Prosím preventívně o kontrolu logu.

Zpráva

lybbor · #1 Příspěvek od **lybbor** » 09 pro 2010 15:30

Dobrý den.Někdy mi nenaskočí domovská stránka ale poslední prohlížená stránka.Také musím po nastartování PC zapnout automatické aktualizace vždy po vypnutí PC se nastaví do vypnuto.
prosím o radu a kontrolu logu Děkuji

Logfile of random's system information tool 1.06 (written by random/random)
Run by WarezBos at 2010-12-09 15:26:43
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 48 GB (63%) free of 76 GB
Total RAM: 1023 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:26:50, on 9.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\windows\nvsvc32.exe
C:\Program Files\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\Programy\RSIT.exe
C:\Program Files\trend micro\WarezBos.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = 78.45.124.192
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\WarezBos\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\WarezBos\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NVIDIA driver monitor] c:\windows\nvsvc32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [NVIDIA driver monitor] c:\windows\nvsvc32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [PackNoVs] "C:\WINDOWS\Packs\Crystal XP\PackSys.exe" --unsetvs (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [PackNoVs] "C:\WINDOWS\Packs\Crystal XP\PackSys.exe" --unsetvs (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [PackNoVs] "C:\WINDOWS\Packs\Crystal XP\PackSys.exe" --unsetvs (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [PackNoVs] "C:\WINDOWS\Packs\Crystal XP\PackSys.exe" --unsetvs (User 'Default user')
O4 - S-1-5-18 Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (User 'Default user')
O4 - .DEFAULT User Startup: Y'z Toolbar.lnk = ? (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra 'Tools' menuitem: Nastavení aplikace &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 9822 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\WarezBos\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
aTube Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}]
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll [2010-02-23 2121728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-15 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-12-09 958200]
{D4027C7F-154A-4066-A1AD-4243D8127440} - aTube Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-05-26 1385864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-07-07 1753192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-07-09 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-07-09 13923432]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-03-31 2145000]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"CmPCIaudio"=RunDll32 CMICNFG3.cpl,CMICtrlWnd []
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2007-09-25 93208]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2008-11-02 167936]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2007-06-29 286720]
"NVIDIA driver monitor"=c:\windows\nvsvc32.exe [2010-12-05 65024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2009-01-09 2262352]
"NVIDIA driver monitor"=c:\windows\nvsvc32.exe [2010-12-05 65024]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe

C:\Documents and Settings\WarezBos\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoResolveSearch"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\rFactor\rFactor.exe"="C:\Program Files\rFactor\rFactor.exe:*:Enabled:rFactor"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\rFactor\rFactor Dedicated.exe"="C:\Program Files\rFactor\rFactor Dedicated.exe:*:Enabled:rFactor"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Edisk\eDisk klient\eDisk klient.exe"="C:\Program Files\Edisk\eDisk klient\eDisk klient.exe:*:Enabled:eDisk klient"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe"="C:\Program Files\DsNET Corp\aTube Catcher 2.0\yct.exe:*:Enabled:aTube Catcher to download and convert videos."
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Enabled:CoDMP"
"D:\Foto Libor\ja\n11975310_09.JPG-www.facebook.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-12-09 15:26:43 ----D---- C:\rsit
2010-12-09 15:26:43 ----D---- C:\Program Files\trend micro
2010-12-05 15:09:10 ----RSH---- C:\WINDOWS\nvsvc32.exe
2010-12-04 12:35:26 ----D---- C:\Program Files\Call of Duty
2010-12-04 12:27:43 ----A---- C:\WINDOWS\CoD.INI
2010-12-04 07:53:43 ----D---- C:\Program Files\I.CA
2010-11-18 20:48:02 ----HD---- C:\WINDOWS\system32\GroupPolicy

======List of files/folders modified in the last 1 months======

2010-12-09 15:26:49 ----D---- C:\WINDOWS\Prefetch
2010-12-09 15:26:43 ----D---- C:\WINDOWS\Temp
2010-12-09 15:26:43 ----D---- C:\Program Files
2010-12-09 15:01:05 ----SHD---- C:\WINDOWS\Installer
2010-12-09 15:01:04 ----D---- C:\Program Files\Ask.com
2010-12-09 15:01:04 ----D---- C:\Config.Msi
2010-12-08 22:25:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-08 16:21:53 ----D---- C:\WINDOWS
2010-12-06 21:51:57 ----A---- C:\WINDOWS\wincmd.ini
2010-12-06 21:51:32 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-12-04 12:33:47 ----D---- C:\WINDOWS\system32
2010-11-30 07:46:58 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\Skype
2010-11-30 07:46:44 ----D---- C:\Documents and Settings\WarezBos\Data aplikací\skypePM
2010-11-18 22:00:48 ----D---- C:\WINDOWS\security
2010-11-13 20:01:13 ----D---- C:\Program Files\ICQ6.5
2010-11-10 07:14:01 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-03-31 114984]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-03-31 95872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2008-11-02 56572]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-03-31 140216]
R3 cmuda3;C-Media PCI Audio Interface; C:\WINDOWS\system32\drivers\cmudax3.sys [2009-03-18 1512960]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-07-09 10604128]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-02-24 162176]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys [2005-01-05 6912]
R3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys [2005-06-06 11264]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2007-09-14 19352]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2007-09-14 29976]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2007-09-14 29208]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2007-09-14 51608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-07-16 379726]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 viafilter;VIA USB Filter; C:\WINDOWS\System32\Drivers\viausb1.sys [2001-09-19 9728]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2007-09-14 14744]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-03-31 810120]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-07-09 155752]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-22 136176]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-08-27 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-03-31 33560]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 09 pro 2010 15:35

Zdravim a pekny den preji

Tam je haveti

Vzhledem k tomu, ze pouzivate nelegalni SW Obrázek

se nedivim, ze jste navstevnikem naseho fora

Dle pravidel fora (viz zde a a zde bod c.3 ) se vsak nelegalnim SW nezabyvame, jelikoz nelegalni programy jsou vetsinou zdrojem haveti. Navic tim porusujete i autorska prava Obrázek

, pachate trestny cin a ten jako takovy nebude nasim forem podporovan. Uvedomte si, ze jste na bezpecnostnim foru - podpora warezu (zvlaste bezpecnostnich programu) by byla zcela proti logice fora

Obstarejte si proto legalni ochranu Vaseho PC (antivir+firewall), pote sem vlozte novy log z RSITu a CKScanneru - viz nize.

Osobne Vam doporucuji kombinaci Avast+ZoneAlarm. Prehled antiviru mate ZDE a firewallu TADY.

Log z RSITu - viz muj podpis

Stahnete na plochu CKScanner

Spustte a kliknete na Search for files
Po dokonceni skenu kliknete na Save List to File a nasledne OK
Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte

lybbor · #3 Příspěvek od **lybbor** » 09 pro 2010 17:05

Pardon WIN jsem zakoupil i z počítačem a mám ho 3 roky a jel bez problému aktualizace fungovali i ověření pravosti windowsu.Teprve asi před rokem mi nešla ověřit pravost.Nejsem si vědom že bych se něčeho dopustil.To jen na vysvětlenou.

#4 Příspěvek od **vyosek** » 09 pro 2010 17:06

Antivir mate take legalni

Nyni Vam jiz overeni pravosti funguje a bez problemu probehne

lybbor · #5 Příspěvek od **lybbor** » 09 pro 2010 17:17

Pravost mi nejde pořád ověřit.NOD32 mam na 30 dnu zkušební ale už propadla zkušební doba.Vše co mám v PC mi instaloval kolega.Co mám teda změnit odinstalovat a nainstalovat nově.Nechci mít problém a chci mít PC v pořádku.

#6 Příspěvek od **vyosek** » 09 pro 2010 17:18

Pokud Vam nejde overit pravost, tak asi i samotne windows nejsou legalni...

Odinstalujte cracknuty NOD, nainstalujte free reseni - Avast nebo Avira - viz vyse...

lybbor · #7 Příspěvek od **lybbor** » 11 pro 2010 21:46

Udělal jsem vše jak jste psal doufám že to mám v pořádku. Jenom se mi někdy sekne Mozila. Nevlezlo se mi to vše tady

Logfile of random's system information tool 1.06 (written by random/random)
Run by Tatik at 2010-12-11 21:42:17
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 57 GB (74%) free of 76 GB
Total RAM: 1023 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:42:25, on 11.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
D:\Programy\RSIT.exe
C:\Program Files\trend micro\Tatik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Tatik\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Tatik\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CmPCIaudio] RunDll32 CMICNFG3.CPL,CMICtrlWnd
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 1985722484
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

--
End of file - 7492 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\Tatik\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-10-25 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-12-10 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-12-10 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-07-07 1753192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-07-09 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-07-09 13923432]
"CmPCIaudio"=RunDll32 CMICNFG3.CPL,CMICtrlWnd []
"C-Media Mixer"=Mixer.exe /startup []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-11-30 281768]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-16 153608]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\Tatik\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\rFactor\rfactor.exe"="C:\Program Files\rFactor\rfactor.exe:*:Enabled:rFactor"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-12-11 21:42:17 ----D---- C:\rsit
2010-12-11 21:42:17 ----D---- C:\Program Files\trend micro
2010-12-11 17:07:52 ----N---- C:\WINDOWS\cmaudio.ini
2010-12-11 17:03:14 ----A---- C:\WINDOWS\CMMIXER.INI
2010-12-11 16:58:31 ----N---- C:\WINDOWS\setup.ini.nco
2010-12-11 16:58:31 ----N---- C:\WINDOWS\setup.ini
2010-12-11 16:58:30 ----N---- C:\WINDOWS\cmaudio.ini.nco
2010-12-11 16:58:30 ----D---- C:\Program Files\C-Media
2010-12-11 16:50:07 ----D---- C:\Program Files\Lavalys
2010-12-11 16:25:32 ----A---- C:\WINDOWS\system32\UDAPROP3.DLL
2010-12-11 16:25:31 ----A---- C:\WINDOWS\system32\CMUDA3.DLL
2010-12-11 16:25:31 ----A---- C:\WINDOWS\system32\CMRMDRV3.DLL
2010-12-11 16:25:30 ----A---- C:\WINDOWS\system32\AUDIO3D3.DLL
2010-12-11 16:06:57 ----A---- C:\WINDOWS\system32\RTSUSTORicon.dll
2010-12-10 23:41:45 ----D---- C:\Program Files\CCleaner
2010-12-10 23:39:41 ----D---- C:\Program Files\Realtek
2010-12-10 22:52:39 ----A---- C:\WINDOWS\IsUninst.exe
2010-12-10 22:49:04 ----A---- C:\WINDOWS\system32\vusetup.dll
2010-12-10 22:48:52 ----A---- C:\WINDOWS\IsUn0405.exe
2010-12-10 21:46:07 ----SHD---- C:\Config.Msi
2010-12-10 21:45:19 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-12-10 21:27:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-12-10 21:27:07 ----D---- C:\Program Files\Common Files\Java
2010-12-10 21:26:45 ----A---- C:\WINDOWS\system32\javaws.exe
2010-12-10 21:26:45 ----A---- C:\WINDOWS\system32\javaw.exe
2010-12-10 21:26:45 ----A---- C:\WINDOWS\system32\java.exe
2010-12-10 21:26:45 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-12-10 21:26:33 ----D---- C:\Program Files\Java
2010-12-10 21:26:09 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Sun
2010-12-10 20:16:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2010-12-10 20:12:28 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-12-10 20:06:47 ----D---- C:\Program Files\rFactor
2010-12-10 20:04:33 ----A---- C:\WINDOWS\system32\PAStiSvc.exe
2010-12-10 20:04:29 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2010-12-10 20:02:44 ----D---- C:\Program Files\Common Files\ArcSoft
2010-12-10 20:02:28 ----A---- C:\WINDOWS\PCDLIB32.DLL
2010-12-10 20:02:26 ----D---- C:\Program Files\ArcSoft
2010-12-10 20:00:35 ----D---- C:\WINDOWS\PixArt
2010-12-10 20:00:35 ----D---- C:\Program Files\Trust
2010-12-10 20:00:35 ----D---- C:\Program Files\Common Files\PCCamera
2010-12-10 20:00:21 ----D---- C:\WINDOWS\Downloaded Installations
2010-12-10 19:53:17 ----D---- C:\Program Files\Logitech
2010-12-10 19:53:17 ----D---- C:\Program Files\Common Files\Logitech
2010-12-10 19:43:29 ----N---- C:\WINDOWS\system32\TwnLib4.dll
2010-12-10 19:43:29 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2010-12-10 19:43:29 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2010-12-10 19:43:29 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2010-12-10 19:43:29 ----N---- C:\WINDOWS\system32\ImagX7.dll
2010-12-10 19:43:29 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2010-12-10 19:43:29 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2010-12-10 19:43:28 ----D---- C:\Program Files\Common Files\Ahead
2010-12-10 19:43:28 ----D---- C:\Program Files\Ahead
2010-12-10 19:29:22 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-12-10 19:29:22 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-12-10 18:36:58 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-12-10 18:13:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe Systems
2010-12-10 18:11:51 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2010-12-10 18:04:54 ----D---- C:\WINDOWS\system32\NtmsData
2010-12-10 18:00:59 ----D---- C:\Documents and Settings\Tatik\Data aplikací\XnView
2010-12-10 18:00:41 ----D---- C:\Program Files\XnView
2010-12-10 17:56:46 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-12-10 17:55:10 ----D---- C:\Program Files\Microsoft Works
2010-12-10 17:54:36 ----D---- C:\Program Files\Microsoft Visual Studio
2010-12-10 17:54:36 ----D---- C:\Program Files\Common Files\DESIGNER
2010-12-10 17:53:49 ----D---- C:\Program Files\Microsoft.NET
2010-12-10 17:51:08 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-12-10 17:50:09 ----D---- C:\WINDOWS\SHELLNEW
2010-12-10 17:49:43 ----D---- C:\Program Files\Microsoft Office
2010-12-10 17:49:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-12-10 17:49:15 ----RHD---- C:\MSOCache
2010-12-10 17:39:16 ----D---- C:\WINDOWS\Internet Logs
2010-12-10 17:26:44 ----D---- C:\Program Files\QIP
2010-12-10 17:08:36 ----D---- C:\Program Files\ICQ6Toolbar
2010-12-10 17:08:31 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-10 17:08:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-12-10 17:07:44 ----D---- C:\Documents and Settings\Tatik\Data aplikací\ICQ
2010-12-10 17:07:28 ----D---- C:\Program Files\ICQ7.0
2010-12-10 16:55:10 ----D---- C:\Documents and Settings\Tatik\Data aplikací\QIP
2010-12-10 16:35:27 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Thunderbird
2010-12-10 16:35:18 ----D---- C:\Program Files\Mozilla Thunderbird
2010-12-10 16:20:57 ----D---- C:\Documents and Settings\Tatik\Data aplikací\CheckPoint
2010-12-10 16:20:32 ----D---- C:\Program Files\Conduit
2010-12-10 16:20:25 ----D---- C:\Program Files\CheckPoint
2010-12-10 16:15:49 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Avira
2010-12-10 16:11:51 ----D---- C:\Program Files\Avira
2010-12-10 16:11:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2010-12-10 16:09:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-12-10 16:09:02 ----D---- C:\Program Files\Common Files\Adobe
2010-12-10 16:09:02 ----D---- C:\Program Files\Adobe
2010-12-10 16:04:00 ----A---- C:\WINDOWS\mixerdef.ini
2010-12-10 16:01:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-12-10 16:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-12-10 16:00:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2010-12-10 16:00:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-12-10 16:00:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-12-10 15:57:07 ----D---- C:\WINDOWS\system32\XPSViewer
2010-12-10 15:57:04 ----D---- C:\Program Files\MSBuild
2010-12-10 15:57:02 ----D---- C:\WINDOWS\system32\en-US
2010-12-10 15:56:58 ----D---- C:\Program Files\Reference Assemblies
2010-12-10 15:56:39 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-12-10 15:56:39 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-12-10 15:56:39 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-12-10 15:56:39 ----D---- C:\b0025a75a02c30b913
2010-12-10 15:54:28 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2010-12-10 15:53:12 ----RSD---- C:\WINDOWS\assembly
2010-12-10 15:53:12 ----D---- C:\WINDOWS\Microsoft.NET
2010-12-10 15:53:11 ----D---- C:\WINDOWS\system32\URTTemp
2010-12-10 15:40:49 ----A---- C:\WINDOWS\system32\CMRMDRV3.exe
2010-12-10 15:40:49 ----A---- C:\WINDOWS\Cmicnfg3.ini.cfl
2010-12-10 15:40:12 ----D---- C:\WINDOWS\Temp
2010-12-10 15:40:12 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-12-10 15:40:07 ----A---- C:\WINDOWS\CmiPCIUninstall.exe
2010-12-10 15:40:07 ----A---- C:\WINDOWS\Cmicnfg3.ini.cfg
2010-12-10 15:40:06 ----A---- C:\WINDOWS\cmudax3.ini
2010-12-10 15:39:51 ----D---- C:\Program Files\C-Media PCI Audio Device
2010-12-10 15:39:51 ----A---- C:\WINDOWS\system32\cmudax3.DLL
2010-12-10 15:39:39 ----D---- C:\Program Files\Common Files\InstallShield
2010-12-10 15:39:28 ----D---- C:\Documents and Settings\Tatik\Data aplikací\WinRAR
2010-12-10 15:35:50 ----D---- C:\Program Files\WinRAR
2010-12-10 15:34:50 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-12-10 15:34:48 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-12-10 15:34:46 ----D---- C:\WINDOWS\Logs
2010-12-10 15:34:44 ----D---- C:\Program Files\Virtools
2010-12-10 15:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-12-10 15:31:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-12-10 15:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-12-10 15:30:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-12-10 15:30:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-12-10 15:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-12-10 15:30:44 ----D---- C:\totalcmd
2010-12-10 15:30:44 ----A---- C:\WINDOWS\wincmd.ini
2010-12-10 15:30:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-12-10 15:30:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-12-10 15:30:36 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-12-10 15:30:31 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-12-10 15:30:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-12-10 15:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-12-10 15:30:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-12-10 15:30:10 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-12-10 15:30:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-12-10 15:29:57 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-12-10 15:29:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-12-10 15:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-12-10 15:29:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-12-10 15:29:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2010-12-10 15:29:31 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-12-10 15:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2010-12-10 15:29:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-12-10 15:29:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-12-10 15:29:10 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-12-10 15:29:04 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-12-10 15:28:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-12-10 15:28:54 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-12-10 15:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-12-10 15:28:14 ----SHD---- C:\RECYCLER
2010-12-10 15:26:46 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Macromedia
2010-12-10 15:26:46 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Adobe
2010-12-10 15:23:30 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Mozilla
2010-12-10 15:23:18 ----D---- C:\Program Files\Mozilla Firefox
2010-12-10 15:20:19 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-12-10 15:20:14 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-12-10 15:20:09 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-12-10 15:20:03 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-12-10 15:19:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-12-10 15:19:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-12-10 15:19:49 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-12-10 15:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2010-12-10 15:19:39 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-12-10 15:19:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-12-10 15:19:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-12-10 15:19:22 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-12-10 15:19:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-12-10 15:18:30 ----D---- C:\WINDOWS\ie8updates
2010-12-10 15:18:11 ----D---- C:\WINDOWS\WBEM
2010-12-10 15:17:21 ----HDC---- C:\WINDOWS\ie8
2010-12-10 15:15:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-12-10 15:15:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-12-10 15:15:18 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-12-10 15:15:13 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-12-10 15:15:08 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-12-10 15:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-12-10 15:14:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-12-10 15:14:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-12-10 15:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-12-10 15:14:39 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-12-10 15:14:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-12-10 15:14:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-12-10 15:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-12-10 15:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-12-10 15:14:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-12-10 15:14:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-12-10 15:14:05 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-12-10 15:14:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-12-10 15:13:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-12-10 15:13:51 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-12-10 15:13:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-12-10 15:13:38 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-12-10 15:13:34 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-12-10 15:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-12-10 15:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-12-10 15:13:12 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-12-10 15:13:04 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-12-10 15:12:56 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-12-10 15:12:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-12-10 15:12:41 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-12-10 15:12:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-12-10 15:12:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-12-10 15:12:19 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-12-10 15:12:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-12-10 15:11:57 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-12-10 15:11:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-12-10 15:11:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-12-10 15:04:52 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-12-10 15:00:46 ----D---- C:\WINDOWS\Prefetch
2010-12-10 14:57:01 ----D---- C:\WINDOWS\system32\cs-cz
2010-12-10 14:57:00 ----D---- C:\WINDOWS\system32\cs
2010-12-10 14:57:00 ----D---- C:\WINDOWS\l2schemas
2010-12-10 14:54:09 ----D---- C:\WINDOWS\network diagnostic
2010-12-10 14:47:31 ----A---- C:\WINDOWS\system32\xmllite.dll
2010-12-10 14:47:28 ----N---- C:\WINDOWS\system32\wmphoto.dll
2010-12-10 14:47:26 ----N---- C:\WINDOWS\system32\wlanapi.dll
2010-12-10 14:47:25 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2010-12-10 14:47:25 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2010-12-10 14:47:23 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-12-10 14:47:23 ----N---- C:\WINDOWS\system32\tspkg.dll
2010-12-10 14:47:23 ----N---- C:\WINDOWS\system32\tsgqec.dll
2010-12-10 14:47:20 ----N---- C:\WINDOWS\system32\setupn.exe
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\rasqec.dll
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\qutil.dll
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\qcliprov.dll
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\qagentrt.dll
2010-12-10 14:47:19 ----N---- C:\WINDOWS\system32\qagent.dll
2010-12-10 14:47:18 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2010-12-10 14:47:18 ----N---- C:\WINDOWS\system32\onex.dll
2010-12-10 14:47:16 ----N---- C:\WINDOWS\system32\napstat.exe
2010-12-10 14:47:16 ----N---- C:\WINDOWS\system32\napmontr.dll
2010-12-10 14:47:16 ----N---- C:\WINDOWS\system32\napipsec.dll
2010-12-10 14:47:16 ----N---- C:\WINDOWS\system32\msxml6r.dll
2010-12-10 14:47:16 ----N---- C:\WINDOWS\system32\msxml6.dll
2010-12-10 14:47:15 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2010-12-10 14:47:15 ----N---- C:\WINDOWS\system32\mssha.dll
2010-12-10 14:47:13 ----N---- C:\WINDOWS\system32\mmcperf.exe
2010-12-10 14:47:13 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2010-12-10 14:47:13 ----N---- C:\WINDOWS\system32\mmcex.dll
2010-12-10 14:47:13 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\kmsvc.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\kbdpash.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2010-12-10 14:47:08 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eapsvc.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eapqec.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eappprxy.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eapphost.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eappgnui.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eappcfg.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2010-12-10 14:47:05 ----N---- C:\WINDOWS\system32\eapolqec.dll
2010-12-10 14:47:05 ----A---- C:\WINDOWS\005090_.tmp
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3ui.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3svc.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3msm.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dot3api.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dimsroam.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2010-12-10 14:47:04 ----N---- C:\WINDOWS\system32\credssp.dll
2010-12-10 14:47:02 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2010-12-10 14:47:02 ----N---- C:\WINDOWS\system32\azroles.dll
2010-12-10 14:47:01 ----N---- C:\WINDOWS\system32\aaclient.dll
2010-12-10 14:38:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-12-10 14:35:50 ----HDC---- C:\WINDOWS\$NtUninstallKB873333$
2010-12-10 14:35:37 ----HDC---- C:\WINDOWS\$NtUninstallKB911565$
2010-12-10 14:31:07 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2010-12-10 14:31:03 ----HDC---- C:\WINDOWS\$NtUninstallKB924191$
2010-12-10 14:30:58 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2010-12-10 14:30:53 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2010-12-10 14:30:49 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2010-12-10 14:30:47 ----A---- C:\WINDOWS\system32\h323log.txt
2010-12-10 14:30:45 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2010-12-10 14:30:40 ----HDC---- C:\WINDOWS\$NtUninstallKB921883$
2010-12-10 14:30:36 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2010-12-10 14:30:31 ----HDC---- C:\WINDOWS\$NtUninstallKB922616$
2010-12-10 14:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2010-12-10 14:30:22 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2010-12-10 14:30:18 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2010-12-10 14:30:13 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2010-12-10 14:30:09 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2010-12-10 14:30:04 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2010-12-10 14:30:00 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2010-12-10 14:29:55 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2010-12-10 14:29:51 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2010-12-10 14:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB924496$
2010-12-10 14:29:40 ----HDC---- C:\WINDOWS\$NtUninstallKB921398$
2010-12-10 14:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2010-12-10 14:29:31 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2010-12-10 14:28:56 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-10 14:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2010-12-10 14:28:41 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2010-12-10 14:28:37 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2010-12-10 14:28:33 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2010-12-10 14:28:28 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2010-12-10 14:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2010-12-10 14:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2010-12-10 14:28:17 ----A---- C:\WINDOWS\system32\usbui.dll
2010-12-10 14:28:16 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2010-12-10 14:28:12 ----HDC---- C:\WINDOWS\$NtUninstallKB917953$
2010-12-10 14:28:08 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2010-12-10 14:28:03 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2010-12-10 14:27:59 ----HDC---- C:\WINDOWS\$NtUninstallKB917422$
2010-12-10 14:27:55 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2010-12-10 14:27:49 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2010-12-10 14:27:44 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2010-12-10 14:27:40 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2010-12-10 14:27:34 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2010-12-10 14:27:30 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2010-12-10 14:27:20 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2010-12-10 14:27:16 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2010-12-10 14:27:12 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2010-12-10 14:27:08 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2010-12-10 14:27:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-12-10 14:27:06 ----D---- C:\Program Files\Common Files\ODBC
2010-12-10 14:27:06 ----A---- C:\WINDOWS\ODBCINST.INI
2010-12-10 14:27:04 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2010-12-10 14:27:03 ----RD---- C:\Program Files
2010-12-10 14:27:03 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-12-10 14:27:03 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-10 14:27:03 ----D---- C:\Program Files\Common Files
2010-12-10 14:27:00 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-12-10 14:27:00 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-12-10 14:27:00 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-12-10 14:26:58 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-12-10 14:26:58 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-12-10 14:26:57 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-12-10 14:26:57 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-12-10 14:26:55 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-12-10 14:26:53 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-12-10 14:26:53 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-12-10 14:26:53 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-12-10 14:26:53 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-12-10 14:26:53 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdycl.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdsl.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdro.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdpl.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdhu.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\kbdcr.dll
2010-12-10 14:26:49 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2010-12-10 14:26:48 ----A---- C:\WINDOWS\system32\irclass.dll
2010-12-10 14:26:48 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-12-10 14:26:47 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-12-10 14:26:47 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-12-10 14:26:47 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-12-10 14:26:45 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-12-10 14:26:45 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-12-10 14:26:45 ----A---- C:\WINDOWS\notepad.exe
2010-12-10 14:26:44 ----A---- C:\WINDOWS\system32\storprop.dll
2010-12-10 14:26:44 ----A---- C:\WINDOWS\system32\batt.dll
2010-12-10 14:26:37 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-12-10 14:26:34 ----RA---- C:\WINDOWS\SETA.tmp
2010-12-10 14:26:30 ----RA---- C:\WINDOWS\SET3.tmp
2010-12-10 14:26:25 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-10 14:26:25 ----D---- C:\WINDOWS\system32\CatRoot
2010-12-10 14:26:19 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-12-10 14:26:00 ----D---- C:\Documents and Settings
2010-12-10 14:25:23 ----RASH---- C:\boot.ini
2010-12-10 14:21:46 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-10 14:21:46 ----RSD---- C:\WINDOWS\Fonts
2010-12-10 14:21:46 ----RD---- C:\WINDOWS\Web
2010-12-10 14:21:46 ----HD---- C:\WINDOWS\inf
2010-12-10 14:21:46 ----D---- C:\WINDOWS\WinSxS
2010-12-10 14:21:46 ----D---- C:\WINDOWS\twain_32
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\wins
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\wbem
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\usmt
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\spool
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\ShellExt
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\Setup
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\ras
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\oobe
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\npp
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\mui
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\inetsrv
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\IME
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\icsxml
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\ias
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\export
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\drivers
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\dhcp
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\config
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\3com_dmi
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\3076
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\2052
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1054
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1042
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1041
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1037
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1033
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1031
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1029
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1028
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32\1025
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system32
2010-12-10 14:21:46 ----D---- C:\WINDOWS\system
2010-12-10 14:21:46 ----D---- C:\WINDOWS\security
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Resources
2010-12-10 14:21:46 ----D---- C:\WINDOWS\repair
2010-12-10 14:21:46 ----D---- C:\WINDOWS\mui
2010-12-10 14:21:46 ----D---- C:\WINDOWS\msapps
2010-12-10 14:21:46 ----D---- C:\WINDOWS\msagent
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Media
2010-12-10 14:21:46 ----D---- C:\WINDOWS\java
2010-12-10 14:21:46 ----D---- C:\WINDOWS\ime
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Help
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Driver Cache
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Debug
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Cursors
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Connection Wizard
2010-12-10 14:21:46 ----D---- C:\WINDOWS\Config
2010-12-10 14:21:46 ----D---- C:\WINDOWS\AppPatch
2010-12-10 14:21:46 ----D---- C:\WINDOWS\addins
2010-12-10 14:21:46 ----D---- C:\WINDOWS
2010-12-10 14:18:13 ----N---- C:\WINDOWS\system32\proxycfg.exe
2010-12-10 14:18:13 ----N---- C:\WINDOWS\system32\logman.exe
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\auditusr.exe
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ati3duag.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2010-12-10 14:17:58 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\dxdiagn.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\d3d9.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\cmsetacl.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\btpanui.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\bthserv.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\bthci.dll
2010-12-10 14:17:57 ----N---- C:\WINDOWS\system32\blastcln.exe
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\fwcfg.dll
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\fsquirt.exe
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\fltmc.exe
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\fltlib.dll
2010-12-10 14:17:56 ----N---- C:\WINDOWS\system32\extmgr.dll
2010-12-10 14:17:56 ----A---- C:\WINDOWS\system32\httpapi.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdukx.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdsmsno.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdsmsfi.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdno1.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdmlt48.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdmlt47.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdmaori.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdinmal.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdinben.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdinbe1.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\kbdfi1.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\ir50_qcx.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\ir50_qc.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\ir50_32.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\ir41_qcx.dll
2010-12-10 14:17:55 ----N---- C:\WINDOWS\system32\ir41_qc.dll
2010-12-10 14:17:54 ----N---- C:\WINDOWS\system32\mspmsnsv.dll
2010-12-10 14:17:54 ----N---- C:\WINDOWS\system32\msdadiag.dll
2010-12-10 14:17:54 ----N---- C:\WINDOWS\system32\mp4sdmod.dll
2010-12-10 14:17:54 ----N---- C:\WINDOWS\system32\mp43dmod.dll
2010-12-10 14:17:53 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2010-12-10 14:17:53 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\s3gnb.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\powercfg.exe
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\pnrpnsp.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\p2psvc.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\p2pnetsh.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\p2pgraph.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\p2pgasvc.dll
2010-12-10 14:17:52 ----N---- C:\WINDOWS\system32\p2p.dll
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\smbinst.exe
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\slserv.exe
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\slrundll.exe
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\slgen.dll
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\slextspk.dll
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\slcoinst.dll
2010-12-10 14:17:51 ----N---- C:\WINDOWS\system32\sdhcinst.dll
2010-12-10 14:17:50 ----N---- C:\WINDOWS\system32\w3ssl.dll
2010-12-10 14:17:50 ----N---- C:\WINDOWS\system32\twext.dll
2010-12-10 14:17:50 ----A---- C:\WINDOWS\system32\xpsp2res.dll
2010-12-10 14:17:50 ----A---- C:\WINDOWS\system32\strmfilt.dll
2010-12-10 14:17:49 ----N---- C:\WINDOWS\system32\wmidx.dll
2010-12-10 14:17:49 ----N---- C:\WINDOWS\system32\wmerror.dll
2010-12-10 14:17:49 ----N---- C:\WINDOWS\system32\winshfhc.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmspdmoe.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmspdmod.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmsdmoe2.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmpdxm.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmpasf.dll
2010-12-10 14:17:48 ----N---- C:\WINDOWS\system32\wmp.dll
2010-12-10 14:17:47 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2010-12-10 14:17:47 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2010-12-10 14:17:47 ----N---- C:\WINDOWS\system32\wshbth.dll
2010-12-10 14:17:47 ----N---- C:\WINDOWS\system32\wmvdmoe2.dll
2010-12-10 14:17:47 ----A---- C:\WINDOWS\system32\wscsvc.dll
2010-12-10 14:17:47 ----A---- C:\WINDOWS\system32\wscntfy.exe
2010-12-10 14:17:46 ----N---- C:\WINDOWS\system32\xmlprovi.dll
2010-12-10 14:17:46 ----N---- C:\WINDOWS\system32\xmlprov.dll
2010-12-10 14:17:46 ----N---- C:\WINDOWS\slrundll.exe
2010-12-10 14:17:44 ----D---- C:\WINDOWS\peernet
2010-12-10 14:17:42 ----D---- C:\WINDOWS\provisioning
2010-12-10 14:15:20 ----D---- C:\WINDOWS\ServicePackFiles
2010-12-10 14:11:27 ----A---- C:\WINDOWS\002142_.tmp
2010-12-10 14:11:23 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-10 14:07:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-12-10 14:07:52 ----D---- C:\WINDOWS\EHome
2010-12-10 13:57:37 ----D---- C:\WINDOWS\system32\PreInstall
2010-12-10 13:57:35 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-12-10 13:57:34 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-12-10 13:57:34 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-10 13:57:19 ----D---- C:\WINDOWS\system32\bits
2010-12-10 13:57:12 ----HDC---- C:\WINDOWS\$NtUninstallKB842773$
2010-12-10 13:57:05 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2010-12-10 13:57:05 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2010-12-10 13:57:05 ----A---- C:\WINDOWS\system32\winhttp.dll
2010-12-10 13:57:05 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wups2.dll
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wups.dll
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-12-10 13:56:13 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-12-10 13:55:38 ----D---- C:\WINDOWS\SoftwareDistribution
2010-12-10 13:54:57 ----A---- C:\WINDOWS\system32\wpa.bak
2010-12-10 13:49:52 ----D---- C:\WUTemp
2010-12-10 13:49:49 ----A---- C:\WINDOWS\system32\iuengine.dll
2010-12-10 13:48:48 ----SD---- C:\WINDOWS\system32\Microsoft
2010-12-10 13:46:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2010-12-10 13:44:37 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-12-10 13:44:29 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-12-10 13:44:11 ----A---- C:\WINDOWS\system32\nvgenco32.dll
2010-12-10 13:44:11 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2010-12-10 13:43:51 ----D---- C:\Program Files\NVIDIA Corporation
2010-12-10 13:43:27 ----D---- C:\NVIDIA
2010-12-10 13:42:00 ----SHD---- C:\WINDOWS\Installer
2010-12-10 13:41:58 ----D---- C:\Documents and Settings\Tatik\Data aplikací\Identities
2010-12-10 13:41:55 ----HD---- C:\Program Files\Uninstall Information
2010-12-10 13:41:51 ----SD---- C:\Documents and Settings\Tatik\Data aplikací\Microsoft
2010-12-10 13:41:51 ----ASH---- C:\Documents and Settings\Tatik\Data aplikací\desktop.ini
2010-12-10 13:39:19 ----A---- C:\WINDOWS\system32\cnbjmon2.dll
2010-12-10 13:39:05 ----SHD---- C:\System Volume Information
2010-12-10 13:38:57 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-10 13:36:15 ----D---- C:\WINDOWS\system32\xircom
2010-12-10 13:36:15 ----D---- C:\Program Files\xerox
2010-12-10 13:36:15 ----D---- C:\Program Files\microsoft frontpage
2010-12-10 13:36:09 ----A---- C:\WINDOWS\control.ini
2010-12-10 13:36:09 ----A---- C:\AUTOEXEC.BAT
2010-12-10 13:35:57 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-12-10 13:35:16 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-12-10 13:35:16 ----RD---- C:\WINDOWS\Offline Web Pages
2010-12-10 13:35:16 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-12-10 13:35:11 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-12-10 13:34:48 ----D---- C:\WINDOWS\system32\DirectX
2010-12-10 13:34:17 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-12-10 13:34:17 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-12-10 13:34:17 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-12-10 13:34:16 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-12-10 13:34:16 ----A---- C:\WINDOWS\system32\atrace.dll
2010-12-10 13:34:13 ----A---- C:\WINDOWS\system32\desktop.ini
2010-12-10 13:34:13 ----A---- C:\WINDOWS\desktop.ini
2010-12-10 13:34:06 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-12-10 13:34:05 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-12-10 13:34:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-12-10 13:34:04 ----A---- C:\WINDOWS\system32\acctres.dll
2010-12-10 13:34:03 ----D---- C:\Program Files\Common Files\Services
2010-12-10 13:34:02 ----A---- C:\WINDOWS\system32\inetres.dll
2010-12-10 13:33:58 ----SD---- C:\WINDOWS\Tasks
2010-12-10 13:33:58 ----A---- C:\WINDOWS\system32\isign32.dll
2010-12-10 13:33:58 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-12-10 13:33:58 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-12-10 13:33:57 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-12-10 13:33:57 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-12-10 13:33:55 ----D---- C:\Program Files\Common Files\MSSoap
2010-12-10 13:33:50 ----D---- C:\WINDOWS\srchasst
2010-12-10 13:33:49 ----D---- C:\WINDOWS\system32\Macromed
2010-12-10 13:33:48 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-12-10 13:33:47 ----D---- C:\Program Files\Movie Maker
2010-12-10 13:33:43 ----D---- C:\WINDOWS\system32\Restore
2010-12-10 13:33:43 ----D---- C:\WINDOWS\PCHealth
2010-12-10 13:33:42 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-12-10 13:33:42 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-12-10 13:33:42 ----A---- C:\WINDOWS\system32\srclient.dll
2010-12-10 13:33:42 ----A---- C:\WINDOWS\system32\ils.dll
2010-12-10 13:33:41 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-12-10 13:33:41 ----A---- C:\WINDOWS\system32\msconf.dll
2010-12-10 13:33:41 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-12-10 13:33:38 ----D---- C:\Program Files\NetMeeting
2010-12-10 13:33:38 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-12-10 13:33:38 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-12-10 13:33:37 ----D---- C:\Program Files\Outlook Express
2010-12-10 13:33:37 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-12-10 13:33:37 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-12-10 13:33:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-12-10 13:33:36 ----A---- C:\WINDOWS\system32\mstask.dll
2010-12-10 13:33:30 ----D---- C:\Program Files\Common Files\System
2010-12-10 13:33:29 ----D---- C:\Program Files\Internet Explorer
2010-12-10 13:33:16 ----D---- C:\Program Files\ComPlus Applications
2010-12-10 13:33:15 ----A---- C:\WINDOWS\vbaddin.ini
2010-12-10 13:33:15 ----A---- C:\WINDOWS\vb.ini
2010-12-10 13:33:11 ----D---- C:\WINDOWS\Registration
2010-12-10 13:32:47 ----HD---- C:\Program Files\WindowsUpdate
2010-12-10 13:32:47 ----D---- C:\Program Files\Windows Media Player
2010-12-10 13:32:47 ----D---- C:\Program Files\Online Services
2010-12-10 13:32:42 ----D---- C:\Program Files\Messenger
2010-12-10 13:32:37 ----D---- C:\Program Files\MSN Gaming Zone
2010-12-10 13:32:37 ----A---- C:\WINDOWS\system32\write.exe
2010-12-10 13:32:26 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-12-10 13:32:25 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-12-10 13:32:25 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-12-10 13:32:25 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-12-10 13:32:25 ----A---- C:\WINDOWS\system32\hticons.dll
2010-12-10 13:32:24 ----A---- C:\WINDOWS\system32\winchat.exe
2010-12-10 13:32:24 ----A---- C:\WINDOWS\system32\avwav.dll
2010-12-10 13:32:24 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-12-10 13:32:24 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-12-10 13:32:15 ----A---- C:\WINDOWS\system32\charmap.exe
2010-12-10 13:32:15 ----A---- C:\WINDOWS\system32\getuname.dll
2010-12-10 13:32:15 ----A---- C:\WINDOWS\system32\calc.exe
2010-12-10 13:32:14 ----A---- C:\WINDOWS\system32\winmine.exe
2010-12-10 13:32:14 ----A---- C:\WINDOWS\system32\sol.exe
2010-12-10 13:32:14 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-12-10 13:32:14 ----A---- C:\WINDOWS\system32\freecell.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\tskill.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\tscon.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\shadow.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\reset.exe
2010-12-10 13:32:13 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\regini.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\msg.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\logoff.exe
2010-12-10 13:32:12 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-12-10 13:32:11 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\stclient.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-12-10 13:32:09 ----A---- C:\WINDOWS\system32\colbact.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\comuid.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-12-10 13:32:08 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-12-10 13:32:00 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-12-10 13:32:00 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-12-10 13:32:00 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-12-10 13:32:00 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-12-10 13:31:55 ----D---- C:\Program Files\Windows NT
2010-12-10 13:31:55 ----D---- C:\Program Files\MSN
2010-12-10 13:31:55 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\spider.exe
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-12-10 13:31:54 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-12-10 13:31:53 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-12-10 13:31:53 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-12-10 13:31:53 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-12-10 13:31:52 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-12-10 13:31:51 ----D---- C:\WINDOWS\system32\MsDtc
2010-12-10 13:31:51 ----D---- C:\WINDOWS\system32\Com
2010-12-10 13:31:51 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-12-10 13:31:51 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-12-10 13:31:51 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-12-10 13:31:51 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-12-10 13:31:50 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-12-10 13:31:50 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-12-10 13:31:47 ----A---- C:\WINDOWS\system32\licwmi.dll

======List of files/folders modified in the last 1 months======

2010-12-10 23:35:54 ----A---- C:\WINDOWS\win.ini
2010-12-10 14:27:02 ----A---- C:\WINDOWS\system.ini
2010-12-10 14:12:34 ----RASH---- C:\NTDETECT.COM

lybbor · #8 Příspěvek od **lybbor** » 11 pro 2010 21:47

Pokračování

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-11-30 135096]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-11-30 61960]
R3 cmpci;C-Media PCI Audio Driver (WDM); C:\WINDOWS\system32\drivers\cmaudio.sys [2002-07-16 379726]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-07-10 10604128]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\pfc027.sys [2005-02-24 162176]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 vulfntrs;VIA USB Roothub Lower Filter; C:\WINDOWS\System32\Drivers\vulfntr.sys [2005-06-06 11264]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2009-09-11 22792]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2009-09-11 35592]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2009-09-11 31752]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2009-09-11 66056]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 cmuda3;C-Media PCI Audio Interface; C:\WINDOWS\system32\drivers\cmuda3.sys [2005-10-28 1355456]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RTS5121.sys []
S3 Rts516xIR;Realtek IR Driver; C:\WINDOWS\system32\DRIVERS\Rts516xIR.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\WINDOWS\system32\DRIVERS\Rts5161ccid.sys []
S3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
S3 viafilter;VIA USB Filter; C:\WINDOWS\System32\Drivers\viausb1.sys [2001-09-19 9728]
S3 vulfnths;VIA USB Host Controller Lower Filter; C:\WINDOWS\System32\Drivers\vulfnth.sys [2005-01-05 6912]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2009-09-11 14984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-11-30 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-11-30 135336]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-12-10 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-07-09 155752]
R2 STI Simulator;STI Simulator; C:\WINDOWS\System32\PAStiSvc.exe [2005-01-14 53248]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-12-10 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#9 Příspěvek od **vyosek** » 11 pro 2010 21:53

Jeste poprosim o tohle jak jsem psal vyse

Stahnete na plochu CKScanner

Spustte a kliknete na Search for files
Po dokonceni skenu kliknete na Save List to File a nasledne OK
Na plose se Vam vytvori log s nazvem ckfiles.txt, jeho obsah mi sem vlozte

Jinak Avira uz neco smazla jak koukam...

Spustte HJT a provedeme fixnuti polozek

HJT najdete zde R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\Tatik\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
Otevre se Vam okno, kliknete na Do a system scan only
V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
C:\Program Files\trend micro\Tatik.exe
Kliknete na Fix checked (vlevo dole)
HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

lybbor · #10 Příspěvek od **lybbor** » 11 pro 2010 22:38

CKScanner - Additional Security Risks - These are not necessarily bad
scanner sequence 3.RP.11
----- EOF -----

#11 Příspěvek od **vyosek** » 12 pro 2010 07:09

Pokracujte kroky dale...Budu tu az vecer jelikoz jsem cely den pracovne mimo...

lybbor · #12 Příspěvek od **lybbor** » 12 pro 2010 18:39

Dobrý večer.Včera jsem několikrát zkoušel ten Combofix ale pořád mi to psalo že mám zapnutý rezidenční štít.Aviru jsem měl vyplou a branu firewal taky.Nepokračoval jsem dále protože podle hlášky mohlo dojít k poškození PC. Co mám dělat dál. Děkuji

#13 Příspěvek od **vyosek** » 12 pro 2010 20:40

Je mozne ze to jen CF nepobral ze je avira vypla - mela by mit ten destnicek stazeny...normalne pokracujte i pres to hlaseni...

lybbor · #14 Příspěvek od **lybbor** » 14 pro 2010 08:41

Tak jsem to celé posr... Musel jsem přeinstalovat celý systém mám to vše nově nainstalované a zatím to šlape OK.Děkuji za váš čas.

#15 Příspěvek od **vyosek** » 14 pro 2010 09:18

Nemate zac, muzu vedet kde byla chyba

VIRY.CZ

Prosím preventívně o kontrolu logu.

Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.

Re: Prosím preventívně o kontrolu logu.