VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

GMER

https://forum.viry.cz:443/viewtopic.php?t=109091

Stránka 1 z 1

GMER

Napsal: 03 úno 2011 22:21
od vamp
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-02-03 22:18:31
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4 ST380011A rev.8.01
Running: gmer.exe; Driver: C:\DOCUME~1\VAMPIR~1\LOCALS~1\Temp\pwldypoc.sys


---- System - GMER 1.0.15 ----

SSDT spmh.sys ZwCreateKey [0xF74E40E0]
SSDT spmh.sys ZwEnumerateKey [0xF74FCDA4]
SSDT spmh.sys ZwEnumerateValueKey [0xF74FD132]
SSDT spmh.sys ZwOpenKey [0xF74E40C0]
SSDT spmh.sys ZwQueryKey [0xF74FD20A]
SSDT spmh.sys ZwQueryValueKey [0xF74FD08A]
SSDT spmh.sys ZwSetValueKey [0xF74FD29C]

INT 0x62 ? 896E9BF8
INT 0x63 ? 88D39BF8
INT 0x82 ? 896E9BF8
INT 0x94 ? 88D39BF8
INT 0xA4 ? 88D39BF8

---- Kernel code sections - GMER 1.0.15 ----

? spmh.sys Systém nemůže nalézt uvedený soubor. !
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB9C14360, 0x240F7E, 0xE8000020]
.text USBPORT.SYS!DllUnload B9A498AC 5 Bytes JMP 88D391D8
.text awg9q55a.SYS B99E0386 35 Bytes [00, 00, 00, 00, 00, 00, 20, ...]
.text awg9q55a.SYS B99E03AA 24 Bytes [00, 00, 00, 00, 00, 00, 00, ...]
.text awg9q55a.SYS B99E03C4 3 Bytes [00, 80, 02]
.text awg9q55a.SYS B99E03C9 1 Byte [30]
.text awg9q55a.SYS B99E03C9 11 Bytes [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text ...

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Mozilla Firefox\firefox.exe[1116] ntdll.dll!LdrLoadDll 7C9163C3 5 Bytes JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT \WINDOWS\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 897582D8
IAT pci.sys[ntoskrnl.exe!IoDetachDevice] [F750FDDC] spmh.sys
IAT pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack] [F750FE30] spmh.sys
IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F74E5042] spmh.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F74E513E] spmh.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F74E50C0] spmh.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F74E5800] spmh.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F74E56D6] spmh.sys
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F74F4B90] spmh.sys
IAT \SystemRoot\system32\DRIVERS\USBPORT.SYS[ntoskrnl.exe!DbgBreakPoint] 88D392D8
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlInitUnicodeString] 8800001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!swprintf] 001CBA86
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeSetEvent] C61AEB00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoCreateSymbolicLink] 001C8986
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoGetConfigurationInformation] 86C61200
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoDeleteSymbolicLink] 00001C8B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmFreeMappingAddress] 96868801
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoFreeErrorLogEntry] 8800001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoDisconnectInterrupt] 001CB286
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmUnmapIoSpace] 88968B00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ObReferenceObjectByPointer] 8900001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IofCompleteRequest] 001CA496
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlCompareUnicodeString] C6168B00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IofCallDriver] 001CC186
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmAllocateMappingAddress] 428A0A00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAllocateErrorLogEntry] C286880C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoConnectInterrupt] 8B00001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoDetachDevice] 24A48DFA
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeWaitForSingleObject] 00000000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInitializeEvent] 4B8BDF8B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeCancelTimer] 8D3F0304
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlAnsiStringToUnicodeString] CB033043
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlInitAnsiString] 0673C13B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoBuildDeviceIoControlRequest] C13B0003
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoQueueWorkItem] 8366FA72
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmMapIoSpace] 75000E7B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoInvalidateDeviceRelations] 0B7D80E3
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoReportDetectedDevice] 307B8D00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoReportResourceForDetection] 00AA840F
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlxAnsiStringToUnicodeSize] 83660000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!NlsMbCodePageTag] 6A000E7A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!PoRequestPowerIrp] C6647400
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInsertByKeyDeviceQueue] 001CC386
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!PoRegisterDeviceForIdleDetection] 4F8B0200
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!sprintf] 968D5140
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmMapLockedPagesSpecifyCache] 00001C98
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ObfDereferenceObject] 22F6E852
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoGetAttachedDeviceReference] 478B0000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoInvalidateDeviceState] 50016A40
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ZwClose] 1CB48E8D
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ObReferenceObjectByHandle] E8510000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ZwCreateDirectoryObject] 000022E4
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoBuildSynchronousFsdRequest] 6A18538B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!PoStartNextPowerIrp] 868D5200
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoCreateDevice] 00001CA0
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlCopyUnicodeString] 22D2E850
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAllocateDriverObjectExtension] 4B8B0000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlQueryRegistryValues] 51016A18
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ZwOpenKey] 1CBC968D
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlFreeUnicodeString] E8520000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoStartTimer] 000022C0
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInitializeTimer] 8A05478A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoInitializeTimer] 001CC38E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInitializeDpc] 30C48300
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInitializeSpinLock] 1CC58688
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoInitializeIrp] 80E90000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ZwCreateKey] C6000000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlAppendUnicodeStringToString] 001CC386
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlIntegerToUnicodeString] 438B0100
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ZwSetValueKey] 8E8D5018
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeInsertQueueDpc] 00001C98
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KefAcquireSpinLockAtDpcLevel] 2292E851
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoStartPacket] 538B0000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KefReleaseSpinLockFromDpcLevel] 52016A18
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoBuildAsynchronousFsdRequest] 1CB4868D
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoFreeMdl] E8500000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmUnlockPages] 00002280
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoWriteErrorLogEntry] 8A05478A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeRemoveByKeyDeviceQueue] 001CC38E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmMapLockedPagesWithReservedMapping] 18C48300
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmUnmapReservedMapping] 1CC58688
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeSynchronizeExecution] 43EB0000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoStartNextPacket] 320C538A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeBugCheckEx] 88F93BC0
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeRemoveDeviceQueue] 001CC396
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeSetTimer] F6317300
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!_allmul] 74070647
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmProbeAndLockPages] 75C0841A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!_except_handler3] 05578A0B
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!PoSetPowerState] 968801B0
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoOpenDeviceRegistryKey] 00001CC5
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlWriteRegistryValue] 57B60F66
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlDeleteRegistryValue] 533B6604
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!_aulldiv] 03087408
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!strstr] 72F93B3F
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!_strupr] 8A09EBDA
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeQuerySystemTime] 86880547
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoWMIRegistrationControl] 00001CC5
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!KeTickCount] 88084B8A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAttachDeviceToDeviceStack] 001CC68E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoDeleteDevice] 40578B00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ExAllocatePoolWithTag] 8D52006A
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAllocateWorkItem] 001CC886
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAllocateIrp] 11E85000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoAllocateMdl] 8B000022
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmBuildMdlForNonPagedPool] 001CC08E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmLockPagableDataSection] C4968B00
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoGetDriverObjectExtension] 8900001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmUnlockPagableImageSection] 001CCC8E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!ExFreePoolWithTag] D0968900
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoFreeIrp] 8B00001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!IoFreeWorkItem] 016A4047
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!InitSafeBootMode] D4C68150
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!RtlCompareMemory] 5600001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!PoCallDriver] 0021E7E8
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!memmove] 18C48300
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[ntoskrnl.exe!MmHighestUserAddress] 5D5B5E5F
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KfAcquireSpinLock] 18C4830E
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!READ_PORT_UCHAR] 1C959E88
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KeGetCurrentIrql] 9E880000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KfRaiseIrql] 00001CB1
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KfLowerIrql] 0E798366
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!HalGetInterruptVector] 74AAB000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!HalTranslateBusAddress] 8986C636
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KeStallExecutionProcessor] 1A00001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!KfReleaseSpinLock] 1C8B86C6
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] C6020000
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!READ_PORT_USHORT] 001C9686
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 86C60200
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[HAL.dll!WRITE_PORT_UCHAR] 00001CB2
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[WMILIB.SYS!WmiSystemControl] 8800001C
IAT \SystemRoot\System32\Drivers\awg9q55a.SYS[WMILIB.SYS!WmiCompleteRequest] 001CB99E

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 896E81F8

AttachedDevice \FileSystem\Ntfs \Ntfs sisidex.sys (SISIDEX Driver/Windows (R) 2000 DDK provider)

Device \Driver\NetBT \Device\NetBT_Tcpip_{3D672650-DE0F-4825-B3B1-2FD130024E7C} 88CB3500
Device \Driver\usbohci \Device\USBPDO-0 88D381F8
Device \Driver\usbohci \Device\USBPDO-1 88D381F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 897561F8
Device \Driver\dmio \Device\DmControl\DmConfig 897561F8
Device \Driver\dmio \Device\DmControl\DmPnP 897561F8
Device \Driver\dmio \Device\DmControl\DmInfo 897561F8
Device \Driver\PCI_PNP0498 \Device\00000045 spmh.sys
Device \Driver\PCI_PNP0498 \Device\00000045 spmh.sys
Device \Driver\usbehci \Device\USBPDO-2 88D211F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 896EA1F8
Device \Driver\Ftdisk \Device\HarddiskVolume2 896EA1F8
Device \Driver\Cdrom \Device\CdRom0 88D661F8
Device \Driver\atapi \Device\Ide\IdePort0 [F7978B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 [F7978B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [F7978B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c [F7978B40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\Cdrom \Device\CdRom1 88D661F8
Device \Driver\sptd \Device\3509725498 spmh.sys
Device \Driver\NetBT \Device\NetBt_Wins_Export 88CB3500
Device \Driver\NetBT \Device\NetbiosSmb 88CB3500
Device \Driver\usbohci \Device\USBFDO-0 88D381F8
Device \Driver\usbohci \Device\USBFDO-1 88D381F8
Device \Driver\usbehci \Device\USBFDO-2 88D211F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 88CD1500
Device \FileSystem\MRxSmb \Device\LanmanRedirector 88CD1500
Device \Driver\Ftdisk \Device\FtControl 896EA1F8
Device \Driver\awg9q55a \Device\Scsi\awg9q55a1Port2Path0Target0Lun0 88C921F8
Device \Driver\awg9q55a \Device\Scsi\awg9q55a1 88C921F8
Device \FileSystem\Cdfs \Cdfs 88C39500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xE0 0xEE 0x6F 0xA4 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x04 0xAA 0x7A 0x78 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xBC 0xBC 0x73 0x74 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xAD 0xD5 0x0B 0xD7 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x04 0xAA 0x7A 0x78 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xBC 0xBC 0x73 0x74 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0x00 0x00 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0xE0 0xEE 0x6F 0xA4 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0x04 0xAA 0x7A 0x78 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0xBC 0xBC 0x73 0x74 ...

---- EOF - GMER 1.0.15 ----

Re: GMER

Napsal: 03 úno 2011 22:23
od Caroprd111
Zdravím,
log je v pořádku. :)

Re: GMER

Napsal: 03 úno 2011 22:23
od vamp
Logfile of random's system information tool 1.08 (written by random/random)
Run by VAMPIRWOMAN at 2011-02-03 22:22:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 9 GB (31%) free of 30 GB
Total RAM: 1279 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:22:58, on 3.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\IObit\Game Booster\gbtray.exe
C:\DOCUME~1\VAMPIR~1\LOCALS~1\Temp\Dočasný adresář 1 pro gmer.zip\gmer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\VAMPIRWOMAN\Dokumenty\RSIT.exe
C:\Program Files\trend micro\VAMPIRWOMAN.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\system32\NVRTCLK\NVRTClk.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 3170 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Game_Booster_Startup.job
C:\WINDOWS\tasks\SmartDefrag.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-06-01 7618560]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit []
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"NVRTCLK"=C:\WINDOWS\system32\NVRTCLK\NVRTClk.exe [2003-12-30 24576]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe"="C:\Program Files\GigaByte\VGA Utility Manager\G-VGA.exe:*:Enabled:Menu"
"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine"
"C:\Documents and Settings\All Users\Data aplikací\NexonEU\NGM\NGM.exe"="C:\Documents and Settings\All Users\Data aplikací\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\NMService.exe"="C:\Nexon\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core"
"C:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="C:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*:Enabled:Combat Arms"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-02-03 21:58:30 ----D---- C:\rsit
2011-01-29 01:20:53 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Need for Speed World
2011-01-29 01:10:48 ----D---- C:\Program Files\Electronic Arts
2011-01-29 01:10:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2011-01-26 01:33:57 ----D---- C:\Program Files\Lame For Audacity
2011-01-26 01:19:32 ----D---- C:\Program Files\Audacity
2011-01-26 01:06:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2011-01-26 00:55:48 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\facemoods.com
2011-01-25 18:40:53 ----D---- C:\Program Files\Codec Pack - All In 1
2011-01-24 17:14:17 ----A---- C:\WINDOWS\NEXON_EU_DownloaderUpdater.exe
2011-01-21 18:43:35 ----D---- C:\WINDOWS\Sun
2011-01-21 14:21:41 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\TuneUp Software
2011-01-21 14:21:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-01-21 14:21:20 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-01-17 19:05:14 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-01-17 19:05:13 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-01-17 19:05:13 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-01-17 19:05:13 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-01-17 19:05:13 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-01-17 19:05:13 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-01-17 19:05:12 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-01-17 19:05:12 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-01-17 19:05:12 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-01-17 19:05:12 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-01-17 19:05:11 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-01-17 19:05:11 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-01-17 19:05:11 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-01-17 19:05:11 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-01-17 19:05:10 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-01-17 19:05:10 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-01-17 19:05:10 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-01-17 19:05:10 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-01-17 19:05:10 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-01-17 19:05:09 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-01-17 19:05:09 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-01-17 19:05:09 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-01-17 19:05:09 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-01-17 19:05:09 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-01-17 19:05:08 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-01-17 19:05:07 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-01-17 19:05:07 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-01-17 19:05:07 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-01-17 19:05:07 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-01-17 19:05:06 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-01-17 19:05:05 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-01-17 19:05:05 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-01-17 19:05:04 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-01-17 19:05:03 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-01-17 19:05:03 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-01-17 19:05:03 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-01-17 19:05:02 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-01-17 19:05:02 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-01-17 19:05:02 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-01-17 19:05:02 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-01-17 19:05:01 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-01-17 19:05:00 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-01-17 19:05:00 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-01-17 19:04:56 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-01-17 19:04:56 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-01-17 19:04:56 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-01-17 19:04:55 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-01-17 19:04:55 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-01-17 19:04:55 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-01-17 19:04:55 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-01-17 19:04:54 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-01-17 19:04:54 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-01-17 19:04:54 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-01-17 19:04:54 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-01-17 19:04:53 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-01-17 19:04:50 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-01-17 19:04:50 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-01-17 19:04:50 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2011-01-17 19:04:50 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-01-17 19:04:49 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-01-17 19:04:49 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-01-17 19:04:49 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-01-17 19:04:48 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2011-01-17 19:00:34 ----D---- C:\WINDOWS\Logs
2011-01-14 00:42:57 ----D---- C:\Program Files\Firefly Studios
2011-01-10 00:25:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\BigFishGamesCache
2011-01-07 14:10:45 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\kikin
2011-01-07 14:10:43 ----D---- C:\Program Files\JDownloader
2011-01-07 03:27:29 ----D---- C:\Program Files\aTube Catcher
2011-01-05 18:00:00 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\SUPERAntiSpyware.com
2011-01-05 18:00:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-01-05 17:59:47 ----D---- C:\Program Files\SUPERAntiSpyware
2011-01-05 17:53:16 ----D---- C:\Program Files\trend micro
2011-01-05 16:58:43 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-01-05 16:58:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-01-05 15:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-01-05 15:47:07 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-01-05 15:46:56 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-01-05 15:44:16 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2011-01-05 15:44:15 ----D---- C:\WINDOWS\system32\winrm
2011-01-05 15:44:15 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-01-05 15:44:12 ----HDC---- C:\WINDOWS\$968930Uinstall_KB968930$
2011-01-05 15:44:11 ----D---- C:\WINDOWS\$NtUninstallKB968930$
2011-01-05 15:44:03 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-01-05 15:44:02 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-01-05 15:43:48 ----D---- C:\Program Files\Windows Media Connect 2
2011-01-05 15:42:47 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-01-05 15:42:45 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-01-05 15:41:37 ----D---- C:\WINDOWS\system32\URTTEMP
2011-01-05 15:33:07 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2011-01-05 15:33:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-01-05 15:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-01-05 15:31:46 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-01-05 15:23:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-01-05 15:19:07 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-01-05 15:19:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2011-01-05 15:18:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-01-05 15:13:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-01-05 14:55:05 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Malwarebytes
2011-01-05 14:55:00 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-01-05 14:54:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-01-05 14:54:58 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-01-05 14:54:58 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-01-05 03:40:48 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\netz
2011-01-05 03:38:01 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\CAE_Report_Generator
2011-01-05 03:37:34 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-01-05 03:37:32 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-01-05 03:35:44 ----D---- C:\WINDOWS\system32\XPSViewer
2011-01-05 03:35:41 ----D---- C:\Program Files\MSBuild
2011-01-05 03:35:32 ----D---- C:\Program Files\Reference Assemblies
2011-01-05 03:34:59 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-01-05 03:34:59 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-01-05 03:34:59 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-01-05 03:30:14 ----D---- C:\Program Files\AviSynth 2.5
2011-01-05 03:30:12 ----D---- C:\Program Files\Xvid
2011-01-05 03:30:12 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-01-05 03:30:03 ----D---- C:\Program Files\CAE Report Generator
2011-01-04 21:06:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-01-04 21:05:04 ----D---- C:\Program Files\Adobe Media Player
2011-01-04 20:59:51 ----D---- C:\WINDOWS\system32\appmgmt
2011-01-04 20:59:27 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-01-04 20:56:29 ----D---- C:\WINDOWS\Prefetch
2011-01-04 20:44:08 ----D---- C:\WINDOWS\system32\cs
2011-01-04 20:44:08 ----D---- C:\WINDOWS\l2schemas
2011-01-04 20:44:07 ----D---- C:\WINDOWS\system32\bits
2011-01-04 20:35:51 ----D---- C:\WINDOWS\network diagnostic
2011-01-04 20:20:41 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-01-04 20:14:43 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-01-04 20:14:41 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-01-04 20:14:39 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-01-04 20:14:39 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-01-04 20:14:39 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-01-04 20:14:39 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-01-04 20:14:39 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2011-01-04 20:14:36 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-01-04 20:14:36 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-01-04 20:14:36 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-01-04 20:13:46 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-01-04 20:13:45 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-01-04 19:54:02 ----A---- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2011-01-04 19:50:15 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-01-04 19:12:51 ----D---- C:\Program Files\EA GAMES
2011-01-04 18:58:40 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2011-01-04 18:58:40 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-01-04 18:56:30 ----D---- C:\WINDOWS\system32\LogFiles
2011-01-04 18:56:29 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2011-01-04 18:42:36 ----RSD---- C:\WINDOWS\assembly
2011-01-04 18:42:06 ----D---- C:\WINDOWS\system32\en-US
2011-01-04 18:42:02 ----D---- C:\Program Files\Microsoft.NET
2011-01-04 18:42:00 ----D---- C:\WINDOWS\Microsoft.NET
2011-01-04 18:39:14 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2011-01-04 18:34:26 ----D---- C:\Program Files\Common Files\EasyInfo
2011-01-04 18:32:21 ----D---- C:\NVIDIA
2011-01-04 18:02:25 ----D---- C:\Program Files\SpeedFan
2011-01-04 15:46:29 ----D---- C:\Program Files\CCleaner
2011-01-04 15:43:46 ----SHD---- C:\RECYCLER
2011-01-04 15:41:36 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-01-04 15:35:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-01-04 15:35:26 ----D---- C:\Program Files\Common Files\Java
2011-01-04 15:35:09 ----A---- C:\WINDOWS\system32\javaws.exe
2011-01-04 15:35:09 ----A---- C:\WINDOWS\system32\javaw.exe
2011-01-04 15:35:09 ----A---- C:\WINDOWS\system32\java.exe
2011-01-04 15:35:09 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-01-04 15:34:40 ----D---- C:\Program Files\Java
2011-01-04 15:34:16 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Sun
2011-01-04 15:29:37 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Search Settings
2011-01-04 15:29:30 ----D---- C:\Program Files\IObit Toolbar
2011-01-04 15:29:30 ----D---- C:\Program Files\Application Updater
2011-01-04 15:29:12 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\IObit
2011-01-04 15:28:25 ----D---- C:\Program Files\IObit
2011-01-04 15:28:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2011-01-04 15:15:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2011-01-04 15:03:07 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-01-04 15:02:59 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2011-01-04 15:02:48 ----D---- C:\Program Files\DAEMON Tools Lite
2011-01-04 15:02:36 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\DAEMON Tools Lite
2011-01-04 15:02:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2011-01-04 14:59:07 ----D---- C:\Program Files\Common Files\Adobe
2011-01-04 14:59:07 ----D---- C:\Program Files\Adobe
2011-01-04 14:57:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-01-04 14:50:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nexon
2011-01-04 14:35:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\NexonEU
2011-01-04 14:17:36 ----D---- C:\Download
2011-01-04 14:17:33 ----D---- C:\Nexon
2011-01-04 14:17:33 ----A---- C:\WINDOWS\system32\nxEuUninstall.bat
2011-01-04 14:14:52 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\AIMP
2011-01-04 14:14:47 ----D---- C:\Program Files\AIMP2
2011-01-04 14:13:37 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Macromedia
2011-01-04 14:13:37 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Adobe
2011-01-04 14:12:51 ----A---- C:\WINDOWS\iun6002.exe
2011-01-04 14:09:18 ----A---- C:\WINDOWS\system32\h323log.txt
2011-01-04 14:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$
2011-01-04 14:06:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-01-04 14:06:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2011-01-04 14:06:34 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9L$
2011-01-04 14:06:14 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2011-01-04 14:05:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2011-01-04 14:05:50 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-01-04 14:05:25 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-01-04 14:05:00 ----A---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-01-04 14:04:53 ----RA---- C:\WINDOWS\system32\drivers\sisnic.sys
2011-01-04 14:04:47 ----A---- C:\WINDOWS\system32\usbui.dll
2011-01-04 14:04:46 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-01-04 14:04:42 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2011-01-04 14:04:42 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2011-01-04 14:04:30 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-01-04 14:04:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2011-01-04 14:04:23 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2011-01-04 14:04:10 ----D---- C:\WINDOWS\ie8updates
2011-01-04 14:03:53 ----D---- C:\WINDOWS\WBEM
2011-01-04 14:03:39 ----SHD---- C:\WINDOWS\Installer
2011-01-04 14:03:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-01-04 14:03:38 ----D---- C:\Program Files\Common Files\ODBC
2011-01-04 14:03:38 ----A---- C:\WINDOWS\ODBCINST.INI
2011-01-04 14:03:37 ----HDC---- C:\WINDOWS\ie8
2011-01-04 14:03:37 ----D---- C:\WINDOWS\system32\cs-CZ
2011-01-04 14:03:35 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-01-04 14:03:35 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-01-04 14:03:34 ----RD---- C:\Program Files
2011-01-04 14:03:34 ----D---- C:\Program Files\Common Files
2011-01-04 14:03:32 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-01-04 14:03:32 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-01-04 14:03:32 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-01-04 14:03:29 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-01-04 14:03:28 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-01-04 14:03:26 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-01-04 14:03:26 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-01-04 14:03:26 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-01-04 14:03:26 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-01-04 14:03:26 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-01-04 14:03:24 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2011-01-04 14:03:24 ----A---- C:\WINDOWS\system32\kbdsl.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdycl.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdro.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdpl.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdhu.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\kbdcr.dll
2011-01-04 14:03:23 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2011-01-04 14:03:22 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-01-04 14:03:22 ----A---- C:\WINDOWS\system32\irclass.dll
2011-01-04 14:03:22 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-01-04 14:03:22 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-01-04 14:03:22 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-01-04 14:03:20 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-01-04 14:03:20 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-01-04 14:03:20 ----A---- C:\WINDOWS\system32\batt.dll
2011-01-04 14:03:20 ----A---- C:\WINDOWS\notepad.exe
2011-01-04 14:03:19 ----A---- C:\WINDOWS\system32\storprop.dll
2011-01-04 14:03:11 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-01-04 14:03:10 ----RA---- C:\WINDOWS\SET25.tmp
2011-01-04 14:03:07 ----RA---- C:\WINDOWS\SET8.tmp
2011-01-04 14:03:05 ----RA---- C:\WINDOWS\SET4.tmp
2011-01-04 14:03:03 ----RA---- C:\WINDOWS\SET3.tmp
2011-01-04 14:02:58 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-04 14:02:58 ----D---- C:\WINDOWS\system32\CatRoot
2011-01-04 14:02:52 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-01-04 14:02:49 ----A---- C:\WINDOWS\system32\MRT.exe
2011-01-04 14:02:29 ----D---- C:\Documents and Settings
2011-01-04 14:02:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2011-01-04 14:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2011-01-04 14:01:56 ----D---- C:\WINDOWS\ServicePackFiles
2011-01-04 14:01:47 ----SH---- C:\boot.ini
2011-01-04 14:01:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-01-04 14:01:24 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2011-01-04 14:00:03 ----SHD---- C:\System Volume Information
2011-01-04 13:59:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2011-01-04 13:58:09 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-01-04 13:58:03 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-01-04 13:56:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-01-04 13:56:18 ----RSD---- C:\WINDOWS\Fonts
2011-01-04 13:56:18 ----RD---- C:\WINDOWS\Web
2011-01-04 13:56:18 ----HD---- C:\WINDOWS\inf
2011-01-04 13:56:18 ----D---- C:\WINDOWS\WinSxS
2011-01-04 13:56:18 ----D---- C:\WINDOWS\twain_32
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Temp
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\wins
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\wbem
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\usmt
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\spool
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\ShellExt
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\Setup
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\ras
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\oobe
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\npp
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\mui
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\inetsrv
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\IME
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\icsxml
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\ias
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\export
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\drivers\etc
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\drivers
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\dhcp
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\config
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\3com_dmi
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\3076
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\2052
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1054
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1042
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1041
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1037
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1033
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1031
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1029
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1028
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32\1025
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system32
2011-01-04 13:56:18 ----D---- C:\WINDOWS\system
2011-01-04 13:56:18 ----D---- C:\WINDOWS\security
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Resources
2011-01-04 13:56:18 ----D---- C:\WINDOWS\repair
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Provisioning
2011-01-04 13:56:18 ----D---- C:\WINDOWS\pchealth
2011-01-04 13:56:18 ----D---- C:\WINDOWS\PeerNet
2011-01-04 13:56:18 ----D---- C:\WINDOWS\mui
2011-01-04 13:56:18 ----D---- C:\WINDOWS\msapps
2011-01-04 13:56:18 ----D---- C:\WINDOWS\msagent
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Media
2011-01-04 13:56:18 ----D---- C:\WINDOWS\java
2011-01-04 13:56:18 ----D---- C:\WINDOWS\ime
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Help
2011-01-04 13:56:18 ----D---- C:\WINDOWS\ehome
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Driver Cache
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Debug
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Cursors
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Connection Wizard
2011-01-04 13:56:18 ----D---- C:\WINDOWS\Config
2011-01-04 13:56:18 ----D---- C:\WINDOWS\AppPatch
2011-01-04 13:56:18 ----D---- C:\WINDOWS\addins
2011-01-04 13:56:18 ----D---- C:\WINDOWS
2011-01-04 13:56:18 ----ASH---- C:\pagefile.sys
2011-01-04 13:53:04 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-01-04 13:51:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-01-04 13:50:16 ----D---- C:\WINDOWS\system32\PreInstall
2011-01-04 13:50:15 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-01-04 13:50:14 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-01-04 13:49:57 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2011-01-04 13:48:30 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-01-04 13:48:30 ----A---- C:\WINDOWS\system32\wups2.dll
2011-01-04 13:48:30 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2011-01-04 13:48:30 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2011-01-04 13:48:30 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2011-01-04 13:44:57 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Mozilla
2011-01-04 13:44:44 ----D---- C:\Program Files\Mozilla Firefox
2011-01-04 13:40:18 ----RA---- C:\WINDOWS\system32\NVRTClk.exe
2011-01-04 13:40:18 ----RA---- C:\WINDOWS\system32\NVGPIO.dll
2011-01-04 13:40:18 ----D---- C:\WINDOWS\system32\NVRTClk
2011-01-04 13:38:17 ----D---- C:\Program Files\CyberLink
2011-01-04 13:37:08 ----A---- C:\WINDOWS\GPCIDrv.sys
2011-01-04 13:37:05 ----A---- C:\WINDOWS\system32\drivers\GVTDrv.sys
2011-01-04 13:36:11 ----D---- C:\Program Files\GigaByte
2011-01-04 13:35:30 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-01-04 13:35:27 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-01-04 13:35:26 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-01-04 13:35:24 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-01-04 13:35:22 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-01-04 13:35:20 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-01-04 13:35:18 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-01-04 13:34:51 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2011-01-04 13:32:50 ----HD---- C:\Program Files\InstallShield Installation Information
2011-01-04 13:32:49 ----N---- C:\WINDOWS\system32\drivers\NVXBAR.SYS
2011-01-04 13:32:45 ----N---- C:\WINDOWS\system32\drivers\NVCAP.SYS
2011-01-04 13:31:58 ----D---- C:\WINDOWS\nview
2011-01-04 13:31:58 ----A---- C:\WINDOWS\system32\nvudisp.exe
2011-01-04 13:31:39 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2011-01-04 13:31:06 ----RA---- C:\WINDOWS\system32\drivers\GVCplDrv.sys
2011-01-04 13:29:11 ----D---- C:\Program Files\SiSLan
2011-01-04 13:27:40 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-01-04 13:27:39 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-01-04 13:27:38 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2011-01-04 13:27:33 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-01-04 13:27:32 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-01-04 13:27:31 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-01-04 13:27:31 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-01-04 13:27:30 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-01-04 13:27:29 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2011-01-04 13:27:28 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2011-01-04 13:27:27 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2011-01-04 13:27:23 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-01-04 13:27:23 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-01-04 13:27:21 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-01-04 13:27:14 ----A---- C:\WINDOWS\CMISETUP.INI
2011-01-04 13:27:14 ----A---- C:\WINDOWS\CMCDPLAY.INI
2011-01-04 13:27:13 ----A---- C:\WINDOWS\Wininit.ini
2011-01-04 13:27:13 ----A---- C:\WINDOWS\system32\udaprop.dll
2011-01-04 13:27:12 ----A---- C:\WINDOWS\system32\drivers\cmuda.sys
2011-01-04 13:27:12 ----A---- C:\WINDOWS\system32\cmuda.dll
2011-01-04 13:27:12 ----A---- C:\WINDOWS\system32\cmiwcnfg.dll
2011-01-04 13:27:12 ----A---- C:\WINDOWS\system32\cmirmdrv.exe
2011-01-04 13:27:12 ----A---- C:\WINDOWS\system32\cmirmdrv.dll
2011-01-04 13:27:11 ----A---- C:\WINDOWS\system32\Audio3D.dll
2011-01-04 13:27:11 ----A---- C:\WINDOWS\system32\a3d.dll
2011-01-04 13:27:11 ----A---- C:\WINDOWS\Cmuda.ini
2011-01-04 13:27:07 ----A---- C:\WINDOWS\CMIUninstall.exe
2011-01-04 13:27:07 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2011-01-04 13:27:07 ----A---- C:\WINDOWS\CMIRmDriver.dll
2011-01-04 13:27:06 ----D---- C:\Program Files\C-Media 3D Audio
2011-01-04 13:26:54 ----A---- C:\WINDOWS\IsUninst.exe
2011-01-04 13:25:39 ----RA---- C:\WINDOWS\system32\drivers\sisidex.sys
2011-01-04 13:25:38 ----RA---- C:\WINDOWS\system32\drivers\sisperf.sys
2011-01-04 13:25:37 ----RA---- C:\WINDOWS\system32\drivers\siside.sys
2011-01-04 13:24:11 ----A---- C:\WINDOWS\SiSUSBrg.exe
2011-01-04 13:24:11 ----A---- C:\WINDOWS\SiSport.sys
2011-01-04 13:24:11 ----A---- C:\WINDOWS\SIS_LIB.DLL
2011-01-04 13:24:09 ----RA---- C:\WINDOWS\system32\drivers\SISAGPX.SYS
2011-01-04 13:24:09 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-01-04 13:24:01 ----A---- C:\WINDOWS\IsUn0405.exe
2011-01-04 13:23:37 ----D---- C:\WINDOWS\system32\Tools
2011-01-04 13:23:31 ----D---- C:\Program Files\Common Files\InstallShield
2011-01-04 13:21:36 ----D---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Identities
2011-01-04 13:21:35 ----HD---- C:\Program Files\Uninstall Information
2011-01-04 13:21:30 ----SD---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\Microsoft
2011-01-04 13:21:30 ----ASH---- C:\Documents and Settings\VAMPIRWOMAN\Data aplikací\desktop.ini
2011-01-04 13:20:50 ----A---- C:\WINDOWS\system32\wpa.bak
2011-01-04 13:19:37 ----D---- C:\WINDOWS\SoftwareDistribution
2011-01-04 13:19:27 ----SD---- C:\WINDOWS\system32\Microsoft
2011-01-04 13:15:52 ----D---- C:\Program Files\xerox
2011-01-04 13:15:51 ----D---- C:\WINDOWS\system32\xircom
2011-01-04 13:15:51 ----D---- C:\Program Files\microsoft frontpage
2011-01-04 13:15:33 ----HD---- C:\WINDOWS\$hf_mig$
2011-01-04 13:15:20 ----RASH---- C:\MSDOS.SYS
2011-01-04 13:15:20 ----RASH---- C:\IO.SYS
2011-01-04 13:15:20 ----A---- C:\WINDOWS\control.ini
2011-01-04 13:15:20 ----A---- C:\CONFIG.SYS
2011-01-04 13:15:20 ----A---- C:\AUTOEXEC.BAT
2011-01-04 13:14:54 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-01-04 13:13:48 ----RD---- C:\WINDOWS\Offline Web Pages
2011-01-04 13:13:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-01-04 13:13:47 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-01-04 13:13:41 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-01-04 13:13:35 ----HD---- C:\Program Files\WindowsUpdate
2011-01-04 13:13:32 ----D---- C:\Program Files\Online Services
2011-01-04 13:13:15 ----D---- C:\WINDOWS\system32\DirectX
2011-01-04 13:12:58 ----A---- C:\WINDOWS\system32\atrace.dll
2011-01-04 13:12:56 ----A---- C:\WINDOWS\system32\desktop.ini
2011-01-04 13:12:56 ----A---- C:\WINDOWS\desktop.ini
2011-01-04 13:12:51 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-01-04 13:12:50 ----A---- C:\WINDOWS\system32\acctres.dll
2011-01-04 13:12:49 ----D---- C:\Program Files\Common Files\Services
2011-01-04 13:12:47 ----SD---- C:\WINDOWS\Tasks
2011-01-04 13:12:47 ----D---- C:\Program Files\Common Files\MSSoap
2011-01-04 13:12:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-01-04 13:12:43 ----D---- C:\WINDOWS\srchasst
2011-01-04 13:12:42 ----D---- C:\WINDOWS\system32\Macromed
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wups.dll
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-01-04 13:12:40 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-01-04 13:12:39 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-01-04 13:12:36 ----D---- C:\Program Files\Movie Maker
2011-01-04 13:12:33 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-01-04 13:12:33 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-01-04 13:12:33 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-01-04 13:12:33 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-01-04 13:12:29 ----D---- C:\WINDOWS\system32\Restore
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\srclient.dll
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\fltmc.exe
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-01-04 13:12:29 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\msconf.dll
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-01-04 13:12:28 ----A---- C:\WINDOWS\system32\ils.dll
2011-01-04 13:12:26 ----D---- C:\Program Files\NetMeeting
2011-01-04 13:12:26 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-01-04 13:12:26 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-01-04 13:12:25 ----A---- C:\WINDOWS\system32\inetres.dll
2011-01-04 13:12:25 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-01-04 13:12:23 ----D---- C:\Program Files\Outlook Express
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\mstask.dll
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\isign32.dll
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-01-04 13:12:23 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-01-04 13:12:22 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-01-04 13:12:16 ----D---- C:\Program Files\Common Files\System
2011-01-04 13:12:15 ----D---- C:\Program Files\Internet Explorer
2011-01-04 13:11:39 ----D---- C:\Program Files\ComPlus Applications
2011-01-04 13:11:37 ----A---- C:\WINDOWS\vbaddin.ini
2011-01-04 13:11:37 ----A---- C:\WINDOWS\vb.ini
2011-01-04 13:11:32 ----D---- C:\WINDOWS\Registration
2011-01-04 13:11:24 ----D---- C:\Program Files\Windows Media Player
2011-01-04 13:11:18 ----D---- C:\Program Files\Messenger
2011-01-04 13:11:15 ----D---- C:\Program Files\MSN Gaming Zone
2011-01-04 13:11:15 ----A---- C:\WINDOWS\system32\write.exe
2011-01-04 13:11:08 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-01-04 13:11:07 ----A---- C:\WINDOWS\system32\winchat.exe
2011-01-04 13:11:07 ----A---- C:\WINDOWS\system32\hticons.dll
2011-01-04 13:11:07 ----A---- C:\WINDOWS\system32\avwav.dll
2011-01-04 13:11:07 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-01-04 13:11:07 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-01-04 13:11:01 ----A---- C:\WINDOWS\system32\charmap.exe
2011-01-04 13:11:01 ----A---- C:\WINDOWS\system32\getuname.dll
2011-01-04 13:11:01 ----A---- C:\WINDOWS\system32\calc.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\winmine.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\tskill.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\sol.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\reset.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-01-04 13:11:00 ----A---- C:\WINDOWS\system32\freecell.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\tscon.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\shadow.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\regini.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\msg.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\logoff.exe
2011-01-04 13:10:59 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\stclient.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-01-04 13:10:58 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-01-04 13:10:57 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-01-04 13:10:52 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-01-04 13:10:52 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-01-04 13:10:52 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-01-04 13:10:51 ----D---- C:\Program Files\Windows NT
2011-01-04 13:10:51 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-01-04 13:10:51 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-01-04 13:10:51 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-01-04 13:10:51 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\spider.exe
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-01-04 13:10:50 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-01-04 13:10:49 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-01-04 13:10:48 ----D---- C:\WINDOWS\system32\MsDtc
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-01-04 13:10:48 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-01-04 13:10:47 ----D---- C:\WINDOWS\system32\Com
2011-01-04 13:10:47 ----A---- C:\WINDOWS\system32\colbact.dll
2011-01-04 13:10:47 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-01-04 13:10:47 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-01-04 13:10:47 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-01-04 13:10:46 ----A---- C:\WINDOWS\system32\comuid.dll
2011-01-04 13:10:46 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-01-04 13:10:46 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-01-04 13:10:46 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-01-04 13:10:40 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-01-04 13:10:39 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-01-04 13:10:39 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-01-04 13:10:39 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-01-04 13:10:36 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2011-01-04 13:10:35 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 months======

2011-01-05 15:43:54 ----A---- C:\WINDOWS\win.ini
2011-01-04 14:03:33 ----A---- C:\WINDOWS\system.ini
2011-01-04 13:14:44 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-13 46464]
R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 SISAGP;SiS AGP Filter; C:\WINDOWS\system32\DRIVERS\SISAGPX.sys [2003-02-20 36608]
R0 SiSide;SiSide; C:\WINDOWS\system32\DRIVERS\siside.sys [2003-03-25 4096]
R0 sisidex;sisidex; C:\WINDOWS\system32\drivers\sisidex.sys [2002-10-17 49024]
R0 sisperf;Add Performance Filter Driver; C:\WINDOWS\system32\drivers\sisperf.sys [2002-08-20 9472]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-01-04 691696]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 nvcap;nVidia WDM Video Capture (universal); C:\WINDOWS\system32\DRIVERS\nvcap.sys [2005-01-31 141246]
R2 NVXBAR;nVidia WDM A/V Crossbar; C:\WINDOWS\system32\DRIVERS\NVxbar.sys [2005-01-31 16176]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
R3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-03-02 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-06-01 3925920]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2002-07-10 32256]
S3 awg9q55a;awg9q55a; C:\WINDOWS\system32\drivers\awg9q55a.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GPCIDrv;GPCIDrv; \??\C:\WINDOWS\GPCIDrv.sys []
S3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pwldypoc;pwldypoc; \??\C:\DOCUME~1\VAMPIR~1\LOCALS~1\Temp\pwldypoc.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-01-04 153376]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-06-01 155715]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-01-04 75064]

-----------------EOF-----------------

Re: GMER

Napsal: 04 úno 2011 07:37
od Caroprd111
Obrázek V logu nevidím antivir a firewall, doinstalujte :!: http://www.viry.cz/forum/viewtopic.php?f=29&t=6152 + http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Jinak je log v pořádku. :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz