Log pre mojti - Win32:Malware-gen detekovaný v SP42375

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#1 Příspěvek od Kovas »

Robil som reinstal systému Win XP Prof, na notebooku HP 6730b. Dnes mi avast nahlásil virus s odporučením urobiť kontrolu po reštarte. To som aj urobil. Súbory boli presunuté do truhly.
http://img841.imageshack.us/i/virovtruhla.jpg/
Virus bol detekovaný aj v SP 42375, čo je driver-audio "ADI SoundMAX AD1984A Audio Driver for Microsoft Windows XP" stiahnutý zo stránky HP.

Log z RSIT :

Logfile of random's system information tool 1.08 (written by random/random)
Run by Kovas at 2011-02-05 23:30:39
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 17 GB (58%) free of 30 GB
Total RAM: 1976 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:30:45, on 5.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DisplayLink Core Software\DisplayLinkUI.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ActivIdentity\ActivClient\acevents.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
D:\Programy\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
D:\Programy\totalcmd\TOTALCMD.EXE
D:\Instal\RSIT\RSIT.exe
C:\Program Files\trend micro\Kovas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [acevents] "C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
O4 - HKLM\..\Run: [accrdsub] "C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [RemoteControl] D:\Programy\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: ackpbsc - C:\Program Files\ActivIdentity\ActivClient\ackpbsc.dll
O20 - Winlogon Notify: acunlock - C:\Program Files\ActivIdentity\ActivClient\acunlock.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: DisplayLinkManager (DisplayLinkService) - DisplayLink Corp. - C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

--
End of file - 7621 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-01-13 3396624]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2008-03-24 884736]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-01-17 2548552]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2010-08-04 136216]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2010-08-04 170008]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2010-08-04 145432]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2010-02-25 287800]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2010-05-20 500792]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-03 153640]
""= []
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-03 400936]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"RemoteControl"=D:\Programy\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR]
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vspdfprsrv.exe]
D:\Programy\Visagesoft\eXPert PDF 5\vspdfprsrv.exe [2007-07-02 1179648]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ackpbsc]
C:\Program Files\ActivIdentity\ActivClient\ackpbsc.dll [2009-06-03 113152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\acunlock]
C:\Program Files\ActivIdentity\ActivClient\acunlock.dll [2009-06-03 299520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2010-05-14 214016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Programy\Skype\Phone\Skype.exe"="D:\Programy\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Programy\Skype\Plugin Manager\skypePM.exe"="D:\Programy\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Programy\Pinnacle\Studio 14\Programs\RM.exe"="D:\Programy\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Programy\Pinnacle\Studio 14\Programs\Studio.exe"="D:\Programy\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"D:\Programy\Pinnacle\Studio 14\Programs\umi.exe"="D:\Programy\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-02-05 23:20:09 ----A---- C:\WINDOWS\NeroDigital.ini
2011-02-05 23:14:25 ----D---- C:\Documents and Settings\Kovas\Data aplikací\CyberLink
2011-02-05 23:09:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2011-02-05 22:36:11 ----A---- C:\WINDOWS\system32\unrar.dll
2011-02-05 22:36:10 ----A---- C:\WINDOWS\avisplitter.ini
2011-02-05 22:36:07 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2011-02-05 22:36:07 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-02-05 22:36:07 ----A---- C:\WINDOWS\system32\xvidcore.dll
2011-02-05 22:36:06 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-02-05 22:36:06 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-02-05 22:36:03 ----D---- C:\Program Files\K-Lite Codec Pack
2011-02-05 20:52:16 ----D---- C:\rsit
2011-02-05 20:52:16 ----D---- C:\Program Files\trend micro
2011-02-05 20:27:20 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Jpeg Resampler
2011-02-05 20:04:32 ----A---- C:\WINDOWS\unvise32.exe
2011-02-05 20:04:30 ----D---- C:\Program Files\LooksBuilderSE
2011-02-05 19:57:34 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2011-02-05 19:57:27 ----D---- C:\Program Files\Common Files\Pinnacle
2011-02-05 19:56:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2011-02-05 19:51:30 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2011-02-05 19:51:28 ----D---- C:\Program Files\Common Files\Yahoo!
2011-02-05 19:51:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2011-02-05 19:51:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2011-02-05 17:42:31 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-02-05 17:42:19 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2011-02-05 17:40:50 ----D---- C:\Program Files\Pinnacle
2011-02-05 17:40:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2011-02-05 00:15:47 ----A---- C:\WINDOWS\VPlayer.INI
2011-02-04 00:19:32 ----N---- C:\WINDOWS\system32\drivers\imagesrv.sys
2011-02-04 00:19:32 ----N---- C:\WINDOWS\system32\drivers\imagedrv.sys
2011-02-04 00:19:18 ----N---- C:\WINDOWS\system32\ImagXRA7.dll
2011-02-04 00:19:18 ----N---- C:\WINDOWS\system32\ImagXR7.dll
2011-02-04 00:19:18 ----N---- C:\WINDOWS\system32\ImagXpr7.dll
2011-02-04 00:19:18 ----N---- C:\WINDOWS\system32\ImagX7.dll
2011-02-04 00:19:18 ----A---- C:\WINDOWS\system32\TwnLib20.dll
2011-02-04 00:19:17 ----D---- C:\Program Files\Common Files\Ahead
2011-02-04 00:19:17 ----A---- C:\WINDOWS\system32\NeroCheck.exe
2011-02-03 18:26:06 ----D---- C:\Documents and Settings\Kovas\Data aplikací\AVS4YOU
2011-02-03 18:24:45 ----D---- C:\Program Files\AVS4YOU
2011-02-03 18:24:17 ----A---- C:\WINDOWS\system32\libmfxsw32.dll
2011-02-03 18:24:17 ----A---- C:\WINDOWS\system32\libmfxhw32.dll
2011-02-03 18:24:08 ----D---- C:\Program Files\Common Files\AVSMedia
2011-02-03 18:23:50 ----D---- C:\WINDOWS\system32\drivers\umdf
2011-02-03 18:23:41 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-02-03 18:22:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVS4YOU
2011-02-03 18:22:50 ----A---- C:\WINDOWS\system32\msxml3a.dll
2011-02-03 18:22:50 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2011-02-03 17:33:12 ----A---- C:\WINDOWS\system32\drivers\hpdskflt.sys
2011-02-03 17:33:12 ----A---- C:\WINDOWS\system32\drivers\Accelerometer.sys
2011-02-03 10:08:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-02-03 10:08:06 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-02-03 10:07:45 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-02-03 09:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-02-03 09:56:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2011-02-03 09:43:03 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Macromedia
2011-02-03 09:43:02 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Adobe
2011-02-03 08:02:47 ----D---- C:\WINDOWS\pss
2011-02-03 02:06:21 ----A---- C:\WINDOWS\system32\msvcr70.dll
2011-02-03 02:04:57 ----D---- C:\Program Files\Common Files\ActivIdentity
2011-02-03 02:04:57 ----D---- C:\Program Files\ActivIdentity
2011-02-03 02:04:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\hpqLog
2011-02-03 01:18:46 ----D---- C:\Program Files\HP USB Docking Video
2011-02-03 01:18:29 ----D---- C:\Program Files\DisplayLink Core Software
2011-02-03 00:49:27 ----A---- C:\WINDOWS\system32\drivers\b57xp32.sys
2011-02-03 00:49:08 ----D---- C:\WINDOWS\hpq
2011-02-02 23:58:25 ----D---- C:\Documents and Settings\Kovas\Data aplikací\skypePM
2011-02-02 23:57:51 ----D---- C:\Program Files\Common Files\Skype
2011-02-02 23:46:05 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Skype
2011-02-02 23:46:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-02-02 23:41:11 ----D---- C:\Documents and Settings\Kovas\Data aplikací\eXPert PDF Editor
2011-02-02 23:39:29 ----A---- C:\WINDOWS\system32\vsmon1.dll
2011-02-02 23:39:22 ----D---- C:\WINDOWS\My Documents
2011-02-02 23:39:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\eXPert PDF Jobs
2011-02-02 23:39:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\eXPert PDF
2011-02-02 23:35:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\eXPert PDF 5
2011-02-02 22:53:40 ----A---- C:\WINDOWS\SMWizard.INI
2011-02-02 20:23:39 ----A---- C:\Documents and Settings\All Users\Data aplikací\HPWALog.txt
2011-02-02 19:50:13 ----A---- C:\WINDOWS\system32\VBAR332.DLL
2011-02-02 19:50:13 ----A---- C:\WINDOWS\system32\MSRD2X35.DLL
2011-02-02 19:50:13 ----A---- C:\WINDOWS\system32\MSJTER35.DLL
2011-02-02 19:50:13 ----A---- C:\WINDOWS\system32\MSJINT35.DLL
2011-02-02 19:50:13 ----A---- C:\WINDOWS\system32\MSJET35.DLL
2011-02-02 18:46:53 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2011-02-02 18:46:43 ----A---- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys
2011-02-02 18:46:43 ----A---- C:\WINDOWS\system32\drivers\CPQBttn.sys
2011-02-02 18:46:41 ----A---- C:\WINDOWS\system32\BttnCmns.dll
2011-02-02 18:46:41 ----A---- C:\WINDOWS\system32\BttnCmn.dll
2011-02-02 18:14:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\HP
2011-02-02 18:11:49 ----D---- C:\Documents and Settings\Kovas\Data aplikací\hpqLog
2011-02-02 17:26:17 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-02-02 17:24:34 ----D---- C:\Program Files\MSBuild
2011-02-02 17:24:31 ----D---- C:\WINDOWS\system32\XPSViewer
2011-02-02 17:24:27 ----D---- C:\WINDOWS\system32\en-us
2011-02-02 17:24:27 ----D---- C:\Program Files\Reference Assemblies
2011-02-02 17:24:03 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-02-02 17:23:24 ----RSD---- C:\WINDOWS\assembly
2011-02-02 17:23:04 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-02 16:17:34 ----D---- C:\HP XPe Add-ons
2011-02-02 15:09:31 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Mozilla
2011-02-02 14:36:08 ----D---- C:\Documents and Settings\Kovas\Data aplikací\avidemux
2011-02-02 14:25:09 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-02 14:25:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-02-02 14:24:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-02-02 14:23:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-02-02 12:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-02-02 12:47:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-02-02 12:47:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-02-02 12:47:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-02-02 12:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-02-02 12:46:50 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2011-02-02 12:46:41 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-02-02 12:46:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2011-02-02 12:46:32 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-02-02 12:46:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-02-02 12:46:22 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-02-02 12:46:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-02-02 12:46:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-02-02 12:46:07 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-02-02 12:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2011-02-02 12:45:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-02-02 12:45:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-02-02 12:45:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-02-02 12:45:38 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-02-02 12:45:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-02-02 12:45:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-02-02 12:45:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-02-02 12:45:18 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-02-02 12:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-02-02 12:44:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-02-02 12:44:35 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-02-02 12:44:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-02-02 12:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-02-02 12:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-02-02 12:44:17 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-02-02 12:44:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-02-02 12:44:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-02-02 12:43:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-02-02 12:43:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-02-02 12:43:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-02-02 12:43:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2011-02-02 12:43:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-02-02 12:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2011-02-02 12:43:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-02-02 12:43:21 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-02-02 12:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-02-02 12:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-02-02 12:43:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-02-02 12:43:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-02-02 12:42:56 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-02-02 12:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-02-02 12:42:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-02-02 12:42:39 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-02-02 12:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-02-02 12:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-02-02 12:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-02-02 12:42:19 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-02-02 12:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-02-02 12:42:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-02-02 12:42:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2011-02-02 12:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-02-02 12:41:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-02-02 12:41:52 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-02-02 12:41:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-02-02 12:41:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-02-02 12:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-02-02 12:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-02-02 12:41:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-02-02 12:41:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-02-02 12:41:06 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-02-02 12:40:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-02-02 12:40:52 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-02-02 12:40:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2011-02-02 12:40:42 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-02-02 12:40:37 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-02-02 12:40:33 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-02-02 12:40:28 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-02-02 12:40:23 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-02-02 12:40:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-02-02 12:40:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-02-02 12:40:08 ----D---- C:\WINDOWS\ie8updates
2011-02-02 12:40:04 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-02-02 12:39:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-02-02 12:39:49 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-02-02 12:39:44 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-02-02 12:39:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-02-02 12:39:31 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-02-02 12:39:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-02-02 12:39:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-02-02 12:18:32 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-02-02 12:17:06 ----A---- C:\WINDOWS\ODBC.INI
2011-02-02 12:17:01 ----A---- C:\WINDOWS\system32\mdimon.dll
2011-02-02 12:16:26 ----D---- C:\Program Files\Microsoft.NET
2011-02-02 12:15:57 ----D---- C:\Program Files\Common Files\DESIGNER
2011-02-02 12:15:52 ----D---- C:\Program Files\Microsoft Works
2011-02-02 12:15:39 ----D---- C:\Program Files\Microsoft Visual Studio
2011-02-02 12:15:21 ----D---- C:\WINDOWS\SHELLNEW
2011-02-02 12:14:21 ----D---- C:\Program Files\Microsoft Office
2011-02-02 12:06:07 ----D---- C:\WINDOWS\system32\PreInstall
2011-02-02 12:06:05 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-02-02 12:06:05 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-02 11:51:25 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-02-02 11:40:49 ----HDC---- C:\WINDOWS\$NtUninstallKB953955$
2011-02-02 11:40:45 ----HDC---- C:\WINDOWS\$NtUninstallKB949764$
2011-02-02 11:40:34 ----D---- C:\Program Files\Hewlett-Packard
2011-02-02 11:23:52 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2011-02-02 11:23:23 ----N---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2011-02-02 11:23:23 ----A---- C:\WINDOWS\system32\drivers\ATSwpWDF.sys
2011-02-02 11:12:06 ----N---- C:\WINDOWS\system32\agrsmdel.exe
2011-02-02 11:11:53 ----D---- C:\WINDOWS\Options
2011-02-02 11:11:50 ----A---- C:\WINDOWS\HPModemVersion.dll
2011-02-02 11:11:49 ----N---- C:\WINDOWS\system32\agrscoin.dll
2011-02-02 11:11:49 ----A---- C:\WINDOWS\system32\drivers\AGRSM.sys
2011-02-02 11:11:49 ----A---- C:\WINDOWS\system32\agrsmsvc.exe
2011-02-02 11:11:49 ----A---- C:\WINDOWS\agrsmdel.exe
2011-02-02 10:58:25 ----A---- C:\WINDOWS\system32\CSVer.dll
2011-02-02 10:42:30 ----D---- C:\Program Files\HP Webcam Application
2011-02-02 10:36:10 ----A---- C:\WINDOWS\system32\oeminfo.ini
2011-02-02 10:35:28 ----D---- C:\Program Files\HPQ
2011-02-02 10:27:10 ----D---- C:\Documents and Settings\Kovas\Data aplikací\GHISLER
2011-02-02 10:24:14 ----A---- C:\WINDOWS\system32\difxapi.dll
2011-02-02 10:24:13 ----D---- C:\Program Files\Intel
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igxprd32.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igfxtray.exe
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igfxpers.exe
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igfxext.exe
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\igfxexps.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\IGFXDEVLib.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\gfxSrvc.dll
2011-02-02 10:23:53 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxress.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxpph.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxdo.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxdev.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\igfxCoIn_v5268.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\ig4icd32.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\hkcmd.exe
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\hccutils.dll
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\GfxUI.exe.config
2011-02-02 10:23:52 ----A---- C:\WINDOWS\system32\GfxUI.exe
2011-02-02 10:23:27 ----D---- C:\Intel
2011-02-02 10:20:15 ----D---- C:\Program Files\Hp
2011-02-02 10:03:17 ----D---- C:\Program Files\COMODO
2011-02-02 10:02:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Comodo
2011-02-02 09:51:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-02-02 09:51:42 ----A---- C:\WINDOWS\system32\NETw5r32.dll
2011-02-02 09:51:42 ----A---- C:\WINDOWS\system32\NETw5c32.dll
2011-02-02 09:51:42 ----A---- C:\WINDOWS\system32\drivers\NETw5x32.sys
2011-02-02 09:45:21 ----D---- C:\Program Files\Broadcom
2011-02-02 09:45:20 ----D---- C:\Documents and Settings\Kovas\Data aplikací\InstallShield
2011-02-02 08:33:40 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-02 08:33:40 ----D---- C:\Program Files\Analog Devices
2011-02-02 08:33:40 ----A---- C:\WINDOWS\system32\wdmioctl.dll
2011-02-02 08:33:40 ----A---- C:\WINDOWS\system32\SMMedia.dll
2011-02-02 08:33:40 ----A---- C:\WINDOWS\system32\DSndUp.exe
2011-02-02 08:33:28 ----D---- C:\Program Files\Common Files\InstallShield
2011-02-02 00:42:11 ----SHD---- C:\RECYCLER
2011-02-02 00:41:18 ----A---- C:\WINDOWS\system32\h323log.txt
2011-02-02 00:40:39 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-02-02 00:40:38 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-02-02 00:40:36 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-02-02 00:40:35 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-02-02 00:40:33 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-02-02 00:40:32 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-02-02 00:40:31 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-02-02 00:40:29 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-02-02 00:40:24 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-02-02 00:40:24 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-02-02 00:38:18 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-02-02 00:38:13 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\drivers\btwdndis.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\drivers\btport.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\drivers\btkrnl.sys
2011-02-02 00:38:12 ----A---- C:\WINDOWS\system32\btw_ci.dll
2011-02-02 00:38:11 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-02-02 00:38:11 ----A---- C:\WINDOWS\system32\drivers\btaudio.sys
2011-02-02 00:38:09 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-02-02 00:38:08 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-02-02 00:38:07 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-02-02 00:38:06 ----D---- C:\Program Files\WIDCOMM
2011-02-02 00:38:06 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2011-02-02 00:38:05 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-02-02 00:38:03 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2011-02-02 00:38:00 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-02-02 00:37:39 ----A---- C:\WINDOWS\system32\hidserv.dll
2011-02-02 00:37:37 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2011-02-02 00:37:37 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-02-02 00:37:37 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-02-02 00:37:12 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-02-02 00:36:44 ----D---- C:\SWSetup
2011-02-02 00:36:40 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2011-02-02 00:36:19 ----A---- C:\WINDOWS\system32\usbui.dll
2011-02-02 00:36:03 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2011-02-02 00:36:03 ----A---- C:\WINDOWS\system32\drivers\cmbatt.sys
2011-02-02 00:36:03 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2011-02-02 00:35:56 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys
2011-02-02 00:35:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-02 00:35:13 ----SHD---- C:\WINDOWS\Installer
2011-02-02 00:35:13 ----D---- C:\Program Files\Common Files\ODBC
2011-02-02 00:35:13 ----A---- C:\WINDOWS\ODBCINST.INI
2011-02-02 00:35:10 ----RD---- C:\Program Files
2011-02-02 00:35:10 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-02-02 00:35:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-02-02 00:35:10 ----D---- C:\Program Files\Common Files
2011-02-02 00:35:07 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-02-02 00:35:07 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-02-02 00:35:07 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-02-02 00:35:05 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-02-02 00:35:03 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-02-02 00:35:02 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-02-02 00:35:02 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-02-02 00:35:02 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#2 Příspěvek od Kovas »

Pokračovanie logu z RSIT :

2011-02-02 00:35:02 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-02-02 00:35:02 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdsl.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdro.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdpl.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2011-02-02 00:34:59 ----A---- C:\WINDOWS\system32\kbdhu.dll
2011-02-02 00:34:58 ----A---- C:\WINDOWS\system32\kbdycl.dll
2011-02-02 00:34:58 ----A---- C:\WINDOWS\system32\kbdcr.dll
2011-02-02 00:34:58 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2011-02-02 00:34:58 ----A---- C:\WINDOWS\system32\irclass.dll
2011-02-02 00:34:58 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-02-02 00:34:57 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-02-02 00:34:57 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-02-02 00:34:57 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-02-02 00:34:55 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-02-02 00:34:55 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-02-02 00:34:55 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-02-02 00:34:55 ----A---- C:\WINDOWS\system32\batt.dll
2011-02-02 00:34:54 ----A---- C:\WINDOWS\system32\storprop.dll
2011-02-02 00:34:54 ----A---- C:\WINDOWS\notepad.exe
2011-02-02 00:34:46 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-02-02 00:34:44 ----RA---- C:\WINDOWS\SET8.tmp
2011-02-02 00:34:42 ----RA---- C:\WINDOWS\SET4.tmp
2011-02-02 00:34:40 ----RA---- C:\WINDOWS\SET3.tmp
2011-02-02 00:34:35 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-02 00:34:35 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-02 00:34:30 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-02-02 00:33:43 ----D---- C:\Documents and Settings
2011-02-02 00:33:07 ----A---- C:\WINDOWS\system32\drivers\revoflt.sys
2011-02-02 00:32:59 ----SH---- C:\boot.ini
2011-02-02 00:32:19 ----SHD---- C:\System Volume Information
2011-02-02 00:29:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-02 00:29:05 ----RSD---- C:\WINDOWS\Fonts
2011-02-02 00:29:05 ----RD---- C:\WINDOWS\Web
2011-02-02 00:29:05 ----HD---- C:\WINDOWS\inf
2011-02-02 00:29:05 ----D---- C:\WINDOWS\WinSxS
2011-02-02 00:29:05 ----D---- C:\WINDOWS\twain_32
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Temp
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\wins
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\wbem
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\usmt
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\spool
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\ShellExt
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\Setup
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\ras
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\oobe
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\npp
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\mui
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\IME
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\icsxml
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\ias
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\export
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\drivers
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\dhcp
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\config
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\3com_dmi
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\3076
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\2052
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1054
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1042
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1041
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1037
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1033
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1031
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1029
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1028
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32\1025
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system32
2011-02-02 00:29:05 ----D---- C:\WINDOWS\system
2011-02-02 00:29:05 ----D---- C:\WINDOWS\security
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Resources
2011-02-02 00:29:05 ----D---- C:\WINDOWS\repair
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Provisioning
2011-02-02 00:29:05 ----D---- C:\WINDOWS\pchealth
2011-02-02 00:29:05 ----D---- C:\WINDOWS\PeerNet
2011-02-02 00:29:05 ----D---- C:\WINDOWS\mui
2011-02-02 00:29:05 ----D---- C:\WINDOWS\msapps
2011-02-02 00:29:05 ----D---- C:\WINDOWS\msagent
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Media
2011-02-02 00:29:05 ----D---- C:\WINDOWS\java
2011-02-02 00:29:05 ----D---- C:\WINDOWS\ime
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Help
2011-02-02 00:29:05 ----D---- C:\WINDOWS\ehome
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Driver Cache
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Debug
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Cursors
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Connection Wizard
2011-02-02 00:29:05 ----D---- C:\WINDOWS\Config
2011-02-02 00:29:05 ----D---- C:\WINDOWS\AppPatch
2011-02-02 00:29:05 ----D---- C:\WINDOWS\addins
2011-02-02 00:29:05 ----D---- C:\WINDOWS
2011-02-02 00:29:05 ----ASH---- C:\pagefile.sys
2011-02-02 00:22:15 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-02-02 00:22:14 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-02-02 00:22:14 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-02-02 00:22:13 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-02-02 00:22:11 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-02-02 00:22:11 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-02-02 00:22:11 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-02-02 00:22:01 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-02-02 00:21:56 ----D---- C:\Program Files\Alwil Software
2011-02-02 00:21:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-02-02 00:20:20 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2011-02-02 00:18:51 ----D---- C:\WINDOWS\WBEM
2011-02-02 00:17:58 ----HDC---- C:\WINDOWS\ie8
2011-02-02 00:15:39 ----D---- C:\WINDOWS\Prefetch
2011-02-02 00:05:42 ----N---- C:\WINDOWS\system32\msxml6r.dll
2011-02-02 00:05:41 ----N---- C:\WINDOWS\system32\msxml6.dll
2011-02-02 00:05:34 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-02-02 00:05:34 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-02-02 00:05:34 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2011-02-02 00:05:34 ----N---- C:\WINDOWS\system32\comsdupd.exe
2011-02-02 00:05:33 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2011-02-02 00:05:33 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2011-02-02 00:05:33 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2011-02-02 00:05:33 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2011-02-02 00:05:33 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\credssp.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\azroles.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2011-02-02 00:05:32 ----N---- C:\WINDOWS\system32\ati3duag.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-02-02 00:05:31 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\mssha.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-02-02 00:05:30 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\s3gnb.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\qutil.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\qagent.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\onex.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\napstat.exe
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2011-02-02 00:05:29 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\slserv.exe
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\slrundll.exe
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\slgen.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\slextspk.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\slcoinst.dll
2011-02-02 00:05:28 ----N---- C:\WINDOWS\system32\setupn.exe
2011-02-02 00:05:27 ----N---- C:\WINDOWS\system32\wmphoto.dll
2011-02-02 00:05:27 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-02-02 00:05:27 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2011-02-02 00:05:27 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2011-02-02 00:05:26 ----N---- C:\WINDOWS\slrundll.exe
2011-02-02 00:05:26 ----D---- C:\WINDOWS\system32\cs-cz
2011-02-02 00:05:26 ----A---- C:\WINDOWS\system32\xmllite.dll
2011-02-02 00:05:25 ----D---- C:\WINDOWS\system32\cs
2011-02-02 00:05:25 ----D---- C:\WINDOWS\system32\bits
2011-02-02 00:05:25 ----D---- C:\WINDOWS\l2schemas
2011-02-02 00:03:44 ----D---- C:\WINDOWS\ServicePackFiles
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2011-02-02 00:01:51 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2011-02-02 00:01:51 ----D---- C:\WINDOWS\network diagnostic
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-02-02 00:01:50 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-02-02 00:01:49 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2011-02-02 00:01:48 ----N---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-02-02 00:01:47 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2011-02-02 00:00:32 ----A---- C:\WINDOWS\002699_.tmp
2011-02-02 00:00:25 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-02-02 00:00:20 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-02-01 23:59:00 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-02-01 23:54:12 ----D---- C:\Documents and Settings\Kovas\Data aplikací\Identities
2011-02-01 23:54:10 ----HD---- C:\Program Files\Uninstall Information
2011-02-01 23:54:06 ----ASH---- C:\Documents and Settings\Kovas\Data aplikací\desktop.ini
2011-02-01 23:54:05 ----SD---- C:\Documents and Settings\Kovas\Data aplikací\Microsoft
2011-02-01 23:52:50 ----D---- C:\WINDOWS\SoftwareDistribution
2011-02-01 23:52:48 ----SD---- C:\WINDOWS\system32\Microsoft
2011-02-01 23:52:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-02-01 23:48:11 ----D---- C:\WINDOWS\system32\xircom
2011-02-01 23:48:11 ----D---- C:\Program Files\xerox
2011-02-01 23:48:11 ----D---- C:\Program Files\microsoft frontpage
2011-02-01 23:47:46 ----RASH---- C:\MSDOS.SYS
2011-02-01 23:47:46 ----RASH---- C:\IO.SYS
2011-02-01 23:47:46 ----A---- C:\WINDOWS\control.ini
2011-02-01 23:47:46 ----A---- C:\CONFIG.SYS
2011-02-01 23:47:46 ----A---- C:\AUTOEXEC.BAT
2011-02-01 23:47:34 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-02-01 23:46:57 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-02-01 23:46:57 ----RD---- C:\WINDOWS\Offline Web Pages
2011-02-01 23:46:57 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-02-01 23:46:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-02-01 23:46:48 ----HD---- C:\Program Files\WindowsUpdate
2011-02-01 23:46:45 ----D---- C:\Program Files\Online Services
2011-02-01 23:46:31 ----D---- C:\WINDOWS\system32\DirectX
2011-02-01 23:46:13 ----A---- C:\WINDOWS\system32\atrace.dll
2011-02-01 23:46:10 ----A---- C:\WINDOWS\system32\desktop.ini
2011-02-01 23:46:10 ----A---- C:\WINDOWS\desktop.ini
2011-02-01 23:46:04 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-02-01 23:46:02 ----D---- C:\Program Files\Common Files\Services
2011-02-01 23:46:02 ----A---- C:\WINDOWS\system32\acctres.dll
2011-02-01 23:45:59 ----SD---- C:\WINDOWS\Tasks
2011-02-01 23:45:59 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-02-01 23:45:58 ----D---- C:\Program Files\Common Files\MSSoap
2011-02-01 23:45:55 ----D---- C:\WINDOWS\srchasst
2011-02-01 23:45:54 ----D---- C:\WINDOWS\system32\Macromed
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wups.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-02-01 23:45:51 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-02-01 23:45:50 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-02-01 23:45:50 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-02-01 23:45:50 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-02-01 23:45:50 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-02-01 23:45:50 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-02-01 23:45:46 ----D---- C:\Program Files\Movie Maker
2011-02-01 23:45:43 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-02-01 23:45:43 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-02-01 23:45:43 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-02-01 23:45:43 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-02-01 23:45:40 ----A---- C:\WINDOWS\system32\fltmc.exe
2011-02-01 23:45:40 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-02-01 23:45:40 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2011-02-01 23:45:39 ----D---- C:\WINDOWS\system32\Restore
2011-02-01 23:45:39 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-02-01 23:45:39 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-02-01 23:45:39 ----A---- C:\WINDOWS\system32\srclient.dll
2011-02-01 23:45:39 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\msconf.dll
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-02-01 23:45:38 ----A---- C:\WINDOWS\system32\ils.dll
2011-02-01 23:45:35 ----D---- C:\Program Files\NetMeeting
2011-02-01 23:45:35 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-02-01 23:45:35 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-02-01 23:45:34 ----A---- C:\WINDOWS\system32\inetres.dll
2011-02-01 23:45:34 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-02-01 23:45:32 ----D---- C:\Program Files\Outlook Express
2011-02-01 23:45:32 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-02-01 23:45:32 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-02-01 23:45:32 ----A---- C:\WINDOWS\system32\mstask.dll
2011-02-01 23:45:31 ----A---- C:\WINDOWS\system32\isign32.dll
2011-02-01 23:45:31 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-02-01 23:45:31 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-02-01 23:45:31 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-02-01 23:45:26 ----D---- C:\Program Files\Common Files\System
2011-02-01 23:45:20 ----D---- C:\Program Files\Internet Explorer
2011-02-01 23:44:52 ----D---- C:\Program Files\ComPlus Applications
2011-02-01 23:44:50 ----A---- C:\WINDOWS\vbaddin.ini
2011-02-01 23:44:50 ----A---- C:\WINDOWS\vb.ini
2011-02-01 23:44:46 ----D---- C:\WINDOWS\Registration
2011-02-01 23:44:39 ----D---- C:\Program Files\Windows Media Player
2011-02-01 23:44:33 ----D---- C:\Program Files\Messenger
2011-02-01 23:44:29 ----D---- C:\Program Files\MSN Gaming Zone
2011-02-01 23:44:29 ----A---- C:\WINDOWS\system32\write.exe
2011-02-01 23:44:21 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-02-01 23:44:21 ----A---- C:\WINDOWS\system32\hticons.dll
2011-02-01 23:44:21 ----A---- C:\WINDOWS\system32\avwav.dll
2011-02-01 23:44:21 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-02-01 23:44:21 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-02-01 23:44:20 ----A---- C:\WINDOWS\system32\winchat.exe
2011-02-01 23:44:14 ----A---- C:\WINDOWS\system32\charmap.exe
2011-02-01 23:44:14 ----A---- C:\WINDOWS\system32\getuname.dll
2011-02-01 23:44:14 ----A---- C:\WINDOWS\system32\calc.exe
2011-02-01 23:44:13 ----A---- C:\WINDOWS\system32\winmine.exe
2011-02-01 23:44:13 ----A---- C:\WINDOWS\system32\sol.exe
2011-02-01 23:44:13 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-02-01 23:44:13 ----A---- C:\WINDOWS\system32\freecell.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\tskill.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\tscon.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\shadow.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\reset.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\regini.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-02-01 23:44:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-02-01 23:44:11 ----A---- C:\WINDOWS\system32\msg.exe
2011-02-01 23:44:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-02-01 23:44:11 ----A---- C:\WINDOWS\system32\logoff.exe
2011-02-01 23:44:11 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\stclient.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-02-01 23:44:10 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-02-01 23:44:09 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-02-01 23:44:05 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-02-01 23:44:04 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-02-01 23:44:04 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-02-01 23:44:03 ----D---- C:\Program Files\Windows NT
2011-02-01 23:44:03 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-02-01 23:44:03 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-02-01 23:44:03 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\spider.exe
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-02-01 23:44:02 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-02-01 23:44:01 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-02-01 23:44:00 ----D---- C:\WINDOWS\system32\MsDtc
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-02-01 23:44:00 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-02-01 23:43:59 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-02-01 23:43:59 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-02-01 23:43:59 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-02-01 23:43:59 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-02-01 23:43:59 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-02-01 23:43:58 ----D---- C:\WINDOWS\system32\Com
2011-02-01 23:43:58 ----A---- C:\WINDOWS\system32\colbact.dll
2011-02-01 23:43:58 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-02-01 23:43:58 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-02-01 23:43:57 ----A---- C:\WINDOWS\system32\comuid.dll
2011-02-01 23:43:57 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-02-01 23:43:57 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-02-01 23:43:57 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-02-01 23:43:57 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-02-01 23:43:51 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-02-01 23:43:51 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-02-01 23:43:51 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-02-01 23:43:50 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-02-01 23:43:45 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2011-02-01 23:43:45 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2011-01-06 17:37:04 ----A---- C:\WINDOWS\system32\drivers\inspect.sys
2011-01-06 17:37:04 ----A---- C:\WINDOWS\system32\drivers\cmdhlp.sys
2011-01-06 17:37:02 ----A---- C:\WINDOWS\system32\drivers\cmdGuard.sys
2011-01-06 17:37:02 ----A---- C:\WINDOWS\system32\drivers\cmderd.sys

======List of files/folders modified in the last 1 months======

2011-02-03 08:04:30 ----A---- C:\WINDOWS\win.ini
2011-02-03 08:04:30 ----A---- C:\WINDOWS\system.ini
2011-02-01 23:47:26 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Disk Filter Driver; C:\WINDOWS\system32\DRIVERS\hpdskflt.sys [2008-05-23 24624]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2011-01-06 94784]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 SFAUDIO;Sonic Focus DSP Driver; C:\WINDOWS\system32\drivers\sfaudio.sys [2008-03-28 24064]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-01-13 29392]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2011-01-06 239368]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2011-01-06 27576]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-01-13 100176]
R3 Accelerometer;HP Accelerometer; C:\WINDOWS\system32\DRIVERS\Accelerometer.sys [2008-05-23 28592]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-12-11 338944]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\WINDOWS\System32\Drivers\ATSwpWDF.sys [2010-03-01 482176]
R3 b57w2k;Broadcom NetLink (TM) Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-11-26 187392]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-04-03 539512]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-04-03 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-04-03 879624]
R3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2008-04-03 156392]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-04-03 74688]
R3 DisplayLinkFilter;DisplayLinkFilter; C:\WINDOWS\system32\DRIVERS\DisplayLinkFilter.sys [2009-11-20 7040]
R3 DisplayLinkmirror;DisplayLinkmirror; C:\WINDOWS\system32\DRIVERS\DisplayLinkmirrorport.sys [2009-11-20 24320]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2010-02-25 9216]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2010-02-25 16768]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2010-05-14 1993472]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2008-07-23 44800]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NETw5x32;Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2010-04-05 6601216]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-03 207400]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-03-31 264800]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-01-17 1803224]
R2 DisplayLinkService;DisplayLinkManager; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [2009-11-20 4715880]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service; C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-08-31 92216]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-02-25 227896]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2010-08-31 710200]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Na Virustotal to testujem
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#3 Příspěvek od motji »

Zdravím :)
budu tu večer, kouknu na to. Hodte mi sem pak výsledek z virustotalu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#4 Příspěvek od Kovas »

Pekný deň prajem!
Včera bola nejaká dlhá doba čakania na virustotal. Tu je log z

File name: SMax4PNP.exe
Submission date: 2011-02-04 23:28:11 (UTC)
Current status: finished
Result: 4 /43 (9.3%)

MD5 : 90fda07d2843e2cb479be882e8aed728 SHA1 : d339f2a81994976e8407ce38fe3bff42f3837528 SHA256: 90b7e1d6e55db60bf7aed485a5a9bab51e170671d97730e101817cb55e3fd750 ssdeep: 6144:D41QtUU4my/PHGhj6N26VWMKFih3mJ5F4T35Byo95lmVkPv09tQtJe++rJXj0Eqq:SGhKx
NiVk8tQtJerJj0Eq/C File size : 1044480 bytes First seen: 2009-09-20 20:29:53 Last seen : 2011-02-04 23:28:11 Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit TrID:
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%) sigcheck:
publisher....: Analog Devices, Inc.
copyright....: Copyright (c) 2002-2006, Analog Devices
product......: SMax4PNP Application
description..: SMax4PNP
original name: SMax4PNP.exe
internal name: SMax4PNP
file version.: 6,0,5600,170
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: - PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1DB86
timedatestamp....: 0x4941491D (Thu Dec 11 17:08:45 2008)
machinetype......: 0x14C (Intel I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x1F3A2, 0x20000, 6.1, 9134e8682b2aa01e551a8423f8534911
.rdata, 0x21000, 0x63CE, 0x7000, 4.06, d6f3dcc273186bf55ea5c1193a760ad7
.data, 0x28000, 0x4058, 0x4000, 5.14, f1e1d29deb59b85b6e06d62972d44cb5
.rsrc, 0x2D000, 0xD2548, 0xD3000, 5.78, 01c80bae03b5483695dfd5ede662606c

[[ 11 import(s) ]]
advapi32.dll: RegOpenKeyExA, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegCreateKeyExA, RegCloseKey, RegCreateKeyA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA
gdi32.dll: CreatePolygonRgn, DeleteDC, GetBkColor, SetBkColor, DPtoLP, StretchDIBits, GetPixel, SelectObject, CreateSolidBrush, CombineRgn, GetCurrentObject, GetBitmapBits, CreateRectRgn, OffsetRgn, CreateFontIndirectA, GetTextExtentPoint32A, CreateBitmap, CreateCompatibleBitmap, GetMapMode, StretchBlt, DeleteObject, CreateBitmapIndirect, BitBlt, GetObjectA, CreateCompatibleDC
kernel32.dll: lstrcpynA, GetStartupInfoA, FreeLibrary, InterlockedDecrement, EnterCriticalSection, InterlockedIncrement, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, LockResource, LoadResource, FindResourceExA, GetVersionExA, GetSystemDefaultLangID, GetModuleFileNameA, lstrlenA, lstrcatA, lstrcpyA, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetWindowsDirectoryA, GetCurrentProcess, CloseHandle, WriteFile, CreateFileA, lstrcmpiA, GlobalFree, GlobalUnlock, GlobalAlloc, GlobalLock, DeviceIoControl, Sleep, GetLastError
mfc42.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
msvcrt.dll: __set_app_type, _controlfp, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __getmainargs, _acmdln, exit, _XcptFilter, _exit, _terminate@@YAXXZ, _except_handler3, _onexit, __dllonexit, __1type_info@@UAE@XZ, sscanf, _findfirst, _findclose, strtok, _mbsicmp, _mbslen, sprintf, strncpy, wcsncpy, _ftol, __CxxFrameHandler, _setmbcp
ole32.dll: CoInitialize, CoUninitialize
shell32.dll: Shell_NotifyIconA
smwdmif.dll: IsDriverLoaded, SetSpeakerConfiguration, SMaxLog, GetPlatformIDString, SetUserState, GetPlatformHWInformation, GetIndependentFrontMic, SetIndependentFrontMic, SetRearSpeakerMute, SetIndependentHeadphone, GetIndependentHeadphone, GetSPDIFCAPRATE, TerminateAllInst, ClearToTerminate, GetRearSpeakerMute, GetJackDevice, SetJackDevice, GetInterfaceVersion, GetOpMode, InitInterface, GetCapabilities, GetJackFunction
user32.dll: LoadMenuA, GetFocus, RegisterWindowMessageA, PostMessageA, MessageBoxA, FindWindowA, FillRect, GetParent, BringWindowToTop, SetForegroundWindow, SetFocus, SetWindowPos, ReleaseDC, GetComboBoxInfo, GetDC, CopyRect, GetClassNameA, SetWindowRgn, SetMenuDefaultItem, DeleteMenu, GetSubMenu, OffsetRect, GetCursorPos, DrawEdge, ExitWindowsEx, SetCursor, LoadCursorA, PtInRect, GetMessagePos, GetClientRect, GetSysColor, GetWindowTextA, GetActiveWindow, SetClassLongA, GetSystemMetrics, GetWindowPlacement, SystemParametersInfoA, SetWindowPlacement, ClientToScreen, ScreenToClient, InvalidateRect, DrawFocusRect, DrawTextA, SendMessageA, GetWindowRect, LoadBitmapA, IsWindow, KillTimer, SetTimer, LoadIconA, SetRect, EnableWindow, GetWindowLongA, SetWindowLongA, LoadMenuIndirectA
version.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
winmm.dll: mixerGetID, waveInGetNumDevs, waveInGetDevCapsA, mixerGetNumDevs, mixerSetControlDetails, mixerGetControlDetailsA, mixerGetLineControlsA, mixerGetDevCapsA, PlaySoundA, mixerGetLineInfoA

Ďalší log z virustotal

File name: trz3.tmp
Submission date: 2011-02-06 09:19:28 (UTC)
Current status: finished
Result: 1/ 43 (2.3%)

MD5 : 90fda07d2843e2cb479be882e8aed728 SHA1 : d339f2a81994976e8407ce38fe3bff42f3837528 SHA256: 90b7e1d6e55db60bf7aed485a5a9bab51e170671d97730e101817cb55e3fd750 ssdeep: 6144:D41QtUU4my/PHGhj6N26VWMKFih3mJ5F4T35Byo95lmVkPv09tQtJe++rJXj0Eqq:SGhKx
NiVk8tQtJerJj0Eq/C File size : 1044480 bytes First seen: 2009-09-20 20:29:53 Last seen : 2011-02-06 09:19:28 TrID:
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%) sigcheck:
publisher....: Analog Devices, Inc.
copyright....: Copyright (c) 2002-2006, Analog Devices
product......: SMax4PNP Application
description..: SMax4PNP
original name: SMax4PNP.exe
internal name: SMax4PNP
file version.: 6,0,5600,170
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: Armadillo v1.71 PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x1DB86
timedatestamp....: 0x4941491D (Thu Dec 11 17:08:45 2008)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0x1F3A2, 0x20000, 6.10, 9134e8682b2aa01e551a8423f8534911
.rdata, 0x21000, 0x63CE, 0x7000, 4.06, d6f3dcc273186bf55ea5c1193a760ad7
.data, 0x28000, 0x4058, 0x4000, 5.14, f1e1d29deb59b85b6e06d62972d44cb5
.rsrc, 0x2D000, 0xD2548, 0xD3000, 5.78, 01c80bae03b5483695dfd5ede662606c

[[ 11 import(s) ]]
VERSION.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
SMWDMIF.dll: IsDriverLoaded, SetSpeakerConfiguration, SMaxLog, GetPlatformIDString, SetUserState, GetPlatformHWInformation, GetIndependentFrontMic, SetIndependentFrontMic, SetRearSpeakerMute, SetIndependentHeadphone, GetIndependentHeadphone, GetSPDIFCAPRATE, TerminateAllInst, ClearToTerminate, GetRearSpeakerMute, GetJackDevice, SetJackDevice, GetInterfaceVersion, GetOpMode, InitInterface, GetCapabilities, GetJackFunction
WINMM.dll: mixerGetID, waveInGetNumDevs, waveInGetDevCapsA, mixerGetNumDevs, mixerSetControlDetails, mixerGetControlDetailsA, mixerGetLineControlsA, mixerGetDevCapsA, PlaySoundA, mixerGetLineInfoA
MFC42.DLL: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
MSVCRT.dll: __set_app_type, _controlfp, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __getmainargs, _acmdln, exit, _XcptFilter, _exit, _terminate@@YAXXZ, _except_handler3, _onexit, __dllonexit, __1type_info@@UAE@XZ, sscanf, _findfirst, _findclose, strtok, _mbsicmp, _mbslen, sprintf, strncpy, wcsncpy, _ftol, __CxxFrameHandler, _setmbcp
KERNEL32.dll: lstrcpynA, GetStartupInfoA, FreeLibrary, InterlockedDecrement, EnterCriticalSection, InterlockedIncrement, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, LockResource, LoadResource, FindResourceExA, GetVersionExA, GetSystemDefaultLangID, GetModuleFileNameA, lstrlenA, lstrcatA, lstrcpyA, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetWindowsDirectoryA, GetCurrentProcess, CloseHandle, WriteFile, CreateFileA, lstrcmpiA, GlobalFree, GlobalUnlock, GlobalAlloc, GlobalLock, DeviceIoControl, Sleep, GetLastError
USER32.dll: LoadMenuA, GetFocus, RegisterWindowMessageA, PostMessageA, MessageBoxA, FindWindowA, FillRect, GetParent, BringWindowToTop, SetForegroundWindow, SetFocus, SetWindowPos, ReleaseDC, GetComboBoxInfo, GetDC, CopyRect, GetClassNameA, SetWindowRgn, SetMenuDefaultItem, DeleteMenu, GetSubMenu, OffsetRect, GetCursorPos, DrawEdge, ExitWindowsEx, SetCursor, LoadCursorA, PtInRect, GetMessagePos, GetClientRect, GetSysColor, GetWindowTextA, GetActiveWindow, SetClassLongA, GetSystemMetrics, GetWindowPlacement, SystemParametersInfoA, SetWindowPlacement, ClientToScreen, ScreenToClient, InvalidateRect, DrawFocusRect, DrawTextA, SendMessageA, GetWindowRect, LoadBitmapA, IsWindow, KillTimer, SetTimer, LoadIconA, SetRect, EnableWindow, GetWindowLongA, SetWindowLongA, LoadMenuIndirectA
GDI32.dll: CreatePolygonRgn, DeleteDC, GetBkColor, SetBkColor, DPtoLP, StretchDIBits, GetPixel, SelectObject, CreateSolidBrush, CombineRgn, GetCurrentObject, GetBitmapBits, CreateRectRgn, OffsetRgn, CreateFontIndirectA, GetTextExtentPoint32A, CreateBitmap, CreateCompatibleBitmap, GetMapMode, StretchBlt, DeleteObject, CreateBitmapIndirect, BitBlt, GetObjectA, CreateCompatibleDC
ADVAPI32.dll: RegOpenKeyExA, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegCreateKeyExA, RegCloseKey, RegCreateKeyA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA
SHELL32.dll: Shell_NotifyIconA
ole32.dll: CoInitialize, CoUninitialize
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#5 Příspěvek od Kovas »

Len teraz neviem, či môžem z virovej truhly vytiahnuť aj súbory A0010053.exe a A0010057.exe a dať ich otestovať. O ich pôvode neviem.
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#6 Příspěvek od motji »

File name: SMax4PNP.exe
Submission date: 2011-02-04 23:28:11 (UTC)
Current status: finished
Result: 4 /43 (9.3%)
vložte mi odkaz přímo na tu stránku
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#7 Příspěvek od Kovas »

Nevieme teraz či myslíte odkaz na stránku s driverom ten je

http://h20000.www2.hp.com/bizsupport/Te ... Id=3687777

alebo odkaz na výsledok testu ten súbor na virustotal. Test som urobil znova tu je odkaz

http://www.virustotal.com/file-scan/rep ... 1297027795
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#8 Příspěvek od motji »

Virustotal. je tam jedna detekce, falešná, soubor je v pořádku :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#9 Příspěvek od Kovas »

Takže ho môžem vrátiť z truhly späť ?
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#10 Příspěvek od Kovas »

A tie prvé dva súbory z virovej truhly
A0010053.exe
A0010057.exe

majú súvis s tými dvoma súbormi?
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#11 Příspěvek od motji »

Nemyslím si, spíš bych to tipla na viry z obnovy systému.
Ano, můžete.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#12 Příspěvek od Kovas »

Dobre. Odporučíte mi ešte niečo s tým urobiť?
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#13 Příspěvek od motji »

Nainstalovat Ccleaner :D .
Byla to prostě falešná detekce, už to asi opravili, to se stává :) . kdby byli zase nějaké problémy, klidně napište :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Kovas
Návštěvník
Návštěvník
Příspěvky: 331
Registrován: 24 Pro 2008 13:10

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#14 Příspěvek od Kovas »

Veľmi pekne ďakujem :)
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Log pre mojti - Win32:Malware-gen detekovaný v SP42375

#15 Příspěvek od motji »

Není zač :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“