VIRY.CZ

zdravim..chcem sa opytat, dnes sa mi stiahol security tool a robil problemy typu: restartoval sa komp, nespustal programy, okrem browserov takmer nic, stale vyhadzoval okna a upozornoval na seba..po niekolkom restarte ale akoby prestal byt aktivny..chcel by som vediet, ci iba niekde caka, kym znova zautoci, alebo co sa stalo, lebo sam od seba asi neodisie

vdaka za vas cas

posielam aj log z RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-10-09 15:43:58
Microsoft Windows XP Professional Service Pack 3
System drive D: has 26 GB (72%) free of 36 GB
Total RAM: 1535 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:44:39, on 9.10.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\rundll32.exe
D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
D:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\Program Files\uTorrent\uTorrent.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\RALINK\Common\RaUI.exe
D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
D:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
C:\totalcmd\TOTALCMD.EXE
D:\Program Files\QIP Infium\infium.exe
D:\Documents and Settings\Administrator\My Documents\Preberanie\RSIT.exe
D:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://tmp2.aktualne.centrum.sk/~~cook~ ... ent=0&hp=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://google.com/
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O4 - HKLM\..\Run: [egui] "D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [696359749] "D:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\696359749.exe" 21 36
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ralink Wireless Utility.lnk = D:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - D:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

--
End of file - 5160 bytes

======Scheduled tasks folder======

D:\WINDOWS\tasks\Acrobat Update.job
D:\WINDOWS\tasks\PPNHYGJDH.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=D:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-08-25 98304]
"ATICustomerCare"=D:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"SoundMan"=D:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"GrooveMonitor"=D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=D:\Program Files\uTorrent\uTorrent.exe [2010-10-07 328056]
"ctfmon.exe"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=D:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"696359749"=D:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\696359749.exe 21 36 []

D:\Documents and Settings\All Users\Start Menu\Programs\Startup
Ralink Wireless Utility.lnk - D:\Program Files\RALINK\Common\RaUI.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
D:\WINDOWS\system32\Ati2evxx.dll [2010-08-26 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
D:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Program Files\uTorrent\uTorrent.exe"="D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\WINDOWS\system32\sessmgr.exe"="D:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"D:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="D:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="D:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"D:\Program Files\Skype\Plugin Manager\skypePM.exe"="D:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-10-09 15:43:59 ----D---- D:\Program Files\trend micro
2010-10-09 15:43:58 ----D---- D:\rsit
2010-10-09 12:14:02 ----SHD---- D:\Config.Msi
2010-10-09 12:12:16 ----A---- D:\WINDOWS\system32\D3DX9_42.dll
2010-10-09 12:12:16 ----A---- D:\WINDOWS\system32\d3dx9_31.dll
2010-10-09 12:12:14 ----D---- D:\WINDOWS\Logs
2010-10-09 12:12:06 ----D---- D:\Program Files\Winamp Detect
2010-10-09 12:10:30 ----RASH---- D:\WINDOWS\system32\davclntw.dll
2010-10-09 12:09:15 ----D---- D:\Documents and Settings\Administrator\Application Data\GHISLER
2010-10-09 12:09:15 ----A---- D:\WINDOWS\UC.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\RAR.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\PKZIP.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\PKUNZIP.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\NOCLOSE.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\LHA.PIF
2010-10-09 12:09:15 ----A---- D:\WINDOWS\ARJ.PIF
2010-10-09 10:08:50 ----HDC---- D:\WINDOWS\$NtUninstallKB941569$
2010-10-09 10:04:03 ----D---- D:\Documents and Settings\Administrator\Application Data\skypePM
2010-10-09 10:03:32 ----D---- D:\Documents and Settings\Administrator\Application Data\Skype
2010-10-09 10:02:52 ----D---- D:\Program Files\Common Files\Skype
2010-10-09 10:02:45 ----RD---- D:\Program Files\Skype
2010-10-09 10:02:36 ----D---- D:\Documents and Settings\All Users\Application Data\Skype
2010-10-08 15:14:07 ----D---- D:\Documents and Settings\Administrator\Application Data\vlc
2010-10-08 15:13:41 ----A---- D:\WINDOWS\system32\unrar.dll
2010-10-08 15:13:40 ----A---- D:\WINDOWS\avisplitter.ini
2010-10-08 15:13:38 ----A---- D:\WINDOWS\system32\yv12vfw.dll
2010-10-08 15:13:37 ----A---- D:\WINDOWS\system32\xvidvfw.dll
2010-10-08 15:13:37 ----A---- D:\WINDOWS\system32\xvidcore.dll
2010-10-08 15:13:37 ----A---- D:\WINDOWS\system32\ff_vfw.dll.manifest
2010-10-08 15:13:37 ----A---- D:\WINDOWS\system32\ff_vfw.dll
2010-10-08 15:13:31 ----D---- D:\Program Files\K-Lite Codec Pack
2010-10-08 14:40:03 ----A---- D:\WINDOWS\system32\msonpmon.dll
2010-10-08 14:39:20 ----D---- D:\Program Files\Microsoft Works
2010-10-08 14:39:12 ----D---- D:\Program Files\MSBuild
2010-10-08 14:38:49 ----D---- D:\Program Files\Microsoft Visual Studio
2010-10-08 14:38:49 ----D---- D:\Program Files\Common Files\DESIGNER
2010-10-08 14:32:56 ----D---- D:\WINDOWS\SHELLNEW
2010-10-08 14:30:05 ----D---- D:\Program Files\Microsoft Office
2010-10-08 14:30:04 ----D---- D:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-10-08 14:29:11 ----RHD---- D:\MSOCache
2010-10-08 14:29:09 ----D---- D:\WINDOWS\RegisteredPackages
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\vxblock.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxwave.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxsfs.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxmas.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxinsa64.exe
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxhpinst.exe
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxdrv.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxcpya64.exe
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\pxafs.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\px.dll
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\drivers\PxHelp20.sys
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\drivers\cdralw2k.sys
2010-10-08 14:28:17 ----N---- D:\WINDOWS\system32\drivers\cdr4_xp.sys
2010-10-08 14:28:14 ----D---- D:\Program Files\Winamp
2010-10-08 14:28:14 ----D---- D:\Documents and Settings\Administrator\Application Data\Winamp
2010-10-08 01:43:59 ----D---- D:\Documents and Settings\Administrator\Application Data\Macromedia
2010-10-08 01:43:59 ----D---- D:\Documents and Settings\Administrator\Application Data\Adobe
2010-10-07 20:37:19 ----D---- D:\WINDOWS\system32\appmgmt
2010-10-07 20:34:16 ----HDC---- D:\WINDOWS\$NtUninstallKB970430$
2010-10-07 20:34:07 ----HDC---- D:\WINDOWS\$NtUninstallKB971737$
2010-10-07 20:33:50 ----HDC---- D:\WINDOWS\$NtUninstallKB2141007$
2010-10-07 20:26:47 ----A---- D:\WINDOWS\ALCFDRTM.EXE
2010-10-07 20:26:44 ----D---- D:\WINDOWS\system32\Lang
2010-10-07 20:26:29 ----A---- D:\WINDOWS\RtlRack.ini
2010-10-07 20:02:37 ----R---- D:\WINDOWS\system32\ChCfg.exe
2010-10-07 20:02:28 ----R---- D:\WINDOWS\system32\RtlCPAPI.dll
2010-10-07 20:02:27 ----R---- D:\WINDOWS\system32\RTLCPL.exe
2010-10-07 20:02:25 ----R---- D:\WINDOWS\soundman.exe
2010-10-07 20:02:24 ----R---- D:\WINDOWS\system32\drivers\alcxwdm.sys
2010-10-07 20:02:18 ----R---- D:\WINDOWS\avrack.ini
2010-10-07 20:02:18 ----D---- D:\Program Files\Realtek Sound Manager
2010-10-07 20:02:18 ----D---- D:\Program Files\AvRack
2010-10-07 20:02:05 ----D---- D:\Program Files\Realtek AC97
2010-10-07 20:01:57 ----RA---- D:\WINDOWS\Alcrmv.exe
2010-10-07 20:01:57 ----R---- D:\WINDOWS\alcupd.exe
2010-10-07 20:00:04 ----D---- D:\Program Files\AMD
2010-10-07 20:00:04 ----A---- D:\WINDOWS\system32\drivers\AmdK8.sys
2010-10-07 19:59:24 ----N---- D:\WINDOWS\system32\nvuide.exe
2010-10-07 19:59:22 ----D---- D:\WINDOWS\system32\ReinstallBackups
2010-10-07 19:58:32 ----A---- D:\WINDOWS\system32\nvunrm.exe
2010-10-07 19:58:27 ----A---- D:\WINDOWS\system32\nvusmb.exe
2010-10-07 19:58:16 ----A---- D:\WINDOWS\system32\NVUNINST.EXE
2010-10-07 19:58:09 ----D---- D:\Program Files\Common Files\InstallShield
2010-10-07 19:58:02 ----A---- D:\WINDOWS\system32\NVCOI.DLL
2010-10-07 19:58:02 ----A---- D:\WINDOWS\system32\idecoins.dll
2010-10-07 19:58:02 ----A---- D:\WINDOWS\system32\idecoi.dll
2010-10-07 19:58:02 ----A---- D:\WINDOWS\system32\drivers\nvata.sys
2010-10-07 19:57:49 ----A---- D:\WINDOWS\system32\drivers\nvsnpu.sys
2010-10-07 19:57:49 ----A---- D:\WINDOWS\system32\drivers\nvnrm.sys
2010-10-07 19:57:49 ----A---- D:\WINDOWS\system32\drivers\nvnetbus.sys
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\nvconrm.dll
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\fdco1ins.dll
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\fdco1.dll
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\drivers\NVENETFD.sys
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\bdco1ins.dll
2010-10-07 19:57:48 ----A---- D:\WINDOWS\system32\bdco1.dll
2010-10-07 19:40:44 ----D---- D:\Program Files\QIP Infium
2010-10-07 17:59:05 ----HDC---- D:\WINDOWS\$NtUninstallKB980218$
2010-10-07 17:58:46 ----HDC---- D:\WINDOWS\$NtUninstallKB2183461$
2010-10-07 17:58:40 ----HDC---- D:\WINDOWS\$NtUninstallKB952954$
2010-10-07 17:58:36 ----HDC---- D:\WINDOWS\$NtUninstallKB959426$
2010-10-07 17:58:31 ----HDC---- D:\WINDOWS\$NtUninstallKB960859$
2010-10-07 17:58:26 ----HDC---- D:\WINDOWS\$NtUninstallKB2115168$
2010-10-07 17:58:21 ----HDC---- D:\WINDOWS\$NtUninstallKB974318$
2010-10-07 17:58:14 ----HDC---- D:\WINDOWS\$NtUninstallKB951978$
2010-10-07 17:58:08 ----HDC---- D:\WINDOWS\$NtUninstallKB969059$
2010-10-07 17:58:00 ----HDC---- D:\WINDOWS\$NtUninstallKB981349$
2010-10-07 17:57:02 ----D---- D:\WINDOWS\ie8updates
2010-10-07 17:56:26 ----D---- D:\WINDOWS\WBEM
2010-10-07 17:56:15 ----A---- D:\WINDOWS\system32\drivers\splitter.sys
2010-10-07 17:56:14 ----A---- D:\WINDOWS\system32\drivers\wdmaud.sys
2010-10-07 17:56:12 ----A---- D:\WINDOWS\system32\drivers\DMusic.sys
2010-10-07 17:56:11 ----A---- D:\WINDOWS\system32\drivers\swmidi.sys
2010-10-07 17:56:09 ----A---- D:\WINDOWS\system32\drivers\aec.sys
2010-10-07 17:56:08 ----A---- D:\WINDOWS\system32\drivers\kmixer.sys
2010-10-07 17:56:07 ----A---- D:\WINDOWS\system32\drivers\drmkaud.sys
2010-10-07 17:56:06 ----A---- D:\WINDOWS\system32\drivers\sysaudio.sys
2010-10-07 17:56:04 ----A---- D:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-10-07 17:56:03 ----A---- D:\WINDOWS\system32\drivers\MSPQM.sys
2010-10-07 17:56:01 ----A---- D:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-10-07 17:55:52 ----A---- D:\WINDOWS\system32\ksuser.dll
2010-10-07 17:55:52 ----A---- D:\WINDOWS\system32\drivers\portcls.sys
2010-10-07 17:55:52 ----A---- D:\WINDOWS\system32\drivers\drmk.sys
2010-10-07 17:55:12 ----HDC---- D:\WINDOWS\ie8
2010-10-07 17:44:56 ----D---- D:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-10-07 17:43:23 ----A---- D:\WINDOWS\system32\MRT.exe
2010-10-07 02:49:26 ----A---- D:\WINDOWS\system32\h323log.txt
2010-10-07 01:41:34 ----HDC---- D:\WINDOWS\$NtUninstallKB951376-v2$
2010-10-07 01:41:30 ----HDC---- D:\WINDOWS\$NtUninstallKB946648$
2010-10-07 01:41:26 ----HDC---- D:\WINDOWS\$NtUninstallKB956803$
2010-10-07 01:41:21 ----HDC---- D:\WINDOWS\$NtUninstallKB982214$
2010-10-07 01:41:19 ----HDC---- D:\WINDOWS\$NtUninstallKB958869$
2010-10-07 01:41:15 ----HDC---- D:\WINDOWS\$NtUninstallKB2259922$
2010-10-07 01:41:11 ----HDC---- D:\WINDOWS\$NtUninstallKB980195$
2010-10-07 01:41:07 ----HDC---- D:\WINDOWS\$NtUninstallKB980232$
2010-10-07 01:41:02 ----HDC---- D:\WINDOWS\$NtUninstallKB979402_WM9$
2010-10-07 01:40:59 ----HDC---- D:\WINDOWS\$NtUninstallKB975558_WM8$
2010-10-07 01:40:55 ----HDC---- D:\WINDOWS\$NtUninstallKB955759$
2010-10-07 01:40:50 ----HDC---- D:\WINDOWS\$NtUninstallKB2229593$
2010-10-07 01:40:46 ----HDC---- D:\WINDOWS\$NtUninstallKB950974$
2010-10-07 01:40:42 ----HDC---- D:\WINDOWS\$NtUninstallKB978037$
2010-10-07 01:40:38 ----HDC---- D:\WINDOWS\$NtUninstallKB975713$
2010-10-07 01:40:34 ----HDC---- D:\WINDOWS\$NtUninstallKB971657$
2010-10-07 01:40:30 ----HDC---- D:\WINDOWS\$NtUninstallKB978338$
2010-10-07 01:40:26 ----HDC---- D:\WINDOWS\$NtUninstallKB954155_WM9$
2010-10-07 01:40:23 ----HDC---- D:\WINDOWS\$NtUninstallKB972270$
2010-10-07 01:40:19 ----HDC---- D:\WINDOWS\$NtUninstallKB956744$
2010-10-07 01:40:14 ----HDC---- D:\WINDOWS\$NtUninstallKB974112$
2010-10-07 01:40:08 ----HDC---- D:\WINDOWS\$NtUninstallKB956572$
2010-10-07 01:40:02 ----HDC---- D:\WINDOWS\$NtUninstallKB2347290$
2010-10-07 01:39:58 ----HDC---- D:\WINDOWS\$NtUninstallKB956844$
2010-10-07 01:39:52 ----HDC---- D:\WINDOWS\$NtUninstallKB981852$
2010-10-07 01:39:47 ----HDC---- D:\WINDOWS\$NtUninstallKB961501$
2010-10-07 01:39:43 ----HDC---- D:\WINDOWS\$NtUninstallKB2079403$
2010-10-07 01:39:40 ----HDC---- D:\WINDOWS\$NtUninstallKB2121546$
2010-10-07 01:39:36 ----HDC---- D:\WINDOWS\$NtUninstallKB973869$
2010-10-07 01:39:32 ----HDC---- D:\WINDOWS\$NtUninstallKB975025$
2010-10-07 01:39:28 ----HDC---- D:\WINDOWS\$NtUninstallKB982802$
2010-10-07 01:39:23 ----HDC---- D:\WINDOWS\$NtUninstallKB952004$
2010-10-07 01:39:19 ----HDC---- D:\WINDOWS\$NtUninstallKB974571$
2010-10-07 01:39:15 ----HDC---- D:\WINDOWS\$NtUninstallKB975560$
2010-10-07 01:39:11 ----HDC---- D:\WINDOWS\$NtUninstallKB973507$
2010-10-07 01:39:07 ----HDC---- D:\WINDOWS\$NtUninstallKB2160329$
2010-10-07 01:39:03 ----HDC---- D:\WINDOWS\$NtUninstallKB977816$
2010-10-07 01:38:59 ----HDC---- D:\WINDOWS\$NtUninstallKB950762$
2010-10-07 01:38:55 ----HDC---- D:\WINDOWS\$NtUninstallKB978601$
2010-10-07 01:38:51 ----HDC---- D:\WINDOWS\$NtUninstallKB980436$
2010-10-07 01:38:47 ----HDC---- D:\WINDOWS\$NtUninstallKB981322$
2010-10-07 01:38:44 ----HDC---- D:\WINDOWS\$NtUninstallKB952287$
2010-10-07 01:38:40 ----HDC---- D:\WINDOWS\$NtUninstallKB978695_WM9$
2010-10-07 01:38:36 ----HDC---- D:\WINDOWS\$NtUninstallKB973904$
2010-10-07 01:38:31 ----HDC---- D:\WINDOWS\$NtUninstallKB967715$
2010-10-07 01:38:26 ----HDC---- D:\WINDOWS\$NtUninstallKB973540_WM9$
2010-10-07 01:38:22 ----HDC---- D:\WINDOWS\$NtUninstallKB950760$
2010-10-07 01:38:18 ----HDC---- D:\WINDOWS\$NtUninstallKB974392$
2010-10-07 01:38:12 ----HDC---- D:\WINDOWS\$NtUninstallKB954459$
2010-10-07 01:38:08 ----HDC---- D:\WINDOWS\$NtUninstallKB952069_WM9$
2010-10-07 01:38:03 ----HDC---- D:\WINDOWS\$NtUninstallKB977914$
2010-10-07 01:37:58 ----HDC---- D:\WINDOWS\$NtUninstallKB951748$
2010-10-07 01:37:54 ----HDC---- D:\WINDOWS\$NtUninstallKB978542$
2010-10-07 01:37:45 ----HDC---- D:\WINDOWS\$NtUninstallKB2286198$
2010-10-07 01:37:37 ----HDC---- D:\WINDOWS\$NtUninstallKB979309$
2010-10-07 01:37:33 ----HDC---- D:\WINDOWS\$NtUninstallKB979482$
2010-10-07 01:37:30 ----HDC---- D:\WINDOWS\$NtUninstallKB978706$
2010-10-07 01:37:16 ----HDC---- D:\WINDOWS\$NtUninstallKB981997$
2010-10-07 01:37:04 ----HDC---- D:\WINDOWS\$NtUninstallKB960803$
2010-10-07 01:36:59 ----HDC---- D:\WINDOWS\$NtUninstallKB973815$
2010-10-07 01:36:55 ----HDC---- D:\WINDOWS\$NtUninstallKB975562$
2010-10-07 01:36:51 ----HDC---- D:\WINDOWS\$NtUninstallKB958644$
2010-10-07 01:36:47 ----HDC---- D:\WINDOWS\$NtUninstallKB956802$
2010-10-07 01:36:43 ----HDC---- D:\WINDOWS\$NtUninstallKB2158563$
2010-10-07 01:36:35 ----HDC---- D:\WINDOWS\$NtUninstallKB982665$
2010-10-07 01:36:30 ----HDC---- D:\WINDOWS\$NtUninstallKB923561$
2010-10-07 01:36:26 ----HDC---- D:\WINDOWS\$NtUninstallKB971961$
2010-10-07 01:36:22 ----HDC---- D:\WINDOWS\$NtUninstallKB975467$
2010-10-07 01:36:15 ----HDC---- D:\WINDOWS\$NtUninstallKB968389$
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\Oemdspif.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\drivers\ati2mtag.sys
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\drivers\ati2erec.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ativvaxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ativcoxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atitvo32.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atipdlxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atiok3x2.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atioglxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ATIODE.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ATIODCLI.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atimpc32.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atikvmag.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atiiiexx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ATIDEMGX.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ATIDDC.DLL
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\aticalrt.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\aticaldd.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\aticalcl.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atibtmon.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atiapfxx.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\atiadlxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati3duag.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\Ati2mdxx.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati2evxx.exe
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati2evxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati2edxx.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati2dvag.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\ati2cqag.dll
2010-10-07 01:34:53 ----A---- D:\WINDOWS\system32\amdpcom32.dll
2010-10-07 01:34:30 ----D---- D:\Program Files\ATI Technologies
2010-10-07 01:34:27 ----D---- D:\Program Files\ATI
2010-10-07 01:33:45 ----D---- D:\ATI
2010-10-07 01:33:00 ----N---- D:\WINDOWS\system32\drivers\bthport.sys
2010-10-07 01:24:10 ----N---- D:\WINDOWS\system32\browserchoice.exe
2010-10-07 01:17:50 ----A---- D:\WINDOWS\system32\xpsp4res.dll
2010-10-07 01:16:16 ----D---- D:\WINDOWS\system32\PreInstall
2010-10-07 01:16:15 ----N---- D:\WINDOWS\system32\spmsg.dll
2010-10-07 01:16:15 ----A---- D:\WINDOWS\system32\spupdsvc.exe
2010-10-07 01:16:14 ----HDC---- D:\WINDOWS\$NtUninstallKB898461$
2010-10-07 01:16:14 ----HD---- D:\WINDOWS\$hf_mig$
2010-10-07 01:15:50 ----D---- D:\Documents and Settings\Administrator\Application Data\Mozilla
2010-10-07 01:15:43 ----SHD---- D:\RECYCLER
2010-10-07 01:15:38 ----D---- D:\Program Files\Mozilla Firefox
2010-10-07 01:12:51 ----D---- D:\Program Files\ESET
2010-10-07 01:12:51 ----D---- D:\Documents and Settings\All Users\Application Data\ESET
2010-10-07 01:09:30 ----A---- D:\WINDOWS\system32\drivers\AegisP.sys
2010-10-07 01:09:24 ----D---- D:\Program Files\uTorrent
2010-10-07 01:09:24 ----A---- D:\WINDOWS\system32\drivers\rt73.sys
2010-10-07 01:09:23 ----DC---- D:\WINDOWS\system32\DRVSTORE
2010-10-07 01:09:20 ----HD---- D:\Program Files\InstallShield Installation Information
2010-10-07 01:09:20 ----D---- D:\Program Files\RALINK
2010-10-07 01:09:18 ----D---- D:\Documents and Settings\Administrator\Application Data\uTorrent
2010-10-07 01:09:02 ----D---- D:\Documents and Settings\Administrator\Application Data\InstallShield
2010-10-07 01:06:37 ----D---- D:\Documents and Settings\Administrator\Application Data\Identities
2010-10-07 01:06:36 ----HD---- D:\Program Files\Uninstall Information
2010-10-07 01:06:31 ----SD---- D:\Documents and Settings\Administrator\Application Data\Microsoft
2010-10-07 01:06:31 ----ASH---- D:\Documents and Settings\Administrator\Application Data\desktop.ini
2010-10-07 01:06:11 ----D---- D:\WINDOWS\SoftwareDistribution
2010-10-07 01:06:10 ----D---- D:\WINDOWS\Prefetch
2010-10-07 01:06:09 ----SD---- D:\WINDOWS\system32\Microsoft
2010-10-07 01:06:09 ----A---- D:\WINDOWS\SchedLgU.Txt
2010-10-07 01:06:07 ----D---- D:\WINDOWS\system32\SoftwareDistribution
2010-10-07 01:00:43 ----D---- D:\WINDOWS\system32\xircom
2010-10-07 01:00:43 ----D---- D:\Program Files\xerox
2010-10-07 01:00:43 ----D---- D:\Program Files\microsoft frontpage
2010-10-07 01:00:26 ----A---- D:\WINDOWS\control.ini
2010-10-07 01:00:11 ----A---- D:\WINDOWS\OEWABLog.txt
2010-10-07 01:00:08 ----A---- D:\WINDOWS\system32\mapi32.dll
2010-10-07 00:59:23 ----SD---- D:\WINDOWS\Downloaded Program Files
2010-10-07 00:59:23 ----RD---- D:\WINDOWS\Offline Web Pages
2010-10-07 00:59:23 ----RAH---- D:\WINDOWS\system32\logonui.exe.manifest
2010-10-07 00:59:18 ----RAH---- D:\WINDOWS\system32\cdplayer.exe.manifest
2010-10-07 00:59:14 ----HD---- D:\Program Files\WindowsUpdate
2010-10-07 00:58:53 ----D---- D:\WINDOWS\system32\DirectX
2010-10-07 00:58:47 ----A---- D:\WINDOWS\system32\atrace.dll
2010-10-07 00:58:44 ----A---- D:\WINDOWS\system32\desktop.ini
2010-10-07 00:58:44 ----A---- D:\WINDOWS\desktop.ini
2010-10-07 00:58:36 ----A---- D:\WINDOWS\system32\nmevtmsg.dll
2010-10-07 00:58:35 ----A---- D:\WINDOWS\system32\acctres.dll
2010-10-07 00:58:34 ----D---- D:\Program Files\Common Files\Services
2010-10-07 00:58:31 ----SD---- D:\WINDOWS\Tasks
2010-10-07 00:58:31 ----A---- D:\WINDOWS\system32\icfgnt5.dll
2010-10-07 00:58:30 ----D---- D:\Program Files\Common Files\MSSoap
2010-10-07 00:58:26 ----D---- D:\WINDOWS\srchasst
2010-10-07 00:58:25 ----D---- D:\WINDOWS\system32\Macromed
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuweb.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wups.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wucltui.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuauserv.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuaueng1.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuaueng.dll
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuauclt1.exe
2010-10-07 00:58:21 ----A---- D:\WINDOWS\system32\wuauclt.exe
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\wuapi.dll
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\qmgrprxy.dll
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\qmgr.dll
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\bitsprx4.dll
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\bitsprx3.dll
2010-10-07 00:58:20 ----A---- D:\WINDOWS\system32\bitsprx2.dll
2010-10-07 00:58:16 ----D---- D:\Program Files\Movie Maker
2010-10-07 00:57:55 ----A---- D:\WINDOWS\system32\safrslv.dll
2010-10-07 00:57:55 ----A---- D:\WINDOWS\system32\safrdm.dll
2010-10-07 00:57:55 ----A---- D:\WINDOWS\system32\safrcdlg.dll
2010-10-07 00:57:55 ----A---- D:\WINDOWS\system32\racpldlg.dll
2010-10-07 00:57:51 ----D---- D:\WINDOWS\system32\Restore
2010-10-07 00:57:51 ----A---- D:\WINDOWS\system32\srsvc.dll
2010-10-07 00:57:51 ----A---- D:\WINDOWS\system32\srrstr.dll
2010-10-07 00:57:51 ----A---- D:\WINDOWS\system32\fltMc.exe
2010-10-07 00:57:51 ----A---- D:\WINDOWS\system32\fltlib.dll
2010-10-07 00:57:51 ----A---- D:\WINDOWS\system32\drivers\fltMgr.sys
2010-10-07 00:57:50 ----A---- D:\WINDOWS\system32\srclient.dll
2010-10-07 00:57:50 ----A---- D:\WINDOWS\system32\isrdbg32.dll
2010-10-07 00:57:50 ----A---- D:\WINDOWS\system32\ils.dll
2010-10-07 00:57:50 ----A---- D:\WINDOWS\system32\drivers\sr.sys
2010-10-07 00:57:49 ----A---- D:\WINDOWS\system32\nmmkcert.dll
2010-10-07 00:57:49 ----A---- D:\WINDOWS\system32\msconf.dll
2010-10-07 00:57:49 ----A---- D:\WINDOWS\system32\mnmsrvc.exe
2010-10-07 00:57:49 ----A---- D:\WINDOWS\system32\mnmdd.dll
2010-10-07 00:57:46 ----D---- D:\Program Files\NetMeeting
2010-10-07 00:57:46 ----A---- D:\WINDOWS\system32\msoert2.dll
2010-10-07 00:57:46 ----A---- D:\WINDOWS\system32\msoeacct.dll
2010-10-07 00:57:45 ----A---- D:\WINDOWS\system32\inetres.dll
2010-10-07 00:57:44 ----A---- D:\WINDOWS\system32\inetcomm.dll
2010-10-07 00:57:42 ----D---- D:\Program Files\Outlook Express
2010-10-07 00:57:42 ----A---- D:\WINDOWS\system32\schedsvc.dll
2010-10-07 00:57:42 ----A---- D:\WINDOWS\system32\mstinit.exe
2010-10-07 00:57:42 ----A---- D:\WINDOWS\system32\mstask.dll
2010-10-07 00:57:41 ----A---- D:\WINDOWS\system32\isign32.dll
2010-10-07 00:57:41 ----A---- D:\WINDOWS\system32\inetcfg.dll
2010-10-07 00:57:41 ----A---- D:\WINDOWS\system32\icwphbk.dll
2010-10-07 00:57:41 ----A---- D:\WINDOWS\system32\icwdial.dll
2010-10-07 00:57:34 ----D---- D:\Program Files\Common Files\System
2010-10-07 00:57:33 ----D---- D:\Program Files\Internet Explorer
2010-10-07 00:57:03 ----D---- D:\Program Files\ComPlus Applications
2010-10-07 00:57:01 ----A---- D:\WINDOWS\vbaddin.ini
2010-10-07 00:57:01 ----A---- D:\WINDOWS\vb.ini
2010-10-07 00:56:56 ----D---- D:\WINDOWS\Registration
2010-10-07 00:56:49 ----D---- D:\Program Files\Windows Media Player
2010-10-07 00:56:49 ----D---- D:\Program Files\Online Services
2010-10-07 00:56:43 ----D---- D:\Program Files\Messenger
2010-10-07 00:56:39 ----D---- D:\Program Files\MSN Gaming Zone
2010-10-07 00:56:39 ----A---- D:\WINDOWS\system32\write.exe
2010-10-07 00:56:28 ----A---- D:\WINDOWS\system32\sndvol32.exe
2010-10-07 00:56:28 ----A---- D:\WINDOWS\system32\hticons.dll
2010-10-07 00:56:28 ----A---- D:\WINDOWS\system32\avwav.dll
2010-10-07 00:56:28 ----A---- D:\WINDOWS\system32\avmeter.dll
2010-10-07 00:56:27 ----A---- D:\WINDOWS\system32\winchat.exe
2010-10-07 00:56:27 ----A---- D:\WINDOWS\system32\avtapi.dll
2010-10-07 00:56:19 ----A---- D:\WINDOWS\system32\getuname.dll
2010-10-07 00:56:18 ----A---- D:\WINDOWS\system32\sol.exe
2010-10-07 00:56:18 ----A---- D:\WINDOWS\system32\charmap.exe
2010-10-07 00:56:18 ----A---- D:\WINDOWS\system32\calc.exe
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\winmine.exe
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\usrlogon.cmd
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\tskill.exe
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\reset.exe
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\mshearts.exe
2010-10-07 00:56:17 ----A---- D:\WINDOWS\system32\freecell.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\tsshutdn.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\tslabels.ini
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\tsdiscon.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\tscon.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\shadow.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\rwinsta.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\regini.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\rdpcfgex.dll
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\qwinsta.exe
2010-10-07 00:56:16 ----A---- D:\WINDOWS\system32\qappsrv.exe
2010-10-07 00:56:15 ----A---- D:\WINDOWS\system32\msg.exe
2010-10-07 00:56:15 ----A---- D:\WINDOWS\system32\msdtcprf.ini
2010-10-07 00:56:15 ----A---- D:\WINDOWS\system32\logoff.exe
2010-10-07 00:56:15 ----A---- D:\WINDOWS\system32\cdmodem.dll
2010-10-07 00:56:08 ----A---- D:\WINDOWS\system32\wmimgmt.msc
2010-10-07 00:55:59 ----D---- D:\Program Files\MSN
2010-10-07 00:55:58 ----A---- D:\WINDOWS\system32\sndrec32.exe
2010-10-07 00:55:58 ----A---- D:\WINDOWS\system32\accwiz.exe
2010-10-07 00:55:57 ----D---- D:\Program Files\Windows NT
2010-10-07 00:55:57 ----A---- D:\WINDOWS\system32\mplay32.exe
2010-10-07 00:55:57 ----A---- D:\WINDOWS\system32\hypertrm.dll
2010-10-07 00:55:56 ----A---- D:\WINDOWS\system32\spider.exe
2010-10-07 00:55:56 ----A---- D:\WINDOWS\system32\mspaint.exe
2010-10-07 00:55:56 ----A---- D:\WINDOWS\system32\clipbrd.exe
2010-10-07 00:55:55 ----D---- D:\WINDOWS\system32\en-US
2010-10-07 00:55:55 ----A---- D:\WINDOWS\system32\tscfgwmi.dll
2010-10-07 00:55:55 ----A---- D:\WINDOWS\system32\drivers\tdtcp.sys
2010-10-07 00:55:55 ----A---- D:\WINDOWS\system32\drivers\tdpipe.sys
2010-10-07 00:55:55 ----A---- D:\WINDOWS\system32\drivers\rdpwd.sys
2010-10-07 00:55:54 ----A---- D:\WINDOWS\system32\tsgqec.dll
2010-10-07 00:55:54 ----A---- D:\WINDOWS\system32\rhttpaa.dll
2010-10-07 00:55:54 ----A---- D:\WINDOWS\system32\aaclient.dll
2010-10-07 00:55:53 ----A---- D:\WINDOWS\system32\remotepg.dll
2010-10-07 00:55:53 ----A---- D:\WINDOWS\system32\rdsaddin.exe
2010-10-07 00:55:53 ----A---- D:\WINDOWS\system32\mstscax.dll
2010-10-07 00:55:53 ----A---- D:\WINDOWS\system32\mstsc.exe
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\termsrv.dll
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\sessmgr.exe
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\rdshost.exe
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\rdpwsx.dll
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\rdpsnd.dll
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\rdpclip.exe
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\rdchost.dll
2010-10-07 00:55:52 ----A---- D:\WINDOWS\system32\qprocess.exe
2010-10-07 00:55:51 ----D---- D:\WINDOWS\system32\MsDtc
2010-10-07 00:55:51 ----A---- D:\WINDOWS\system32\mtxoci.dll
2010-10-07 00:55:51 ----A---- D:\WINDOWS\system32\msdtcuiu.dll
2010-10-07 00:55:51 ----A---- D:\WINDOWS\system32\msdtcprx.dll
2010-10-07 00:55:51 ----A---- D:\WINDOWS\system32\icaapi.dll
2010-10-07 00:55:51 ----A---- D:\WINDOWS\system32\cfgbkend.dll
2010-10-07 00:55:50 ----A---- D:\WINDOWS\system32\xolehlp.dll
2010-10-07 00:55:50 ----A---- D:\WINDOWS\system32\msdtctm.dll
2010-10-07 00:55:50 ----A---- D:\WINDOWS\system32\msdtclog.dll
2010-10-07 00:55:50 ----A---- D:\WINDOWS\system32\msdtc.exe
2010-10-07 00:55:49 ----D---- D:\WINDOWS\system32\Com
2010-10-07 00:55:49 ----A---- D:\WINDOWS\system32\mtxlegih.dll
2010-10-07 00:55:49 ----A---- D:\WINDOWS\system32\mtxex.dll
2010-10-07 00:55:49 ----A---- D:\WINDOWS\system32\mtxdm.dll
2010-10-07 00:55:49 ----A---- D:\WINDOWS\system32\dcomcnfg.exe
2010-10-07 00:55:49 ----A---- D:\WINDOWS\system32\colbact.dll
2010-10-07 00:55:48 ----A---- D:\WINDOWS\system32\stclient.dll
2010-10-07 00:55:48 ----A---- D:\WINDOWS\system32\comrepl.dll
2010-10-07 00:55:48 ----A---- D:\WINDOWS\system32\comaddin.dll
2010-10-07 00:55:48 ----A---- D:\WINDOWS\system32\clbcatex.dll
2010-10-07 00:55:48 ----A---- D:\WINDOWS\system32\catsrvps.dll
2010-10-07 00:55:47 ----A---- D:\WINDOWS\system32\comuid.dll
2010-10-07 00:55:47 ----A---- D:\WINDOWS\system32\comsvcs.dll
2010-10-07 00:55:47 ----A---- D:\WINDOWS\system32\comsnap.dll
2010-10-07 00:55:47 ----A---- D:\WINDOWS\system32\catsrvut.dll
2010-10-07 00:55:47 ----A---- D:\WINDOWS\system32\catsrv.dll
2010-10-07 00:55:46 ----A---- D:\WINDOWS\system32\clbcatq.dll
2010-10-07 00:55:40 ----A---- D:\WINDOWS\system32\servdeps.dll
2010-10-07 00:55:39 ----A---- D:\WINDOWS\system32\mmfutil.dll
2010-10-07 00:55:39 ----A---- D:\WINDOWS\system32\licwmi.dll
2010-10-07 00:55:39 ----A---- D:\WINDOWS\system32\cmprops.dll
2010-10-07 00:55:36 ----A---- D:\WINDOWS\system32\drivers\rdpdr.sys
2010-10-07 00:55:35 ----A---- D:\WINDOWS\system32\drivers\termdd.sys
2010-10-06 20:53:03 ----A---- D:\WINDOWS\system32\drivers\audstub.sys
2010-10-06 20:50:50 ----A---- D:\WINDOWS\system32\drivers\redbook.sys
2010-10-06 20:50:11 ----A---- D:\WINDOWS\system32\usbui.dll
2010-10-06 20:49:13 ----A---- D:\WINDOWS\imsins.BAK
2010-10-06 20:49:10 ----SHD---- D:\WINDOWS\Installer
2010-10-06 20:49:10 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2010-10-06 20:49:09 ----D---- D:\Program Files\Common Files\ODBC
2010-10-06 20:49:09 ----A---- D:\WINDOWS\ODBCINST.INI
2010-10-06 20:49:06 ----D---- D:\Program Files\Common Files\SpeechEngines
2010-10-06 20:49:05 ----RD---- D:\Program Files
2010-10-06 20:49:05 ----D---- D:\Program Files\Common Files\Microsoft Shared
2010-10-06 20:49:05 ----D---- D:\Program Files\Common Files
2010-10-06 20:49:02 ----RA---- D:\WINDOWS\system32\kbdtuq.dll
2010-10-06 20:49:02 ----RA---- D:\WINDOWS\system32\kbdazel.dll
2010-10-06 20:49:01 ----RA---- D:\WINDOWS\system32\kbdtuf.dll
2010-10-06 20:49:00 ----RA---- D:\WINDOWS\system32\kbdkyr.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdycc.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbduzb.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdur.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdtat.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdru1.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdru.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdmon.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdkaz.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdbu.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdblr.dll
2010-10-06 20:48:59 ----RA---- D:\WINDOWS\system32\kbdaze.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdhept.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdhela3.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdhela2.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdhe319.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdhe220.dll
2010-10-06 20:48:57 ----RA---- D:\WINDOWS\system32\kbdgkl.dll
2010-10-06 20:48:56 ----RA---- D:\WINDOWS\system32\kbdhe.dll
2010-10-06 20:48:55 ----RA---- D:\WINDOWS\system32\kbdlv1.dll
2010-10-06 20:48:55 ----RA---- D:\WINDOWS\system32\kbdlv.dll
2010-10-06 20:48:55 ----RA---- D:\WINDOWS\system32\kbdlt1.dll
2010-10-06 20:48:55 ----RA---- D:\WINDOWS\system32\kbdlt.dll
2010-10-06 20:48:55 ----RA---- D:\WINDOWS\system32\kbdest.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdsl1.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdsl.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdro.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdpl1.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdpl.dll
2010-10-06 20:48:53 ----RA---- D:\WINDOWS\system32\kbdhu1.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdycl.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdhu.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdcz2.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdcz1.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdcz.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\kbdcr.dll
2010-10-06 20:48:52 ----RA---- D:\WINDOWS\system32\KBDAL.DLL
2010-10-06 20:48:47 ----A---- D:\WINDOWS\system32\irclass.dll
2010-10-06 20:48:46 ----A---- D:\WINDOWS\system32\spxcoins.dll
2010-10-06 20:48:46 ----A---- D:\WINDOWS\system32\EqnClass.Dll
2010-10-06 20:48:46 ----A---- D:\WINDOWS\system32\dgsetup.dll
2010-10-06 20:48:46 ----A---- D:\WINDOWS\system32\dgrpsetu.dll
2010-10-06 20:48:43 ----N---- D:\WINDOWS\system32\CONFIG.TMP
2010-10-06 20:48:43 ----A---- D:\WINDOWS\TASKMAN.EXE
2010-10-06 20:48:43 ----A---- D:\WINDOWS\system32\drivers\irenum.sys
2010-10-06 20:48:43 ----A---- D:\WINDOWS\system32\batt.dll
2010-10-06 20:48:42 ----A---- D:\WINDOWS\NOTEPAD.EXE
2010-10-06 20:48:41 ----A---- D:\WINDOWS\system32\storprop.dll
2010-10-06 20:48:34 ----ASH---- D:\Documents and Settings\All Users\Application Data\desktop.ini
2010-10-06 20:48:31 ----RA---- D:\WINDOWS\SET8.tmp
2010-10-06 20:48:28 ----RA---- D:\WINDOWS\SET4.tmp
2010-10-06 20:48:27 ----RA---- D:\WINDOWS\SET3.tmp
2010-10-06 20:48:21 ----D---- D:\WINDOWS\system32\CatRoot2
2010-10-06 20:48:21 ----D---- D:\WINDOWS\system32\CatRoot
2010-10-06 20:48:16 ----SD---- D:\Documents and Settings\All Users\Application Data\Microsoft
2010-10-06 20:47:54 ----A---- D:\WINDOWS\setuplog.txt
2010-10-06 20:47:50 ----SHD---- D:\System Volume Information
2010-10-06 20:47:50 ----D---- D:\Documents and Settings
2010-10-06 20:42:16 ----RSHDC---- D:\WINDOWS\system32\dllcache
2010-10-06 20:42:16 ----RSD---- D:\WINDOWS\Fonts
2010-10-06 20:42:16 ----RD---- D:\WINDOWS\Web
2010-10-06 20:42:16 ----HD---- D:\WINDOWS\inf
2010-10-06 20:42:16 ----D---- D:\WINDOWS\WinSxS
2010-10-06 20:42:16 ----D---- D:\WINDOWS\twain_32
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Temp
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\wins
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\wbem
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\usmt
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\spool
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\ShellExt
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\Setup
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\scripting
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\ras
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\oobe
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\npp
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\mui
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\inetsrv
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\IME
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\icsxml
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\ias
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\export
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\en
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\drivers\etc
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\drivers\disdn
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\drivers
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\dhcp
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\config
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\3com_dmi
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\3076
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\2052
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1054
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1042
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1041
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1037
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1033
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1031
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1028
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32\1025
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system32
2010-10-06 20:42:16 ----D---- D:\WINDOWS\system
2010-10-06 20:42:16 ----D---- D:\WINDOWS\security
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Resources
2010-10-06 20:42:16 ----D---- D:\WINDOWS\repair
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Provisioning
2010-10-06 20:42:16 ----D---- D:\WINDOWS\pchealth
2010-10-06 20:42:16 ----D---- D:\WINDOWS\PeerNet
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Network Diagnostic
2010-10-06 20:42:16 ----D---- D:\WINDOWS\mui
2010-10-06 20:42:16 ----D---- D:\WINDOWS\msapps
2010-10-06 20:42:16 ----D---- D:\WINDOWS\msagent
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Media
2010-10-06 20:42:16 ----D---- D:\WINDOWS\L2Schemas
2010-10-06 20:42:16 ----D---- D:\WINDOWS\java
2010-10-06 20:42:16 ----D---- D:\WINDOWS\ime
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Help
2010-10-06 20:42:16 ----D---- D:\WINDOWS\ehome
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Driver Cache
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Debug
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Cursors
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Connection Wizard
2010-10-06 20:42:16 ----D---- D:\WINDOWS\Config
2010-10-06 20:42:16 ----D---- D:\WINDOWS\AppPatch
2010-10-06 20:42:16 ----D---- D:\WINDOWS\addins
2010-10-06 20:42:16 ----D---- D:\WINDOWS
2010-10-06 20:42:16 ----ASH---- D:\pagefile.sys

======List of files/folders modified in the last 1 months======

2010-10-08 14:35:38 ----A---- D:\WINDOWS\win.ini
2010-10-07 20:33:39 ----A---- D:\WINDOWS\system.ini
2010-10-07 00:59:57 ----ASH---- D:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; D:\WINDOWS\system32\DRIVERS\nvata.sys [2005-08-18 93568]
R0 PxHelp20;PxHelp20; D:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R1 AmdK8;AMD Processor Driver; D:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 ehdrv;ehdrv; D:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir; D:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; D:\WINDOWS\system32\DRIVERS\AegisP.sys [2010-10-07 21419]
R2 eamon;eamon; D:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); D:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-08-26 5386752]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; D:\WINDOWS\system32\drivers\AtiHdmi.sys [2007-07-20 84992]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Mouse HID Driver; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2007-02-18 12160]
R3 nvnetbus;NVIDIA Network Bus Enumerator; D:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 RT73;RT73 USB Wireless LAN Card Driver; D:\WINDOWS\system32\DRIVERS\rt73.sys [2007-07-28 451456]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; D:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
S3 usbstor;USB Mass Storage Driver; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2010-08-26 606208]
R2 ekrn;ESET Service; D:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 UMWdf;Windows User Mode Driver Framework; D:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 EhttpSrv;ESET HTTP Server; D:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

Zdravim a pekne pdpoledne preji
Vas log se studuje a pracuje se na nem .
Prosim o strpeni!

Prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti)

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

• Pokud ho havet blokuje, pouzijte jeden z nasledujicich

  motji píše: Rkill EXE:
  http://download.bleepingcomputer.com/grinler/rkill.exe
  
  Rkill SCR:
  http://download.bleepingcomputer.com/grinler/rkill.scr
  
  Rkill PIF:
  http://download.bleepingcomputer.com/grinler/rkill.pif

• Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
• Spustte tradicne dvojklikem - program probehne temer okamzite a ukonci i svou cinnost
• RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
• V zadnem pripade ted nerestartujte PC - prisli byste o ucinek RKillu

Stahnete OTM (viz muj podpis)

• Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
• Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

• Kód: Vybrat vše

  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
  "696359749"=-
  
  :files
  D:\DOCUME~1\ADMINI~1\LOCALS~1\APPLIC~1\696359749.exe
  D:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe
  D:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\
  D:\WINDOWS\tasks\Acrobat Update.job
  D:\WINDOWS\tasks\PPNHYGJDH.job
  %windir%\system32\*.tmp.dll /s
  %windir%\system32\SET*.tmp /s
  %windir%\*.tmp /s
  
  :commands
  [RESETHOSTS]
  [EMPTYTEMP]
  [EMPTYFLASH]
  [CLEARALLRESTOREPOINTS]

• Kliknete na cervene tlacitko MoveIt!
• Sem pote dejte obsah okna Results (pod zelenou carou)
• Pokud budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles

Pak znovu nouzovy rezim a RKill

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)

• Provedte aktualizaci - treti zalozka
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni