VIRY.CZ

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:47:35, on 13.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1002191821\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1002191821\ICQToolBar.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: (no name) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://asia.msi.com.tw
O15 - Trusted Zone: http://global.msi.com.tw
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7536787390
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/L ... nstall.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - http://www.e-jazyky.cz/img/sound.gif
O24 - Desktop Component 1: (no name) - http://www.spoluzaci.cz/js/main.js?40

--
End of file - 6473 bytes

Log vypadá čistý.

Děkuji,ale po startu pc tak na deset min zamrzne a pak už jede v pohodě.Vůbec nevím proč.Nedalo by se něco fixnout.

Dejte log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 .

Logfile of random's system information tool 1.08 (written by random/random)
Run by Dolda at 2011-02-13 18:32:17
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 630 MB (1%) free of 76 GB
Total RAM: 511 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:23, on 13.2.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Documents and Settings\Dolda\Plocha\RSIT.exe
C:\Program Files\trend micro\Dolda.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1002191821\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\1002191821\ICQToolBar.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: (no name) - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: http://asia.msi.com.tw
O15 - Trusted Zone: http://global.msi.com.tw
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 7536787390
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/L ... nstall.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - http://www.e-jazyky.cz/img/sound.gif
O24 - Desktop Component 1: (no name) - http://www.spoluzaci.cz/js/main.js?40

--
End of file - 6440 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL [2007-03-30 722472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-27 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-27 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\1002191821\ICQToolBar.dll [2010-01-03 1019128]
{B71B15CF-3093-459C-B764-AEB2486F2273} - &S-Rank - C:\Program Files\Seznam\Postak\SRank.dll [2007-05-16 269632]
{FE063DB9-4EC0-403e-8DD8-394C54984B2C}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-10-27 297648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-18 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
C:\Program Files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe [2010-03-06 286720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.0\ICQ.exe [2011-01-05 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
C:\Documents and Settings\Dolda\skt.exe \u []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerDVD]
C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe [2007-09-06 1004840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2007-03-30 25263144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-07-18 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2009-05-21 275768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Dolda^Nabídka Start^Programy^Po spuštění^Registrace .lnk]
E:\FIA 10\Support\EAregister.exe /remind /language=CSY /PRNM=Electronic Arts Product []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"O&O Defrag"=2
"gusvc"=3
"gupdate1ca07b2faf6ca72"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"

======List of files/folders created in the last 1 months======

2011-02-13 18:32:17 ----DC---- C:\rsit
2011-02-13 17:46:27 ----D---- C:\Program Files\Trend Micro
2011-02-13 16:46:24 ----SHDC---- C:\RECYCLER
2011-02-13 16:43:28 ----D---- C:\WINDOWS\temp
2011-02-13 16:10:31 ----A---- C:\WINDOWS\zip.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\SWSC.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\SWREG.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\sed.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\PEV.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\NIRCMD.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\MBR.exe
2011-02-13 16:10:31 ----A---- C:\WINDOWS\grep.exe
2011-02-13 15:21:40 ----D---- C:\WINDOWS\ERDNT
2011-02-13 15:11:17 ----DC---- C:\Qoobox
2011-02-13 14:26:41 ----D---- C:\WINDOWS\Prefetch
2011-02-13 13:51:52 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-02-13 12:15:04 ----D---- C:\WINDOWS\ie8updates
2011-02-13 12:06:13 ----D---- C:\Program Files\MSXML 4.0
2011-02-13 11:54:44 ----N---- C:\WINDOWS\system32\ieencode.dll
2011-02-13 11:54:31 ----A---- C:\WINDOWS\003250_.tmp
2011-02-13 11:40:17 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-02-12 20:23:20 ----ASH---- C:\hiberfil.sys
2011-02-12 20:16:12 ----D---- C:\Program Files\MSI
2011-02-12 17:46:22 ----A---- C:\WINDOWS\system32\drivers\lbrtfdc.sys
2011-02-12 17:46:13 ----A---- C:\WINDOWS\system32\drivers\i2omgmt.sys
2011-02-12 17:46:09 ----A---- C:\WINDOWS\system32\drivers\changer.sys
2011-02-12 17:45:41 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-02-11 19:05:27 ----A---- C:\WINDOWS\system32\MAI9.tmp
2011-02-11 19:05:26 ----A---- C:\WINDOWS\system32\drivers\qbjyiitvnjoq.sys
2011-02-11 18:48:37 ----ASH---- C:\pagefile.sys
2011-02-11 18:38:15 ----D---- C:\WINDOWS\RegisteredPackages
2011-02-11 18:16:05 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-02-11 18:04:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.TMP
2011-02-11 18:03:52 ----RA---- C:\WINDOWS\SET1A2.tmp
2011-02-11 18:03:52 ----RA---- C:\WINDOWS\SET1A1.tmp
2011-02-11 18:03:52 ----RA---- C:\WINDOWS\SET1A0.tmp
2011-02-11 18:03:52 ----RA---- C:\WINDOWS\SET19F.tmp
2011-02-11 18:03:52 ----RA---- C:\WINDOWS\SET19E.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET19D.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET19C.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET19B.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET19A.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET199.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET198.tmp
2011-02-11 18:03:51 ----RA---- C:\WINDOWS\SET197.tmp
2011-02-11 18:03:50 ----RA---- C:\WINDOWS\SET196.tmp
2011-02-11 18:03:50 ----RA---- C:\WINDOWS\SET195.tmp
2011-02-11 18:03:50 ----RA---- C:\WINDOWS\SET194.tmp
2011-02-11 18:03:49 ----RA---- C:\WINDOWS\SET193.tmp
2011-02-11 18:03:49 ----RA---- C:\WINDOWS\SET192.tmp
2011-02-11 18:03:48 ----RA---- C:\WINDOWS\SET191.tmp
2011-02-11 18:03:48 ----RA---- C:\WINDOWS\SET190.tmp
2011-02-11 18:03:48 ----RA---- C:\WINDOWS\SET18F.tmp
2011-02-11 18:03:47 ----RA---- C:\WINDOWS\SET18E.tmp
2011-02-11 18:03:47 ----RA---- C:\WINDOWS\SET18D.tmp
2011-02-11 18:03:47 ----RA---- C:\WINDOWS\SET18C.tmp
2011-02-11 18:03:46 ----RA---- C:\WINDOWS\SET18B.tmp
2011-02-11 18:03:46 ----RA---- C:\WINDOWS\SET18A.tmp
2011-02-11 18:03:46 ----RA---- C:\WINDOWS\SET189.tmp
2011-02-11 18:03:46 ----RA---- C:\WINDOWS\SET188.tmp
2011-02-11 18:03:46 ----RA---- C:\WINDOWS\SET187.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET186.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET185.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET184.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET183.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET182.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET181.tmp
2011-02-11 18:03:45 ----RA---- C:\WINDOWS\SET180.tmp
2011-02-11 18:03:44 ----RA---- C:\WINDOWS\SET17F.tmp
2011-02-11 18:03:44 ----RA---- C:\WINDOWS\SET17E.tmp
2011-02-11 18:03:44 ----RA---- C:\WINDOWS\SET17D.tmp
2011-02-11 18:03:43 ----RA---- C:\WINDOWS\SET17C.tmp
2011-02-11 18:03:43 ----RA---- C:\WINDOWS\SET17B.tmp
2011-02-11 18:03:43 ----RA---- C:\WINDOWS\SET178.tmp
2011-02-11 18:03:41 ----RA---- C:\WINDOWS\SET177.tmp
2011-02-11 18:03:41 ----RA---- C:\WINDOWS\SET176.tmp
2011-02-11 18:03:41 ----RA---- C:\WINDOWS\SET175.tmp
2011-02-11 18:03:40 ----RA---- C:\WINDOWS\SET174.tmp
2011-02-11 18:03:40 ----RA---- C:\WINDOWS\SET173.tmp
2011-02-11 18:03:39 ----RA---- C:\WINDOWS\SET172.tmp
2011-02-11 18:03:39 ----RA---- C:\WINDOWS\SET171.tmp
2011-02-11 18:03:38 ----RA---- C:\WINDOWS\SET170.tmp
2011-02-11 18:03:38 ----RA---- C:\WINDOWS\SET16F.tmp
2011-02-11 18:03:38 ----RA---- C:\WINDOWS\SET16E.tmp
2011-02-11 18:03:37 ----RA---- C:\WINDOWS\SET16D.tmp
2011-02-11 18:03:37 ----RA---- C:\WINDOWS\SET16C.tmp
2011-02-11 18:03:37 ----RA---- C:\WINDOWS\SET16B.tmp
2011-02-11 18:03:36 ----RA---- C:\WINDOWS\SET16A.tmp
2011-02-11 18:03:36 ----RA---- C:\WINDOWS\SET169.tmp
2011-02-11 18:03:36 ----RA---- C:\WINDOWS\SET168.tmp
2011-02-11 18:03:36 ----RA---- C:\WINDOWS\SET167.tmp
2011-02-11 18:03:35 ----RA---- C:\WINDOWS\SET166.tmp
2011-02-11 18:03:35 ----RA---- C:\WINDOWS\SET165.tmp
2011-02-11 18:03:35 ----RA---- C:\WINDOWS\SET164.tmp
2011-02-11 18:03:35 ----RA---- C:\WINDOWS\SET163.tmp
2011-02-11 18:03:33 ----RA---- C:\WINDOWS\SET162.tmp
2011-02-11 18:03:33 ----RA---- C:\WINDOWS\SET161.tmp
2011-02-11 18:03:33 ----RA---- C:\WINDOWS\SET160.tmp
2011-02-11 18:03:33 ----RA---- C:\WINDOWS\SET15F.tmp
2011-02-11 18:03:32 ----RA---- C:\WINDOWS\SET15E.tmp
2011-02-11 18:03:32 ----RA---- C:\WINDOWS\SET15D.tmp
2011-02-11 18:03:32 ----RA---- C:\WINDOWS\SET15C.tmp
2011-02-11 18:03:32 ----RA---- C:\WINDOWS\SET15B.tmp
2011-02-11 18:03:32 ----RA---- C:\WINDOWS\SET15A.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET159.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET158.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET157.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET156.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET155.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET154.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET153.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET152.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET151.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET150.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET14F.tmp
2011-02-11 18:03:31 ----RA---- C:\WINDOWS\SET14E.tmp
2011-02-11 18:03:30 ----RA---- C:\WINDOWS\SET14D.tmp
2011-02-11 18:03:30 ----RA---- C:\WINDOWS\SET14C.tmp
2011-02-11 18:03:30 ----RA---- C:\WINDOWS\SET14B.tmp
2011-02-11 18:03:29 ----RA---- C:\WINDOWS\SET14A.tmp
2011-02-11 18:03:29 ----RA---- C:\WINDOWS\SET149.tmp
2011-02-11 18:03:29 ----RA---- C:\WINDOWS\SET148.tmp
2011-02-11 18:03:29 ----RA---- C:\WINDOWS\SET147.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET146.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET145.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET144.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET143.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET142.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET141.tmp
2011-02-11 18:03:28 ----RA---- C:\WINDOWS\SET140.tmp
2011-02-11 18:03:27 ----RA---- C:\WINDOWS\SET13F.tmp
2011-02-11 18:03:21 ----RA---- C:\WINDOWS\SETB5.tmp
2011-02-11 18:03:15 ----RA---- C:\WINDOWS\SETA9.tmp
2011-02-11 18:03:11 ----RA---- C:\WINDOWS\SETA6.tmp
2011-02-11 17:26:51 ----A---- C:\WINDOWS\system32\drivers\VIAAGP1.SYS
2011-02-11 16:58:34 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2011-02-11 16:51:39 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-02-11 16:51:39 ----A---- C:\WINDOWS\system32\irclass.dll
2011-02-11 16:51:20 ----RA---- C:\WINDOWS\SET13E.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET13D.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET13C.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET13B.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET13A.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET139.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET138.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET137.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET136.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET135.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET134.tmp
2011-02-11 16:51:19 ----RA---- C:\WINDOWS\SET133.tmp
2011-02-11 16:51:18 ----RA---- C:\WINDOWS\SET132.tmp
2011-02-11 16:51:17 ----RA---- C:\WINDOWS\SET131.tmp
2011-02-11 16:51:17 ----RA---- C:\WINDOWS\SET130.tmp
2011-02-11 16:51:17 ----RA---- C:\WINDOWS\SET12F.tmp
2011-02-11 16:51:16 ----RA---- C:\WINDOWS\SET12E.tmp
2011-02-11 16:51:15 ----RA---- C:\WINDOWS\SET12D.tmp
2011-02-11 16:51:15 ----RA---- C:\WINDOWS\SET12C.tmp
2011-02-11 16:51:15 ----RA---- C:\WINDOWS\SET12B.tmp
2011-02-11 16:51:14 ----RA---- C:\WINDOWS\SET12A.tmp
2011-02-11 16:51:14 ----RA---- C:\WINDOWS\SET129.tmp
2011-02-11 16:51:14 ----RA---- C:\WINDOWS\SET128.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET127.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET126.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET125.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET124.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET123.tmp
2011-02-11 16:51:13 ----RA---- C:\WINDOWS\SET122.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET121.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET120.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET11F.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET11E.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET11D.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET11C.tmp
2011-02-11 16:51:12 ----RA---- C:\WINDOWS\SET11B.tmp
2011-02-11 16:51:11 ----RA---- C:\WINDOWS\SET11A.tmp
2011-02-11 16:51:11 ----RA---- C:\WINDOWS\SET119.tmp
2011-02-11 16:51:11 ----RA---- C:\WINDOWS\SET118.tmp
2011-02-11 16:51:10 ----RA---- C:\WINDOWS\SET117.tmp
2011-02-11 16:51:10 ----RA---- C:\WINDOWS\SET116.tmp
2011-02-11 16:51:09 ----RA---- C:\WINDOWS\SET115.tmp
2011-02-11 16:51:09 ----RA---- C:\WINDOWS\SET114.tmp
2011-02-11 16:51:09 ----RA---- C:\WINDOWS\SET113.tmp
2011-02-11 16:51:09 ----RA---- C:\WINDOWS\SET112.tmp
2011-02-11 16:51:07 ----RA---- C:\WINDOWS\SET111.tmp
2011-02-11 16:51:07 ----RA---- C:\WINDOWS\SET110.tmp
2011-02-11 16:51:07 ----RA---- C:\WINDOWS\SET10F.tmp
2011-02-11 16:51:06 ----RA---- C:\WINDOWS\SET10E.tmp
2011-02-11 16:51:06 ----RA---- C:\WINDOWS\SET10D.tmp
2011-02-11 16:51:05 ----RA---- C:\WINDOWS\SET10C.tmp
2011-02-11 16:51:05 ----RA---- C:\WINDOWS\SET10B.tmp
2011-02-11 16:51:04 ----RA---- C:\WINDOWS\SET10A.tmp
2011-02-11 16:51:04 ----RA---- C:\WINDOWS\SET109.tmp
2011-02-11 16:51:04 ----RA---- C:\WINDOWS\SET108.tmp
2011-02-11 16:51:04 ----RA---- C:\WINDOWS\SET107.tmp
2011-02-11 16:51:03 ----RA---- C:\WINDOWS\SET106.tmp
2011-02-11 16:51:03 ----RA---- C:\WINDOWS\SET105.tmp
2011-02-11 16:51:03 ----RA---- C:\WINDOWS\SET104.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SETFF.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SETFE.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SET103.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SET102.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SET101.tmp
2011-02-11 16:51:02 ----RA---- C:\WINDOWS\SET100.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETFD.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETFC.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETFB.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETFA.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETF9.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETF8.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETF7.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETF6.tmp
2011-02-11 16:51:01 ----RA---- C:\WINDOWS\SETF5.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETF4.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETF3.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETF2.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETF1.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETF0.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETEF.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETEE.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETED.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETEC.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETEB.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETEA.tmp
2011-02-11 16:51:00 ----RA---- C:\WINDOWS\SETE9.tmp
2011-02-11 16:50:57 ----RA---- C:\WINDOWS\SETE8.tmp
2011-02-11 16:50:57 ----RA---- C:\WINDOWS\SETE7.tmp
2011-02-11 16:50:57 ----RA---- C:\WINDOWS\SETE6.tmp
2011-02-11 16:50:57 ----RA---- C:\WINDOWS\SETE5.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETE4.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETE3.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETE2.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETE1.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETE0.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETDF.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETDE.tmp
2011-02-11 16:50:56 ----RA---- C:\WINDOWS\SETDD.tmp
2011-02-11 16:50:39 ----RA---- C:\WINDOWS\SETAA.tmp
2011-02-11 16:50:33 ----RA---- C:\WINDOWS\SET9E.tmp
2011-02-11 16:50:29 ----RA---- C:\WINDOWS\SET9A.tmp
2011-02-11 16:30:05 ----AH---- C:\Documents and Settings\Dolda\Data aplikací\CmI1eJ1FIL.txt
2011-02-11 16:30:04 ----A---- C:\WINDOWS\system32\MAI7.tmp
2011-02-11 16:30:02 ----A---- C:\WINDOWS\system32\drivers\oyeidufipvmuv.sys
2011-02-11 16:08:45 ----A---- C:\WINDOWS\system32\MAI6.tmp
2011-02-11 16:08:43 ----A---- C:\WINDOWS\system32\drivers\lehotuycmqlz.sys
2011-02-11 15:43:42 ----SHC---- C:\BOOT.BAK
2011-02-11 15:43:00 ----DC---- C:\$WIN_NT$.~BT
2011-02-11 15:43:00 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-02-11 15:38:42 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-02-11 15:38:42 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-02-11 15:38:41 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-02-11 15:38:40 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-02-11 15:38:40 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-02-11 15:38:40 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-02-11 15:38:39 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-02-11 15:37:48 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-02-11 15:37:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-02-11 14:41:59 ----A---- C:\WINDOWS\system32\MAI8.tmp
2011-02-11 14:41:47 ----A---- C:\WINDOWS\system32\drivers\nbsbrkkjwx.sys
2011-01-26 13:58:42 ----AH---- C:\Documents and Settings\Dolda\Data aplikací\HhdFJl61DD.txt
2011-01-26 13:58:42 ----AH---- C:\Documents and Settings\Dolda\Data aplikací\Bgm7fGCGHJ.txt
2011-01-26 13:57:25 ----AH---- C:\Documents and Settings\Dolda\Data aplikací\IK6fDMGl71.txt

======List of files/folders modified in the last 1 months======

2011-02-13 18:10:53 ----HD---- C:\WINDOWS\inf
2011-02-13 18:10:27 ----D---- C:\WINDOWS
2011-02-13 18:09:48 ----D---- C:\WINDOWS\system32\CatRoot2
2011-02-13 17:46:29 ----SHD---- C:\WINDOWS\Installer
2011-02-13 17:46:29 ----DC---- C:\Config.Msi
2011-02-13 17:46:27 ----RD---- C:\Program Files
2011-02-13 17:16:43 ----D---- C:\WINDOWS\Minidump
2011-02-13 17:03:01 ----D---- C:\WINDOWS\Debug
2011-02-13 16:43:30 ----AD---- C:\WINDOWS\system32\drivers
2011-02-13 16:37:50 ----AC---- C:\WINDOWS\system.ini
2011-02-13 16:37:30 ----D---- C:\WINDOWS\system32\drivers\etc
2011-02-13 16:21:34 ----D---- C:\WINDOWS\system32\config
2011-02-13 16:19:27 ----D---- C:\WINDOWS\system32
2011-02-13 16:17:53 ----D---- C:\WINDOWS\AppPatch
2011-02-13 16:17:49 ----D---- C:\Program Files\Common Files
2011-02-13 15:33:03 ----D---- C:\WINDOWS\system32\wbem
2011-02-13 15:31:20 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-02-13 15:30:32 ----D---- C:\WINDOWS\system32\CatRoot
2011-02-13 15:30:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-02-13 15:29:32 ----D---- C:\Program Files\Messenger
2011-02-13 15:01:22 ----D---- C:\Program Files\Outlook Express
2011-02-13 14:59:02 ----D---- C:\WINDOWS\Registration
2011-02-13 14:25:35 ----D---- C:\WINDOWS\system32\Setup
2011-02-13 14:25:33 ----RSD---- C:\WINDOWS\Fonts
2011-02-13 14:24:49 ----D---- C:\WINDOWS\security
2011-02-13 14:10:19 ----D---- C:\WINDOWS\system32\inetsrv
2011-02-13 14:10:19 ----D---- C:\WINDOWS\ime
2011-02-13 14:10:18 ----D---- C:\WINDOWS\Help
2011-02-13 14:10:00 ----D---- C:\WINDOWS\PeerNet
2011-02-13 14:10:00 ----D---- C:\Program Files\Internet Explorer
2011-02-13 14:09:59 ----D---- C:\Program Files\Movie Maker
2011-02-13 14:05:55 ----D---- C:\WINDOWS\system32\Restore
2011-02-13 14:05:54 ----D---- C:\WINDOWS\system32\npp
2011-02-13 14:05:52 ----D---- C:\WINDOWS\msagent
2011-02-13 14:05:51 ----D---- C:\WINDOWS\srchasst
2011-02-13 14:05:50 ----D---- C:\Program Files\NetMeeting
2011-02-13 14:05:49 ----D---- C:\WINDOWS\system32\Com
2011-02-13 14:05:46 ----D---- C:\Program Files\Windows NT
2011-02-13 14:05:46 ----D---- C:\Program Files\Windows Media Player
2011-02-13 14:05:42 ----D---- C:\Program Files\Common Files\System
2011-02-13 14:05:15 ----D---- C:\WINDOWS\system32\oobe
2011-02-13 14:05:12 ----D---- C:\WINDOWS\system32\usmt
2011-02-13 14:05:11 ----D---- C:\WINDOWS\system
2011-02-13 13:57:01 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-02-13 13:51:45 ----D---- C:\WINDOWS\ehome
2011-02-13 13:37:16 ----D---- C:\Program Files\NovaLogic
2011-02-13 13:26:06 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-13 13:26:00 ----RSD---- C:\WINDOWS\assembly
2011-02-13 13:06:33 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-13 12:53:36 ----D---- C:\WINDOWS\WinSxS
2011-02-13 12:29:16 ----SD---- C:\Documents and Settings\Dolda\Data aplikací\Microsoft
2011-02-12 20:16:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-02-12 20:06:48 ----HDC---- C:\WINDOWS\ie8
2011-02-12 20:05:30 ----D---- C:\WINDOWS\system32\cs-cz
2011-02-12 18:34:16 ----SHC---- C:\boot.ini
2011-02-12 18:34:16 ----A---- C:\WINDOWS\win.ini
2011-02-12 17:54:03 ----D---- C:\Documents and Settings\Dolda\Data aplikací\ICQ
2011-02-12 17:46:35 ----D---- C:\Program Files\RivaTuner v2.24
2011-02-11 19:03:21 ----D---- C:\Program Files\DAEMON Tools Lite
2011-02-11 18:54:15 ----SHD---- C:\System Volume Information
2011-02-11 18:17:18 ----A---- C:\WINDOWS\ODBCINST.INI
2011-02-11 18:16:53 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-02-11 18:16:48 ----D---- C:\WINDOWS\system32\ias
2011-02-11 18:16:08 ----RD---- C:\WINDOWS\Web
2011-02-11 18:15:55 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-02-11 18:03:54 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-02-11 17:44:25 ----D---- C:\WINDOWS\Media
2011-02-11 17:41:31 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-02-11 17:41:08 ----D---- C:\WINDOWS\system32\1029
2011-02-11 17:40:57 ----D---- C:\WINDOWS\twain_32
2011-02-11 17:40:20 ----D---- C:\WINDOWS\system32\icsxml
2011-02-11 17:39:27 ----D---- C:\WINDOWS\system32\1033
2011-02-11 17:37:50 ----D---- C:\WINDOWS\Driver Cache
2011-02-11 16:20:13 ----D---- C:\Program Files\CCleaner
2011-02-11 16:16:52 ----D---- C:\WINDOWS\system32\LogFiles
2011-02-11 15:37:13 ----D---- C:\Program Files\Alwil Software
2011-02-11 15:28:22 ----D---- C:\WINDOWS\network diagnostic
2011-02-11 15:27:06 ----D---- C:\WINDOWS\pss
2011-02-11 15:14:20 ----D---- C:\Program Files\Kaspersky Lab
2011-02-11 15:07:33 ----D---- C:\WINDOWS\system32\oodag
2011-02-04 17:34:02 ----A---- C:\WINDOWS\system32\MRT.exe
2011-01-27 16:41:10 ----D---- C:\Documents and Settings\Dolda\Data aplikací\HPAppData
2011-01-27 16:38:15 ----D---- C:\Program Files\ICQToolbar3203
2011-01-24 17:40:59 ----D---- C:\Documents and Settings\Dolda\Data aplikací\vlc
2011-01-17 15:46:44 ----D---- C:\Program Files\Mafia
2011-01-16 15:03:01 ----D---- C:\Documents and Settings\Dolda\Data aplikací\Skype
2011-01-14 22:06:28 ----D---- C:\Program Files\Common Files\Services

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-05-13 111808]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
R0 viaagp1;VIA AGP Filter; C:\WINDOWS\system32\DRIVERS\viaagp1.sys [2003-07-02 27904]
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys [2006-10-17 9216]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-01-13 29392]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-01-13 23632]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-01-13 294608]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-01-13 47440]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; \??\C:\Program Files\CyberLink\PowerDVD\000.fcl []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-01-13 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-01-13 100176]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [1980-01-01 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [1980-01-01 55936]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2005-11-25 203776]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-12-06 691696]
S0 zphwq;zphwq; C:\WINDOWS\system32\drivers\zphwq.sys []
S3 bccthpkv;bccthpkv; \??\C:\WINDOWS\System32\Drivers\bccthpkv.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 MSI_DVD_010507;MSI_DVD_010507; \??\C:\PROGRA~1\MSI\MSIWDev\DVDSYS32_100507.sys []
S3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507; \??\C:\PROGRA~1\MSI\MSIWDev\msibios32_100507.sys []
S3 MsibiosDevice;MsibiosDevice; \??\C:\Program Files\MSI\Live Update 4\LU4\msibios.sys []
S3 pkebhxen;pkebhxen; \??\C:\WINDOWS\System32\Drivers\pkebhxen.sys []
S3 pwxpwmhf;pwxpwmhf; \??\C:\WINDOWS\System32\Drivers\pwxpwmhf.sys []
S3 qrvtwwfy;qrvtwwfy; \??\C:\WINDOWS\System32\Drivers\qrvtwwfy.sys []
S3 tqyxlpbt;tqyxlpbt; \??\C:\WINDOWS\System32\Drivers\tqyxlpbt.sys []
S3 vmfilter323;323 filter service, Normal; C:\WINDOWS\system32\drivers\vmfilter323.sys []
S3 wkrwhtxw;wkrwhtxw; \??\C:\WINDOWS\System32\Drivers\wkrwhtxw.sys []
S3 xdfmqgee;xdfmqgee; \??\C:\WINDOWS\System32\Drivers\xdfmqgee.sys []
S3 xdqhsoxw;xdqhsoxw; \??\C:\WINDOWS\System32\Drivers\xdqhsoxw.sys []
S3 xtrkbgar;xtrkbgar; \??\C:\WINDOWS\System32\Drivers\xtrkbgar.sys []
S3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323); C:\WINDOWS\System32\Drivers\usbvm323.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-01-13 40384]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 NwSapAgent;Agent SAP; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ServiceLayer;ServiceLayer; C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe [2009-09-17 651776]
S4 gupdate1ca07b2faf6ca72;Služba Google Update (gupdate1ca07b2faf6ca72); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-18 133104]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-18 182768]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Dejte log zu ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

ComboFix 11-02-12.02 - Dolda 13.02.2011 19:08:06.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.248 [GMT 1:00]
Spuštěný z: c:\documents and settings\Dolda\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-13 do 2011-02-13 )))))))))))))))))))))))))))))))
.

2011-02-13 17:32 . 2011-02-13 17:32 -------- dc----w- C:\rsit
2011-02-13 16:46 . 2011-02-13 16:46 388096 ----a-r- c:\documents and settings\Dolda\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-02-13 16:46 . 2011-02-13 17:32 -------- d-----w- c:\program files\Trend Micro
2011-02-13 13:27 . 2011-02-13 13:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-13 13:26 . 2011-02-13 13:26 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-02-13 11:15 . 2011-02-13 12:05 -------- d-----w- c:\windows\ie8updates
2011-02-13 11:06 . 2011-02-13 11:06 -------- d-----w- c:\program files\MSXML 4.0
2011-02-13 10:56 . 2009-07-31 09:05 1372672 -c----w- c:\windows\system32\dllcache\msxml6.dll
2011-02-13 10:56 . 2008-04-14 02:30 80896 -c----w- c:\windows\system32\dllcache\msxml6r.dll
2011-02-13 10:55 . 2008-04-14 03:11 24064 -c----w- c:\windows\system32\dllcache\pidgen.dll
2011-02-13 10:54 . 2008-04-14 03:19 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-02-13 10:54 . 2008-04-14 03:21 81920 ------w- c:\windows\system32\ieencode.dll
2011-02-13 10:54 . 2006-12-28 19:01 19569 ----a-w- c:\windows\003250_.tmp
2011-02-13 10:46 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-02-13 10:45 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2011-02-13 10:45 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-02-13 10:45 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2011-02-13 10:45 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-02-13 10:44 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2011-02-13 10:44 . 2009-10-15 16:32 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2011-02-13 10:43 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2011-02-13 10:43 . 2010-02-17 13:09 2192128 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-02-13 10:43 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2011-02-13 10:43 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2011-02-13 10:43 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2011-02-13 10:43 . 2009-02-09 10:56 728064 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2011-02-13 10:43 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2011-02-13 10:43 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2011-02-13 10:43 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2011-02-13 10:43 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-02-13 10:43 . 2010-02-16 19:08 2148352 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-02-13 10:43 . 2010-02-16 19:08 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-02-13 10:41 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2011-02-13 10:41 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-02-13 10:41 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-02-13 10:41 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-02-13 10:41 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-02-13 10:41 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-02-13 10:41 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-02-13 10:41 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-02-13 10:40 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2011-02-13 10:35 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2011-02-12 19:20 . 2011-02-12 19:20 -------- d-----w- c:\documents and settings\Dolda\Local Settings\Data aplikací\Downloaded Installations
2011-02-12 19:16 . 2011-02-13 16:41 -------- d-----w- c:\program files\MSI
2011-02-12 16:46 . 2008-04-13 18:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-12 16:46 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2011-02-12 16:46 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys
2011-02-12 16:45 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2011-02-11 18:05 . 2011-02-11 18:05 18298 ----a-w- c:\windows\system32\MAI9.tmp
2011-02-11 18:05 . 2011-02-11 18:05 74880 ----a-w- c:\windows\system32\drivers\qbjyiitvnjoq.sys
2011-02-11 17:43 . 2008-04-14 03:19 15872 -c--a-w- c:\windows\system32\dllcache\padrs404.dll
2011-02-11 17:42 . 2008-04-14 03:17 81976 -c--a-w- c:\windows\system32\dllcache\imjpdct.dll
2011-02-11 17:41 . 2008-04-14 03:08 97792 -c--a-w- c:\windows\system32\dllcache\chtmbx.dll
2011-02-11 17:15 . 1980-01-01 00:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2011-02-11 17:15 . 1980-01-01 00:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2011-02-11 17:04 . 2011-02-11 17:04 5280 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-02-11 16:53 . 2008-04-14 03:21 32768 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwdl.dll
2011-02-11 16:52 . 2008-04-14 03:22 20480 ----a-w- c:\program files\Internet Explorer\Connection Wizard\inetwiz.exe
2011-02-11 16:52 . 2008-04-14 03:22 86016 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn2.exe
2011-02-11 16:52 . 2008-04-14 03:22 215552 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn1.exe
2011-02-11 16:26 . 2003-07-02 03:42 27904 ----a-w- c:\windows\system32\drivers\VIAAGP1.SYS
2011-02-11 15:58 . 2004-08-03 21:31 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2011-02-11 15:50 . 1980-01-01 00:00 9090 ----a-r- c:\windows\SETE8.tmp
2011-02-11 15:30 . 2011-02-11 15:30 18298 ----a-w- c:\windows\system32\MAI7.tmp
2011-02-11 15:30 . 2011-02-11 15:30 74880 ----a-w- c:\windows\system32\drivers\oyeidufipvmuv.sys
2011-02-11 15:08 . 2011-02-11 15:08 18298 ----a-w- c:\windows\system32\MAI6.tmp
2011-02-11 15:08 . 2011-02-11 15:08 74880 ----a-w- c:\windows\system32\drivers\lehotuycmqlz.sys
2011-02-11 14:43 . 2011-02-11 14:43 -------- dc----w- C:\$WIN_NT$.~BT
2011-02-11 14:38 . 2011-01-13 08:41 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-11 14:38 . 2011-01-13 08:37 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-11 14:38 . 2011-01-13 08:37 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-11 14:38 . 2011-01-13 08:40 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-11 14:38 . 2011-01-13 08:40 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-02-11 14:38 . 2011-01-13 08:39 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-02-11 14:38 . 2011-01-13 08:37 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-02-11 14:37 . 2011-01-13 08:47 38848 ----a-w- c:\windows\avastSS.scr
2011-02-11 14:37 . 2011-01-13 08:47 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-11 14:37 . 2011-02-11 14:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-02-11 13:41 . 2011-02-11 13:41 18298 ----a-w- c:\windows\system32\MAI8.tmp
2011-02-11 13:41 . 2011-02-11 13:42 74880 ----a-w- c:\windows\system32\drivers\nbsbrkkjwx.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-12 12:41 . 2010-04-12 12:40 728858 ----a-w- c:\program files\Common Files\unins000.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Dolda^Nabídka Start^Programy^Po spuštění^Registrace .lnk]
path=c:\documents and settings\Dolda\Nabídka Start\Programy\Po spuštění\Registrace .lnk
backup=c:\windows\pss\Registrace .lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
c:\documents and settings\Dolda\skt.exe \u [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
2010-03-06 15:46 286720 ----a-w- c:\program files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 14:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2011-01-05 08:18 133432 ----a-w- c:\program files\ICQ7.0\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-06-25 13:12 1414144 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerDVD]
2007-09-06 21:49 1004840 ----a-w- c:\program files\CyberLink\PowerDVD\PowerDVD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2007-03-30 12:34 25263144 ----a-w- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-18 14:18 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"O&O Defrag"=2 (0x2)
"gusvc"=3 (0x3)
"gupdate1ca07b2faf6ca72"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7235:TCP"= 7235:TCP:doounus
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.2.2011 15:38 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.2.2011 15:38 17744]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [17.10.2008 15:18 246520]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.8.2008 12:46 691696]
S0 zphwq;zphwq; [x]
S3 bccthpkv;bccthpkv;\??\c:\windows\System32\Drivers\bccthpkv.sys --> c:\windows\System32\Drivers\bccthpkv.sys [?]
S3 MSI_DVD_010507;MSI_DVD_010507;c:\progra~1\MSI\MSIWDev\DVDSYS32_100507.sys [10.5.2010 10:44 22328]
S3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\progra~1\MSI\MSIWDev\msibios32_100507.sys [10.5.2010 10:44 25912]
S3 MsibiosDevice;MsibiosDevice;\??\c:\program files\MSI\Live Update 4\LU4\msibios.sys --> c:\program files\MSI\Live Update 4\LU4\msibios.sys [?]
S3 pkebhxen;pkebhxen;\??\c:\windows\System32\Drivers\pkebhxen.sys --> c:\windows\System32\Drivers\pkebhxen.sys [?]
S3 pwxpwmhf;pwxpwmhf;\??\c:\windows\System32\Drivers\pwxpwmhf.sys --> c:\windows\System32\Drivers\pwxpwmhf.sys [?]
S3 qrvtwwfy;qrvtwwfy;\??\c:\windows\System32\Drivers\qrvtwwfy.sys --> c:\windows\System32\Drivers\qrvtwwfy.sys [?]
S3 tqyxlpbt;tqyxlpbt;\??\c:\windows\System32\Drivers\tqyxlpbt.sys --> c:\windows\System32\Drivers\tqyxlpbt.sys [?]
S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys --> c:\windows\system32\drivers\vmfilter323.sys [?]
S3 wkrwhtxw;wkrwhtxw;\??\c:\windows\System32\Drivers\wkrwhtxw.sys --> c:\windows\System32\Drivers\wkrwhtxw.sys [?]
S3 xdfmqgee;xdfmqgee;\??\c:\windows\System32\Drivers\xdfmqgee.sys --> c:\windows\System32\Drivers\xdfmqgee.sys [?]
S3 xdqhsoxw;xdqhsoxw;\??\c:\windows\System32\Drivers\xdqhsoxw.sys --> c:\windows\System32\Drivers\xdqhsoxw.sys [?]
S3 xtrkbgar;xtrkbgar;\??\c:\windows\System32\Drivers\xtrkbgar.sys --> c:\windows\System32\Drivers\xtrkbgar.sys [?]
S3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm323.sys --> c:\windows\system32\Drivers\usbvm323.sys [?]
S4 gupdate1ca07b2faf6ca72;Služba Google Update (gupdate1ca07b2faf6ca72);c:\program files\Google\Update\GoogleUpdate.exe [18.7.2009 15:21 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'

2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]

2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
Trusted Zone: com\www.msi
Trusted Zone: com.tw\asia.msi
Trusted Zone: com.tw\global.msi
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-13 19:14
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet049\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="81F37352C122B3DE9CC6F4A2FCE80D1BA5B7B674BF7D1490891514ECF421153AB3FB80B7FA811E25F1BDEBDE2FA44585FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CA6A0AC4980AC7933C038D530D6EB3452A6171C11EC38DE3DC038D530D6EB34520626215BB447CF5139C09FBF176A97AE978AD2CC744C6644B948AEE107B9E17B44F8070D0853BBF73E38716236FCF6AB48247EDA2C4E070A9E653CC40F19C03AE1B708CE008290EABF8939916AA787A0DDAC8CB697543CAC1F11F2299DCBF41FAC189ED88F19A1D4E1EEEA0F0C7FAA916F7D0ECD94E59129E667A1C0366755BC861974C7FD60B203D8652F81481E3423A736486DD48E879EB8C6CB27AE082F4E6479EA1F6824006971AE63F120216822C437364BDDD910D16752A6D6B3CDC52F4FBC9241BD36B71B874E97CFE82B84FC1C28837D095E1529DAF11D2FC1DCCA5F64ADB579C26979D20F0F106D4A60364593F113FE84AF73328FCF4EF62DDB6A86D5D44F748D98DDEF8DFDC50141EB223427C3F93052EA781B965B8BD59C77C0EBE7060E450C1E6E731E6B65A520FADD23E58F815448AC6AB913C85DD78ADDDC7C73D1D5DEFB5CA7026E6D4FD889BEF491F28B27138F980104BE8D7BEC45C346C86793BD9C7238FCE7BFDB96FDF66DE6A186309C7627D46697E4E4D66A71607486C465923AD698D391E9550659B5BF251BE93FC76F5F0D3D33654F118883EFD58E1FA7D2DA64EB878FD6B99998E57419687DB64250DE6E97BBB58F81E247B2495D217F3283AC21649A84AE00C7FC4C1B98356059529F2D7FB7DD2C30FB5B6A26938854979B11ADAC8B859E205A430EFC5E18440D0EED7FEE5479715E35B2DF3576A5D2A0F2CA8B97DF7FB41125D5027F12C0B01584ED1FD6E0B8EC7ED8945E3270DC6A9A3A65B54DB92E63A06425765A2C5E385B1A93CB9A5160F2B4939A36CE8B2A4F8A8640AC6EDEDDDECDB5753E39CCB5B17A93294793BDC89A5D7434B92F7A987A27D110F50A3AF121CD1C612DBAB79CB5461F4CD80D615EBE0871A442ED124A28DB78DB9AA857DF6609FCD39D71D17EA3C4C9EFCA471EA17DF3E081AA974A745748BC7F26C2E934B01D230E6DE5285B1D2D09D7EBF475253D9A8137522CC1604CC0C3AA2AC6C80AC4D83EA5FD11E8C488EEB3200FBF1092A026F2829C2238EA104C18E1BA976B162CC25E03B4E265E38F2A03348AC3BA2617F2B7F7F2E19185EEA625FC708A711E34907BE1FB3F967421B699573A8FE3B04D163B7DBEC758B577BD3DA5E7E89BFBEC317054417C17C36F9BF81FFAA8219536D4C74E7125B915003716DDC2F1511E2D4579BFF564A4356F9789743086A9CC8A2A0F78FD4005509F6A487825571B060C1F3BD910B72342DC1C9596C094D764C444A460DAD030"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3240)
c:\windows\system32\webcheck.dll
c:\windows\system32\msls31.dll
c:\windows\system32\ImgUtil.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-13 19:17:40
ComboFix-quarantined-files.txt 2011-02-13 18:17

Před spuštěním: 611 303 424
Po spuštění: 626 266 112

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 2EE45EB49B773C71804CF43DAEABD15E

Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\003250_.tmp
c:\windows\SETE8.tmp
c:\windows\system32\MAI7.tmp
c:\windows\system32\drivers\oyeidufipvmuv.sys
c:\windows\system32\MAI6.tmp
c:\windows\system32\drivers\lehotuycmqlz.sys
c:\windows\system32\MAI9.tmp
c:\windows\system32\drivers\qbjyiitvnjoq.sys
c:\documents and settings\Dolda\skt.exe
c:\windows\System32\Drivers\bccthpkv.sys
c:\windows\System32\Drivers\pkebhxen.sys
c:\windows\System32\Drivers\pwxpwmhf.sys
c:\windows\System32\Drivers\qrvtwwfy.sys
c:\windows\System32\Drivers\tqyxlpbt.sys
c:\windows\System32\Drivers\wkrwhtxw.sys
c:\windows\System32\Drivers\xdfmqgee.sys
c:\windows\System32\Drivers\xdqhsoxw.sys
c:\windows\System32\Drivers\xtrkbgar.sys

Driver::
zphwq
bccthpkv
pkebhxen
pwxpwmhf
qrvtwwfy
tqyxlpbt
wkrwhtxw
xdfmqgee
xdqhsoxw
xtrkbgar
oyeidufipvmuv
lehotuycmqlz
qbjyiitvnjoq

Uložte na plochu jako CFScript.txt. pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Tak si myslím,že je to v pohodě už se nekousl a moc děkuji.Mám ti sem ještě něco hodit.

Jj. Vzhledem k tomu, že některé mazané položky byly rootkity, které mohou ještě něco skrývat, rád bych viděl log z posledního skenu. Je uložen v C:\combofix.txt.

Tak atdy je včera jsem už to nestihl dodat,ale děkuji.




ComboFix 11-02-12.02 - Dolda 13.02.2011 19:08:06.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.248 [GMT 1:00]
Spuštěný z: c:\documents and settings\Dolda\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-13 do 2011-02-13 )))))))))))))))))))))))))))))))
.

2011-02-13 17:32 . 2011-02-13 17:32 -------- dc----w- C:\rsit
2011-02-13 16:46 . 2011-02-13 16:46 388096 ----a-r- c:\documents and settings\Dolda\Data aplikací\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2011-02-13 16:46 . 2011-02-13 17:32 -------- d-----w- c:\program files\Trend Micro
2011-02-13 13:27 . 2011-02-13 13:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-13 13:26 . 2011-02-13 13:26 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-02-13 11:15 . 2011-02-13 12:05 -------- d-----w- c:\windows\ie8updates
2011-02-13 11:06 . 2011-02-13 11:06 -------- d-----w- c:\program files\MSXML 4.0
2011-02-13 10:56 . 2009-07-31 09:05 1372672 -c----w- c:\windows\system32\dllcache\msxml6.dll
2011-02-13 10:56 . 2008-04-14 02:30 80896 -c----w- c:\windows\system32\dllcache\msxml6r.dll
2011-02-13 10:55 . 2008-04-14 03:11 24064 -c----w- c:\windows\system32\dllcache\pidgen.dll
2011-02-13 10:54 . 2008-04-14 03:19 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-02-13 10:54 . 2008-04-14 03:21 81920 ------w- c:\windows\system32\ieencode.dll
2011-02-13 10:54 . 2006-12-28 19:01 19569 ----a-w- c:\windows\003250_.tmp
2011-02-13 10:46 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-02-13 10:45 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2011-02-13 10:45 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-02-13 10:45 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2011-02-13 10:45 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-02-13 10:44 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2011-02-13 10:44 . 2009-10-15 16:32 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2011-02-13 10:43 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2011-02-13 10:43 . 2010-02-17 13:09 2192128 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-02-13 10:43 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2011-02-13 10:43 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2011-02-13 10:43 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2011-02-13 10:43 . 2009-02-09 10:56 728064 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2011-02-13 10:43 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2011-02-13 10:43 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2011-02-13 10:43 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2011-02-13 10:43 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-02-13 10:43 . 2010-02-16 19:08 2148352 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-02-13 10:43 . 2010-02-16 19:08 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-02-13 10:41 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2011-02-13 10:41 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-02-13 10:41 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-02-13 10:41 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-02-13 10:41 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-02-13 10:41 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-02-13 10:41 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-02-13 10:41 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-02-13 10:40 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2011-02-13 10:35 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2011-02-12 19:20 . 2011-02-12 19:20 -------- d-----w- c:\documents and settings\Dolda\Local Settings\Data aplikací\Downloaded Installations
2011-02-12 19:16 . 2011-02-13 16:41 -------- d-----w- c:\program files\MSI
2011-02-12 16:46 . 2008-04-13 18:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-12 16:46 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2011-02-12 16:46 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys
2011-02-12 16:45 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2011-02-11 18:05 . 2011-02-11 18:05 18298 ----a-w- c:\windows\system32\MAI9.tmp
2011-02-11 18:05 . 2011-02-11 18:05 74880 ----a-w- c:\windows\system32\drivers\qbjyiitvnjoq.sys
2011-02-11 17:43 . 2008-04-14 03:19 15872 -c--a-w- c:\windows\system32\dllcache\padrs404.dll
2011-02-11 17:42 . 2008-04-14 03:17 81976 -c--a-w- c:\windows\system32\dllcache\imjpdct.dll
2011-02-11 17:41 . 2008-04-14 03:08 97792 -c--a-w- c:\windows\system32\dllcache\chtmbx.dll
2011-02-11 17:15 . 1980-01-01 00:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2011-02-11 17:15 . 1980-01-01 00:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2011-02-11 17:04 . 2011-02-11 17:04 5280 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-02-11 16:53 . 2008-04-14 03:21 32768 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwdl.dll
2011-02-11 16:52 . 2008-04-14 03:22 20480 ----a-w- c:\program files\Internet Explorer\Connection Wizard\inetwiz.exe
2011-02-11 16:52 . 2008-04-14 03:22 86016 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn2.exe
2011-02-11 16:52 . 2008-04-14 03:22 215552 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn1.exe
2011-02-11 16:26 . 2003-07-02 03:42 27904 ----a-w- c:\windows\system32\drivers\VIAAGP1.SYS
2011-02-11 15:58 . 2004-08-03 21:31 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2011-02-11 15:50 . 1980-01-01 00:00 9090 ----a-r- c:\windows\SETE8.tmp
2011-02-11 15:30 . 2011-02-11 15:30 18298 ----a-w- c:\windows\system32\MAI7.tmp
2011-02-11 15:30 . 2011-02-11 15:30 74880 ----a-w- c:\windows\system32\drivers\oyeidufipvmuv.sys
2011-02-11 15:08 . 2011-02-11 15:08 18298 ----a-w- c:\windows\system32\MAI6.tmp
2011-02-11 15:08 . 2011-02-11 15:08 74880 ----a-w- c:\windows\system32\drivers\lehotuycmqlz.sys
2011-02-11 14:43 . 2011-02-11 14:43 -------- dc----w- C:\$WIN_NT$.~BT
2011-02-11 14:38 . 2011-01-13 08:41 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-11 14:38 . 2011-01-13 08:37 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-11 14:38 . 2011-01-13 08:37 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-11 14:38 . 2011-01-13 08:40 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-11 14:38 . 2011-01-13 08:40 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-02-11 14:38 . 2011-01-13 08:39 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-02-11 14:38 . 2011-01-13 08:37 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-02-11 14:37 . 2011-01-13 08:47 38848 ----a-w- c:\windows\avastSS.scr
2011-02-11 14:37 . 2011-01-13 08:47 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-11 14:37 . 2011-02-11 14:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-02-11 13:41 . 2011-02-11 13:41 18298 ----a-w- c:\windows\system32\MAI8.tmp
2011-02-11 13:41 . 2011-02-11 13:42 74880 ----a-w- c:\windows\system32\drivers\nbsbrkkjwx.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-12 12:41 . 2010-04-12 12:40 728858 ----a-w- c:\program files\Common Files\unins000.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Dolda^Nabídka Start^Programy^Po spuštění^Registrace .lnk]
path=c:\documents and settings\Dolda\Nabídka Start\Programy\Po spuštění\Registrace .lnk
backup=c:\windows\pss\Registrace .lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
c:\documents and settings\Dolda\skt.exe \u [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
2010-03-06 15:46 286720 ----a-w- c:\program files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 14:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2011-01-05 08:18 133432 ----a-w- c:\program files\ICQ7.0\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-06-25 13:12 1414144 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerDVD]
2007-09-06 21:49 1004840 ----a-w- c:\program files\CyberLink\PowerDVD\PowerDVD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2007-03-30 12:34 25263144 ----a-w- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-18 14:18 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"O&O Defrag"=2 (0x2)
"gusvc"=3 (0x3)
"gupdate1ca07b2faf6ca72"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7235:TCP"= 7235:TCP:doounus
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.2.2011 15:38 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.2.2011 15:38 17744]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [17.10.2008 15:18 246520]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.8.2008 12:46 691696]
S0 zphwq;zphwq; [x]
S3 bccthpkv;bccthpkv;\??\c:\windows\System32\Drivers\bccthpkv.sys --> c:\windows\System32\Drivers\bccthpkv.sys [?]
S3 MSI_DVD_010507;MSI_DVD_010507;c:\progra~1\MSI\MSIWDev\DVDSYS32_100507.sys [10.5.2010 10:44 22328]
S3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\progra~1\MSI\MSIWDev\msibios32_100507.sys [10.5.2010 10:44 25912]
S3 MsibiosDevice;MsibiosDevice;\??\c:\program files\MSI\Live Update 4\LU4\msibios.sys --> c:\program files\MSI\Live Update 4\LU4\msibios.sys [?]
S3 pkebhxen;pkebhxen;\??\c:\windows\System32\Drivers\pkebhxen.sys --> c:\windows\System32\Drivers\pkebhxen.sys [?]
S3 pwxpwmhf;pwxpwmhf;\??\c:\windows\System32\Drivers\pwxpwmhf.sys --> c:\windows\System32\Drivers\pwxpwmhf.sys [?]
S3 qrvtwwfy;qrvtwwfy;\??\c:\windows\System32\Drivers\qrvtwwfy.sys --> c:\windows\System32\Drivers\qrvtwwfy.sys [?]
S3 tqyxlpbt;tqyxlpbt;\??\c:\windows\System32\Drivers\tqyxlpbt.sys --> c:\windows\System32\Drivers\tqyxlpbt.sys [?]
S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys --> c:\windows\system32\drivers\vmfilter323.sys [?]
S3 wkrwhtxw;wkrwhtxw;\??\c:\windows\System32\Drivers\wkrwhtxw.sys --> c:\windows\System32\Drivers\wkrwhtxw.sys [?]
S3 xdfmqgee;xdfmqgee;\??\c:\windows\System32\Drivers\xdfmqgee.sys --> c:\windows\System32\Drivers\xdfmqgee.sys [?]
S3 xdqhsoxw;xdqhsoxw;\??\c:\windows\System32\Drivers\xdqhsoxw.sys --> c:\windows\System32\Drivers\xdqhsoxw.sys [?]
S3 xtrkbgar;xtrkbgar;\??\c:\windows\System32\Drivers\xtrkbgar.sys --> c:\windows\System32\Drivers\xtrkbgar.sys [?]
S3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm323.sys --> c:\windows\system32\Drivers\usbvm323.sys [?]
S4 gupdate1ca07b2faf6ca72;Služba Google Update (gupdate1ca07b2faf6ca72);c:\program files\Google\Update\GoogleUpdate.exe [18.7.2009 15:21 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'

2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]

2011-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
Trusted Zone: com\www.msi
Trusted Zone: com.tw\asia.msi
Trusted Zone: com.tw\global.msi
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-13 19:14
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet049\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3240)
c:\windows\system32\webcheck.dll
c:\windows\system32\msls31.dll
c:\windows\system32\ImgUtil.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-13 19:17:40
ComboFix-quarantined-files.txt 2011-02-13 18:17

Před spuštěním: 611 303 424
Po spuštění: 626 266 112

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 2EE45EB49B773C71804CF43DAEABD15E

Tohle není ten log, nýbrž je to ten první. jsou tam všechny šmejdy. Potřebuji ten poslední, který vznikl po spuštění CF skriptem.

Tady je nový,ale ten ze včerjška jsem asi smazal.

ComboFix 11-02-13.04 - Dolda 14.02.2011 19:55:22.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.511.268 [GMT 1:00]
Spuštěný z: c:\documents and settings\Dolda\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Soubory vytvořené od 2011-01-14 do 2011-02-14 )))))))))))))))))))))))))))))))
.

2011-02-14 18:32 . 2005-06-06 16:51 11264 ----a-w- c:\windows\system32\drivers\vulfntr.sys
2011-02-14 18:32 . 2005-01-05 17:02 6912 ----a-w- c:\windows\system32\drivers\vulfnth.sys
2011-02-14 18:32 . 2003-10-03 15:28 45056 ----a-w- c:\windows\system32\vusetup.dll
2011-02-14 18:32 . 1998-11-13 11:58 307200 ----a-w- c:\windows\IsUn0405.exe
2011-02-13 19:20 . 2010-09-18 06:53 974848 -c----w- c:\windows\system32\dllcache\mfc42.dll
2011-02-13 19:20 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
2011-02-13 19:19 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
2011-02-13 19:19 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
2011-02-13 19:14 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
2011-02-13 17:32 . 2011-02-13 17:32 -------- dc----w- C:\rsit
2011-02-13 16:46 . 2011-02-13 17:32 -------- d-----w- c:\program files\Trend Micro
2011-02-13 13:27 . 2011-02-13 13:27 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-02-13 13:26 . 2011-02-13 13:26 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-02-13 11:15 . 2011-02-13 19:40 -------- d-----w- c:\windows\ie8updates
2011-02-13 11:06 . 2011-02-13 11:06 -------- d-----w- c:\program files\MSXML 4.0
2011-02-13 10:56 . 2009-07-31 09:05 1372672 -c----w- c:\windows\system32\dllcache\msxml6.dll
2011-02-13 10:56 . 2008-04-14 02:30 80896 -c----w- c:\windows\system32\dllcache\msxml6r.dll
2011-02-13 10:55 . 2008-04-14 03:11 24064 -c----w- c:\windows\system32\dllcache\pidgen.dll
2011-02-13 10:54 . 2008-04-14 03:19 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-02-13 10:54 . 2008-04-14 03:21 81920 ------w- c:\windows\system32\ieencode.dll
2011-02-13 10:54 . 2006-12-28 19:01 19569 ----a-w- c:\windows\003250_.tmp
2011-02-13 10:46 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2011-02-13 10:45 . 2010-08-26 13:39 357248 -c----w- c:\windows\system32\dllcache\srv.sys
2011-02-13 10:45 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2011-02-13 10:45 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2011-02-13 10:45 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2011-02-13 10:44 . 2010-08-27 08:03 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2011-02-13 10:44 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2011-02-13 10:43 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2011-02-13 10:43 . 2010-12-09 15:14 2194944 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-02-13 10:43 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2011-02-13 10:43 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2011-02-13 10:43 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2011-02-13 10:43 . 2010-12-20 17:25 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2011-02-13 10:43 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2011-02-13 10:43 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2011-02-13 10:43 . 2010-12-09 15:15 713216 -c----w- c:\windows\system32\dllcache\ntdll.dll
2011-02-13 10:43 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-02-13 10:43 . 2010-12-09 15:14 2150912 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-02-13 10:43 . 2010-12-09 15:14 2029056 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-02-13 10:41 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2011-02-13 10:41 . 2010-12-20 23:52 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2011-02-13 10:41 . 2010-12-20 23:52 602112 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2011-02-13 10:41 . 2010-12-20 23:52 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2011-02-13 10:41 . 2010-12-20 23:52 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2011-02-13 10:41 . 2010-12-20 23:52 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2011-02-13 10:41 . 2010-12-20 23:52 1991680 -c----w- c:\windows\system32\dllcache\iertutil.dll
2011-02-13 10:41 . 2010-12-20 10:52 11080704 -c----w- c:\windows\system32\dllcache\ieframe.dll
2011-02-13 10:40 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2011-02-13 10:35 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2011-02-12 19:20 . 2011-02-12 19:20 -------- d-----w- c:\documents and settings\Dolda\Local Settings\Data aplikací\Downloaded Installations
2011-02-12 19:16 . 2011-02-13 16:41 -------- d-----w- c:\program files\MSI
2011-02-12 16:46 . 2008-04-13 18:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2011-02-12 16:46 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2011-02-12 16:46 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys
2011-02-12 16:45 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2011-02-11 18:05 . 2011-02-11 18:05 18298 ----a-w- c:\windows\system32\MAI9.tmp
2011-02-11 18:05 . 2011-02-11 18:05 74880 ----a-w- c:\windows\system32\drivers\qbjyiitvnjoq.sys
2011-02-11 17:43 . 2008-04-14 03:19 15872 -c--a-w- c:\windows\system32\dllcache\padrs404.dll
2011-02-11 17:42 . 2008-04-14 03:17 81976 -c--a-w- c:\windows\system32\dllcache\imjpdct.dll
2011-02-11 17:41 . 2008-04-14 03:08 97792 -c--a-w- c:\windows\system32\dllcache\chtmbx.dll
2011-02-11 17:15 . 1980-01-01 00:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2011-02-11 17:15 . 1980-01-01 00:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2011-02-11 17:04 . 2011-02-11 17:04 5280 ----a-w- c:\windows\system32\PerfStringBackup.TMP
2011-02-11 16:53 . 2008-04-14 03:21 32768 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwdl.dll
2011-02-11 16:52 . 2008-04-14 03:22 20480 ----a-w- c:\program files\Internet Explorer\Connection Wizard\inetwiz.exe
2011-02-11 16:52 . 2008-04-14 03:22 86016 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn2.exe
2011-02-11 16:52 . 2008-04-14 03:22 215552 ----a-w- c:\program files\Internet Explorer\Connection Wizard\icwconn1.exe
2011-02-11 16:26 . 2003-07-02 03:42 27904 ----a-w- c:\windows\system32\drivers\VIAAGP1.SYS
2011-02-11 15:58 . 2004-08-03 21:31 20992 ----a-w- c:\windows\system32\drivers\RTL8139.sys
2011-02-11 15:50 . 1980-01-01 00:00 9090 ----a-r- c:\windows\SETE8.tmp
2011-02-11 15:30 . 2011-02-11 15:30 18298 ----a-w- c:\windows\system32\MAI7.tmp
2011-02-11 15:30 . 2011-02-11 15:30 74880 ----a-w- c:\windows\system32\drivers\oyeidufipvmuv.sys
2011-02-11 15:08 . 2011-02-11 15:08 18298 ----a-w- c:\windows\system32\MAI6.tmp
2011-02-11 15:08 . 2011-02-11 15:08 74880 ----a-w- c:\windows\system32\drivers\lehotuycmqlz.sys
2011-02-11 14:43 . 2011-02-11 14:43 -------- dc----w- C:\$WIN_NT$.~BT
2011-02-11 14:38 . 2011-01-13 08:41 294608 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-02-11 14:38 . 2011-01-13 08:37 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-02-11 14:38 . 2011-01-13 08:37 23632 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-02-11 14:38 . 2011-01-13 08:40 47440 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-02-11 14:38 . 2011-01-13 08:40 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-02-11 14:38 . 2011-01-13 08:39 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-02-11 14:38 . 2011-01-13 08:37 29392 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-02-11 14:37 . 2011-01-13 08:47 38848 ----a-w- c:\windows\avastSS.scr
2011-02-11 14:37 . 2011-01-13 08:47 188216 ----a-w- c:\windows\system32\aswBoot.exe
2011-02-11 14:37 . 2011-02-11 14:37 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-02-11 13:41 . 2011-02-11 13:41 18298 ----a-w- c:\windows\system32\MAI8.tmp
2011-02-11 13:41 . 2011-02-11 13:42 74880 ----a-w- c:\windows\system32\drivers\nbsbrkkjwx.sys
2011-01-21 14:44 . 2011-01-21 14:44 440320 -c----w- c:\windows\system32\dllcache\shimgvw.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 14:44 . 1980-01-01 00:00 440320 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 1980-01-01 00:00 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:04 . 1980-01-01 00:00 1854976 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 1980-01-01 00:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:52 . 1980-01-01 00:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:52 . 1980-01-01 00:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-12-20 23:52 . 1980-01-01 00:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 17:25 . 1980-01-01 00:00 729088 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 1980-01-01 00:00 385024 ----a-w- c:\windows\system32\html.iec
2010-12-09 15:15 . 1980-01-01 00:00 713216 ----a-w- c:\windows\system32\ntdll.dll
2010-12-09 15:14 . 1980-01-01 00:00 2194944 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 15:14 . 1980-01-01 00:00 2071552 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-09 14:30 . 1980-01-01 00:00 33280 ----a-w- c:\windows\system32\csrsrv.dll
2010-11-18 18:15 . 2008-07-31 21:51 81920 ----a-w- c:\windows\system32\isign32.dll
2010-04-12 12:41 . 2010-04-12 12:40 728858 ----a-w- c:\program files\Common Files\unins000.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-13_18.14.18 )))))))))))))))))))))))))))))))))))))))))
.
+ 1980-01-01 00:00 . 2008-05-09 10:56 90112 c:\windows\system32\wshext.dll
- 1980-01-01 00:00 . 2008-04-14 03:22 90112 c:\windows\system32\wshext.dll
+ 1980-01-01 00:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
- 2008-08-01 18:29 . 2010-04-21 13:28 46080 c:\windows\system32\tzchange.exe
+ 2008-08-01 18:29 . 2010-11-03 13:12 46080 c:\windows\system32\tzchange.exe
+ 1980-01-01 00:00 . 2009-10-21 05:40 75776 c:\windows\system32\strmfilt.dll
- 1980-01-01 00:00 . 2008-04-14 03:22 75776 c:\windows\system32\strmfilt.dll
+ 1980-01-01 00:00 . 2010-08-27 05:54 99840 c:\windows\system32\srvsvc.dll
+ 1980-01-01 00:00 . 2010-08-17 13:17 58880 c:\windows\system32\spoolsv.exe
- 1980-01-01 00:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 1980-01-01 00:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 66560 c:\windows\system32\mshtmled.dll
- 1980-01-01 00:00 . 2009-03-08 03:31 66560 c:\windows\system32\mshtmled.dll
- 2009-03-08 03:31 . 2010-05-06 10:35 55296 c:\windows\system32\msfeedsbs.dll
+ 2009-03-08 03:31 . 2010-12-20 23:52 55296 c:\windows\system32\msfeedsbs.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 25600 c:\windows\system32\jsproxy.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 25600 c:\windows\system32\jsproxy.dll
+ 1980-01-01 00:00 . 2010-06-17 14:03 80384 c:\windows\system32\iccvid.dll
- 1980-01-01 00:00 . 2008-04-14 03:21 80384 c:\windows\system32\iccvid.dll
+ 1980-01-01 00:00 . 2009-10-21 05:40 25088 c:\windows\system32\httpapi.dll
+ 1980-01-01 00:00 . 2010-11-02 15:17 40960 c:\windows\system32\drivers\ndproxy.sys
+ 1980-01-01 00:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
+ 2008-05-09 10:56 . 2008-05-09 10:56 90112 c:\windows\system32\dllcache\wshext.dll
+ 2009-06-25 08:27 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2010-08-27 05:54 . 2010-08-27 05:54 99840 c:\windows\system32\dllcache\srvsvc.dll
+ 2010-08-17 13:17 . 2010-08-17 13:17 58880 c:\windows\system32\dllcache\spoolsv.exe
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 1980-01-01 00:00 . 2009-03-08 03:31 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 66560 c:\windows\system32\dllcache\mshtmled.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 43520 c:\windows\system32\dllcache\licmgr10.dll
+ 2009-06-24 11:18 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 1980-01-01 00:00 . 2010-05-06 10:35 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2010-11-18 18:15 . 2010-11-18 18:15 81920 c:\windows\system32\dllcache\isign32.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2009-12-14 07:10 . 2010-12-09 14:30 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2009-12-14 07:10 . 2009-12-14 07:10 33280 c:\windows\system32\dllcache\csrsrv.dll
- 2011-02-13 10:39 . 2008-07-08 12:59 26488 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\update\spcustom.dll
- 2011-02-13 10:39 . 2008-07-08 12:59 18296 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\spmsg.dll
- 2009-06-25 08:48 . 2009-06-25 08:48 59392 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\wdigest.dll
- 2009-06-25 08:48 . 2009-06-25 08:48 56320 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\secur32.dll
- 2009-06-22 11:34 . 2009-06-22 11:34 92544 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\ksecdd.sys
- 2010-03-23 04:31 . 2010-03-23 04:31 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2010-09-22 08:43 . 2010-09-22 08:43 30544 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2009-06-24 18:56 . 2009-06-24 18:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
+ 2010-09-23 14:55 . 2010-09-23 14:55 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll
- 2003-02-20 17:09 . 2003-02-20 17:09 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2010-09-23 01:26 . 2010-09-23 01:26 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
- 2003-02-20 17:09 . 2003-02-20 17:09 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2010-09-23 01:26 . 2010-09-23 01:26 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2004-07-14 23:32 . 2004-07-14 23:32 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
+ 2010-09-23 01:26 . 2010-09-23 01:26 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2004-07-15 00:49 . 2004-07-15 00:49 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 02:17 . 2010-09-23 02:17 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2010-09-23 02:17 . 2010-09-23 02:17 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
- 2003-02-20 17:19 . 2003-02-20 17:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 12800 c:\windows\ie8updates\KB2482017-IE8\xpshims.dll
+ 2011-02-13 19:40 . 2009-03-08 03:31 66560 c:\windows\ie8updates\KB2482017-IE8\mshtmled.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 55296 c:\windows\ie8updates\KB2482017-IE8\msfeedsbs.dll
+ 2011-02-13 19:40 . 2009-03-08 03:34 43008 c:\windows\ie8updates\KB2482017-IE8\licmgr10.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 25600 c:\windows\ie8updates\KB2482017-IE8\jsproxy.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 72192 c:\windows\assembly\tmp\W37CGKOS\ISymWrapper.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_bd0d6116\System.Drawing.Design.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_04e58a54\CustomMarshalers.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 60928 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationProvider\5ec9dec678303ebff0ef018edb5ec595\UIAutomationProvider.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 37888 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Pres#\46ef15b88ef577de4882c519329fc5d2\System.Windows.Presentation.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 36864 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\70ee6267f7bad40e8707d402277770c3\System.Web.DynamicData.Design.ni.dll
+ 2011-02-14 17:46 . 2011-02-14 17:46 94208 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ComponentMod#\2b5ff2c6358c483eb1439b99badb54fd\System.ComponentModel.DataAnnotations.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 82944 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn.Contra#\6125ff5a4fcd93d70a246cbff3005d42\System.AddIn.Contract.ni.dll
+ 2011-02-13 19:50 . 2011-02-13 19:50 47104 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFontCac#\de26af01222270c121788161496fcfe7\PresentationFontCache.ni.exe
+ 2011-02-13 19:48 . 2011-02-13 19:48 39424 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCFFRast#\3c5adeedb70e6e052a6556c6ab9b6918\PresentationCFFRasterizer.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 55296 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Vsa\5e5176efbfeb803b7f217525beec6844\Microsoft.Vsa.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\e1d4e0b1f112000ab33bbaf88bd9ed99\Microsoft.Build.Framework.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 65024 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\4200cf5b7f247ec1b997808c6d1ba7d1\Microsoft.Build.Framework.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 14336 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\50b7fc7f36c76313cbb434b10923e4e9\dfsvc.ni.exe
+ 2011-02-13 19:57 . 2011-02-13 19:57 25600 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\5ffa548547613dbc5a92f2c5b7cad196\Accessibility.ni.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2008-05-05 05:25 . 2010-08-27 01:43 5632 c:\windows\system32\xpsp4res.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-02-13 11:53 . 2011-02-13 11:53 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2011-02-13 11:53 . 2011-02-13 11:53 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 1980-01-01 00:00 . 2008-04-14 03:22 155648 c:\windows\system32\wscript.exe
+ 1980-01-01 00:00 . 2008-05-08 11:24 155648 c:\windows\system32\wscript.exe
- 1980-01-01 00:00 . 2008-04-14 03:22 293376 c:\windows\system32\winsrv.dll
+ 1980-01-01 00:00 . 2010-06-18 17:47 293376 c:\windows\system32\winsrv.dll
+ 1980-01-01 00:00 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
- 1980-01-01 00:00 . 2008-04-14 03:22 406016 c:\windows\system32\usp10.dll
+ 1980-01-01 00:00 . 2010-04-16 15:38 406016 c:\windows\system32\usp10.dll
- 1980-01-01 00:00 . 2009-10-15 16:32 119808 c:\windows\system32\t2embed.dll
+ 1980-01-01 00:00 . 2010-08-27 08:03 119808 c:\windows\system32\t2embed.dll
+ 1980-01-01 00:00 . 2010-06-30 12:33 149504 c:\windows\system32\schannel.dll
- 1980-01-01 00:00 . 2008-04-14 03:21 172032 c:\windows\system32\scrrun.dll
+ 1980-01-01 00:00 . 2008-05-09 10:56 172032 c:\windows\system32\scrrun.dll
- 1980-01-01 00:00 . 2008-04-14 03:21 180224 c:\windows\system32\scrobj.dll
+ 1980-01-01 00:00 . 2008-05-09 10:56 180224 c:\windows\system32\scrobj.dll
+ 1980-01-01 00:00 . 2010-08-16 08:45 590848 c:\windows\system32\rpcrt4.dll
- 1980-01-01 00:00 . 2008-04-14 03:21 249856 c:\windows\system32\odbc32.dll
+ 1980-01-01 00:00 . 2010-11-09 14:52 249856 c:\windows\system32\odbc32.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 206848 c:\windows\system32\occache.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 206848 c:\windows\system32\occache.dll
+ 1980-01-01 00:00 . 2009-09-11 14:19 136192 c:\windows\system32\msv1_0.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 611840 c:\windows\system32\mstime.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 611840 c:\windows\system32\mstime.dll
+ 2009-03-08 03:32 . 2010-12-20 23:52 602112 c:\windows\system32\msfeeds.dll
- 1980-01-01 00:00 . 1980-01-01 00:00 384512 c:\windows\system32\mp4sdmod.dll
+ 1980-01-01 00:00 . 2010-04-05 10:54 384512 c:\windows\system32\mp4sdmod.dll
- 2006-10-18 19:47 . 2006-10-18 19:47 317440 c:\windows\system32\MP4SDECD.dll
+ 2006-10-18 19:47 . 2010-03-30 11:24 317440 c:\windows\system32\mp4sdecd.dll
+ 1980-01-01 00:00 . 2010-09-18 11:23 974848 c:\windows\system32\mfc42u.dll
+ 1980-01-01 00:00 . 2010-09-18 06:53 974848 c:\windows\system32\mfc42.dll
+ 1980-01-01 00:00 . 2010-09-18 06:53 953856 c:\windows\system32\mfc40u.dll
+ 1980-01-01 00:00 . 2010-09-18 06:53 954368 c:\windows\system32\mfc40.dll
+ 2008-07-31 21:51 . 2010-06-09 07:45 692736 c:\windows\system32\inetcomm.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 184320 c:\windows\system32\iepeers.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 184320 c:\windows\system32\iepeers.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 387584 c:\windows\system32\iedkcs32.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 387584 c:\windows\system32\iedkcs32.dll
+ 1980-01-01 00:00 . 2010-12-20 12:55 173568 c:\windows\system32\ie4uinit.exe
+ 2003-02-24 00:09 . 2011-02-13 20:02 104624 c:\windows\system32\FNTCACHE.DAT
- 2003-02-24 00:09 . 2011-02-13 14:44 104624 c:\windows\system32\FNTCACHE.DAT
+ 1980-01-01 00:00 . 2010-08-26 13:39 357248 c:\windows\system32\drivers\srv.sys
+ 1980-01-01 00:00 . 2009-10-20 16:20 265728 c:\windows\system32\drivers\http.sys
+ 2008-05-08 11:24 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe
+ 2009-08-27 06:12 . 2010-07-16 11:58 219136 c:\windows\system32\dllcache\wordpad.exe
+ 2010-06-18 17:47 . 2010-06-18 17:47 293376 c:\windows\system32\dllcache\winsrv.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 916480 c:\windows\system32\dllcache\wininet.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 916480 c:\windows\system32\dllcache\wininet.dll
+ 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2010-04-16 15:38 . 2010-04-16 15:38 406016 c:\windows\system32\dllcache\usp10.dll
+ 2008-12-05 06:57 . 2010-06-30 12:33 149504 c:\windows\system32\dllcache\schannel.dll
+ 2008-05-09 10:56 . 2008-05-09 10:56 172032 c:\windows\system32\dllcache\scrrun.dll
+ 2008-05-09 10:56 . 2008-05-09 10:56 180224 c:\windows\system32\dllcache\scrobj.dll
+ 2009-04-15 14:54 . 2010-08-16 08:45 590848 c:\windows\system32\dllcache\rpcrt4.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 249856 c:\windows\system32\dllcache\odbc32.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 206848 c:\windows\system32\dllcache\occache.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 206848 c:\windows\system32\dllcache\occache.dll
+ 2009-09-11 14:19 . 2009-09-11 14:19 136192 c:\windows\system32\dllcache\msv1_0.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 611840 c:\windows\system32\dllcache\mstime.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 611840 c:\windows\system32\dllcache\mstime.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 102400 c:\windows\system32\dllcache\msjro.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 200704 c:\windows\system32\dllcache\msadox.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 180224 c:\windows\system32\dllcache\msadomd.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 536576 c:\windows\system32\dllcache\msado15.dll
+ 2010-11-09 14:52 . 2010-11-09 14:52 143360 c:\windows\system32\dllcache\msadco.dll
+ 1980-01-01 00:00 . 2010-04-05 10:54 384512 c:\windows\system32\dllcache\mp4sdmod.dll
- 1980-01-01 00:00 . 1980-01-01 00:00 384512 c:\windows\system32\dllcache\mp4sdmod.dll
+ 2010-03-30 11:24 . 2010-03-30 11:24 317440 c:\windows\system32\dllcache\mp4sdecd.dll
+ 2010-09-18 11:23 . 2010-09-18 11:23 974848 c:\windows\system32\dllcache\mfc42u.dll
+ 1980-01-01 00:00 . 2010-09-18 06:53 954368 c:\windows\system32\dllcache\mfc40.dll
+ 2010-12-22 12:34 . 2010-12-22 12:34 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2010-01-29 15:01 . 2010-06-09 07:45 692736 c:\windows\system32\dllcache\inetcomm.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 184320 c:\windows\system32\dllcache\iepeers.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 184320 c:\windows\system32\dllcache\iepeers.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 387584 c:\windows\system32\dllcache\iedkcs32.dll
- 1980-01-01 00:00 . 2010-05-06 10:35 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 1980-01-01 00:00 . 2010-12-20 12:55 173568 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2008-05-07 09:07 . 2008-05-07 09:07 135168 c:\windows\system32\dllcache\cscript.exe
+ 1980-01-01 00:00 . 2011-01-07 14:09 290048 c:\windows\system32\dllcache\atmfd.dll
+ 1980-01-01 00:00 . 2008-05-07 09:07 135168 c:\windows\system32\cscript.exe
+ 1980-01-01 00:00 . 2010-08-23 16:12 617472 c:\windows\system32\comctl32.dll
- 1980-01-01 00:00 . 2008-04-14 03:21 617472 c:\windows\system32\comctl32.dll
- 2011-02-13 10:39 . 2009-05-26 11:40 391032 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\update\updspapi.dll
- 2011-02-13 10:39 . 2009-05-26 11:40 759160 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\update\update.exe
- 2011-02-13 10:39 . 2008-07-08 12:59 233848 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\spuninst.exe
- 2009-06-25 08:48 . 2009-06-25 08:48 168448 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\schannel.dll
- 2009-06-25 08:48 . 2009-06-25 08:48 133632 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\msv1_0.dll
- 2009-06-25 08:48 . 2009-06-25 08:48 723456 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\lsasrv.dll
- 2009-06-25 08:48 . 2009-06-25 08:48 298496 c:\windows\SoftwareDistribution\Download\2c72bf78e3c24debcddfa92e9f03ffa3\sp2gdr\kerberos.dll
+ 2010-09-22 08:43 . 2010-09-22 08:43 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
- 2010-03-23 04:31 . 2010-03-23 04:31 435024 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2010-05-11 05:40 . 2010-05-11 05:40 388936 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2010-05-11 05:40 . 2010-05-11 05:40 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2009-08-07 21:51 . 2009-08-07 21:51 989016 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
- 2004-07-14 23:33 . 2004-07-14 23:33 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2010-09-23 01:26 . 2010-09-23 01:26 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
- 2004-07-14 23:25 . 2004-07-14 23:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2010-09-23 01:25 . 2010-09-23 01:25 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2004-07-15 00:49 . 2004-07-15 00:49 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 02:17 . 2010-09-23 02:17 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
+ 2010-09-23 20:02 . 2010-09-23 20:02 798208 c:\windows\Installer\ee8d6.msp
+ 2011-02-13 19:40 . 2010-05-06 10:35 916480 c:\windows\ie8updates\KB2482017-IE8\wininet.dll
+ 2011-02-13 19:40 . 2010-07-05 13:13 391032 c:\windows\ie8updates\KB2482017-IE8\spuninst\updspapi.dll
+ 2011-02-13 19:40 . 2010-07-05 13:13 233848 c:\windows\ie8updates\KB2482017-IE8\spuninst\spuninst.exe
+ 2011-02-13 19:40 . 2010-05-06 10:35 206848 c:\windows\ie8updates\KB2482017-IE8\occache.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 611840 c:\windows\ie8updates\KB2482017-IE8\mstime.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 599040 c:\windows\ie8updates\KB2482017-IE8\msfeeds.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 247808 c:\windows\ie8updates\KB2482017-IE8\ieproxy.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 184320 c:\windows\ie8updates\KB2482017-IE8\iepeers.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 743424 c:\windows\ie8updates\KB2482017-IE8\iedvtool.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 387584 c:\windows\ie8updates\KB2482017-IE8\iedkcs32.dll
+ 2011-02-13 19:40 . 2010-05-05 13:30 173056 c:\windows\ie8updates\KB2482017-IE8\ie4uinit.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2011-02-13 19:45 . 2011-02-13 19:45 970752 c:\windows\assembly\tmp\U159DIMQ\System.Deployment.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 113664 c:\windows\assembly\tmp\6DHLPTY2\System.EnterpriseServices.Wrapper.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 258048 c:\windows\assembly\tmp\6DHLPTY2\System.EnterpriseServices.dll
+ 2011-02-13 19:30 . 2011-02-13 19:30 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_c9caedb1\System.Drawing.dll
+ 2011-02-13 19:31 . 2011-02-13 19:31 192512 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_a618f7f0\System.Drawing.Design.dll
+ 2011-02-13 19:31 . 2011-02-13 19:31 118784 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c8facf65\CustomMarshalers.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 321536 c:\windows\assembly\NativeImages_v2.0.50727_32\WsatConfig\a16b8bcca59515281688ec856c034698\WsatConfig.ni.exe
+ 2011-02-13 19:56 . 2011-02-13 19:56 240128 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsFormsIntegra#\672c4d8e3c33e309c1ed90fa4cb85aba\WindowsFormsIntegration.ni.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 187904 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationTypes\cd91a32f4e36ccb2981c72c0d333e928\UIAutomationTypes.ni.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 447488 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClient\9df760fdf8071c7b0de78f39de365e6a\UIAutomationClient.ni.dll
+ 2011-02-14 17:50 . 2011-02-14 17:50 400896 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml.Linq\ff53d5b5249a2841ee196294429f51cf\System.Xml.Linq.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 129536 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Routing\7f9a1ae146571025fd49914b5c71a39b\System.Web.Routing.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 202240 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\d0ae809162b55e2fa958739177476af8\System.Web.RegularExpressions.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 859648 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\b1646e54b708b9824f4193f87eb00c0e\System.Web.Extensions.Design.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 328704 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity\504a93e73da77c502ecf98bfdfc1485e\System.Web.Entity.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 301056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Entity.D#\f22334fbd9497d79448fffef515ae0cc\System.Web.Entity.Design.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 547328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.DynamicD#\af5452305588da228a74e30324681d20\System.Web.DynamicData.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Abstract#\9d9bca1a8993c427984aa1bc9c165a33\System.Web.Abstractions.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 627200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\26d5bf1f7e700c2c19aa9b1da5519b24\System.Transactions.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8b000cc703c9d95593b516bf2c2ec316\System.ServiceProcess.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 679936 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\75e331a5d731d8e207be07adc06dec23\System.Security.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 311296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\dd7497aa089340600c8c5af8ab421ff7\System.Runtime.Serialization.Formatters.Soap.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 621056 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Net\2a080994f308f347b0497bb8804861cf\System.Net.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 998400 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\bc1cf48ba7dc00f45d0e949c49ab677a\System.Management.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 330752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Management.I#\904fda53006680a67f917ab638be0305\System.Management.Instrumentation.ni.dll
+ 2011-02-13 19:58 . 2011-02-13 19:58 381440 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IO.Log\4490976887e2e5a3b594041edbdf5064\System.IO.Log.ni.dll
+ 2011-02-13 19:58 . 2011-02-13 19:58 212992 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityMode#\77b9f6f6671aaaeb84c6907d467e792c\System.IdentityModel.Selectors.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 280064 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.Wrapper.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 627712 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\15724a7517f939c9b300f341fb5620b8\System.EnterpriseServices.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 208384 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\90199b4aa63b1b9c8ed0c3de16eec824\System.Drawing.Design.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 881152 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\849e98c9f428a12cb581320a23f69dbd\System.DirectoryServices.AccountManagement.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 455680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\7a823a4f61cf8c86aad02559f8fed07b\System.DirectoryServices.Protocols.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 354816 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\ad95820d2e29e8d55c0d8a838214c6e5\System.Data.Services.Design.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 939008 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Service#\617acb0d900bdde947ec79f7b5ccc183\System.Data.Services.Client.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 756736 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity.#\165bd290e518b9397ca55192985fdee3\System.Data.Entity.Design.ni.dll
+ 2011-02-14 17:46 . 2011-02-14 17:46 135680 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.DataSet#\41345e34f26854fc1878eae3e4d5d4a5\System.Data.DataSetExtensions.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 971264 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\ab688d0f9f333ba117832726bfb589c1\System.Configuration.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 141312 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuratio#\b48677ab9aa7a6830785f67b8478b4da\System.Configuration.Install.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 633856 c:\windows\assembly\NativeImages_v2.0.50727_32\System.AddIn\93a0958d5557e2b380647af0171ad354\System.AddIn.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 366080 c:\windows\assembly\NativeImages_v2.0.50727_32\SMSvcHost\d0758f84e927e3f0a15a6cde1b96d835\SMSvcHost.ni.exe
+ 2011-02-13 19:59 . 2011-02-13 19:59 256000 c:\windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\8043a108e3bb2d3dcc84b547b8085e99\SMDiagnostics.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 320512 c:\windows\assembly\NativeImages_v2.0.50727_32\ServiceModelReg\72d3aacfca2e1ce835c210f5a1decb36\ServiceModelReg.ni.exe
+ 2011-02-13 19:52 . 2011-02-13 19:52 368128 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e7e7321956e6822b1bf3691c35c842f6\PresentationFramework.Aero.ni.dll
+ 2011-02-13 19:53 . 2011-02-13 19:53 258048 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a14488afff027f0f2985e659449097f5\PresentationFramework.Royale.ni.dll
+ 2011-02-13 19:53 . 2011-02-13 19:53 224768 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\787e60c5dd562cb45887080095d2a3b7\PresentationFramework.Classic.ni.dll
+ 2011-02-13 19:53 . 2011-02-13 19:53 539648 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\2313ccc125dcb6a9800048ec1c51ec12\PresentationFramework.Luna.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 133632 c:\windows\assembly\NativeImages_v2.0.50727_32\MSBuild\5db9c32d9f352162e6da220ca463db0d\MSBuild.ni.exe
+ 2011-02-13 19:59 . 2011-02-13 19:59 386560 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\fcf975f74bd134d8e0fa8f37c5bc6a8c\Microsoft.Transactions.Bridge.Dtc.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 144384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\d6b9038136600fbfbbbd7460dc19da19\Microsoft.Build.Utilities.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 175104 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\585cc7218599e7806521d0e737ba5ffb\Microsoft.Build.Utilities.v3.5.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 839680 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\3057ec53731286e69e389d103c32fa41\Microsoft.Build.Engine.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 222720 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Con#\914e338ac6e92714f3e32ae5d89bf03b\Microsoft.Build.Conversion.v3.5.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 220672 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\12ae6f3635448471fc9f7d8bfe39c67d\CustomMarshalers.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 410112 c:\windows\assembly\NativeImages_v2.0.50727_32\ComSvcConfig\daca3c9ad6d867d3fec70d14b4f20cf3\ComSvcConfig.ni.exe
+ 2011-02-13 19:57 . 2011-02-13 19:57 842240 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\af4a3ae6d5c1cafa57002beb487b8d7a\AspNetMMCExt.ni.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2011-02-13 11:54 . 2011-02-13 11:54 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2011-02-13 11:52 . 2011-02-13 11:52 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2011-02-13 19:19 . 2010-08-23 16:12 1054208 c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

pokračování

+ 1980-01-01 00:00 . 2010-08-25 06:23 5541888 c:\windows\system32\wmp.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 1210880 c:\windows\system32\urlmon.dll
+ 1980-01-01 00:00 . 2011-01-21 14:44 8466432 c:\windows\system32\shell32.dll
+ 1980-01-01 00:00 . 2010-07-16 12:00 1287680 c:\windows\system32\ole32.dll
- 1980-01-01 00:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 1980-01-01 00:00 . 2010-06-14 07:43 1172480 c:\windows\system32\msxml3.dll
+ 2008-07-31 21:50 . 2009-06-10 08:21 2066432 c:\windows\system32\mstscax.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 5961216 c:\windows\system32\mshtml.dll
+ 2009-03-08 03:32 . 2010-12-20 23:52 1991680 c:\windows\system32\iertutil.dll
+ 2009-07-13 01:18 . 2010-08-25 06:23 5541888 c:\windows\system32\dllcache\wmp.dll
+ 2010-05-02 08:09 . 2010-12-31 14:04 1854976 c:\windows\system32\dllcache\win32k.sys
+ 1980-01-01 00:00 . 2010-12-20 23:52 1210880 c:\windows\system32\dllcache\urlmon.dll
+ 2008-06-17 19:02 . 2011-01-21 14:44 8466432 c:\windows\system32\dllcache\shell32.dll
+ 2010-07-16 12:00 . 2010-07-16 12:00 1287680 c:\windows\system32\dllcache\ole32.dll
+ 2009-02-10 18:09 . 2010-12-09 15:14 2071552 c:\windows\system32\dllcache\ntkrnlpa.exe
- 1980-01-01 00:00 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 1980-01-01 00:00 . 2010-06-14 07:43 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2008-07-31 21:50 . 2009-06-10 08:21 2066432 c:\windows\system32\dllcache\mstscax.dll
+ 1980-01-01 00:00 . 2010-12-20 23:52 5961216 c:\windows\system32\dllcache\mshtml.dll
+ 2008-07-31 21:51 . 2010-06-18 13:36 3558912 c:\windows\system32\dllcache\moviemk.exe
- 2010-03-23 04:32 . 2010-03-23 04:32 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-09-22 08:44 . 2010-09-22 08:44 5242880 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2010-05-11 05:40 . 2010-05-11 05:40 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
- 2009-08-07 21:51 . 2009-08-07 21:51 5812560 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2010-05-11 05:40 . 2010-05-11 05:40 4550656 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2010-09-23 14:55 . 2010-09-23 14:55 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
+ 2010-09-23 14:55 . 2010-09-23 14:55 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2010-09-23 01:26 . 2010-09-23 01:26 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2010-09-23 01:25 . 2010-09-23 01:25 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2010-09-23 14:55 . 2010-09-23 14:55 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2010-09-23 06:39 . 2010-09-23 06:39 4265472 c:\windows\Installer\ee8c5.msp
+ 2011-02-13 19:40 . 2010-05-06 10:35 1209344 c:\windows\ie8updates\KB2482017-IE8\urlmon.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 5950976 c:\windows\ie8updates\KB2482017-IE8\mshtml.dll
+ 2011-02-13 19:40 . 2010-05-06 10:35 1985536 c:\windows\ie8updates\KB2482017-IE8\iertutil.dll
+ 2011-02-13 10:43 . 2010-12-09 15:14 2194944 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2011-02-13 10:43 . 2010-12-09 15:14 2029056 c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2009-02-10 18:09 . 2010-12-09 15:14 2071552 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2011-02-13 10:43 . 2010-12-09 15:14 2150912 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2011-02-13 19:36 . 2011-02-13 19:36 5062656 c:\windows\assembly\tmp\DKOSW159\System.Design.dll
+ 2011-02-13 19:31 . 2011-02-13 19:31 4792320 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_b44bb2a6\System.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_3d45d8a8\System.dll
+ 2011-02-13 19:32 . 2011-02-13 19:32 5513216 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_b4f83f05\System.Xml.dll
+ 2011-02-13 19:30 . 2011-02-13 19:30 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_1ed35f56\System.Xml.dll
+ 2011-02-13 19:31 . 2011-02-13 19:32 7884800 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_7f5bf93d\System.Windows.Forms.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_4fe625c9\System.Windows.Forms.dll
+ 2011-02-13 19:33 . 2011-02-13 19:33 2244608 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_13c901b3\System.Drawing.dll
+ 2011-02-13 19:33 . 2011-02-13 19:33 3395584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_8900ee1c\System.Design.dll
+ 2011-02-13 19:30 . 2011-02-13 19:30 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_3d263edc\System.Design.dll
+ 2011-02-13 19:33 . 2011-02-13 19:33 8908800 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_762b3989\mscorlib.dll
+ 2011-02-13 19:31 . 2011-02-13 19:31 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_131a636c\mscorlib.dll
+ 2011-02-13 19:48 . 2011-02-13 19:48 3325440 c:\windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\cec7ecb8eac09dd630d180ce87d23b80\WindowsBase.ni.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 1049600 c:\windows\assembly\NativeImages_v2.0.50727_32\UIAutomationClients#\b7f6e7b265f9aae807ddc4284563e550\UIAutomationClientsideProviders.ni.dll
+ 2011-02-13 19:48 . 2011-02-13 19:48 7949824 c:\windows\assembly\NativeImages_v2.0.50727_32\System\08ffa4d388d5f007869aa7651c458e7c\System.ni.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 5450752 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\a6dbe24cbfe3ab6b318ed3095cc572d8\System.Xml.ni.dll
+ 2011-02-14 17:50 . 2011-02-14 17:50 1356288 c:\windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\bec60fe2e934a6284224ab45b0e981e2\System.WorkflowServices.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 1908224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Run#\09da139c48e2f5e76994a5c0f2e5b19e\System.Workflow.Runtime.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 4514304 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Com#\6809417da74ff937e18b3034f1eac2f2\System.Workflow.ComponentModel.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 2992640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Workflow.Act#\6c91ee82035d30efa8893e7b0396bbb0\System.Workflow.Activities.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 1840640 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\181254ba0cb690decedb950fd26d7bea\System.Web.Services.ni.dll
+ 2011-02-14 17:49 . 2011-02-14 17:49 2209280 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\4200f716e9a41cb91d17516ba864e586\System.Web.Mobile.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 2405376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Extensio#\da367bc2ecf2c9c5b4f858b6dba9e2ea\System.Web.Extensions.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 1917952 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Speech\5eb08849d17b272ed2a393420cb0305b\System.Speech.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 1706496 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\8e34e273d036b7468fc4e951a1fde437\System.ServiceModel.Web.ni.dll
+ 2011-02-13 19:58 . 2011-02-13 19:58 2345472 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\8061a0f5c1c2ee0549e19224352f67fa\System.Runtime.Serialization.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 1035776 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Printing\99767d4df92b83fdfb06012512722ec1\System.Printing.ni.dll
+ 2011-02-13 19:58 . 2011-02-13 19:58 1070080 c:\windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\095bb4f033374647b6d66c51f16bb886\System.IdentityModel.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 1587200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\dcc0244092fe52e6885b50be25ef3b31\System.Drawing.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 1116672 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\d20b7e58607ddb1ded9b687627ae8c21\System.DirectoryServices.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 1801216 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\daa33674d4250e38a24b70180d209ac8\System.Deployment.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 6616576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f04ef00e652a8655a717639e8aeb7b63\System.Data.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 2510336 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.SqlXml\f0470c2be4e6bb1dadbeed43e4e8af5c\System.Data.SqlXml.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 1328128 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Services\b8c9267d87b7358e1a5f00bf1572c313\System.Data.Services.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 2516480 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Linq\c18c236a09e715138daec2e25be205bb\System.Data.Linq.ni.dll
+ 2011-02-14 17:47 . 2011-02-14 17:47 9924096 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data.Entity\6ce886492d9b6a34555be3f328682ec2\System.Data.Entity.ni.dll
+ 2011-02-13 19:54 . 2011-02-13 19:54 2295296 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Core\faeda674832135a080bc73eda51813ff\System.Core.ni.dll
+ 2011-02-13 19:54 . 2011-02-13 19:54 2128896 c:\windows\assembly\NativeImages_v2.0.50727_32\ReachFramework\3e85c3d63ce3c3f37061aa626feb2a52\ReachFramework.ni.dll
+ 2011-02-13 19:53 . 2011-02-13 19:53 1657856 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationUI\bf67db30179ff6e8cb1bdbaa290d122e\PresentationUI.ni.dll
+ 2011-02-13 19:48 . 2011-02-13 19:48 1451008 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationBuildTa#\835786d8a0caabae09ad440f6e3abfc6\PresentationBuildTasks.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 1712128 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a27783547338dbebf84101a685ba641b\Microsoft.VisualBasic.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 1093120 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Transacti#\773d7bf69a9a0c0556aa41f53e75ab05\Microsoft.Transactions.Bridge.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 2332160 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\16ff33f07efdb9da2a18e27585c604be\Microsoft.JScript.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 1620992 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\d0fb91b296616a1a844bf265947018ee\Microsoft.Build.Tasks.ni.dll
+ 2011-02-13 20:00 . 2011-02-13 20:00 1966080 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\892e993c8df1c75081113131dc429c15\Microsoft.Build.Tasks.v3.5.ni.dll
+ 2011-02-13 19:59 . 2011-02-13 19:59 1888768 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\d0beebd2c9045158cdcd4bd5987b717b\Microsoft.Build.Engine.ni.dll
- 2011-02-13 11:54 . 2011-02-13 11:54 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 3182592 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2011-02-13 11:54 . 2011-02-13 11:54 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2009-08-28 13:26 . 2009-08-28 13:26 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2011-02-13 19:48 . 2011-02-13 19:48 1277952 c:\windows\assembly\GAC_MSIL\System.Web.Extensions\3.5.0.0__31bf3856ad364e35\System.Web.Extensions.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2011-02-13 11:52 . 2011-02-13 11:52 5242880 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2011-02-13 11:53 . 2011-02-13 11:53 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2011-02-13 19:45 . 2011-02-13 19:45 4550656 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
+ 2011-02-13 19:29 . 2011-02-13 19:29 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-03-08 03:39 . 2010-12-20 10:52 11080704 c:\windows\system32\ieframe.dll
+ 2010-09-24 13:08 . 2010-09-24 13:08 11430400 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp
+ 2010-05-19 12:08 . 2010-05-19 12:08 11408896 c:\windows\Installer\ee8cf.msp
+ 2010-09-24 06:08 . 2010-09-24 06:08 17518080 c:\windows\Installer\ee8bc.msp
+ 2011-02-13 19:40 . 2010-05-06 10:35 11076096 c:\windows\ie8updates\KB2482017-IE8\ieframe.dll
+ 2011-02-13 19:56 . 2011-02-13 19:56 12430848 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\439c466b60614915587c5273eaf0ca7f\System.Windows.Forms.ni.dll
+ 2011-02-14 17:48 . 2011-02-14 17:48 11800576 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\41f436dae3c8146752d06130f7331527\System.Web.ni.dll
+ 2011-02-13 19:58 . 2011-02-13 19:58 17403904 c:\windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\52ca772b93f517fc8fe53d0a240642b3\System.ServiceModel.ni.dll
+ 2011-02-13 19:55 . 2011-02-13 19:55 10683392 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\fdc42078fd10e4dc8b05087900c63977\System.Design.ni.dll
+ 2011-02-13 19:52 . 2011-02-13 19:52 14328320 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\a632f3ef85ffd35341b383eed577cb93\PresentationFramework.ni.dll
+ 2011-02-13 19:50 . 2011-02-13 19:50 12215808 c:\windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f00db8db51f5707c7fe52c0683dc6136\PresentationCore.ni.dll
+ 2011-02-13 19:47 . 2011-02-13 19:47 11490816 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7bffd7ff2009f421fe5d229927588496\mscorlib.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-07-18 39408]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Dolda^Nabídka Start^Programy^Po spuštění^Registrace .lnk]
path=c:\documents and settings\Dolda\Nabídka Start\Programy\Po spuštění\Registrace .lnk
backup=c:\windows\pss\Registrace .lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
c:\documents and settings\Dolda\skt.exe \u [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlazeServoTool]
2010-03-06 15:46 286720 ----a-w- c:\program files\BlazeVideo\BlazeDTV 6.0\MediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 14:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2011-01-05 08:18 133432 ----a-w- c:\program files\ICQ7.0\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ------w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-06-25 13:12 1414144 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerDVD]
2007-09-06 21:49 1004840 ----a-w- c:\program files\CyberLink\PowerDVD\PowerDVD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2007-03-30 12:34 25263144 ----a-w- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-07-18 14:18 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"O&O Defrag"=2 (0x2)
"gusvc"=3 (0x3)
"gupdate1ca07b2faf6ca72"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqcopy2.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7235:TCP"= 7235:TCP:doounus
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [11.2.2011 15:38 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [11.2.2011 15:38 17744]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [17.10.2008 15:18 246520]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.8.2008 12:46 691696]
S0 zphwq;zphwq; [x]
S3 bccthpkv;bccthpkv;\??\c:\windows\System32\Drivers\bccthpkv.sys --> c:\windows\System32\Drivers\bccthpkv.sys [?]
S3 MSI_DVD_010507;MSI_DVD_010507;c:\progra~1\MSI\MSIWDev\DVDSYS32_100507.sys [10.5.2010 10:44 22328]
S3 MSI_MSIBIOS_010507;MSI_MSIBIOS_010507;c:\progra~1\MSI\MSIWDev\msibios32_100507.sys [10.5.2010 10:44 25912]
S3 MsibiosDevice;MsibiosDevice;\??\c:\program files\MSI\Live Update 4\LU4\msibios.sys --> c:\program files\MSI\Live Update 4\LU4\msibios.sys [?]
S3 pkebhxen;pkebhxen;\??\c:\windows\System32\Drivers\pkebhxen.sys --> c:\windows\System32\Drivers\pkebhxen.sys [?]
S3 pwxpwmhf;pwxpwmhf;\??\c:\windows\System32\Drivers\pwxpwmhf.sys --> c:\windows\System32\Drivers\pwxpwmhf.sys [?]
S3 qrvtwwfy;qrvtwwfy;\??\c:\windows\System32\Drivers\qrvtwwfy.sys --> c:\windows\System32\Drivers\qrvtwwfy.sys [?]
S3 tqyxlpbt;tqyxlpbt;\??\c:\windows\System32\Drivers\tqyxlpbt.sys --> c:\windows\System32\Drivers\tqyxlpbt.sys [?]
S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys --> c:\windows\system32\drivers\vmfilter323.sys [?]
S3 wkrwhtxw;wkrwhtxw;\??\c:\windows\System32\Drivers\wkrwhtxw.sys --> c:\windows\System32\Drivers\wkrwhtxw.sys [?]
S3 xdfmqgee;xdfmqgee;\??\c:\windows\System32\Drivers\xdfmqgee.sys --> c:\windows\System32\Drivers\xdfmqgee.sys [?]
S3 xdqhsoxw;xdqhsoxw;\??\c:\windows\System32\Drivers\xdqhsoxw.sys --> c:\windows\System32\Drivers\xdqhsoxw.sys [?]
S3 xtrkbgar;xtrkbgar;\??\c:\windows\System32\Drivers\xtrkbgar.sys --> c:\windows\System32\Drivers\xtrkbgar.sys [?]
S3 ZSMC326;Vimicro USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm323.sys --> c:\windows\system32\Drivers\usbvm323.sys [?]
S4 gupdate1ca07b2faf6ca72;Služba Google Update (gupdate1ca07b2faf6ca72);c:\program files\Google\Update\GoogleUpdate.exe [18.7.2009 15:21 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'

2011-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]

2011-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-18 14:20]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
Trusted Zone: com\www.msi
Trusted Zone: com.tw\asia.msi
Trusted Zone: com.tw\global.msi
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-14 20:02
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet049\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG11.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(436)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-02-14 20:06:38
ComboFix-quarantined-files.txt 2011-02-14 19:06

Před spuštěním: 1 627 553 792
Po spuštění: 1 650 266 112

- - End Of File - - A205322E425FD5526C82E97877767C5F

Spusťte CF tímto skriptem:

KillAll::

Collect::
c:\windows\system32\MAI9.tmp
c:\windows\system32\drivers\qbjyiitvnjoq.sys
c:\windows\SETE8.tmp
c:\windows\system32\MAI7.tmp
c:\windows\system32\drivers\oyeidufipvmuv.sys
c:\windows\system32\MAI6.tmp
c:\windows\system32\drivers\lehotuycmqlz.sys
c:\windows\system32\MAI8.tmp
c:\windows\system32\drivers\nbsbrkkjwx.sys
c:\documents and settings\Dolda\skt.exe
c:\windows\System32\Drivers\bccthpkv.sys
c:\windows\System32\Drivers\pkebhxen.sys
c:\windows\System32\Drivers\qrvtwwfy.sys
c:\windows\System32\Drivers\tqyxlpbt.sys
c:\windows\System32\Drivers\wkrwhtxw.sys
c:\windows\System32\Drivers\xdfmqgee.sys
c:\windows\System32\Drivers\xdqhsoxw.sys
c:\windows\System32\Drivers\xtrkbgar.sys

Driver::
zphwq
qbjyiitvnjoq
oyeidufipvmuv
lehotuycmqlz
nbsbrkkjwx
bccthpkv
pkebhxen
qrvtwwfy
tqyxlpbt
wkrwhtxw
xdfmqgee
xdqhsoxw
xtrkbgar