----a-w- c:\windows\PCHealth\HelpCtr\Config\Cntstore.bin
2010-06-14 14:51 . 2010-06-14 14:51 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2010-06-14 14:40 . 2010-06-14 14:40 -------- d-----r- c:\program files\Skype
2010-06-14 14:40 . 2010-06-14 14:40 -------- d-----w- c:\program files\Common Files\Skype
2010-06-14 14:29 . 2010-06-14 14:29 -------- d-----w- c:\program files\Pando Networks
2010-06-14 14:25 . 2010-06-14 14:25 0 ----a-w- c:\windows\nsreg.dat
2010-06-14 14:21 . 2010-06-14 14:19 -------- d-----w- c:\program files\Realtek
2010-06-14 14:18 . 2010-06-14 14:18 0 ----a-w- c:\windows\ativpsrm.bin
2010-06-14 14:17 . 2010-06-14 14:14 -------- d-----w- c:\program files\ATI Technologies
2010-06-14 14:16 . 2010-06-14 14:14 -------- d-----w- c:\program files\Common Files\InstallShield
2010-06-14 14:14 . 2010-06-14 14:14 -------- d--h--w- c:\program files\DeviceVM
2010-06-14 13:57 . 2010-06-14 13:57 -------- d-----w- c:\program files\microsoft frontpage
2010-06-14 13:56 . 2010-06-14 13:56 558142 ----a-w- c:\windows\java\Packages\UAAHJJ3P.ZIP
2010-06-14 13:56 . 2010-06-14 13:56 2678 ----a-w- c:\windows\java\Packages\Data\VVPVDF9Z.DAT
2010-06-14 13:56 . 2010-06-14 13:56 2678 ----a-w- c:\windows\java\Packages\Data\TNDZ3317.DAT
2010-06-14 13:56 . 2010-06-14 13:56 155995 ----a-w- c:\windows\java\Packages\I6ACS4MC.ZIP
2010-06-14 13:56 . 2010-06-14 13:56 2678 ----a-w- c:\windows\java\Packages\Data\HVH3ZLRF.DAT
2010-06-14 13:56 . 2010-06-14 13:56 2678 ----a-w- c:\windows\java\Packages\Data\BZLVFDVX.DAT
2010-06-14 13:56 . 2010-06-14 13:56 2678 ----a-w- c:\windows\java\Packages\Data\13FJ35NN.DAT
2010-06-14 13:54 . 2010-06-14 13:54 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-05-06 20:59 . 2010-06-14 15:11 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-05-06 20:59 . 2010-06-14 15:11 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2010-06-14 15:12 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2010-06-14 15:12 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2010-06-14 15:12 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:33 . 2010-06-14 15:12 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-05-06 20:33 . 2010-06-14 15:12 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-05-06 20:33 . 2010-06-14 15:12 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-06 20:33 . 2010-06-14 15:12 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-05-13 26192168]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-08-04 346320]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-29 98304]
"RTHDCPL"="RTHDCPL.EXE" [2009-08-14 18702336]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-17 15360]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Riot Games\\League of Legends\\air\\LolClient.exe"=
"c:\\Riot Games\\League of Legends\\game\\League of Legends.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\2K Games\\Gearbox Software\\Borderlands\\Binaries\\Borderlands.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8377:TCP"= 8377:TCP:League of Legends Launcher
"8377:UDP"= 8377:UDP:League of Legends Launcher
"8378:TCP"= 8378:TCP:League of Legends Launcher
"8378:UDP"= 8378:UDP:League of Legends Launcher
"8394:TCP"= 8394:TCP:League of Legends Launcher
"8394:UDP"= 8394:UDP:League of Legends Launcher

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [14.6.2010 17:12 164048]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [14.6.2010 17:12 19024]
R2 BCUService;Browser Configuration Utility Service;c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [14.6.2010 16:14 219360]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [14.6.2010 20:39 691696]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [14.6.2010 16:19 1684736]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Kukuksumusu\Data aplikací\Mozilla\Firefox\Profiles\j2sp6s5l.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/|http://www.google.cz/|ht ... /index.php
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\Pando Networks\Media Booster\npPandoWebPlugin.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 10);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-25 12:18
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\:őwjY*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11?\16?\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.8"
"DeviceInstanceIds"=multi:"d:\\chipset\\7-ser\\xp\\sbdrv\\smbus\\smbusati.inf\00"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(724)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-06-25 12:19:36
ComboFix-quarantined-files.txt 2010-06-25 10:19

Před spuštěním: Volných bajtů: 449 015 517 184
Po spuštění: Volných bajtů: 449 110 728 704

- - End Of File - - 848E8991C43D7DC813B4EF3BB7F78DB5

Re: Problém při procházení internetu

Napsal: 25 čer 2010 11:30
od JaRon
je pocitac pripojeny k nejakemu routru ?

Re: Problém při procházení internetu

Napsal: 25 čer 2010 12:10
od AnYoNe
ano je

Re: Problém při procházení internetu

Napsal: 25 čer 2010 12:17
od JaRon
pripoj sa k nemu a ak tam bude DNS nastavene na 85.255.114.57 tak to odstran
+
ak tam bude ta IP, tak bude potrebne aj zmenit heslo k routru

Re: Problém při procházení internetu

Napsal: 25 čer 2010 13:13
od AnYoNe
hmm, DNS je 213.46.172.36, 213.46.172.37 a tu IP 85.255.114.57 nasel v "active season"...
Active Session
# Internal Protocol External NAT Time-out
1 192.168.1.33:1025 UDP 85.255.114.57:53 60089 226
2 192.168.1.33:1145 TCP 66.151.54.140:5223 60523 3597
3 192.168.1.33:1144 TCP 66.151.54.140:2099 61235 3590
4 192.168.1.33:1067 UDP 85.255.114.57:53 61375 226
5 192.168.1.33:1066 UDP 85.255.114.57:53 62049 226


takze zmenit heslo? :)

Re: Problém při procházení internetu

Napsal: 25 čer 2010 13:18
od JaRon
heslo zmen v pripade, ze je povodne tovarenske alebo ziadne
+
na PC spust Fixwareout vid iwi http://www.viry.cz/forum/viewtopic.php? ... ut#p605507

Re: Problém při procházení internetu

Napsal: 25 čer 2010 13:39
od AnYoNe
The file you are attempting to download is not currently available on our servers or is being processed. Please try your download in a few minutes.
:)

Re: Problém při procházení internetu

Napsal: 25 čer 2010 15:08
od AnYoNe
nicmene tady je log :D :
Username "Kukuksumusu" - 25.06.2010 16:05:00 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

Mezipaměť překládání DNS byla úspěšně vyprázdněna.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCU"="\"C:\\Program Files\\DeviceVM\\Browser Configuration Utility\\BCU.exe\""
"StartCCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun"
"RTHDCPL"="RTHDCPL.EXE"
"avast5"="C:\\PROGRA~1\\ALWILS~1\\Avast5\\avastUI.exe /nogui"
"GrooveMonitor"="\"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\""

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"DAEMON Tools Lite"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~