Pomaly firefox, komplet pomaly net

[Trautenberk]

Prosim o kontrolu logu.
díky



Logfile of random's system information tool 1.08 (written by random/random)
Run by madcat at 2010-07-10 12:19:05
Systém Microsoft Windows XP Professional Service Pack 2
System drive F: has 26 GB (11%) free of 238 GB
Total RAM: 2047 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:19:17, on 10.7.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\nvsvc32.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
F:\prográmky\Autodesk\Data Management Server 5\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
F:\Program Files\Bonjour\mDNSResponder.exe
F:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
F:\Program Files\ESET\ESET Smart Security\ekrn.exe
F:\Program Files\LogMeIn Hamachi\hamachi-2.exe
F:\Program Files\ICQ6Toolbar\ICQ Service.exe
F:\WINDOWS\system32\inetsrv\inetinfo.exe
F:\Program Files\Java\jre6\bin\jqs.exe
F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
F:\prográmky\NVIDIA Corporation\nTune\nTuneService.exe
F:\WINDOWS\system32\PnkBstrA.exe
F:\WINDOWS\system32\svchost.exe
F:\Program Files\VIA\RAID\raid_tool.exe
F:\Program Files\A4Tech\Mouse\Amoumain.exe
F:\Program Files\ESET\ESET Smart Security\egui.exe
F:\WINDOWS\system32\RUNDLL32.EXE
F:\WINDOWS\system32\ctfmon.exe
F:\Program Files\DAEMON Tools Pro\DTProAgent.exe
F:\WINDOWS\system32\dllhost.exe
\?\F:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
F:\WINDOWS\system32\wuauclt.exe
F:\prográmky\Mozilla Firefox2\Firefox\firefox.exe
F:\prográmky\Mozilla Firefox2\Firefox\plugin-container.exe
F:\Downloads\RSIT.exe
F:\Program Files\trend micro\madcat.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\prográmky\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - F:\prográmky\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - F:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - F:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - F:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - F:\PROGRM~2\FlashGet\fgiebar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - F:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - F:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - F:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [RaidTool] F:\Program Files\VIA\RAID\raid_tool.exe
O4 - HKLM\..\Run: [WheelMouse] F:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [egui] "F:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [NVIDIA nTune] "F:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "F:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [Google Update] "F:\Documents and Settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-682003330-412668190-725345543-1006\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'ASPNET')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://F:\prográmky\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Download Using &BitSpirit - F:\prográmky\BitSpirit\bsurl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Save YouTube Video - res://F:\Program Files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP4.htm
O8 - Extra context menu item: Save YouTube Video as MP3 - res://F:\Program Files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm
O8 - Extra context menu item: Stáhnout položku pomocí FlashGet - F:\prográmky\FlashGet\jc_link.htm
O8 - Extra context menu item: Stáhnout pomocí FlashGet - F:\prográmky\FlashGet\jc_link.htm
O8 - Extra context menu item: Stáhnout vše pomocí FlashGet - F:\prográmky\FlashGet\jc_all.htm
O8 - Extra context menu item: Stáhnout všechny položky pomocí FlashGet - F:\prográmky\FlashGet\jc_all.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - F:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRM~2\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - F:\PROGRM~2\FlashGet\flashget.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\prográmky\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - F:\prográmky\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} (InstaFred) - file://F:\prográmky\AutoCAD 2002 Cz\InstFred.ocx
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (Ovládací prvek AcDcToday) - file://F:\prográmky\AutoCAD 2002 Cz\AcDcToday.ocx
O16 - DPF: {AE563723-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://F:\prográmky\AutoCAD 2002 Cz\InstBanr.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (Prvek AcPreview) - file://F:\prográmky\AutoCAD 2002 Cz\AcPreview.ocx
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - F:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - F:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - F:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk Inc - F:\prográmky\Autodesk\Data Management Server 5\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk Licensing Service - Autodesk - F:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - F:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - F:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - F:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - F:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Software Updater (gusvc) - Google - F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - F:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - F:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - F:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - F:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - F:\prográmky\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - F:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - F:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Brána Firewall / Sdílení připojení k Internetu (ICS) (SharedAccess) - Unknown owner - F:\WINDOWS\F:\WINDOWS\system32\svchost.exe (file missing)

--
End of file - 10281 bytes

======Scheduled tasks folder======

F:\WINDOWS\tasks\AppleSoftwareUpdate.job
F:\WINDOWS\tasks\B1ED0D5C93D680B4.job
F:\WINDOWS\tasks\Google Software Updater.job
F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-412668190-725345543-1003Core.job
F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-412668190-725345543-1003UA.job
F:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - F:\prográmky\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - F:\prográmky\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - F:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-07-02 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - F:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - F:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-24 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - F:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-24 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4D76F01-7896-458a-890F-E1F05C46069F}]
Ask Toolbar BHO - F:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL [2007-07-22 241664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} - FlashGet Bar - F:\PROGRM~2\FlashGet\fgiebar.dll [2005-06-07 86016]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - F:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-12-09 958200]
{F4D76F09-7896-458a-890F-E1F05C46069F} - Ask Toolbar - F:\Program Files\AskPBar\bar\1.bin\ASKPBAR.DLL [2007-07-22 241664]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - F:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"=F:\Program Files\VIA\RAID\raid_tool.exe [2006-01-04 1060864]
"WheelMouse"=F:\Program Files\A4Tech\Mouse\Amoumain.exe [2006-02-17 163840]
"egui"=F:\Program Files\ESET\ESET Smart Security\egui.exe [2009-02-06 2021400]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=F:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"NvMediaCenter"=F:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"=F:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe [2007-07-03 81920]
"ctfmon.exe"=F:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"DAEMON Tools Pro Agent"=F:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]
"Google Update"=F:\Documents and Settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2008-09-06 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ball Plus]
F:\DOCUME~1\madcat\DATAAP~1\EXTRAU~1\Storeatom.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
F:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2006-09-28 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
F:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
F:\prográmky\DAEMON Tools\daemon.exe -lang 1033 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
F:\Program Files\DAEMON Tools Pro\DTProAgent.exe [2007-09-06 136136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DaemonTools_WhenUSave_Installer]
F:\Program Files\DaemonTools_WhenUSave_Installer\DaemonTools_WhenUSave_Installer.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW4]
F:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeCall]
F:\Program Files\FreeCall.com\FreeCall\FreeCall.exe -nosplash -minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Generic Host Process]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
F:\Documents and Settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2008-09-06 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
F:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite]
F:\Program Files\ICQLite\ICQLite.exe -minimize []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
F:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2006-09-10 218032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
F:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2006-09-10 218032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
F:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2006-09-10 86960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
F:\prográmky\iTunes\iTunesHelper.exe [2009-07-13 292128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
F:\WINDOWS\KHALMNPR.EXE [2007-09-21 55824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
F:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
F:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Love default global mess]
F:\Documents and Settings\All Users\Data aplikací\great coal love default\regs roam.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
F:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
F:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nod32kui]
F:\Program Files\Eset\nod32kui.exe /WAITSERVICE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NodEnabler]
F:\Program Files\ESET\ESET Smart Security\NodEnabler\NodEnabler.exe [2009-04-09 357521]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Outpost Firewall]
F:\prográmky\Outpost Firewall\outpost.exe /waitservice []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OutpostFeedBack]
F:\prográmky\Outpost Firewall\feedback.exe /dump:os_startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
Rundll32 P17.dll,P17Helper []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayNC Launcher]
f:\hry\launcher\NCLauncher.exe /Minimized []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PoivY]
F:\Program Files\PoivY.com\PoivY\PoivY.exe [2009-11-21 9189152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
F:\prográmky\PowerISO\PWRISOVM.EXE [2006-11-06 200704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
F:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RamCleaner]
F:\prográmky\RamCleaner\RamCleaner.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryMechanic]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ServiceHost]
F:\Program Files\Java\jre1.5.0_06\bin\svchost.exe [2006-08-09 147968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkwatAutoconnect]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
F:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\startkey]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
F:\Program Files\Java\jre6\bin\jusched.exe [2009-03-24 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
F:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-02 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
F:\Program Files\Common Files\Real\Update_OB\realsched.exe -osboot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue SpeedUpMyPC]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
F:\Program Files\Unlocker\UnlockerAssistant.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VC8Player]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Warez]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WDICT32]
F:\prográmky\TRANSLATOR 07\WDICT32.EXE [2006-11-26 2355200]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
F:\PROGRM~2\ACROBA~1.0\Reader\READER~1.EXE [2005-09-24 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Akcelerátor spuštění AutoCADu.lnk]
F:\PROGRA~1\COMMON~1\AUTODE~1\ACSTAR~1.EXE [2006-03-05 11000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Enable Magic Keyboard program.lnk]
F:\PROGRM~2\MAGICK~1\Versato.exe [2004-10-07 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
F:\PROGRA~1\MICROS~2\Office\OSA9.EXE -b -l []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Port pro program Symantec Fax Starter Edition.lnk]
F:\PROGRA~1\MICROS~2\Office\1029\OLFSNT40.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
F:\PROGRA~1\MI6841~1\80\Tools\Binn\sqlmangr.exe [2005-05-03 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Registration .LNK]
F:\Hry\DARKME~2\DARKME~1\REGIST~1.EXE -d 802848 -l english -r 7 -g -c us -i 2897 -p F:\Hry\Dark Messiah\Dark Messiah of Might and Magic\bin.bin []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^rncsys32.exe]
F:\Documents and Settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Warkeys Update.lnk]
F:\PROGRM~2\Warkeys\update\WARKEY~1.EXE [2006-08-03 225411]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ADSLAutoconnect"=2
"lanmanworkstation"=2
"MSSQLServerADHelper"=3
"SQLAgent$AUTODESKVAULT"=3
"MSSQL$AUTODESKVAULT"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WRNotifier]
WRLogonNTF.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - F:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"F:\prográmky\ICQLite\ICQLite.exe"="F:\prográmky\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"F:\prográmky\The All-Seeing Eye\eye.exe"="F:\prográmky\The All-Seeing Eye\eye.exe:*:Enabled:Yahoo! All-Seeing Eye"
"F:\Multiplayer\Wolfenstein - Enemy Territory\ET.exe"="F:\Multiplayer\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET"
"C:\prográmky\mIRC\mirc.exe"="C:\prográmky\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Downloads\BitComet\BitComet.exe"="C:\Downloads\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"F:\Hry\FEAR\FEAR.exe"="F:\Hry\FEAR\FEAR.exe:*:Enabled:FEAR"
"C:\Hry\UT2003Demo\System\UT2003.exe"="C:\Hry\UT2003Demo\System\UT2003.exe:*:Enabled:UT2003"
"C:\Sklad\taham\UDOSTEPNIC BitComet65\UDOSTEPNIC BitComet65\BitComet.exe"="C:\Sklad\taham\UDOSTEPNIC BitComet65\UDOSTEPNIC BitComet65\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client"
"F:\WINDOWS\system32\ZoneLabs\vsmon.exe"="F:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:TrueVector Service"
"F:\Downloads\utorrent.exe"="F:\Downloads\utorrent.exe:*:Enabled:µTorrent"
"F:\prográmky\uTorrent\utorrent.exe"="F:\prográmky\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"F:\prográmky\Warez\Warez.exe"="F:\prográmky\Warez\Warez.exe:*:Enabled:Warez3"
"F:\prográmky\iTunes\iTunes.exe"="F:\prográmky\iTunes\iTunes.exe:*:Enabled:iTunes"
"F:\prográmky\BitSpirit\BitSpirit.exe"="F:\prográmky\BitSpirit\BitSpirit.exe:*:Enabled:The powerful and easy-to-use BitTorrent Client"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.scr - open - "" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-07-10 12:19:05 ----D---- F:\rsit
2010-07-10 12:19:05 ----D---- F:\Program Files\trend micro

======List of files/folders modified in the last 1 months======

2010-07-10 12:19:15 ----D---- F:\WINDOWS\Temp
2010-07-10 12:19:13 ----D---- F:\WINDOWS\Prefetch
2010-07-10 12:19:05 ----RD---- F:\Program Files
2010-07-10 12:18:56 ----D---- F:\Downloads
2010-07-10 12:08:31 ----D---- F:\WINDOWS\system32\inetsrv
2010-07-10 12:05:31 ----D---- F:\WINDOWS\Registration
2010-07-10 12:04:40 ----SD---- F:\WINDOWS\Tasks
2010-07-10 12:04:29 ----D---- F:\WINDOWS
2010-07-10 12:02:54 ----A---- F:\WINDOWS\SchedLgU.Txt
2010-07-09 13:24:28 ----A---- F:\WINDOWS\WDICT32.INI
2010-07-09 12:17:01 ----D---- F:\mačky
2010-07-07 11:33:51 ----D---- F:\Documents and Settings\madcat\Data aplikací\uTorrent
2010-07-03 11:23:45 ----D---- F:\hry
2010-06-18 16:40:37 ----D---- F:\WINDOWS\system32\CatRoot2
2010-06-18 16:39:40 ----D---- F:\Program Files\Garena
2010-06-14 16:59:53 ----D---- F:\MP3-converted

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; F:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2004-08-04 46464]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; F:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-03 61056]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); F:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); F:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x); F:\WINDOWS\System32\drivers\sfsync03.sys [2005-12-06 35328]
R0 sptd;sptd; F:\WINDOWS\System32\Drivers\sptd.sys [2007-09-09 685816]
R0 viamraid;viamraid; F:\WINDOWS\system32\drivers\viamraid.sys [2006-01-19 92672]
R0 videX32;videX32; F:\WINDOWS\system32\DRIVERS\videX32.sys [2006-02-23 9728]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; F:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 AmdK8;Ovladač procesoru AMD; F:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 Amfilter;A4Tech Mouse Filter Driver; F:\WINDOWS\system32\DRIVERS\Amfilter.sys [2006-01-11 8704]
R1 ehdrv;ehdrv; F:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 ElbyCDIO;ElbyCDIO Driver; F:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-08-07 25160]
R1 epfwtdi;epfwtdi; F:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2009-02-06 56280]
R1 kbdhid;Ovladač klávesnice standardu HID; F:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R1 kbfilter;Keyboard Filter Driver; F:\WINDOWS\system32\drivers\kbfilter.sys [2004-05-24 12032]
R1 SCDEmu;SCDEmu; F:\WINDOWS\system32\drivers\SCDEmu.sys [2006-11-06 30988]
R2 atksgt;atksgt; F:\WINDOWS\system32\DRIVERS\atksgt.sys [2007-10-26 278984]
R2 eamon;eamon; F:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 epfw;epfw; F:\WINDOWS\system32\DRIVERS\epfw.sys [2009-02-06 130952]
R2 lirsgt;lirsgt; F:\WINDOWS\system32\DRIVERS\lirsgt.sys [2006-10-18 18048]
R2 PfModNT;PfModNT; \??\F:\WINDOWS\system32\drivers\PfModNT.sys []
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; F:\WINDOWS\system32\DRIVERS\Amusbprt.sys [2006-05-09 13312]
R3 Arp1394;Protokol 1394 ARP Client; F:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
R3 ctsfm2k;Creative SoundFont Management Device Driver; F:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-12-08 142336]
R3 ElbyCDFL;ElbyCDFL; F:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 Epfwndis;Eset Personal Firewall; F:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2009-02-06 33096]
R3 ezplay;VSO Software ezplay; F:\WINDOWS\System32\Drivers\ezplay.sys [2006-08-01 94080]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; F:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-03-19 23400]
R3 hamachi;Hamachi Network Interface; F:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 hidusb;Ovladač třídy standardu HID; F:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 LgBttPort;LGE Bluetooth TransPort; F:\WINDOWS\system32\DRIVERS\lgbtport.sys [2009-09-29 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator; F:\WINDOWS\system32\DRIVERS\lgbtbus.sys [2009-09-29 10496]
R3 LGVMODEM;LGE Virtual Modem; F:\WINDOWS\system32\DRIVERS\lgvmodem.sys [2009-09-29 12928]
R3 NIC1394;1394 Net Driver; F:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
R3 nv;nv; F:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-04 10232128]
R3 NVR0Dev;NVR0Dev; \??\F:\WINDOWS\nvoclock.sys []
R3 ossrv;Creative OS Services Driver; F:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-12-08 114688]
R3 P17;Sound Blaster Audigy; F:\WINDOWS\system32\drivers\P17.sys [2006-03-17 1163264]
R3 p17filt;p17filt; F:\WINDOWS\system32\drivers\p17filt.sys [2006-03-20 1452032]
R3 pcouffin;VSO Software pcouffin; F:\WINDOWS\System32\Drivers\pcouffin.sys [2006-08-01 47360]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; F:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2004-07-16 70400]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; F:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 UsbFltr;WayTech USB Filter Driver; F:\WINDOWS\System32\Drivers\UsbFltr.sys [2004-05-21 8704]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; F:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S0 kl1;kl1; F:\WINDOWS\System32\Drivers\kl1.sys []
S3 aqi8d1o6;aqi8d1o6; F:\WINDOWS\system32\drivers\aqi8d1o6.sys []
S3 C-Dilla;C-Dilla; \??\F:\WINDOWS\system32\drivers\CDANT.SYS []
S3 dtscsi;dtscsi; F:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); F:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
S3 GarenaPEngine;GarenaPEngine; \??\F:\DOCUME~1\madcat\LOCALS~1\Temp\GVV48A.tmp []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 hamachi_oem;PlayLinc Adapter; F:\WINDOWS\system32\DRIVERS\gan_adapter.sys [2006-08-29 10664]
S3 HwIOctl;HwIOctl; \??\F:\Program Files\Setup Files\MS-6702 v2.20\HwIOctl.sys []
S3 k750bus;Sony Ericsson 750 driver (WDM); F:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; F:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; F:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; F:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; F:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; F:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2007-09-21 35088]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; F:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2007-09-21 36240]
S3 Memctl;Memctl; \??\F:\Program Files\Setup Files\MS-6702 v2.20\Memctl.sys []
S3 mouhid;Ovladač myši standardu HID; F:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 nm;Ovladač programu Sledování sítě; F:\WINDOWS\system32\DRIVERS\NMnt.sys [2004-08-03 40320]
S3 nmwcd;Nokia USB Phone Parent; F:\WINDOWS\system32\drivers\ccdcmb.sys [2007-11-29 16896]
S3 nmwcdc;Nokia USB Generic; F:\WINDOWS\system32\drivers\ccdcmbo.sys [2007-11-29 19328]
S3 NPF;NetGroup Packet Filter Driver; F:\WINDOWS\system32\drivers\npf.sys [2007-01-25 42000]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 Razerlow;Razerlow USB Filter Driver; F:\WINDOWS\System32\Drivers\Razerlow.sys [2005-04-24 13225]
S3 sbpci;SB PCI Family Audio Driver (WDM); F:\WINDOWS\system32\drivers\sbpci.sys [2002-10-22 668160]
S3 UnlockerDriver4;UnlockerDriver4 Driver; \??\F:\Program Files\Unlocker\UnlockerDriver4.sys []
S3 usbbus;LGE Mobile Composite USB Device; F:\WINDOWS\system32\DRIVERS\lgusbbus.sys [2010-01-21 13056]
S3 UsbDiag;LGE Mobile USB Serial Port; F:\WINDOWS\system32\DRIVERS\lgusbdiag.sys [2010-01-21 20864]
S3 USBModem;LGE Mobile USB Modem; F:\WINDOWS\system32\DRIVERS\lgusbmodem.sys [2010-01-21 24960]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; F:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 vaxscsi;vaxscsi; F:\WINDOWS\System32\Drivers\vaxscsi.sys [2006-11-05 223128]
S3 Wdf01000;Wdf01000; F:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; F:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; F:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; F:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 Autodesk Data Management Job Dispatch;Autodesk Data Management Job Dispatch; F:\prográmky\Autodesk\Data Management Server 5\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe [2006-03-09 40960]
R2 Bonjour Service;Bonjour Service; F:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 C-DillaSrv;C-DillaSrv; F:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [2006-06-04 32256]
R2 ekrn;ESET Service; F:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-02-06 727720]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; F:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 ICQ Service;ICQ Service; F:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]
R2 IISADMIN;Správa služby IIS; F:\WINDOWS\system32\inetsrv\inetinfo.exe [2004-08-17 15872]
R2 JavaQuickStarterService;Java Quick Starter; F:\Program Files\Java\jre6\bin\jqs.exe [2009-03-24 152984]
R2 MDM;Machine Debug Manager; F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MSFtpsvc;Publikování FTP; F:\WINDOWS\system32\inetsrv\inetinfo.exe [2004-08-17 15872]
R2 nTuneService;nTune Service; F:\prográmky\NVIDIA Corporation\nTune\nTuneService.exe [2007-07-03 131072]
R2 NVSvc;NVIDIA Display Driver Service; F:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
R2 PnkBstrA;PnkBstrA; F:\WINDOWS\system32\PnkBstrA.exe [2010-02-12 75064]
R2 W3SVC;Publikování na webu; F:\WINDOWS\system32\inetsrv\inetinfo.exe [2004-08-17 15872]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; F:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 gusvc;Google Software Updater; F:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-02 190448]
S3 aspnet_state;ASP.NET State Service; F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; F:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2006-11-28 72704]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; F:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; F:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-02-06 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; F:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; F:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; F:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S3 ose;Office Source Engine; F:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); F:\Program Files\WinPcap\rpcapd.exe [2007-01-25 93048]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; F:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S4 MSSQL$AUTODESKVAULT;MSSQL$AUTODESKVAULT; F:\Program Files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlservr.exe [2005-05-04 9150464]
S4 MSSQLServerADHelper;MSSQLServerADHelper; F:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2005-05-03 73728]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; F:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 SQLAgent$AUTODESKVAULT;SQLAgent$AUTODESKVAULT; F:\Program Files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlagent.EXE [2005-05-03 323584]
S4 Windows Updates;Windows Updates; F:\WINDOWS\windowsupdates.exe []

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[Trautenberk]

ComboFix 10-07-08.02 - madcat 10.07.2010 13:05:53.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1600 [GMT 2:00]
Spuštěný z: f:\documents and settings\madcat\Plocha\Nabubaky.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *disabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
FW: Outpost Firewall Pro *enabled* {8A20CA2A-9E02-4A64-923B-0A38208EB7FD}
* Rezidentní štít AV je zapnutý


VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

f:\documents and settings\madcat\Local Settings\Temporary Internet Files\SLOVA.WAV
f:\documents and settings\madcat\Local Settings\Temporary Internet Files\WDICT32.INI
f:\documents and settings\madcat\Recent\Thumbs.db
f:\program files\INSTALL.LOG
f:\windows\regedit.com
f:\windows\settings.reg
f:\windows\system32\Cache
f:\windows\system32\ckl009.dat
f:\windows\system32\Data
f:\windows\system32\SysPr.prx
f:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_WINDOWS_UPDATES
-------\Legacy_XPROTECTOR
-------\Service_Windows Updates


((((((((((((((((((((((((( Soubory vytvořené od 2010-06-10 do 2010-07-10 )))))))))))))))))))))))))))))))
.

2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- F:\rsit
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- f:\program files\trend micro

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-18 14:39 . 2009-08-17 20:12 -------- d-----w- f:\program files\Garena
2010-06-04 13:01 . 2009-08-24 12:56 -------- d-----w- f:\program files\Ask.com
2010-05-17 19:43 . 2010-05-17 19:41 -------- d-----w- f:\program files\NVIDIA Corporation
2008-01-04 11:25 . 2008-01-04 11:01 24 --sh--w- f:\windows\SC6383DC7.tmp
2007-04-01 14:03 . 2007-02-13 13:18 4653856 --sha-w- f:\windows\system32\drivers\fidbox.dat
2007-04-01 14:03 . 2007-02-13 13:18 20000 --sha-w- f:\windows\system32\drivers\fidbox2.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- f:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "f:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "f:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="f:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 81920]
"DAEMON Tools Pro Agent"="f:\program files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 136136]
"Google Update"="f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2008-09-06 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="f:\program files\VIA\RAID\raid_tool.exe" [2006-01-04 1060864]
"WheelMouse"="f:\program files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 163840]
"egui"="f:\program files\ESET\ESET Smart Security\egui.exe" [2009-02-06 2021400]
"NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2010-04-03 110696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="f:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=f:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Akcelerátor spuštění AutoCADu.lnk]
backup=f:\windows\pss\Akcelerátor spuštění AutoCADu.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Enable Magic Keyboard program.lnk]
backup=f:\windows\pss\Enable Magic Keyboard program.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
backup=f:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Port pro program Symantec Fax Starter Edition.lnk]
backup=f:\windows\pss\Port pro program Symantec Fax Starter Edition.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
backup=f:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Registration .LNK]
backup=f:\windows\pss\Registration .LNKStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^rncsys32.exe]
path=f:\documents and settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe
backup=f:\windows\pss\rncsys32.exeStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Warkeys Update.lnk]
backup=f:\windows\pss\Warkeys Update.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Generic Host Process

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
f:\windows\system32\dumprep 0 -k [X]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Run
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkwatAutoconnect
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\startkey
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Uniblue SpeedUpMyPC
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VC8Player
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Warez

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
2006-09-28 19:21 57344 ----a-w- f:\program files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-17 13:49 15360 ----a-w- f:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
2007-09-06 13:08 136136 ----a-w- f:\program files\DAEMON Tools Pro\DTProAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-09-06 17:15 133104 ----atw- f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2009-11-16 15:36 172792 ----a-w- f:\program files\ICQ6.5\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
2006-09-10 20:56 218032 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-09-10 20:56 218032 ----a-w- f:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-09-10 20:56 86960 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-07-13 12:03 292128 ----a-w- f:\prográmky\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2007-09-21 02:10 55824 ----a-w- f:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2010-03-30 09:16 1820040 ----a-w- f:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-w- f:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NodEnabler]
2009-04-08 22:18 357521 ----a-w- f:\program files\ESET\ESET Smart Security\NodEnabler\NodEnabler.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-04-03 17:23 110696 ----a-w- f:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
2006-03-17 15:11 81408 ----a-w- f:\windows\system32\P17.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PoivY]
2009-11-21 17:23 9189152 ----a-w- f:\program files\PoivY.com\PoivY\poivy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2006-11-06 08:27 200704 ----a-w- f:\prográmky\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-05-26 15:18 413696 ----a-w- f:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ServiceHost]
2006-08-09 14:01 147968 ----a-w- f:\program files\Java\jre1.5.0_06\bin\svchost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 12:11 25623336 ----a-r- f:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-03-24 19:04 148888 ----a-w- f:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-02 12:59 39408 ----a-w- f:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WDICT32]
2006-11-26 12:03 2355200 ----a-w- f:\prográmky\TRANSLATOR 07\WDICT32.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ADSLAutoconnect"=2 (0x2)
"lanmanworkstation"=2 (0x2)
"MSSQLServerADHelper"=3 (0x3)
"SQLAgent$AUTODESKVAULT"=3 (0x3)
"MSSQL$AUTODESKVAULT"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\prográmky\\The All-Seeing Eye\\eye.exe"=
"c:\\Downloads\\BitComet\\BitComet.exe"=
"f:\\Downloads\\utorrent.exe"=
"f:\\prográmky\\uTorrent\\utorrent.exe"=
"f:\\prográmky\\iTunes\\iTunes.exe"=
"f:\\prográmky\\BitSpirit\\BitSpirit.exe"=
"f:\\Program Files\\Bonjour\\mDNSResponder.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7486:TCP"= 7486:TCP:BitComet 7486 TCP
"7486:UDP"= 7486:UDP:BitComet 7486 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);f:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R1 ehdrv;ehdrv;f:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 kbfilter;Keyboard Filter Driver;f:\windows\system32\drivers\kbfilter.sys [13.9.2006 19:21 12032]
R2 ekrn;ESET Service;f:\program files\ESET\ESET Smart Security\ekrn.exe [6.2.2009 14:23 727720]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;f:\program files\LogMeIn Hamachi\hamachi-2.exe [30.3.2010 11:16 1107336]
R2 ICQ Service;ICQ Service;f:\program files\ICQ6Toolbar\ICQ Service.exe [5.1.2009 19:39 222456]
R3 LgBttPort;LGE Bluetooth TransPort;f:\windows\system32\drivers\lgbtport.sys [29.9.2009 9:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;f:\windows\system32\drivers\lgbtbus.sys [29.9.2009 9:11 10496]
R3 LGVMODEM;LGE Virtual Modem;f:\windows\system32\drivers\lgvmodem.sys [29.9.2009 9:11 12928]
R3 p17filt;p17filt;f:\windows\system32\drivers\p17filt.sys [20.3.2006 19:34 1452032]
R3 UsbFltr;WayTech USB Filter Driver;f:\windows\system32\drivers\UsbFltr.sys [25.9.2006 19:24 8704]
S3 GarenaPEngine;GarenaPEngine;\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp --> f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp [?]
S3 hamachi_oem;PlayLinc Adapter;f:\windows\system32\drivers\gan_adapter.sys [29.8.2006 0:54 10664]
S3 HwIOctl;HwIOctl;\??\f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys --> f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys [?]
S3 NPF;NetGroup Packet Filter Driver;f:\windows\system32\drivers\npf.sys [25.1.2007 19:31 42000]
S3 Razerlow;Razerlow USB Filter Driver;f:\windows\system32\drivers\Razerlow.sys [26.4.2006 19:07 13225]
S3 UnlockerDriver4;UnlockerDriver4 Driver;\??\f:\program files\Unlocker\UnlockerDriver4.sys --> f:\program files\Unlocker\UnlockerDriver4.sys [?]
S3 vaxscsi;vaxscsi;f:\windows\system32\drivers\vaxscsi.sys [10.7.2006 15:33 223128]
S4 sptd;sptd;f:\windows\system32\drivers\sptd.sys [27.4.2006 16:00 685816]
S4 SQLAgent$AUTODESKVAULT;SQLAgent$AUTODESKVAULT;f:\program files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlagent.EXE [3.5.2005 22:42 323584]
.
Obsah adresáře 'Naplánované úlohy'

2010-06-21 f:\windows\Tasks\AppleSoftwareUpdate.job
- f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-10 f:\windows\Tasks\Google Software Updater.job
- f:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-02 12:59]

2010-07-10 f:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- f:\program files\Ask.com\UpdateTask.exe [2010-05-26 13:23]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: &ICQ Toolbar Search - f:\prográmky\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download Using &BitSpirit - f:\prográmky\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - f:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Save YouTube Video - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP4.htm
IE: Save YouTube Video as MP3 - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm
IE: Stáhnout položku pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout vše pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: Stáhnout všechny položky pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file://f:\prográmky\AutoCAD 2002 Cz\InstFred.ocx
DPF: {AE563723-B4F5-11D4-A415-00108302FDFD} - file://f:\prográmky\AutoCAD 2002 Cz\InstBanr.ocx
FF - ProfilePath - f:\documents and settings\madcat\Data aplikací\Mozilla\Firefox\Profiles\2te5xswo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: f:\program files\Common Files\DVDVideoSoft\Dll\FFContextMenuY\components\FFContextMenu.dll
FF - component: f:\prográmky\Mozilla Firefox2\Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: f:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - f:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.proxy.type", 5);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-nwiz - nwiz.exe
MSConfigStartUp-Ball Plus - f:\docume~1\madcat\DATAAP~1\EXTRAU~1\Storeatom.exe
MSConfigStartUp-DAEMON Tools - f:\prográmky\DAEMON Tools\daemon.exe
MSConfigStartUp-DaemonTools_WhenUSave_Installer - f:\program files\DaemonTools_WhenUSave_Installer\DaemonTools_WhenUSave_Installer.exe
MSConfigStartUp-DW4 - f:\program files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe
MSConfigStartUp-FreeCall - f:\program files\FreeCall.com\FreeCall\FreeCall.exe
MSConfigStartUp-ICQ Lite - f:\program files\ICQLite\ICQLite.exe
MSConfigStartUp-Love default global mess - f:\documents and settings\All Users\Data aplikací\great coal love default\regs roam.exe
MSConfigStartUp-NBKeyScan - f:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe
MSConfigStartUp-nod32kui - f:\program files\Eset\nod32kui.exe
MSConfigStartUp-Outpost Firewall - f:\prográmky\Outpost Firewall\outpost.exe
MSConfigStartUp-OutpostFeedBack - f:\prográmky\Outpost Firewall\feedback.exe
MSConfigStartUp-PlayNC Launcher - f:\hry\launcher\NCLauncher.exe
MSConfigStartUp-RamCleaner - f:\prográmky\RamCleaner\RamCleaner.exe
MSConfigStartUp-TkBellExe - f:\program files\Common Files\Real\Update_OB\realsched.exe
MSConfigStartUp-UnlockerAssistant - f:\program files\Unlocker\UnlockerAssistant.exe
ActiveSetup-{2E452B35-28FB-C926-0701-070708020504} - f:\windows\windcmdt.exe
AddRemove-DotaKeys - f:\hry\Warcraft III\dotakeys\dota keys\Uninstall.exe
AddRemove-HijackThis - f:\downloads\HiJackThis_v2\HijackThis.exe
AddRemove-MechCommander Desperate Measures UnInstall - f:\hry\MCX\DeIsL1.isu
AddRemove-NVIDIA Display Control Panel - f:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe
AddRemove-QIP Infium_is1 - f:\lama\QIP Infium\unins000.exe
AddRemove-Return to Castle Wolfenstein - f:\hry\RETURN~1\Uninstall\Unwise.exe
AddRemove-TNod - f:\program files\TNod User & Password Finder\uninst-TNod.exe
AddRemove-{6663554C-2FC7-4CDC-809D-1BCD59189853}_is1 - f:\hry\Trine\unins000.exe
AddRemove-Gridseekcash - f:\docume~1\madcat\DATAAP~1\EXTRAU~1\Storeatom.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-10 13:16
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3568)
f:\prográmky\iTunes\iTunesMiniPlayer.dll
f:\prográmky\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll
f:\prográmky\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll
f:\windows\system32\WPDShServiceObj.dll
f:\windows\system32\PortableDeviceTypes.dll
f:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
f:\windows\system32\nvsvc32.exe
f:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
f:\prográmky\Autodesk\Data Management Server 5\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
f:\program files\Bonjour\mDNSResponder.exe
f:\windows\system32\DRIVERS\CDANTSRV.EXE
f:\windows\system32\inetsrv\inetinfo.exe
f:\program files\Java\jre6\bin\jqs.exe
f:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
f:\prográmky\NVIDIA Corporation\nTune\nTuneService.exe
f:\windows\system32\PnkBstrA.exe
f:\windows\system32\RUNDLL32.EXE
f:\windows\system32\dllhost.exe
f:\\?\f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
f:\windows\system32\inetsrv\DavCData.exe
.
**************************************************************************
.
Celkový čas: 2010-07-10 13:26:07 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-07-10 11:26

Před spuštěním: Volných bajtů: 31 884 496 896
Po spuštění: Volných bajtů: 33 897 476 096

- - End Of File - - D1C191F32F81FD3D7D249D6682A4999E

[Rudy]

První věc, kterou udělejte: odinstalujte cracklý ESS a nahraďte ho free aplikacemi. Potom dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
C:\Program Files\Ask.com

Collect::
c:\windows\SC6383DC7.tmp
f:\documents and settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe
f:\windows\pss\rncsys32.exe

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=-
[-HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[-HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[Trautenberk]

hotovo, ESS odinstalován





ComboFix 10-07-08.02 - madcat 10.07.2010 16:05:24.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1630 [GMT 2:00]
Spuštěný z: f:\documents and settings\madcat\Plocha\Nabubaky.exe
FW: Outpost Firewall Pro *enabled* {8A20CA2A-9E02-4A64-923B-0A38208EB7FD}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-06-10 do 2010-07-10 )))))))))))))))))))))))))))))))
.

2010-07-10 13:47 . 2008-10-31 05:09 270888 ----a-r- f:\windows\system32\drivers\SbFw.sys
2010-07-10 13:47 . 2008-06-21 02:54 65576 ----a-w- f:\windows\system32\drivers\SbFwIm.sys
2010-07-10 13:47 . 2010-07-10 13:47 -------- d-----w- f:\program files\Sunbelt Software
2010-07-10 13:20 . 2010-07-10 13:34 -------- d-----w- F:\Nabubaky25017N
2010-07-10 10:58 . 2010-07-10 11:26 -------- d-----w- F:\Nabubaky
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- F:\rsit
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- f:\program files\trend micro

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-18 14:39 . 2009-08-17 20:12 -------- d-----w- f:\program files\Garena
2010-06-04 13:01 . 2009-08-24 12:56 -------- d-----w- f:\program files\Ask.com
2010-05-17 19:43 . 2010-05-17 19:41 -------- d-----w- f:\program files\NVIDIA Corporation
2008-01-04 11:25 . 2008-01-04 11:01 24 --sh--w- f:\windows\SC6383DC7.tmp
2007-04-01 14:03 . 2007-02-13 13:18 4653856 --sha-w- f:\windows\system32\drivers\fidbox.dat
2007-04-01 14:03 . 2007-02-13 13:18 20000 --sha-w- f:\windows\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( SnapShot@2010-07-10_13.32.18 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-10 14:00 . 2010-07-10 14:00 16384 f:\windows\Temp\Perflib_Perfdata_508.dat
+ 2010-07-10 14:00 . 2010-07-10 14:00 16384 f:\windows\Temp\Perflib_Perfdata_3b0.dat
+ 2008-06-21 02:54 . 2008-06-21 02:54 66600 f:\windows\system32\drivers\sbhips.sys
+ 2010-07-10 13:47 . 2010-07-10 13:47 57344 f:\windows\Installer\{82B1150E-9B37-49FC-83EB-D52197D900D0}\NewShortcut4_C665E66BE8EF49DBB30B81BB5E60462C.exe
+ 2010-07-10 13:47 . 2010-07-10 13:47 18718 f:\windows\Installer\{82B1150E-9B37-49FC-83EB-D52197D900D0}\NewShortcut1_E659E0EE10E649B7869660F38D0EB174.exe
+ 2010-07-10 13:47 . 2010-07-10 13:47 18718 f:\windows\Installer\{82B1150E-9B37-49FC-83EB-D52197D900D0}\ARPPRODUCTICON.exe
+ 2008-12-25 13:24 . 2010-07-10 14:04 216560 f:\windows\system32\inetsrv\MetaBase.bin
+ 2010-07-10 13:47 . 2010-07-10 13:47 481280 f:\windows\Installer\96038.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="f:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 81920]
"DAEMON Tools Pro Agent"="f:\program files\DAEMON Tools Pro\DTProAgent.exe" [2007-09-06 136136]
"Google Update"="f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2008-09-06 133104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="f:\program files\VIA\RAID\raid_tool.exe" [2006-01-04 1060864]
"WheelMouse"="f:\program files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 163840]
"NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2010-04-03 110696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="f:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=f:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Akcelerátor spuštění AutoCADu.lnk]
backup=f:\windows\pss\Akcelerátor spuštění AutoCADu.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Enable Magic Keyboard program.lnk]
backup=f:\windows\pss\Enable Magic Keyboard program.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
backup=f:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Port pro program Symantec Fax Starter Edition.lnk]
backup=f:\windows\pss\Port pro program Symantec Fax Starter Edition.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
backup=f:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Registration .LNK]
backup=f:\windows\pss\Registration .LNKStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^rncsys32.exe]
path=f:\documents and settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe
backup=f:\windows\pss\rncsys32.exeStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Warkeys Update.lnk]
backup=f:\windows\pss\Warkeys Update.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
2006-09-28 19:21 57344 ----a-w- f:\program files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-17 13:49 15360 ----a-w- f:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
2007-09-06 13:08 136136 ----a-w- f:\program files\DAEMON Tools Pro\DTProAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-09-06 17:15 133104 ----atw- f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2009-11-16 15:36 172792 ----a-w- f:\program files\ICQ6.5\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
2006-09-10 20:56 218032 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-09-10 20:56 218032 ----a-w- f:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-09-10 20:56 86960 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-07-13 12:03 292128 ----a-w- f:\prográmky\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2007-09-21 02:10 55824 ----a-w- f:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2010-03-30 09:16 1820040 ----a-w- f:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-w- f:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-04-03 17:23 110696 ----a-w- f:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
2006-03-17 15:11 81408 ----a-w- f:\windows\system32\P17.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PoivY]
2009-11-21 17:23 9189152 ----a-w- f:\program files\PoivY.com\PoivY\poivy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2006-11-06 08:27 200704 ----a-w- f:\prográmky\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-05-26 15:18 413696 ----a-w- f:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ServiceHost]
2006-08-09 14:01 147968 ----a-w- f:\program files\Java\jre1.5.0_06\bin\svchost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 12:11 25623336 ----a-r- f:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-03-24 19:04 148888 ----a-w- f:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-02 12:59 39408 ----a-w- f:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WDICT32]
2006-11-26 12:03 2355200 ----a-w- f:\prográmky\TRANSLATOR 07\WDICT32.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ADSLAutoconnect"=2 (0x2)
"lanmanworkstation"=2 (0x2)
"MSSQLServerADHelper"=3 (0x3)
"SQLAgent$AUTODESKVAULT"=3 (0x3)
"MSSQL$AUTODESKVAULT"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\prográmky\\The All-Seeing Eye\\eye.exe"=
"c:\\Downloads\\BitComet\\BitComet.exe"=
"f:\\Downloads\\utorrent.exe"=
"f:\\prográmky\\uTorrent\\utorrent.exe"=
"f:\\prográmky\\iTunes\\iTunes.exe"=
"f:\\prográmky\\BitSpirit\\BitSpirit.exe"=
"f:\\Program Files\\Bonjour\\mDNSResponder.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7486:TCP"= 7486:TCP:BitComet 7486 TCP
"7486:UDP"= 7486:UDP:BitComet 7486 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);f:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R1 kbfilter;Keyboard Filter Driver;f:\windows\system32\drivers\kbfilter.sys [13.9.2006 19:21 12032]
R1 SbFw;SbFw;f:\windows\system32\drivers\SbFw.sys [10.7.2010 15:47 270888]
R1 sbhips;Sunbelt HIPS Driver;f:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;f:\program files\LogMeIn Hamachi\hamachi-2.exe [30.3.2010 11:16 1107336]
R2 ICQ Service;ICQ Service;f:\program files\ICQ6Toolbar\ICQ Service.exe [5.1.2009 19:39 222456]
R2 SbPF.Launcher;SbPF.Launcher;f:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;f:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 LgBttPort;LGE Bluetooth TransPort;f:\windows\system32\drivers\lgbtport.sys [29.9.2009 9:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;f:\windows\system32\drivers\lgbtbus.sys [29.9.2009 9:11 10496]
R3 LGVMODEM;LGE Virtual Modem;f:\windows\system32\drivers\lgvmodem.sys [29.9.2009 9:11 12928]
R3 p17filt;p17filt;f:\windows\system32\drivers\p17filt.sys [20.3.2006 19:34 1452032]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;f:\windows\system32\drivers\SbFwIm.sys [10.7.2010 15:47 65576]
R3 UsbFltr;WayTech USB Filter Driver;f:\windows\system32\drivers\UsbFltr.sys [25.9.2006 19:24 8704]
S3 GarenaPEngine;GarenaPEngine;\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp --> f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp [?]
S3 hamachi_oem;PlayLinc Adapter;f:\windows\system32\drivers\gan_adapter.sys [29.8.2006 0:54 10664]
S3 HwIOctl;HwIOctl;\??\f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys --> f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys [?]
S3 NPF;NetGroup Packet Filter Driver;f:\windows\system32\drivers\npf.sys [25.1.2007 19:31 42000]
S3 Razerlow;Razerlow USB Filter Driver;f:\windows\system32\drivers\Razerlow.sys [26.4.2006 19:07 13225]
S3 UnlockerDriver4;UnlockerDriver4 Driver;\??\f:\program files\Unlocker\UnlockerDriver4.sys --> f:\program files\Unlocker\UnlockerDriver4.sys [?]
S3 vaxscsi;vaxscsi;f:\windows\system32\drivers\vaxscsi.sys [10.7.2006 15:33 223128]
S4 sptd;sptd;f:\windows\system32\drivers\sptd.sys [27.4.2006 16:00 685816]
S4 SQLAgent$AUTODESKVAULT;SQLAgent$AUTODESKVAULT;f:\program files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlagent.EXE [3.5.2005 22:42 323584]
.
Obsah adresáře 'Naplánované úlohy'

2010-06-21 f:\windows\Tasks\AppleSoftwareUpdate.job
- f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-10 f:\windows\Tasks\Google Software Updater.job
- f:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-02 12:59]

2010-07-10 f:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- f:\program files\Ask.com\UpdateTask.exe [2010-05-26 13:23]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: &ICQ Toolbar Search - f:\prográmky\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download Using &BitSpirit - f:\prográmky\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - f:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Save YouTube Video - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP4.htm
IE: Save YouTube Video as MP3 - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm
IE: Stáhnout položku pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout vše pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: Stáhnout všechny položky pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file://f:\prográmky\AutoCAD 2002 Cz\InstFred.ocx
DPF: {AE563723-B4F5-11D4-A415-00108302FDFD} - file://f:\prográmky\AutoCAD 2002 Cz\InstBanr.ocx
FF - ProfilePath - f:\documents and settings\madcat\Data aplikací\Mozilla\Firefox\Profiles\2te5xswo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: f:\program files\Common Files\DVDVideoSoft\Dll\FFContextMenuY\components\FFContextMenu.dll
FF - component: f:\prográmky\Mozilla Firefox2\Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: f:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - f:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.proxy.type", 5);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-NodEnabler - f:\program files\ESET\ESET Smart Security\NodEnabler\NodEnabler.exe
AddRemove-NodEnabler - f:\program files\ESET\ESET Smart Security\NodEnabler\Uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-10 16:15
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp"
.
Celkový čas: 2010-07-10 16:18:10
ComboFix-quarantined-files.txt 2010-07-10 14:18
ComboFix2.txt 2010-07-10 13:34
ComboFix3.txt 2010-07-10 11:26

Před spuštěním: Volných bajtů: 33 769 738 240
Po spuštění: Volných bajtů: 33 755 320 320

- - End Of File - - AE55C008C935937192D15DF24197AF61

[Rudy]

hotovo, ESS odinstalován

To vás chválím, ale CF jste nespustil tím skriptem, takže tam všechno zůstalo. Sken CF zopakujte, ale CF spusťte výše uvedeným skriptem.

[Trautenberk]

po prvním CF scanu začal blbnout internet - síťový kabel odpojen/připojen pořád dokola (v kabelu problém není), je možné, že to má s CF nějakou souvislost ?


ComboFix 10-07-08.02 - madcat 11.07.2010 11:51:03.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1654 [GMT 2:00]
Spuštěný z: f:\documents and settings\madcat\Plocha\Nabubaky.exe
Použité ovládací přepínače :: f:\documents and settings\madcat\Plocha\CFScript.txt
FW: Outpost Firewall Pro *enabled* {8A20CA2A-9E02-4A64-923B-0A38208EB7FD}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-06-11 do 2010-07-11 )))))))))))))))))))))))))))))))
.

2010-07-10 13:47 . 2010-07-10 13:47 -------- d-----w- f:\program files\Sunbelt Software
2010-07-10 13:20 . 2010-07-10 13:34 -------- d-----w- F:\Nabubaky25017N
2010-07-10 10:58 . 2010-07-10 11:26 -------- d-----w- F:\Nabubaky
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- F:\rsit
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- f:\program files\trend micro

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-10 18:48 . 2001-10-25 14:00 99730 ----a-w- f:\windows\system32\perfc005.dat
2010-07-10 18:48 . 2001-10-25 14:00 493380 ----a-w- f:\windows\system32\perfh005.dat
2010-06-18 14:39 . 2009-08-17 20:12 -------- d-----w- f:\program files\Garena
2010-05-17 19:43 . 2010-05-17 19:41 -------- d-----w- f:\program files\NVIDIA Corporation
2010-05-02 08:27 . 2004-08-17 13:44 1850880 ------w- f:\windows\system32\win32k.sys
2010-04-20 05:48 . 2004-08-17 13:48 285696 ----a-w- f:\windows\system32\atmfd.dll
2008-01-04 11:25 . 2008-01-04 11:01 24 --sh--w- f:\windows\SC6383DC7.tmp
2007-04-01 14:03 . 2007-02-13 13:18 4653856 --sha-w- f:\windows\system32\drivers\fidbox.dat
2007-04-01 14:03 . 2007-02-13 13:18 20000 --sha-w- f:\windows\system32\drivers\fidbox2.dat
.

((((((((((((((((((((((((((((( SnapShot@2010-07-10_13.32.18 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-11 09:49 . 2010-07-11 09:49 16384 f:\windows\Temp\Perflib_Perfdata_35c.dat
+ 2010-07-11 09:49 . 2010-07-11 09:49 16384 f:\windows\Temp\Perflib_Perfdata_204.dat
+ 2007-04-07 17:18 . 2009-05-26 11:40 18296 f:\windows\system32\spmsg.dll
- 2007-04-07 17:18 . 2009-05-26 09:01 18296 f:\windows\system32\spmsg.dll
+ 2010-03-30 22:16 . 2010-03-30 22:16 99176 f:\windows\system32\PresentationHostProxy.dll
+ 2001-10-25 14:00 . 2010-07-10 18:48 86870 f:\windows\system32\perfc009.dat
- 2001-10-25 14:00 . 2010-03-28 18:02 86870 f:\windows\system32\perfc009.dat
+ 2009-11-06 23:07 . 2009-11-06 23:07 49488 f:\windows\system32\netfxperf.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 11600 f:\windows\system32\mui\0409\mscorees.dll
- 2006-05-05 15:28 . 2004-08-03 22:08 26496 f:\windows\system32\drivers\USBSTOR.SYS
+ 2006-05-05 15:28 . 2004-08-03 21:08 26496 f:\windows\system32\drivers\USBSTOR.SYS
- 2004-08-03 20:59 . 2004-08-03 21:59 36352 f:\windows\system32\drivers\disk.sys
+ 2004-08-03 20:59 . 2004-08-03 20:59 36352 f:\windows\system32\drivers\disk.sys
+ 2004-08-17 13:49 . 2010-03-05 14:57 65536 f:\windows\system32\dllcache\asycfilt.dll
+ 2004-08-17 13:49 . 2010-03-05 14:57 65536 f:\windows\system32\asycfilt.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 32768 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 32768 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.WasHosting.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 f:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 30544 f:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- 2009-10-24 22:38 . 2009-10-24 22:38 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\f74ea519\0088904e_7443c601\Connectivity.Indexing.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\f74ea519\0088904e_7443c601\Connectivity.Indexing.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 73728 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\f735e808\00fd9905_8f43c601\Connectivity.Content.DataAccess.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 73728 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\f735e808\00fd9905_8f43c601\Connectivity.Content.DataAccess.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 81920 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\ef8040f8\00e2f250_7443c601\Connectivity.Core.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 81920 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\ef8040f8\00e2f250_7443c601\Connectivity.Core.Services.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 61440 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\e69f9c62\000f2452_7443c601\Connectivity.Web.Core.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 61440 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\e69f9c62\000f2452_7443c601\Connectivity.Web.Core.Services.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\e105eb9c\005b5f4d_7443c601\Connectivity.Core.Database.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\e105eb9c\005b5f4d_7443c601\Connectivity.Core.Database.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 53248 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c51f179e\00e2f250_7443c601\Connectivity.Document.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 53248 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c51f179e\00e2f250_7443c601\Connectivity.Document.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c1adb4b9\00e2f250_7443c601\Connectivity.Indexing.IndexFiles.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c1adb4b9\00e2f250_7443c601\Connectivity.Indexing.IndexFiles.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\be3b2ea8\00ca2e41_8343c601\Connectivity.Core.Email.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\be3b2ea8\00ca2e41_8343c601\Connectivity.Core.Email.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 57344 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\b78c72af\005b5f4d_7443c601\Connectivity.Core.Objects.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 57344 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\b78c72af\005b5f4d_7443c601\Connectivity.Core.Objects.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 36864 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\b20cd65e\0088904e_7443c601\Connectivity.Document.Objects.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 36864 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\b20cd65e\0088904e_7443c601\Connectivity.Document.Objects.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 40960 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\a6804429\001eae26_8e43c601\Connectivity.Content.PackageSchemas.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 40960 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\a6804429\001eae26_8e43c601\Connectivity.Content.PackageSchemas.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\847e4c14\005b5f4d_7443c601\Connectivity.Core.Security.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\847e4c14\005b5f4d_7443c601\Connectivity.Core.Security.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 77824 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\69f58797\000f2452_7443c601\Connectivity.Web.Design.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 77824 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\69f58797\000f2452_7443c601\Connectivity.Web.Design.Services.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 16384 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\64b0df43\005b5f4d_7443c601\Connectivity.Performance.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 16384 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\64b0df43\005b5f4d_7443c601\Connectivity.Performance.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\5b6a72c9\00b210cf_8f43c601\Connectivity.Content.Exceptions.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\5b6a72c9\00b210cf_8f43c601\Connectivity.Content.Exceptions.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 40960 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\59b0f421\00213276_7143c601\Interop.AEDMDwfWrapperLib.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 40960 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\59b0f421\00213276_7143c601\Interop.AEDMDwfWrapperLib.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 65536 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\4c6a1fef\00b0ac45_8e43c601\Connectivity.Content.Objects.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 65536 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\4c6a1fef\00b0ac45_8e43c601\Connectivity.Content.Objects.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 28672 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\47d279bb\00e2f250_7443c601\Connectivity.Core.Job.EventMonitor.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 28672 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\47d279bb\00e2f250_7443c601\Connectivity.Core.Job.EventMonitor.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 10752 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\4457e28d\0070c646_e879c401\Interop.CIODMLib.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 10752 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\4457e28d\0070c646_e879c401\Interop.CIODMLib.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 36864 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\2d6bb3cf\00b5c14f_7443c601\Connectivity.Document.Util.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 36864 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\2d6bb3cf\00b5c14f_7443c601\Connectivity.Document.Util.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 16896 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\2a8f461f\006ae921_8e43c601\Connectivity.Content.Util.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 16896 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\2a8f461f\006ae921_8e43c601\Connectivity.Content.Util.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 65536 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\1b116567\00a6f3ee_8e43c601\Connectivity.Web.Content.Services.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 65536 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\1b116567\00a6f3ee_8e43c601\Connectivity.Web.Content.Services.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 16384 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\17c02028\00c214cc_8d43c601\Connectivity.Content.Database.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 16384 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\17c02028\00c214cc_8d43c601\Connectivity.Content.Database.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 49152 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\0502a4bb\002e2e4c_7443c601\Connectivity.Core.Exceptions.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 49152 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\0502a4bb\002e2e4c_7443c601\Connectivity.Core.Exceptions.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\03310c16\0036bbb5_8e43c601\Connectivity.Content.UtilEx.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\03310c16\0036bbb5_8e43c601\Connectivity.Content.UtilEx.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\0242210f\0088904e_7443c601\Connectivity.Core.WorkflowDef.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 20480 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\0242210f\0088904e_7443c601\Connectivity.Core.WorkflowDef.DLL
+ 2010-04-01 09:42 . 2010-04-01 09:42 81920 f:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 77824 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 77824 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 86016 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 86016 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 81920 f:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-03-31 12:51 . 2010-03-31 12:51 81920 f:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2008-05-27 23:30 . 2008-05-27 23:30 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-03-31 13:32 . 2010-03-31 13:32 32768 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- 2003-02-20 19:19 . 2003-02-20 19:19 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2010-03-31 13:32 . 2010-03-31 13:32 24576 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 f:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 f:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 f:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13648 f:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 f:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13688 f:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 f:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13696 f:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 f:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 f:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13656 f:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13672 f:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 13664 f:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-11-06 23:07 . 2009-11-06 23:07 86864 f:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2010-07-10 21:02 . 2010-07-10 21:02 90112 f:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_216960c3\System.Drawing.Design.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 61440 f:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_21a1c7a3\CustomMarshalers.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 60928 f:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\ea1b4fbde0e772748c6ac42d627cf684\UIAutomationProvider.ni.dll
+ 2010-07-10 18:44 . 2010-07-10 18:44 47104 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\e67992626a30603458b0df22841c2423\PresentationFontCache.ni.exe
+ 2010-07-10 18:54 . 2010-07-10 18:54 47104 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\18729514178d458aa1225dd068718d4e\PresentationFontCache.ni.exe
+ 2010-07-10 18:43 . 2010-07-10 18:43 39424 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\6be27d744e6e2bfc4b0e25bd2998ef7c\PresentationCFFRasterizer.ni.dll
+ 2010-07-10 18:49 . 2010-07-10 18:49 39424 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\0375dfa28e2f6ef7e89df9edede4b83d\PresentationCFFRasterizer.ni.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 77824 f:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 77824 f:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 32768 f:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2009-08-22 21:07 . 2009-08-22 21:07 32768 f:\windows\assembly\GAC_MSIL\System.ServiceModel.WasHosting\3.0.0.0__b77a5c561934e089\System.ServiceModel.WasHosting.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 81920 f:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 81920 f:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 81920 f:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 81920 f:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 32768 f:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 32768 f:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 12800 f:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 12800 f:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 28672 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 28672 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 77824 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 77824 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 36864 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 36864 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 77824 f:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 77824 f:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 13312 f:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 13312 f:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 10752 f:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 10752 f:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 72192 f:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 72192 f:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 69120 f:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 69120 f:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 81920 f:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 8192 f:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 8192 f:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 4608 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\tf-s-8mr.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 3072 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\qrpidc9q.dll
- 2009-10-24 22:38 . 2009-10-24 22:38 5632 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\cf4256fc\0057323a_aa6ac601\Connectivity.Core.Exceptions.resources.DLL
+ 2010-07-11 09:23 . 2010-07-11 09:23 5632 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\cf4256fc\0057323a_aa6ac601\Connectivity.Core.Exceptions.resources.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 5632 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\7a0778f5\00b5c14f_7443c601\interop.propfilterwrapperlib.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 5632 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\7a0778f5\00b5c14f_7443c601\interop.propfilterwrapperlib.DLL
- 2009-10-24 22:42 . 2009-10-24 22:42 7168 f:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 7168 f:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 5632 f:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 5632 f:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2009-10-24 22:42 . 2009-10-24 22:42 6656 f:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 6656 f:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 8192 f:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 8192 f:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 113664 f:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 113664 f:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 258048 f:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 258048 f:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2010-03-30 22:10 . 2010-03-30 22:10 295264 f:\windows\system32\PresentationHost.exe
- 2001-10-25 14:00 . 2010-03-28 18:02 493168 f:\windows\system32\perfh009.dat
+ 2001-10-25 14:00 . 2010-07-10 18:48 493168 f:\windows\system32\perfh009.dat
+ 2009-11-06 23:07 . 2009-11-06 23:07 297808 f:\windows\system32\mscoree.dll
+ 2008-12-25 13:24 . 2010-07-11 09:53 216554 f:\windows\system32\inetsrv\MetaBase.bin
+ 2006-04-26 18:50 . 2010-07-10 18:53 399936 f:\windows\system32\FNTCACHE.DAT
- 2006-04-26 18:50 . 2009-12-06 14:08 399936 f:\windows\system32\FNTCACHE.DAT
+ 2004-08-17 13:48 . 2010-04-20 05:48 285696 f:\windows\system32\dllcache\atmfd.dll
- 2004-08-17 13:48 . 2004-08-17 13:48 285696 f:\windows\system32\dllcache\atmfd.dll
+ 2010-03-30 22:16 . 2010-03-30 22:16 130408 f:\windows\Microsoft.NET\Framework\v3.0\WPF\PresentationHostDLL.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 970752 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.Runtime.Serialization.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 110592 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
- 2008-07-29 17:16 . 2008-07-29 17:16 110592 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMdiagnostics.dll
+ 2010-03-23 03:31 . 2010-03-23 03:31 435024 f:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-02-09 10:22 . 2010-02-09 10:22 258048 f:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2008-07-25 09:17 . 2008-07-25 09:17 258048 f:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
- 2009-10-24 22:38 . 2009-10-24 22:38 122880 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\fadaa5af\00e2f250_7443c601\Connectivity.Document.DataAccess.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 122880 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\fadaa5af\00e2f250_7443c601\Connectivity.Document.DataAccess.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 184320 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c4755034\0088904e_7443c601\Connectivity.Core.DataAccess.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 184320 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\c4755034\0088904e_7443c601\Connectivity.Core.DataAccess.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 950272 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\bd83bf88\0010d3b8_2cc5c501\Interop.SQLDMO.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 950272 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\bd83bf88\0010d3b8_2cc5c501\Interop.SQLDMO.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 143360 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\43968eb7\00b33095_7143c601\ICSharpCode.SharpZipLib.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 143360 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\43968eb7\00b33095_7143c601\ICSharpCode.SharpZipLib.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 106496 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\42cdaddd\005b5f4d_7443c601\Connectivity.Core.Util.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 106496 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\42cdaddd\005b5f4d_7443c601\Connectivity.Core.Util.DLL
- 2009-10-24 22:38 . 2009-10-24 22:38 155648 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\3c5eabff\00fb8fde_8f43c601\Connectivity.Content.Services.DLL
+ 2010-07-11 09:22 . 2010-07-11 09:22 155648 f:\windows\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\autodeskdm_services\f2c5eaf2\23b69ab8\assembly\dl2\3c5eabff\00fb8fde_8f43c601\Connectivity.Content.Services.DLL
+ 2010-03-31 12:51 . 2010-03-31 12:51 102400 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2008-05-27 22:49 . 2008-05-27 22:49 102400 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-03-31 12:49 . 2010-03-31 12:49 315392 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2008-05-27 22:48 . 2008-05-27 22:48 315392 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2008-05-27 23:30 . 2008-05-27 23:30 258048 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-03-31 13:32 . 2010-03-31 13:32 258048 f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-02-24 22:14 . 2010-02-24 22:14 543232 f:\windows\Installer\18f10d.msp
+ 2010-07-11 09:22 . 2010-07-11 09:22 835584 f:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_4fd03f38\System.Drawing.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 192512 f:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_13627827\System.Drawing.Design.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 118784 f:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_f5ae2d14\CustomMarshalers.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 240128 f:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\b3a9fac9aea3ad913781fafbdcbb0cae\WindowsFormsIntegration.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 447488 f:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\4131a3627fec69291dbaed236f30dc65\UIAutomationClient.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 208384 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\aeba6820f20655dec7fe0fe05aaeb818\System.Drawing.Design.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 258048 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ae733e4062edba3a33bb0a632bef66bf\PresentationFramework.Royale.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 368128 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a10c2c7e38291c3ada631ad13e762818\PresentationFramework.Aero.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 539648 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\7579c76fa81eb309d3170b62467be58d\PresentationFramework.Luna.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 368128 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3ffad524016f0aba7b11a8aa33301a65\PresentationFramework.Aero.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 224768 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\3bef0992fb684e71dbfab5c0a99316af\PresentationFramework.Classic.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 258048 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2f6687d394813d760496f60acf046384\PresentationFramework.Royale.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 224768 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\201968d038a23a4688310fed1eeaddaa\PresentationFramework.Classic.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 539648 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\1ead87ca8eb84c595c77c70e3b2df88d\PresentationFramework.Luna.ni.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 839680 f:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 839680 f:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 835584 f:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 835584 f:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 114688 f:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 114688 f:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 258048 f:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 258048 f:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 970752 f:\windows\assembly\GAC_MSIL\System.Runtime.Serialization\3.0.0.0__b77a5c561934e089\System.Runtime.Serialization.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 131072 f:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 131072 f:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 303104 f:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 303104 f:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 258048 f:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 258048 f:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 372736 f:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 372736 f:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 438272 f:\windows\assembly\GAC_MSIL\System.IdentityModel\3.0.0.0__b77a5c561934e089\System.IdentityModel.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 626688 f:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 626688 f:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 401408 f:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 401408 f:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 188416 f:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 188416 f:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 970752 f:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 970752 f:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 745472 f:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 745472 f:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 425984 f:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 425984 f:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 110592 f:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 110592 f:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2009-08-22 21:07 . 2009-08-22 21:07 110592 f:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 110592 f:\windows\assembly\GAC_MSIL\SMDiagnostics\3.0.0.0__b77a5c561934e089\SMdiagnostics.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 659456 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 659456 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 372736 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 372736 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 110592 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 110592 f:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 749568 f:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 749568 f:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 655360 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 655360 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 348160 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 348160 f:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 507904 f:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 507904 f:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 261632 f:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 261632 f:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 113664 f:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 113664 f:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 258048 f:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 258048 f:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 486400 f:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 486400 f:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2004-08-17 13:49 . 2010-04-06 02:52 2462720 f:\windows\system32\WMVCore.dll
- 2004-08-17 13:49 . 2009-11-27 17:35 1293824 f:\windows\system32\quartz.dll
+ 2004-08-17 13:49 . 2010-02-05 18:40 1293824 f:\windows\system32\quartz.dll
+ 2004-08-17 13:49 . 2010-04-06 02:52 2462720 f:\windows\system32\dllcache\WMVCore.dll
+ 2004-08-17 13:44 . 2010-05-02 08:27 1850880 f:\windows\system32\dllcache\win32k.sys
+ 2004-08-17 13:49 . 2010-02-05 18:40 1293824 f:\windows\system32\dllcache\quartz.dll
- 2004-08-17 13:49 . 2009-11-27 17:35 1293824 f:\windows\system32\dllcache\quartz.dll
+ 2009-11-06 23:06 . 2009-11-06 23:06 1130824 f:\windows\system32\dfshim.dll
+ 2010-04-07 21:48 . 2010-04-07 21:48 5967872 f:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\System.ServiceModel.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 5242880 f:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
- 2008-11-25 02:59 . 2008-11-25 02:59 5242880 f:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-03-23 03:32 . 2010-03-23 03:32 3182592 f:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1265664 f:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2008-05-27 23:35 . 2008-05-27 23:35 1265664 f:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2008-05-27 23:35 . 2008-05-27 23:35 1232896 f:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 1232896 f:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2514944 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2008-05-27 22:48 . 2008-05-27 22:48 2514944 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-03-31 12:50 . 2010-03-31 12:50 2527232 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-04-01 09:42 . 2010-04-01 09:42 2142208 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2008-05-27 22:43 . 2008-05-27 22:43 2142208 f:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2009-11-08 22:25 . 2009-11-08 22:25 1935360 f:\windows\Installer\1e7a64.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 2607104 f:\windows\Installer\1e7a3a.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 4210688 f:\windows\Installer\1e7a39.msp
+ 2010-07-11 09:22 . 2010-07-11 09:22 4792320 f:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_ccdf360b\System.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 1966080 f:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_bb7cdd2c\System.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 5513216 f:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_b2b35c3c\System.Xml.dll
+ 2010-07-11 09:21 . 2010-07-11 09:21 2088960 f:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_04886bd9\System.Xml.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 3018752 f:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_b3401d29\System.Windows.Forms.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 7884800 f:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_3a5d9f3e\System.Windows.Forms.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 2244608 f:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_5201cea1\System.Drawing.dll
+ 2010-07-11 09:21 . 2010-07-11 09:21 1470464 f:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_c3e56cad\System.Design.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 3395584 f:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_158d643d\System.Design.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 3391488 f:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_f568cdd4\mscorlib.dll
+ 2010-07-11 09:22 . 2010-07-11 09:22 8908800 f:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_ecb1d686\mscorlib.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 3313664 f:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\f231461883859922a040002dddfb7b12\WindowsBase.ni.dll
+ 2010-07-10 18:49 . 2010-07-10 18:49 3325440 f:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\d63164ac4ed5adabc6a1b0fdf07eee05\WindowsBase.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 1049600 f:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\d8549ce90b26cdc3071224ab6f020189\UIAutomationClientsideProviders.ni.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 7949824 f:\windows\assembly\NativeImages_v2.0.50727_32\System\37217abe2c5164e59aba251860f4c79e\System.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 5450752 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\563a54b98adb70fae862974042298348\System.Xml.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 1917952 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\2d6a5dbee4506bf643b853e41668afa3\System.Speech.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 1035264 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\af217ef58e5558991f331d482c2bdba6\System.Printing.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 1587200 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f3440ea00eb3c40dc073b2fe03843638\System.Drawing.ni.dll
+ 2010-07-10 18:46 . 2010-07-10 18:46 6616576 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\50130ef751b98a4a11bd4ab73af7cab5\System.Data.ni.dll
+ 2010-07-10 18:47 . 2010-07-10 18:47 2516480 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c3ba3367d03779ad6e76c5d4cdfe572a\System.Data.Linq.ni.dll
+ 2010-07-10 18:46 . 2010-07-10 18:46 2295296 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\e98726349766935ec0e9b980f19a046a\System.Core.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 2128896 f:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\fc373f0a8dbd173c63b6b95551b1c673\ReachFramework.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 2128896 f:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\57abb757c1f38586390dcc63bf056322\ReachFramework.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 1657856 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\ead93b6a4f0101cb99d09f3e3fc6491c\PresentationUI.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 1657856 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\0095ba60255d4addaf5b8ebee697a027\PresentationUI.ni.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 1451008 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\20ef773b20f6ce721ae60e5c2c2e8f80\PresentationBuildTasks.ni.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 1249280 f:\windows\assembly\GAC_MSIL\WindowsBase\3.0.0.0__31bf3856ad364e35\WindowsBase.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 3182592 f:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 2048000 f:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 2048000 f:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 5025792 f:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 5025792 f:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-07-10 18:43 . 2010-07-10 18:43 5967872 f:\windows\assembly\GAC_MSIL\System.ServiceModel\3.0.0.0__b77a5c561934e089\System.ServiceModel.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 5062656 f:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 5062656 f:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 5279744 f:\windows\assembly\GAC_MSIL\PresentationFramework\3.0.0.0__31bf3856ad364e35\PresentationFramework.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 5242880 f:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 5242880 f:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 2933248 f:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 2933248 f:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 4210688 f:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2009-08-22 21:07 . 2009-08-22 21:07 4210688 f:\windows\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- 2009-10-24 22:42 . 2009-10-24 22:42 4546560 f:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2010-07-10 18:48 . 2010-07-10 18:48 4546560 f:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2009-10-24 22:37 . 2009-10-24 22:37 1232896 f:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 1232896 f:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2010-07-10 21:02 . 2010-07-10 21:02 1265664 f:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
- 2009-10-24 22:37 . 2009-10-24 22:37 1265664 f:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2006-04-26 17:44 . 2010-05-28 19:37 32472008 f:\windows\system32\MRT.exe
+ 2010-04-02 17:29 . 2010-04-02 17:29 11413504 f:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp
+ 2010-04-02 10:30 . 2010-04-02 10:30 17456640 f:\windows\Installer\763120.msp
+ 2010-03-30 23:23 . 2010-03-30 23:23 15638528 f:\windows\Installer\1e7a71.msp
+ 2010-04-11 20:17 . 2010-04-11 20:17 14599680 f:\windows\Installer\1e7a49.msp
+ 2010-07-10 18:55 . 2010-07-10 18:55 12430848 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2dfe045e4b1577fdea9a2f456db0afc2\System.Windows.Forms.ni.dll
+ 2010-07-10 18:55 . 2010-07-10 18:55 10683392 f:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\f352c5cb50bee105e4c873ca050f9f46\System.Design.ni.dll
+ 2010-07-10 18:45 . 2010-07-10 18:45 14327808 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\ca898d942e4d85af4c3d5f14a77c359a\PresentationFramework.ni.dll
+ 2010-07-10 18:54 . 2010-07-10 18:54 14328320 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\560662ada034afb6ec78a152bd9a47b5\PresentationFramework.ni.dll
+ 2010-07-10 18:44 . 2010-07-10 18:44 12216320 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\ba8f917fd89d7afa8885c2a326379f03\PresentationCore.ni.dll
+ 2010-07-10 18:53 . 2010-07-10 18:53 12215808 f:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\9f5dff344ac6ac923b5ade8ba1ab9382\PresentationCore.ni.dll
.
-- Snímek resetován k současnému datu --
.

[Trautenberk]

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="f:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="f:\program files\VIA\RAID\raid_tool.exe" [2006-01-04 1060864]
"WheelMouse"="f:\program files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 163840]
"NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2010-04-03 110696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="f:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=f:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Akcelerátor spuštění AutoCADu.lnk]
backup=f:\windows\pss\Akcelerátor spuštění AutoCADu.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Enable Magic Keyboard program.lnk]
backup=f:\windows\pss\Enable Magic Keyboard program.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
backup=f:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Port pro program Symantec Fax Starter Edition.lnk]
backup=f:\windows\pss\Port pro program Symantec Fax Starter Edition.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
backup=f:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Registration .LNK]
backup=f:\windows\pss\Registration .LNKStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^rncsys32.exe]
path=f:\documents and settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe
backup=f:\windows\pss\rncsys32.exeStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Warkeys Update.lnk]
backup=f:\windows\pss\Warkeys Update.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
2006-09-28 19:21 57344 ----a-w- f:\program files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-17 13:49 15360 ----a-w- f:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
2007-09-06 13:08 136136 ----a-w- f:\program files\DAEMON Tools Pro\DTProAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-09-06 17:15 133104 ----atw- f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2009-11-16 15:36 172792 ----a-w- f:\program files\ICQ6.5\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
2006-09-10 20:56 218032 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-09-10 20:56 218032 ----a-w- f:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-09-10 20:56 86960 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-07-13 12:03 292128 ----a-w- f:\prográmky\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2007-09-21 02:10 55824 ----a-w- f:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2010-03-30 09:16 1820040 ----a-w- f:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-w- f:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-04-03 17:23 110696 ----a-w- f:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
2006-03-17 15:11 81408 ----a-w- f:\windows\system32\P17.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PoivY]
2009-11-21 17:23 9189152 ----a-w- f:\program files\PoivY.com\PoivY\poivy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2006-11-06 08:27 200704 ----a-w- f:\prográmky\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-05-26 15:18 413696 ----a-w- f:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ServiceHost]
2006-08-09 14:01 147968 ----a-w- f:\program files\Java\jre1.5.0_06\bin\svchost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 12:11 25623336 ----a-r- f:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-03-24 19:04 148888 ----a-w- f:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-02 12:59 39408 ----a-w- f:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WDICT32]
2006-11-26 12:03 2355200 ----a-w- f:\prográmky\TRANSLATOR 07\WDICT32.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ADSLAutoconnect"=2 (0x2)
"lanmanworkstation"=2 (0x2)
"MSSQLServerADHelper"=3 (0x3)
"SQLAgent$AUTODESKVAULT"=3 (0x3)
"MSSQL$AUTODESKVAULT"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\prográmky\\The All-Seeing Eye\\eye.exe"=
"c:\\Downloads\\BitComet\\BitComet.exe"=
"f:\\Downloads\\utorrent.exe"=
"f:\\prográmky\\uTorrent\\utorrent.exe"=
"f:\\prográmky\\iTunes\\iTunes.exe"=
"f:\\prográmky\\BitSpirit\\BitSpirit.exe"=
"f:\\Program Files\\Bonjour\\mDNSResponder.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7486:TCP"= 7486:TCP:BitComet 7486 TCP
"7486:UDP"= 7486:UDP:BitComet 7486 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);f:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R1 kbfilter;Keyboard Filter Driver;f:\windows\system32\drivers\kbfilter.sys [13.9.2006 19:21 12032]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;f:\program files\LogMeIn Hamachi\hamachi-2.exe [30.3.2010 11:16 1107336]
R2 ICQ Service;ICQ Service;f:\program files\ICQ6Toolbar\ICQ Service.exe [5.1.2009 19:39 222456]
R3 LgBttPort;LGE Bluetooth TransPort;f:\windows\system32\drivers\lgbtport.sys [29.9.2009 9:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;f:\windows\system32\drivers\lgbtbus.sys [29.9.2009 9:11 10496]
R3 LGVMODEM;LGE Virtual Modem;f:\windows\system32\drivers\lgvmodem.sys [29.9.2009 9:11 12928]
R3 p17filt;p17filt;f:\windows\system32\drivers\p17filt.sys [20.3.2006 19:34 1452032]
R3 UsbFltr;WayTech USB Filter Driver;f:\windows\system32\drivers\UsbFltr.sys [25.9.2006 19:24 8704]
S3 GarenaPEngine;GarenaPEngine;\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp --> f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp [?]
S3 hamachi_oem;PlayLinc Adapter;f:\windows\system32\drivers\gan_adapter.sys [29.8.2006 0:54 10664]
S3 HwIOctl;HwIOctl;\??\f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys --> f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys [?]
S3 NPF;NetGroup Packet Filter Driver;f:\windows\system32\drivers\npf.sys [25.1.2007 19:31 42000]
S3 Razerlow;Razerlow USB Filter Driver;f:\windows\system32\drivers\Razerlow.sys [26.4.2006 19:07 13225]
S3 UnlockerDriver4;UnlockerDriver4 Driver;\??\f:\program files\Unlocker\UnlockerDriver4.sys --> f:\program files\Unlocker\UnlockerDriver4.sys [?]
S3 vaxscsi;vaxscsi;f:\windows\system32\drivers\vaxscsi.sys [10.7.2006 15:33 223128]
S4 sptd;sptd;f:\windows\system32\drivers\sptd.sys [27.4.2006 16:00 685816]
S4 SQLAgent$AUTODESKVAULT;SQLAgent$AUTODESKVAULT;f:\program files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlagent.EXE [3.5.2005 22:42 323584]
.
Obsah adresáře 'Naplánované úlohy'

2010-06-21 f:\windows\Tasks\AppleSoftwareUpdate.job
- f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-11 f:\windows\Tasks\Google Software Updater.job
- f:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-02 12:59]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: &ICQ Toolbar Search - f:\prográmky\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download Using &BitSpirit - f:\prográmky\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - f:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Save YouTube Video - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP4.htm
IE: Save YouTube Video as MP3 - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm
IE: Stáhnout položku pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout vše pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: Stáhnout všechny položky pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file://f:\prográmky\AutoCAD 2002 Cz\InstFred.ocx
DPF: {AE563723-B4F5-11D4-A415-00108302FDFD} - file://f:\prográmky\AutoCAD 2002 Cz\InstBanr.ocx
FF - ProfilePath - f:\documents and settings\madcat\Data aplikací\Mozilla\Firefox\Profiles\2te5xswo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: f:\program files\Common Files\DVDVideoSoft\Dll\FFContextMenuY\components\FFContextMenu.dll
FF - component: f:\prográmky\Mozilla Firefox2\Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: f:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - f:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.proxy.type", 5);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-11 11:58
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp"
.
Celkový čas: 2010-07-11 12:01:08
ComboFix-quarantined-files.txt 2010-07-11 10:00
ComboFix2.txt 2010-07-10 14:18
ComboFix3.txt 2010-07-10 13:34
ComboFix4.txt 2010-07-10 11:26

Před spuštěním: Volných bajtů: 32 621 289 472
Po spuštění: Volných bajtů: 32 650 752 000

- - End Of File - - 88BDA4813965543263E732F355111A28

[Rudy]

Restartujte do nouz. režimu a spusťte znovu CF tímto skriptem:

KillAll::
Collect::
f:\windows\SC6383DC7.tmp
f:\documents and settings\madcat\Nabídka Start\Programy\Po spuštění\rncsys32.exe
f:\windows\pss\rncsys32.exeStartup

Registry::
[-HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^rncsys32.exe]

[Trautenberk]

ComboFix 10-07-08.02 - madcat 11.07.2010 13:52:28.5.1 - x86 MINIMAL
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.2047.1752 [GMT 2:00]
Spuštěný z: f:\documents and settings\madcat\Plocha\Nabubaky.exe
Použité ovládací přepínače :: f:\documents and settings\madcat\Plocha\CFScript.txt
AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
FW: Outpost Firewall Pro *enabled* {8A20CA2A-9E02-4A64-923B-0A38208EB7FD}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

file zipped: f:\windows\SC6383DC7.tmp
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

f:\windows\SC6383DC7.tmp

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-11 do 2010-07-11 )))))))))))))))))))))))))))))))
.

2010-07-11 10:51 . 2010-07-11 10:51 -------- d-----w- f:\program files\ESET
2010-07-10 13:47 . 2010-07-10 13:47 -------- d-----w- f:\program files\Sunbelt Software
2010-07-10 13:20 . 2010-07-10 13:34 -------- d-----w- F:\Nabubaky25017N
2010-07-10 10:58 . 2010-07-10 11:26 -------- d-----w- F:\Nabubaky
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- F:\rsit
2010-07-10 10:19 . 2010-07-10 10:19 -------- d-----w- f:\program files\trend micro

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-11 12:01 . 2010-07-11 12:01 0 ----a-w- f:\windows\SC6383DC7.tmp
2010-07-10 18:48 . 2001-10-25 14:00 99730 ----a-w- f:\windows\system32\perfc005.dat
2010-07-10 18:48 . 2001-10-25 14:00 493380 ----a-w- f:\windows\system32\perfh005.dat
2010-06-18 14:39 . 2009-08-17 20:12 -------- d-----w- f:\program files\Garena
2010-05-17 19:43 . 2010-05-17 19:41 -------- d-----w- f:\program files\NVIDIA Corporation
2010-05-02 08:27 . 2004-08-17 13:44 1850880 ------w- f:\windows\system32\win32k.sys
2010-04-20 05:48 . 2004-08-17 13:48 285696 ----a-w- f:\windows\system32\atmfd.dll
2007-04-01 14:03 . 2007-02-13 13:18 4653856 --sha-w- f:\windows\system32\drivers\fidbox.dat
2007-04-01 14:03 . 2007-02-13 13:18 20000 --sha-w- f:\windows\system32\drivers\fidbox2.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVIDIA nTune"="f:\prográmky\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-07-03 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="f:\program files\VIA\RAID\raid_tool.exe" [2006-01-04 1060864]
"WheelMouse"="f:\program files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 163840]
"NvCplDaemon"="f:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"NvMediaCenter"="f:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"egui"="f:\program files\ESET\ESET Smart Security\egui.exe" [2008-03-01 1443072]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="f:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=f:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Akcelerátor spuštění AutoCADu.lnk]
backup=f:\windows\pss\Akcelerátor spuštění AutoCADu.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Enable Magic Keyboard program.lnk]
backup=f:\windows\pss\Enable Magic Keyboard program.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Microsoft Office.lnk]
backup=f:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Port pro program Symantec Fax Starter Edition.lnk]
backup=f:\windows\pss\Port pro program Symantec Fax Starter Edition.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
backup=f:\windows\pss\Service Manager.lnkCommon Startup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Registration .LNK]
backup=f:\windows\pss\Registration .LNKStartup

[HKLM\~\startupfolder\F:^Documents and Settings^madcat^Nabídka Start^Programy^Po spuštění^Warkeys Update.lnk]
backup=f:\windows\pss\Warkeys Update.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
2006-09-28 19:21 57344 ----a-w- f:\program files\SlySoft\CloneCD\CloneCDTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
2004-08-17 13:49 15360 ----a-w- f:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
2007-09-06 13:08 136136 ----a-w- f:\program files\DAEMON Tools Pro\DTProAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-09-06 17:15 133104 ----atw- f:\documents and settings\madcat\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2009-11-16 15:36 172792 ----a-w- f:\program files\ICQ6.5\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]
2006-09-10 20:56 218032 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2006-09-10 20:56 218032 ----a-w- f:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2006-09-10 20:56 86960 ----a-w- f:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2009-07-13 12:03 292128 ----a-w- f:\prográmky\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer]
2007-09-21 02:10 55824 ----a-w- f:\windows\KHALMNPR.Exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2010-03-30 09:16 1820040 ----a-w- f:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 09:50 155648 ----a-w- f:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-04-03 17:23 110696 ----a-w- f:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\P17Helper]
2006-03-17 15:11 81408 ----a-w- f:\windows\system32\P17.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PoivY]
2009-11-21 17:23 9189152 ----a-w- f:\program files\PoivY.com\PoivY\poivy.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
2006-11-06 08:27 200704 ----a-w- f:\prográmky\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-05-26 15:18 413696 ----a-w- f:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ServiceHost]
2006-08-09 14:01 147968 ----a-w- f:\program files\Java\jre1.5.0_06\bin\svchost.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2009-10-09 12:11 25623336 ----a-r- f:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-03-24 19:04 148888 ----a-w- f:\program files\Java\jre6\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-02 12:59 39408 ----a-w- f:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WDICT32]
2006-11-26 12:03 2355200 ----a-w- f:\prográmky\TRANSLATOR 07\WDICT32.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ADSLAutoconnect"=2 (0x2)
"lanmanworkstation"=2 (0x2)
"MSSQLServerADHelper"=3 (0x3)
"SQLAgent$AUTODESKVAULT"=3 (0x3)
"MSSQL$AUTODESKVAULT"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"f:\\prográmky\\The All-Seeing Eye\\eye.exe"=
"c:\\Downloads\\BitComet\\BitComet.exe"=
"f:\\Downloads\\utorrent.exe"=
"f:\\prográmky\\uTorrent\\utorrent.exe"=
"f:\\prográmky\\iTunes\\iTunes.exe"=
"f:\\prográmky\\BitSpirit\\BitSpirit.exe"=
"f:\\Program Files\\Bonjour\\mDNSResponder.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7486:TCP"= 7486:TCP:BitComet 7486 TCP
"7486:UDP"= 7486:UDP:BitComet 7486 UDP

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);f:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R1 kbfilter;Keyboard Filter Driver;f:\windows\system32\drivers\kbfilter.sys [13.9.2006 19:21 12032]
R2 ekrn;Eset Service;f:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;f:\program files\LogMeIn Hamachi\hamachi-2.exe [30.3.2010 11:16 1107336]
R2 ICQ Service;ICQ Service;f:\program files\ICQ6Toolbar\ICQ Service.exe [5.1.2009 19:39 222456]
R3 LgBttPort;LGE Bluetooth TransPort;f:\windows\system32\drivers\lgbtport.sys [29.9.2009 9:11 12160]
R3 lgbusenum;LG Bluetooth Bus Enumerator;f:\windows\system32\drivers\lgbtbus.sys [29.9.2009 9:11 10496]
R3 LGVMODEM;LGE Virtual Modem;f:\windows\system32\drivers\lgvmodem.sys [29.9.2009 9:11 12928]
R3 p17filt;p17filt;f:\windows\system32\drivers\p17filt.sys [20.3.2006 19:34 1452032]
S3 GarenaPEngine;GarenaPEngine;\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp --> f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp [?]
S3 hamachi_oem;PlayLinc Adapter;f:\windows\system32\drivers\gan_adapter.sys [29.8.2006 0:54 10664]
S3 HwIOctl;HwIOctl;\??\f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys --> f:\program files\Setup Files\MS-6702 v2.20\HwIOctl.sys [?]
S3 NPF;NetGroup Packet Filter Driver;f:\windows\system32\drivers\npf.sys [25.1.2007 19:31 42000]
S3 Razerlow;Razerlow USB Filter Driver;f:\windows\system32\drivers\Razerlow.sys [26.4.2006 19:07 13225]
S3 UnlockerDriver4;UnlockerDriver4 Driver;\??\f:\program files\Unlocker\UnlockerDriver4.sys --> f:\program files\Unlocker\UnlockerDriver4.sys [?]
S3 UsbFltr;WayTech USB Filter Driver;f:\windows\system32\drivers\UsbFltr.sys [25.9.2006 19:24 8704]
S3 vaxscsi;vaxscsi;f:\windows\system32\drivers\vaxscsi.sys [10.7.2006 15:33 223128]
S4 sptd;sptd;f:\windows\system32\drivers\sptd.sys [27.4.2006 16:00 685816]
S4 SQLAgent$AUTODESKVAULT;SQLAgent$AUTODESKVAULT;f:\program files\Microsoft SQL Server\MSSQL$AUTODESKVAULT\Binn\sqlagent.EXE [3.5.2005 22:42 323584]
.
Obsah adresáře 'Naplánované úlohy'

2010-06-21 f:\windows\Tasks\AppleSoftwareUpdate.job
- f:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-07-11 f:\windows\Tasks\Google Software Updater.job
- f:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-02 12:59]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: &ICQ Toolbar Search - f:\prográmky\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Download Using &BitSpirit - f:\prográmky\BitSpirit\bsurl.htm
IE: E&xport to Microsoft Excel - f:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Save YouTube Video - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP4.htm
IE: Save YouTube Video as MP3 - f:\program files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm
IE: Stáhnout položku pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout pomocí FlashGet - f:\prográmky\FlashGet\jc_link.htm
IE: Stáhnout vše pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: Stáhnout všechny položky pomocí FlashGet - f:\prográmky\FlashGet\jc_all.htm
IE: ÓñČĚŘľ«ÁéĎÂÔŘ(&B)
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file://f:\prográmky\AutoCAD 2002 Cz\InstFred.ocx
DPF: {AE563723-B4F5-11D4-A415-00108302FDFD} - file://f:\prográmky\AutoCAD 2002 Cz\InstBanr.ocx
FF - ProfilePath - f:\documents and settings\madcat\Data aplikací\Mozilla\Firefox\Profiles\2te5xswo.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: f:\program files\Common Files\DVDVideoSoft\Dll\FFContextMenuY\components\FFContextMenu.dll
FF - component: f:\prográmky\Mozilla Firefox2\Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: f:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - f:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("network.proxy.type", 5);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
f:\progr mky\Mozilla Firefox2\Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
f:\progr mky\Mozilla Firefox2\Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-11 14:01
Windows 5.1.2600 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\f:\docume~1\madcat\LOCALS~1\Temp\GVV48A.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(180)
f:\prográmky\iTunes\iTunesMiniPlayer.dll
f:\prográmky\iTunes\iTunesMiniPlayer.Resources\en.lproj\iTunesMiniPlayerLocalized.dll
f:\prográmky\iTunes\iTunesMiniPlayer.Resources\iTunesMiniPlayer.dll
f:\windows\system32\WPDShServiceObj.dll
f:\windows\system32\PortableDeviceTypes.dll
f:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
f:\windows\system32\nvsvc32.exe
f:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
f:\prográmky\Autodesk\Data Management Server 5\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
f:\program files\Bonjour\mDNSResponder.exe
f:\windows\system32\DRIVERS\CDANTSRV.EXE
f:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
f:\windows\system32\inetsrv\inetinfo.exe
f:\program files\Java\jre6\bin\jqs.exe
f:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
f:\prográmky\NVIDIA Corporation\nTune\nTuneService.exe
f:\windows\system32\PnkBstrA.exe
f:\windows\system32\RUNDLL32.EXE
f:\windows\system32\dllhost.exe
f:\\?\f:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
f:\windows\system32\inetsrv\DavCData.exe
.
**************************************************************************
.
Celkový čas: 2010-07-11 14:08:10 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-07-11 12:08
ComboFix2.txt 2010-07-11 10:01
ComboFix3.txt 2010-07-10 14:18
ComboFix4.txt 2010-07-10 13:34
ComboFix5.txt 2010-07-11 11:45

Před spuštěním: Volných bajtů: 32 375 357 440
Po spuštění: Volných bajtů: 32 386 691 072

- - End Of File - - 1D0D4099BA9646E72081F189CF54B86D

[Rudy]

Log již vypadá čistý. Nastala nějaká změna?