Facebook vir pres chat...

Zpráva

Zeron · #1 Příspěvek od **Zeron** » 20 Črc 2011 15:00

Zdravíčko...jak to tady projíždím tak vidím, že nejsem sám co se bohužel nachytal...nejsem žádný expert na počítače tak ani neznám hrozby internetu či facebooku...takže bohužel

Věc se má takhle...píše mi na facebooku jeden můj kamarád anglicky: "Hi. How Are you"...potom jsme si psali a mi to nepřišlo nijak divné, protože si píšeme anglicky často...no a potom mi poslal odkaz na video na youtube...video chtelo nainstalovat nový Adobe flash player...klikl jsem, protože jsem nedávno přeinstalovával počítač a došlo mi, že jsem si ho tam nenainstaloval...no a pomocí exe souboru se mi dostal do počítače vir...

VIR ZAVINIL: úplnou blokaci ESET NOD32 antiviru...dal jsem ho i pryč a zkoušel jsem ho naistalovat znovu, ale prostě nic...píše mi to
takovou červenou tabulku a píše se tam, že antivir je zablokovaný, protože usilovně pracuje nebo tak něco...
- dále zpomalený internet...v jednu dobu mě to nechtělo vůbec pustit na některé web. stránky včetně facebooku

Takže bych poprosil o pomoc

...projížděl jsem příspěvky a všichni na konec příspěvku zadávají nějaký LOG...absolutně nevím co to je

...jinak jsem si stáhl program OTL, kterým jste řešili stejný problém s jiným kolegou zde na forum...

#2 Příspěvek od **motji** » 20 Črc 2011 15:24

Hezké odpoledne

začneme logem ze rsitu, viz můj podpis

Zeron · #3 Příspěvek od **Zeron** » 20 Črc 2011 16:24

Děkuji za odpověď

...tady je LOG:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jakub at 2011-07-20 17:22:13
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 138 GB (90%) free of 153 GB
Total RAM: 3037 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:22:15, on 20.7.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Jakub\Data aplikací\dwm.exe
C:\DOCUME~1\Jakub\LOCALS~1\Temp\csrss.exe
C:\WINDOWS\PLFSetI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\WINDOWS\update.tray-2-0\svchost.exe
C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe
C:\WINDOWS\l1rezerv.exe
C:\WINDOWS\systemup.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\sysdriver32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\update.1\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\ufa\ufa.exe
C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe
C:\Program Files\Pinnacle\Studio 14\Programs\PER.exe
C:\Program Files\Pinnacle\Studio 14\Programs\UMI.EXE
C:\Program Files\Pinnacle\Studio 14\Programs\RM.EXE
C:\Program Files\Pinnacle\Studio 14\Import\programs\Importer.exe
C:\Program Files\Pinnacle\Studio 14\Import\programs\UMI.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Jakub.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=15383
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:55333
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F3 - REG:win.ini: load=C:\DOCUME~1\Jakub\LOCALS~1\Temp\csrss.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE -a
O4 - HKLM\..\Run: [PLFSetI] C:\WINDOWS\PLFSetI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [wxpdrv] C:\WINDOWS\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\WINDOWS\update.tray-2-0\svchost.exe
O4 - HKLM\..\Run: [6511828.exe] "C:\DOCUME~1\Jakub\LOCALS~1\Temp\6511828.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\WINDOWS\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [7208023.exe] "C:\WINDOWS\TEMP\7208023.exe"
O4 - HKLM\..\Run: [4275483.exe] "C:\WINDOWS\TEMP\4275483.exe"
O4 - HKLM\..\Run: [6571768.exe] "C:\WINDOWS\TEMP\6571768.exe"
O4 - HKLM\..\Run: [conhost] C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\WINDOWS\l1rezerv.exe"
O4 - HKLM\..\Run: [systemup] "C:\WINDOWS\systemup.exe" stand
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [KB976002-v5] rundll32.exe advpack.dll,LaunchINFSection OPMWXPUP.inf,BrowserChoiceGoo (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: RailNotification - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe
O23 - Service: Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe (file missing)
O23 - Service: wxpdrivers - Unknown owner - C:\WINDOWS\update.1\svchost.exe

--
End of file - 9840 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"=C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [2006-10-26 434528]
"PLFSetI"=C:\WINDOWS\PLFSetI.exe [2008-07-29 200704]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-11 13594624]
"nwiz"=nwiz.exe /install []
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"wxpdrv"=C:\WINDOWS\services32.exe []
"tray_ico"= []
"tray_ico0"=C:\WINDOWS\update.tray-2-0\svchost.exe [2011-07-18 1170432]
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"6511828.exe"=C:\DOCUME~1\Jakub\LOCALS~1\Temp\6511828.exe [2011-07-18 232960]
"sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-07-18 232960]
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-07-18 232960]
"7208023.exe"=C:\WINDOWS\TEMP\7208023.exe [2011-07-18 232960]
"4275483.exe"=C:\WINDOWS\TEMP\4275483.exe [2011-07-18 232960]
"6571768.exe"=C:\WINDOWS\TEMP\6571768.exe [2011-07-18 483328]
"conhost"=C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe [2011-07-18 169472]
"l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-07-18 110592]
"systemup"=C:\WINDOWS\systemup.exe [2011-07-18 114176]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-11 86016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RailNotification]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2011-01-25 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2011-01-25 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2011-01-25 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Documents and Settings\Jakub\Local Settings\Data aplikací\MediaGet2\mediaget.exe"="C:\Documents and Settings\Jakub\Local Settings\Data aplikací\MediaGet2\mediaget.exe:*:Enabled:MediaGet torrent client"
"D:\HRY\Battlefield 2\BF2.exe"="D:\HRY\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe"="C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe:*:Enabled:C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.tray-2-0\svchost.exe"="C:\WINDOWS\update.tray-2-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-2-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FMVC"=fmcodec.dll
"vidc.divx"=divx.dll
"vidc.yv12"=DivX.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.xvid"=xvid.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mjpg"=pvmjpg30.dll

======List of files/folders created in the last 1 month======

2011-07-20 17:22:13 ----D---- C:\rsit
2011-07-20 17:22:13 ----D---- C:\Program Files\trend micro
2011-07-20 10:15:38 ----HD---- C:\WINDOWS\PIF
2011-07-19 11:31:58 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2011-07-19 11:31:57 ----D---- C:\Program Files\Common Files\Yahoo!
2011-07-19 11:31:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2011-07-19 11:31:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2011-07-19 11:29:49 ----D---- C:\WINDOWS\SxsCaPendDel
2011-07-18 21:15:50 ----D---- C:\WINDOWS\system32\LogFiles
2011-07-18 19:19:30 ----D---- C:\WINDOWS\Prefetch
2011-07-18 19:02:09 ----N---- C:\WINDOWS\system32\COMACF.tmp
2011-07-18 19:02:08 ----N---- C:\WINDOWS\system32\COMACD.tmp
2011-07-18 19:02:08 ----N---- C:\WINDOWS\system32\COMACB.tmp
2011-07-18 18:50:32 ----N---- C:\WINDOWS\system32\irclass.dll
2011-07-18 18:50:31 ----N---- C:\WINDOWS\system32\spxcoins.dll
2011-07-18 18:41:05 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-07-18 12:16:51 ----A---- C:\Documents and Settings\Jakub\Data aplikací\dwm.exe
2011-07-18 12:08:54 ----D---- C:\WINDOWS\ufa
2011-07-18 12:08:54 ----D---- C:\WINDOWS\rpcminer
2011-07-18 12:08:54 ----D---- C:\WINDOWS\phoenix
2011-07-18 12:08:53 ----A---- C:\WINDOWS\unrar.exe
2011-07-18 12:08:29 ----A---- C:\WINDOWS\ddh_iplist.txt
2011-07-18 12:08:28 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-07-18 12:08:27 ----A---- C:\WINDOWS\systemup.exe
2011-07-18 12:08:25 ----A---- C:\WINDOWS\l1rezerv.exe
2011-07-18 12:08:23 ----D---- C:\Microsoft
2011-07-18 12:08:22 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-07-18 12:08:12 ----A---- C:\WINDOWS\gbot111.exe
2011-07-18 12:08:07 ----HD---- C:\WINDOWS\update.2
2011-07-18 12:08:00 ----HD---- C:\WINDOWS\update.5.0
2011-07-18 12:06:23 ----N---- C:\WINDOWS\system32\drivers\athw.sys
2011-07-18 12:06:23 ----N---- C:\WINDOWS\system32\athw.sys
2011-07-18 12:06:23 ----D---- C:\WINDOWS\Options
2011-07-18 12:06:10 ----D---- C:\temp
2011-07-18 11:37:28 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-18 10:45:53 ----A---- C:\WINDOWS\iplist.txt
2011-07-18 10:45:50 ----A---- C:\WINDOWS\sysdriver32_.exe
2011-07-18 10:45:48 ----A---- C:\WINDOWS\sysdriver32.exe
2011-07-18 10:45:29 ----A---- C:\WINDOWS\front_ip_list.txt
2011-07-18 10:45:21 ----D---- C:\WINDOWS\av_ico
2011-07-18 10:44:16 ----HD---- C:\WINDOWS\update.1
2011-07-18 10:44:09 ----HD---- C:\WINDOWS\update.tray-2-0-lnk
2011-07-18 10:44:09 ----HD---- C:\WINDOWS\update.tray-2-0
2011-07-18 10:33:56 ----A---- C:\WINDOWS\winlog-ids.txt
2011-07-18 10:33:56 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-07-17 17:44:46 ----D---- C:\Program Files\Kodek CZ
2011-07-16 21:45:47 ----N---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2011-07-16 21:45:40 ----D---- C:\Program Files\Common Files\Pinnacle
2011-07-16 21:41:36 ----D---- C:\Program Files\Pinnacle
2011-07-16 21:32:09 ----D---- C:\Program Files\Common Files\Adobe
2011-07-16 21:32:09 ----D---- C:\Program Files\Adobe
2011-07-16 21:31:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-16 20:42:51 ----D---- C:\Documents and Settings\Jakub\Data aplikací\DivX
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\vxblock.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxwave.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxsfs.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxmas.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\px.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-07-16 20:41:59 ----D---- C:\Program Files\Common Files\DivX Shared
2011-07-16 20:40:14 ----D---- C:\Program Files\Google
2011-07-16 20:40:11 ----D---- C:\Program Files\DivX
2011-07-16 20:39:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2011-07-16 20:36:31 ----D---- C:\Documents and Settings\Jakub\Data aplikací\skypePM
2011-07-16 20:36:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-16 20:36:11 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Skype
2011-07-16 20:36:01 ----D---- C:\Program Files\Common Files\Skype
2011-07-16 20:35:58 ----RD---- C:\Program Files\Skype
2011-07-16 20:12:03 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Mirillis
2011-07-16 20:12:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mirillis
2011-07-16 20:10:35 ----D---- C:\Program Files\Mirillis
2011-07-16 19:58:22 ----D---- C:\Program Files\DsNET Corp
2011-07-16 19:37:25 ----A---- C:\WINDOWS\nsreg.dat
2011-07-16 19:37:24 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Mozilla
2011-07-16 19:37:19 ----D---- C:\Program Files\Mozilla Firefox
2011-07-16 19:34:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2011-07-16 19:34:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\LangSoft
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-07-16 19:34:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2011-07-16 19:34:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2011-07-16 19:34:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-07-16 19:34:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2011-07-16 19:34:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-07-16 18:28:36 ----SHD---- C:\RECYCLER
2011-07-16 18:00:12 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Macromedia
2011-07-16 18:00:12 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Adobe
2011-07-05 11:00:40 ----N---- C:\WINDOWS\system32\msonpmon.dll
2011-07-05 10:59:45 ----D---- C:\Program Files\Microsoft Works
2011-07-05 10:59:25 ----D---- C:\Program Files\Microsoft Visual Studio
2011-07-05 10:59:25 ----D---- C:\Program Files\Common Files\DESIGNER
2011-07-05 10:57:24 ----D---- C:\Program Files\Microsoft Visual Studio 8
2011-07-05 10:56:51 ----HD---- C:\WINDOWS\ShellNew
2011-07-05 10:56:39 ----D---- C:\Program Files\Microsoft Office
2011-07-05 10:56:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-07-05 10:56:29 ----RHD---- C:\MSOCache
2011-07-04 14:29:30 ----N---- C:\WINDOWS\system32\h323log.txt
2011-07-04 14:28:57 ----N---- C:\WINDOWS\system32\drivers\MSTEE.sys
2011-07-04 14:28:51 ----N---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2011-07-04 14:28:48 ----N---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2011-07-04 14:28:47 ----N---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2011-07-04 14:28:39 ----N---- C:\WINDOWS\system32\drivers\audstub.sys
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\vfwwdm32.dll
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\ksuser.dll
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-07-04 14:28:09 ----N---- C:\WINDOWS\system32\drivers\redbook.sys
2011-07-04 14:26:12 ----A---- C:\WINDOWS\imsins.BAK
2011-07-04 14:26:10 ----SHD---- C:\WINDOWS\Installer
2011-07-04 14:26:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-04 14:26:09 ----D---- C:\Program Files\Common Files\ODBC
2011-07-04 14:26:09 ----A---- C:\WINDOWS\ODBCINST.INI
2011-07-04 14:26:06 ----RD---- C:\Program Files
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files
2011-07-04 14:25:47 ----N---- C:\WINDOWS\system32\dgrpsetu.dll
2011-07-04 14:25:46 ----N---- C:\WINDOWS\system32\EqnClass.Dll
2011-07-04 14:25:44 ----N---- C:\WINDOWS\system32\drivers\irenum.sys
2011-07-04 14:25:44 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-07-04 14:25:43 ----N---- C:\WINDOWS\system32\storprop.dll
2011-07-04 14:25:35 ----AS---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-07-04 14:25:17 ----D---- C:\WINDOWS\system32\CatRoot2
2011-07-04 14:25:17 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-04 14:25:11 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-07-04 14:24:52 ----A---- C:\WINDOWS\setuplog.txt
2011-07-04 14:24:49 ----D---- C:\Documents and Settings
2011-07-04 14:24:48 ----SHD---- C:\System Volume Information
2011-07-04 14:24:48 ----N---- C:\WINDOWS\system32\FNTCACHE.DAT
2011-07-04 14:24:12 ----SH---- C:\boot.ini
2011-07-04 14:20:31 ----SD---- C:\WINDOWS\Offline Web Pages
2011-07-04 14:20:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-07-04 14:20:31 ----RSD---- C:\WINDOWS\Fonts
2011-07-04 14:20:31 ----RD---- C:\WINDOWS\Web
2011-07-04 14:20:31 ----HD---- C:\WINDOWS\inf
2011-07-04 14:20:31 ----DC---- C:\WINDOWS\system32\dllcache
2011-07-04 14:20:31 ----D---- C:\WINDOWS\WinSxS
2011-07-04 14:20:31 ----D---- C:\WINDOWS\WBEM
2011-07-04 14:20:31 ----D---- C:\WINDOWS\twain_32
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Temp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\wins
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\wbem
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\usmt
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\spool
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ShellExt
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\Setup
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ras
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\oobe
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\npp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\mui
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\inetsrv
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\IME
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\icsxml
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ias
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\export
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\dhcp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\cs-cz
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\cs
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\config
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\3com_dmi
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\3076
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\2052
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1054
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1042
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1041
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1037
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1033
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1031
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1029
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1028
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1025
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system
2011-07-04 14:20:31 ----D---- C:\WINDOWS\security
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Resources
2011-07-04 14:20:31 ----D---- C:\WINDOWS\repair
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Provisioning
2011-07-04 14:20:31 ----D---- C:\WINDOWS\pchealth
2011-07-04 14:20:31 ----D---- C:\WINDOWS\PeerNet
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Network Diagnostic
2011-07-04 14:20:31 ----D---- C:\WINDOWS\mui
2011-07-04 14:20:31 ----D---- C:\WINDOWS\msapps
2011-07-04 14:20:31 ----D---- C:\WINDOWS\msagent
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Media
2011-07-04 14:20:31 ----D---- C:\WINDOWS\L2Schemas
2011-07-04 14:20:31 ----D---- C:\WINDOWS\java
2011-07-04 14:20:31 ----D---- C:\WINDOWS\ime
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Help
2011-07-04 14:20:31 ----D---- C:\WINDOWS\ehome
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Driver Cache
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Debug
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Cursors
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Connection Wizard
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Config
2011-07-04 14:20:31 ----D---- C:\WINDOWS\AppPatch
2011-07-04 14:20:31 ----D---- C:\WINDOWS\addins
2011-07-04 14:20:31 ----D---- C:\WINDOWS
2011-07-04 14:20:31 ----ASH---- C:\pagefile.sys
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\rt2860.sys
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\RaCoInst.dll
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\RaCoInst.dat
2011-07-04 13:49:47 ----D---- C:\Program Files\Ralink
2011-07-04 13:49:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ralink
2011-07-04 13:49:06 ----D---- C:\Program Files\Atheros
2011-07-04 13:48:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Atheros
2011-07-04 13:46:58 ----N---- C:\WINDOWS\system32\nvudisp.exe
2011-07-04 13:46:58 ----D---- C:\WINDOWS\nview
2011-07-04 13:46:28 ----N---- C:\WINDOWS\system32\NVUNINST.EXE
2011-07-04 13:45:11 ----N---- C:\WINDOWS\system32\drivers\l1c51x86.sys
2011-07-04 13:45:05 ----D---- C:\WINDOWS\system32\Atheros_L1e
2011-07-04 13:44:08 ----D---- C:\Program Files\Acer
2011-07-04 13:41:23 ----N---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-07-04 13:41:23 ----N---- C:\WINDOWS\system32\drivers\btwsecfl.sys
2011-07-04 13:41:22 ----N---- C:\WINDOWS\system32\drivers\btkrnl.sys
2011-07-04 13:41:22 ----N---- C:\WINDOWS\system32\btw_ci.dll
2011-07-04 13:41:15 ----D---- C:\Program Files\WIDCOMM
2011-07-04 13:37:40 ----N---- C:\WINDOWS\system32\drivers\splitter.sys
2011-07-04 13:37:38 ----N---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-07-04 13:37:20 ----N---- C:\WINDOWS\system32\UCI32A34.dll
2011-07-04 13:37:20 ----N---- C:\WINDOWS\system32\drivers\CHDAU32.sys
2011-07-04 13:37:20 ----D---- C:\Program Files\CONEXANT
2011-07-04 13:32:08 ----A---- C:\WINDOWS\USB_VIDEO_REG.exe
2011-07-04 13:32:08 ----A---- C:\WINDOWS\PLFSetI.exe
2011-07-04 13:32:08 ----A---- C:\WINDOWS\PidList.ini
2011-07-04 13:32:08 ----A---- C:\WINDOWS\Image.dll
2011-07-04 13:32:08 ----A---- C:\WINDOWS\Acer Crystal Eye webcam.EXE
2011-07-04 13:32:07 ----HD---- C:\Program Files\InstallShield Installation Information
2011-07-04 13:32:03 ----D---- C:\Documents and Settings\Jakub\Data aplikací\InstallShield
2011-07-04 13:28:12 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-07-04 13:28:10 ----N---- C:\WINDOWS\system32\CSVer.dll
2011-07-04 13:28:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-04 13:28:10 ----D---- C:\Program Files\Intel
2011-07-04 13:27:57 ----D---- C:\Intel
2011-07-04 13:02:00 ----N---- C:\WINDOWS\system32\d3d8caps.dat
2011-07-04 12:58:16 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Windows Search
2011-07-04 12:55:13 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Windows Desktop Search
2011-07-04 12:54:36 ----N---- C:\WINDOWS\system32\wmpns.dll
2011-07-04 12:54:35 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Identities
2011-07-04 12:54:33 ----HD---- C:\Program Files\Uninstall Information
2011-07-04 12:54:24 ----ASH---- C:\Documents and Settings\Jakub\Data aplikací\desktop.ini
2011-07-04 12:54:23 ----SD---- C:\Documents and Settings\Jakub\Data aplikací\Microsoft
2011-07-04 12:53:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-07-04 12:52:06 ----AS---- C:\WINDOWS\bootstat.dat
2011-07-04 12:50:40 ----D---- C:\WINDOWS\system32\xircom
2011-07-04 12:50:40 ----D---- C:\Program Files\xerox
2011-07-04 12:50:40 ----D---- C:\Program Files\microsoft frontpage
2011-07-04 12:50:05 ----D---- C:\WINDOWS\system32\Microsoft
2011-07-04 12:50:03 ----N---- C:\WINDOWS\system32\deployJava1.dll
2011-07-04 12:49:57 ----D---- C:\Program Files\Java
2011-07-04 12:49:28 ----RASH---- C:\MSDOS.SYS
2011-07-04 12:49:28 ----RASH---- C:\IO.SYS
2011-07-04 12:49:28 ----A---- C:\WINDOWS\control.ini
2011-07-04 12:49:28 ----A---- C:\CONFIG.SYS
2011-07-04 12:49:28 ----A---- C:\AUTOEXEC.BAT
2011-07-04 12:48:44 ----A---- C:\WINDOWS\OEWABLog.txt
2011-07-04 12:48:38 ----N---- C:\WINDOWS\system32\mapi32.dll
2011-07-04 12:47:37 ----HD---- C:\Program Files\WindowsUpdate
2011-07-04 12:47:33 ----D---- C:\Program Files\Online Services
2011-07-04 12:47:18 ----D---- C:\Program Files\Windows Media Connect 2
2011-07-04 12:47:05 ----D---- C:\WINDOWS\system32\DirectX
2011-07-04 12:46:56 ----N---- C:\WINDOWS\system32\atrace.dll
2011-07-04 12:46:53 ----N---- C:\WINDOWS\system32\desktop.ini
2011-07-04 12:46:53 ----A---- C:\WINDOWS\desktop.ini
2011-07-04 12:46:45 ----N---- C:\WINDOWS\system32\nmevtmsg.dll
2011-07-04 12:46:44 ----N---- C:\WINDOWS\system32\acctres.dll
2011-07-04 12:46:43 ----D---- C:\Program Files\Common Files\Services
2011-07-04 12:46:41 ----SD---- C:\WINDOWS\Tasks
2011-07-04 12:46:41 ----N---- C:\WINDOWS\system32\icfgnt5.dll
2011-07-04 12:46:39 ----D---- C:\Program Files\Common Files\MSSoap
2011-07-04 12:46:33 ----D---- C:\WINDOWS\srchasst
2011-07-04 12:46:31 ----D---- C:\WINDOWS\system32\Macromed
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuweb.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wucltui.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuauserv.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wups.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuaueng.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuauclt.exe
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuapi.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\qmgrprxy.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\qmgr.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2011-07-04 12:46:26 ----D---- C:\WINDOWS\system32\bits
2011-07-04 12:46:22 ----D---- C:\Program Files\Movie Maker
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrslv.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrdm.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrcdlg.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\racpldlg.dll
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\fltMc.exe
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\fltlib.dll
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srsvc.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srrstr.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srclient.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\drivers\sr.sys
2011-07-04 12:46:00 ----D---- C:\WINDOWS\system32\Restore
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\nmmkcert.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\msconf.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\mnmsrvc.exe
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\mnmdd.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\isrdbg32.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\ils.dll
2011-07-04 12:45:56 ----D---- C:\Program Files\NetMeeting
2011-07-04 12:45:55 ----N---- C:\WINDOWS\system32\msoert2.dll
2011-07-04 12:45:55 ----N---- C:\WINDOWS\system32\msoeacct.dll
2011-07-04 12:45:54 ----N---- C:\WINDOWS\system32\inetres.dll
2011-07-04 12:45:54 ----N---- C:\WINDOWS\system32\inetcomm.dll
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\schedsvc.dll
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\mstinit.exe
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\mstask.dll
2011-07-04 12:45:52 ----D---- C:\Program Files\Outlook Express
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\isign32.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\inetcfg.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\icwphbk.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\icwdial.dll
2011-07-04 12:45:46 ----D---- C:\Program Files\Common Files\System
2011-07-04 12:42:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-07-04 12:36:57 ----RSD---- C:\WINDOWS\assembly
2011-07-04 12:36:36 ----N---- C:\WINDOWS\system32\emptyregdb.dat
2011-07-04 12:36:27 ----D---- C:\Program Files\ComPlus Applications
2011-07-04 12:36:25 ----A---- C:\WINDOWS\vbaddin.ini
2011-07-04 12:36:25 ----A---- C:\WINDOWS\vb.ini
2011-07-04 12:36:20 ----D---- C:\WINDOWS\Registration
2011-07-04 12:36:12 ----D---- C:\Program Files\Windows Media Player
2011-07-04 12:35:28 ----N---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2011-07-04 12:35:06 ----D---- C:\Program Files\Microsoft.NET
2011-07-04 12:35:05 ----N---- C:\WINDOWS\system32\aspnet_counters.dll
2011-07-04 12:34:43 ----D---- C:\WINDOWS\system32\XPSViewer
2011-07-04 12:34:43 ----D---- C:\Program Files\MSBuild
2011-07-04 12:34:42 ----N---- C:\WINDOWS\system32\TsWpfWrp.exe
2011-07-04 12:34:36 ----N---- C:\WINDOWS\system32\rgb9rast_2.dll
2011-07-04 12:34:35 ----N---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2011-07-04 12:34:35 ----N---- C:\WINDOWS\system32\PresentationHostProxy.dll
2011-07-04 12:34:35 ----D---- C:\WINDOWS\system32\en-US
2011-07-04 12:34:34 ----N---- C:\WINDOWS\system32\PresentationHost.exe
2011-07-04 12:34:32 ----N---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2011-07-04 12:34:30 ----N---- C:\WINDOWS\system32\infocardapi.dll
2011-07-04 12:34:29 ----N---- C:\WINDOWS\system32\icardres.dll
2011-07-04 12:34:29 ----N---- C:\WINDOWS\system32\icardagt.exe
2011-07-04 12:34:29 ----D---- C:\Program Files\Reference Assemblies
2011-07-04 12:34:28 ----N---- C:\WINDOWS\system32\evr.dll
2011-07-04 12:34:28 ----N---- C:\WINDOWS\system32\dxva2.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcr80.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcp80.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcm80.dll
2011-07-04 12:33:50 ----N---- C:\WINDOWS\system32\dfshim.dll
2011-07-04 12:33:25 ----N---- C:\WINDOWS\system32\netfxperf.dll
2011-07-04 12:33:22 ----N---- C:\WINDOWS\system32\mscories.dll
2011-07-04 12:33:22 ----N---- C:\WINDOWS\system32\mscorier.dll
2011-07-04 12:33:22 ----D---- C:\Program Files\Internet Explorer
2011-07-04 12:33:21 ----N---- C:\WINDOWS\system32\mscoree.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-07-04 12:32:59 ----D---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\SecProc_ssp.dll
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\RmActivate_ssp.exe
2011-07-04 12:32:58 ----D---- C:\WINDOWS\system32\DRM
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\SecProc_isv.dll
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\SecProc.dll
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\RmActivate_isv.exe
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\RmActivate.exe
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\WgaTray.exe
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\WgaLogon.dll
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\msdrm.dll
2011-07-04 12:32:55 ----N---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2011-07-04 12:32:55 ----N---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2011-07-04 12:32:54 ----N---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2011-07-04 12:32:53 ----N---- C:\WINDOWS\system32\imapi2fs.dll
2011-07-04 12:32:53 ----N---- C:\WINDOWS\system32\imapi2.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncRes.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncPH.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncNE.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncDMS.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncCplExt.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\oephRes.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\oeph.dll
2011-07-04 12:32:46 ----D---- C:\Program Files\Windows Desktop Search
2011-07-04 12:32:44 ----N---- C:\WINDOWS\system32\propsys.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\xmlfilter.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\srchadmin.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\rtffilt.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\msshsq.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\msshooks.dll
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\msscb.dll
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\idxcntrs.ini
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\gthrctr.ini
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\gsrvctr.ini
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\tquery.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\propdefs.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\msstrc.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\mssrch.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchprotocolhost.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchindexer.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchfilterhost.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssprxy.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssphtb.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssph.dll
2011-07-04 12:32:39 ----N---- C:\WINDOWS\system32\mssitlb.dll
2011-07-04 12:32:39 ----N---- C:\WINDOWS\system32\msscntrs.dll
2011-07-04 12:32:38 ----N---- C:\WINDOWS\system32\msxml4r.dll
2011-07-04 12:32:38 ----N---- C:\WINDOWS\system32\msxml4.dll
2011-07-04 12:32:37 ----D---- C:\Program Files\MSXML 4.0
2011-07-04 12:32:32 ----D---- C:\WINDOWS\Microsoft.NET
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_3.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_2.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_1.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\XAudio2_7.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_6.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_5.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_4.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_3.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_2.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAudio2_1.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAudio2_0.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_7.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_6.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_5.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_4.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_3.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_2.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_1.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_0.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine2_9.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_8.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_7.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_6.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_5.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_4.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_3.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_2.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_10.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\xactengine2_1.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\xactengine2_0.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-07-04 12:32:23 ----N---- C:\WINDOWS\system32\D3DX9_43.dll
2011-07-04 12:32:22 ----N---- C:\WINDOWS\system32\D3DX9_42.dll
2011-07-04 12:32:21 ----N---- C:\WINDOWS\system32\D3DX9_41.dll
2011-07-04 12:32:20 ----N---- C:\WINDOWS\system32\D3DX9_40.dll
2011-07-04 12:32:20 ----N---- C:\WINDOWS\system32\D3DX9_39.dll
2011-07-04 12:32:19 ----N---- C:\WINDOWS\system32\D3DX9_38.dll
2011-07-04 12:32:18 ----N---- C:\WINDOWS\system32\D3DX9_37.dll
2011-07-04 12:32:17 ----N---- C:\WINDOWS\system32\d3dx9_36.dll
2011-07-04 12:32:16 ----N---- C:\WINDOWS\system32\d3dx9_35.dll
2011-07-04 12:32:15 ----N---- C:\WINDOWS\system32\d3dx9_34.dll
2011-07-04 12:32:14 ----N---- C:\WINDOWS\system32\d3dx9_33.dll
2011-07-04 12:32:14 ----N---- C:\WINDOWS\system32\d3dx9_32.dll
2011-07-04 12:32:13 ----N---- C:\WINDOWS\system32\d3dx9_31.dll
2011-07-04 12:32:12 ----N---- C:\WINDOWS\system32\d3dx9_30.dll
2011-07-04 12:32:12 ----N---- C:\WINDOWS\system32\d3dx9_29.dll
2011-07-04 12:32:11 ----N---- C:\WINDOWS\system32\d3dx9_28.dll
2011-07-04 12:32:11 ----N---- C:\WINDOWS\system32\d3dx9_27.dll
2011-07-04 12:32:10 ----N---- C:\WINDOWS\system32\d3dx9_26.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx9_25.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx9_24.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx11_43.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx11_42.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_43.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_42.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_41.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_40.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_39.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_38.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_37.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_36.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_35.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_34.dll
2011-07-04 12:32:06 ----N---- C:\WINDOWS\system32\d3dx10_33.dll
2011-07-04 12:32:06 ----N---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-07-04 12:32:04 ----N---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-07-04 12:32:04 ----N---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-07-04 12:32:03 ----N---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-07-04 12:32:03 ----N---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-07-04 12:32:02 ----N---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-07-04 12:32:02 ----N---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-07-04 12:32:01 ----N---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-07-04 12:32:01 ----N---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-07-04 12:31:59 ----N---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-07-04 12:31:34 ----N---- C:\WINDOWS\system32\muweb.dll
2011-07-04 12:31:34 ----N---- C:\WINDOWS\system32\mucltui.dll
2011-07-04 12:31:34 ----D---- C:\WINDOWS\SoftwareDistribution
2011-07-04 12:31:34 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\spupdsvc.exe
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-07-04 12:31:32 ----D---- C:\WINDOWS\system32\PreInstall
2011-07-04 12:31:29 ----N---- C:\WINDOWS\system32\pwrshplugin.dll
2011-07-04 12:31:13 ----N---- C:\WINDOWS\system32\wevtfwd.dll
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\winrm
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmprovhost.exe
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmplpxy.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmanhttpconfig.exe
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrssrv.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrsmgr.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrscmd.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrmprov.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmWmiPl.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmSvc.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmRes.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmAuto.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\winrshost.exe
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\winrs.exe
2011-07-04 12:31:10 ----N---- C:\WINDOWS\system32\winrm.vbs
2011-07-04 12:31:10 ----N---- C:\WINDOWS\system32\winrm.cmd
2011-07-04 12:31:09 ----D---- C:\Program Files\Messenger
2011-07-04 12:31:04 ----N---- C:\WINDOWS\system32\write.exe
2011-07-04 12:31:04 ----D---- C:\Program Files\MSN Gaming Zone
2011-07-04 12:30:56 ----N---- C:\WINDOWS\system32\sndvol32.exe
2011-07-04 12:30:56 ----N---- C:\WINDOWS\system32\hticons.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\winchat.exe
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avwav.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avtapi.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avmeter.dll
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\charmap.exe
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\getuname.dll
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\calc.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\winmine.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\sol.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\mshearts.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\freecell.exe
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\tspubwmi.dll
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\rdpshell.exe
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\rdpinit.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\wksprtps.dll
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\wksprt.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\winlogonnotification.dll
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\usrlogon.cmd
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\tswbprxy.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\reset.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\MsRdpWebAccess.dll
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tsshutdn.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tslabels.ini
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tskill.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tsdiscon.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tscon.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\shadow.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\rwinsta.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\regini.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\rdpcfgex.dll
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\qwinsta.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\qappsrv.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\msg.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\logoff.exe
2011-07-04 12:30:43 ----N---- C:\WINDOWS\system32\msdtcprf.ini
2011-07-04 12:30:43 ----N---- C:\WINDOWS\system32\cdmodem.dll
2011-07-04 12:30:38 ----N---- C:\WINDOWS\system32\wmimgmt.msc
2011-07-04 12:30:37 ----N---- C:\WINDOWS\system32\accwiz.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\sndrec32.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\mplay32.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\hypertrm.dll
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\spider.exe
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\mspaint.exe
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\clipbrd.exe
2011-07-04 12:30:35 ----D---- C:\Program Files\Windows NT
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\tscfgwmi.dll
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-07-04 12:30:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-07-04 12:30:33 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\sessmgr.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\remotepg.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdshost.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdsaddin.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdchost.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\mstscax.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\mstsc.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\termsrv.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpwsx.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpsnd.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpclip.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\qprocess.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\msdtcuiu.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\icaapi.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\cfgbkend.dll
2011-07-04 12:30:31 ----D---- C:\WINDOWS\system32\MsDtc
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\xolehlp.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\mtxoci.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtctm.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtcprx.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtclog.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtc.exe
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxlegih.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxex.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxdm.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\dcomcnfg.exe
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\stclient.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\comrepl.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\comaddin.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\colbact.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\clbcatex.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\catsrvps.dll
2011-07-04 12:30:28 ----D---- C:\WINDOWS\system32\Com
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\comuid.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\comsvcs.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\catsrvut.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\catsrv.dll
2011-07-04 12:30:26 ----N---- C:\WINDOWS\system32\comsnap.dll
2011-07-04 12:30:26 ----N---- C:\WINDOWS\system32\clbcatq.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\servdeps.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\mmfutil.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\licwmi.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\cmprops.dll
2011-07-04 12:30:15 ----N---- C:\WINDOWS\system32\drivers\termdd.sys
2011-07-04 12:30:15 ----N---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2011-07-18 19:13:47 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-07-18 19:13:03 ----A---- C:\WINDOWS\win.ini
2011-07-18 18:50:56 ----N---- C:\WINDOWS\system32\oeminfo.ini
2011-07-18 18:50:51 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2011-01-25 8832]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 rspndr;Odpovídající zařízení zjišťování topologie linkové vrstvy; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2011-01-25 62848]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-06-22 1574112]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-04-15 991136]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2009-03-09 805888]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-04-07 39424]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2011-01-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-11 6249728]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2011-01-25 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2009-05-12 122240]
S1 DumpDrv;Crash Dump Driver; C:\WINDOWS\system32\drivers\DumpDrv.sys [2011-01-25 9472]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2009-06-18 45984]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2011-01-25 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2011-01-25 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2011-01-25 82944]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2011-01-25 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-06-20 349528]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-11 168005]
R2 srvbtcclient;srvbtcclient; C:\WINDOWS\update.5.0\svchost.exe [2011-07-20 340480]
R2 srviecheck;srviecheck; C:\WINDOWS\update.2\svchost.exe [2011-07-18 483328]
R2 srvsysdriver32;srvsysdriver32; C:\WINDOWS\sysdriver32.exe [2011-07-18 232960]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2011-01-25 439808]
R2 wxpdrivers;wxpdrivers; C:\WINDOWS\update.1\svchost.exe [2011-07-18 1170432]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-16 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-16 135664]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WinRM;Vzdálená správa systému Windows (WS-Management); C:\WINDOWS\System32\svchost.exe [2011-01-25 14848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2011-01-25 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#4 Příspěvek od **motji** » 20 Črc 2011 16:53

Stahněte Rkill z jednoho z odkazů, pokud by ho vir blokoval, zkuste stahnout jiný

Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill COM:
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill PIF:
http://download.bleepingcomputer.com/grinler/rkill.pif

-spusťte ho a nechejte pracovat. Sám se ukončí.

-

Ted nerestartujte počítač!

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
- přejmenujte combofix na potvůrka.com

Zeron · #5 Příspěvek od **Zeron** » 20 Črc 2011 17:22

Vše splněno

...nejsem si jistý, jestli jste chtěla log z combofixu, ale udělal jsem ho:
PS: jen takový dodatek...chtělo to po mě, že mám vypnout ESET NOD32 antivirus...ale já ho nemám v počítači...to ten vir asi dělá, že tam je, ale není tam...

---------------------------------------------------------------------------------------------------------------------------
ComboFix 11-07-20.02 - Jakub 20.07.2011 18:11:44.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3037.2404 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jakub\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\docume~1\Jakub\LOCALS~1\Temp\6511828.exe
c:\documents and settings\Jakub\Data aplikací\dwm.exe
c:\documents and settings\Jakub\Data aplikací\Microsoft\conhost.exe
C:\Microsoft
c:\program files\Internet Explorer\conhost.exe
c:\windows\btc_client_iplist.txt
c:\windows\ddh_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\gbot111.exe
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\phoenix.rar
c:\windows\proc_list1.log
c:\windows\rpcminer.rar
c:\windows\sysdriver32.exe
c:\windows\sysdriver32_.exe
c:\windows\system\oeminfo.ini
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\systemup.exe
c:\windows\TEMP\4275483.exe
c:\windows\TEMP\7208023.exe
c:\windows\ufa.rar
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\svchost.exe
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_WXPDRIVERS
-------\Service_srviecheck
-------\Service_srvsysdriver32
-------\Service_wxpdrivers
-------\Legacy_srvbtcclient
-------\Legacy_srvbtcclient
-------\Service_srvbtcclient
-------\Service_srvbtcclient
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-20 do 2011-07-20 )))))))))))))))))))))))))))))))
.
.
2011-07-20 15:22 . 2011-07-20 15:22 -------- d-----w- C:\rsit
2011-07-20 13:41 . 2011-07-20 13:41 512 ----a-w- C:\PhysicalMBR.bin
2011-07-18 10:06 . 2011-07-18 10:06 -------- d-----w- C:\temp
2011-07-05 08:56 . 2011-07-05 08:56 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-20 16:16 . 2011-07-20 16:17 232960 ----a-w- c:\windows\sysdriver32_.exe
2011-07-20 16:16 . 2011-07-20 16:16 232960 ----a-w- c:\windows\sysdriver32.exe
2011-06-02 17:53 . 2011-06-02 17:53 94208 ------w- c:\windows\system32\dpl100.dll
2011-07-08 07:29 . 2011-07-16 17:37 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-01-25 . 8F41FD1CC693054347C6FB7B0E618B07 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"="c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE" [2006-10-26 434528]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-11 13594624]
"nwiz"="nwiz.exe" [2009-03-11 1657376]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"tray_ico0"="c:\windows\update.tray-2-0\svchost.exe" [2011-07-18 1170432]
"sysdriver32.exe"="c:\windows\sysdriver32.exe" [2011-07-20 232960]
"sysdriver32_.exe"="c:\windows\sysdriver32_.exe" [2011-07-20 232960]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-11 86016]
"7556721.exe"="c:\docume~1\Jakub\LOCALS~1\Temp\7556721.exe" [2011-07-20 232960]
"9708798.exe"="c:\windows\TEMP\9708798.exe" [2011-07-20 232960]
"1469911.exe"="c:\windows\TEMP\1469911.exe" [2011-07-20 483328]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"KB976002-v5"="advpack.dll" [2011-01-25 128512]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-6-20 607584]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2011-7-4 123904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
"EnableLUA"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2011-01-25 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"d:\\HRY\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\update.tray-2-0\\svchost.exe"=
"c:\\WINDOWS\\update.2\\svchost.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [28.4.2010 8:17 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2.7.2010 12:43 94360]
R2 srviecheck;srviecheck;c:\windows\update.2\svchost.exe srv --> c:\windows\update.2\svchost.exe srv [?]
R2 srvsysdriver32;srvsysdriver32;c:\windows\sysdriver32.exe srv --> c:\windows\sysdriver32.exe srv [?]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4.7.2011 13:45 39424]
S1 DumpDrv;Crash Dump Driver;c:\windows\system32\drivers\dumpdrv.sys [25.1.2011 10:15 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4.7.2011 12:35 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe -k WinRM [25.1.2011 10:12 14848]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SRVIECHECK
*NewlyCreated* - SRVSYSDRIVER32
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=15383
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\documents and settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 55333
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-wxpdrv - c:\windows\services32.exe
HKLM-Run-tray_ico - (no file)
HKLM-Run-tray_ico1 - (no file)
HKLM-Run-tray_ico2 - (no file)
HKLM-Run-tray_ico3 - (no file)
HKLM-Run-tray_ico4 - (no file)
HKLM-Run-l1rezerv.exe - c:\windows\l1rezerv.exe
HKLM-Run-systemup - c:\windows\systemup.exe
Notify-RailNotification - (no file)
SafeBoot-wxpdrivers
AddRemove-Microsoft .NET Framework 3.5 SP1 - c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
AddRemove-Microsoft .NET Framework 4 Client Profile - c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe
AddRemove-Microsoft .NET Framework 4 Extended - c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-20 18:17
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\SearchFilterHost.exe
c:\windows\update.2\svchost.exe
c:\windows\update.2\svchost.exe
c:\\.\globalroot\Device\svchost.exe\svchost.exe
.
**************************************************************************
.
Celkový čas: 2011-07-20 18:18:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-20 16:18
.
Před spuštěním: Volných bajtů: 144 482 619 392
Po spuštění: Volných bajtů: 144 446 799 872
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /noexecute=alwaysoff /fastdetect
.
- - End Of File - - 2A1FC22947FA78655E7DCE2190A48756

#6 Příspěvek od **motji** » 20 Črc 2011 17:33

Ale máte, Vy jste ho odinstalovával? Jeslti ano, tak špatně. Mám Vám ho smazat?

Zeron · #7 Příspěvek od **Zeron** » 20 Črc 2011 18:02

hmm...pokud to dokážete tak určitě...prohledal jsem to a nikde nic...

DKmat · #8 Příspěvek od **DKmat** » 20 Črc 2011 18:40

Zdravím. Ač nejsem zrovna v PC amatér, na tohle jsem se nachtal (demence...). Stalo se mi to samé co kolegovi. Anglicky mluvící známý mi napsal, tak sme lehce "pokecali" a on mi poslal ten odkaz, a dál už to znáte...
Použil sem Rkill i combofix...po resetu systému combofixem mi nešel nahodit vůbec windows. Ještě že existuje obnovovací funkce z CD...
teď se zdá systém v pohodě, NOD32 mi virus nehlásí a není už blokovaný.
Přesto bych se zeptal, co ještě mohu udělat, abych měl 100% jistotu, že je vše ok?

Díky.

#9 Příspěvek od **stell** » 20 Črc 2011 18:47

Zdravim
DKmat
prosim zaloz si vlastny novy topic.
dakujem

#10 Příspěvek od **motji** » 20 Črc 2011 19:19

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

KillAll::

Folder::
c:\windows\update.2
c:\windows\update.tray-2-0

File::
c:\windows\sysdriver32.exe
c:\windows\system32\drivers\ehdrv.sys
c:\windows\system32\drivers\epfwtdir.sys
c:\windows\sysdriver32_.exe
c:\docume~1\Jakub\LOCALS~1\Temp\7556721.exe
c:\windows\TEMP\9708798.exe
c:\windows\TEMP\1469911.exe

Driver::
SRVIECHECK
SRVSYSDRIVER32
ehdrv
epfwtdir

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\update.tray-2-0\\svchost.exe"=-
"c:\\WINDOWS\\update.2\\svchost.exe"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=-
"DivXUpdate"=-
"Adobe ARM"=-
"tray_ico0"=-
"sysdriver32.exe"=-
"sysdriver32_.exe"=-
"7556721.exe"=-
"9708798.exe"=-
"1469911.exe"=-

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek

-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Zeron · #11 Příspěvek od **Zeron** » 21 Črc 2011 10:49

Hezký den přeji

...udělal jsem co jste žádala, zde je LOG z COMBOFIXU:

ComboFix 11-07-20.02 - Jakub 21.07.2011 11:41:17.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3037.2648 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jakub\Plocha\potvůrka.com.exe
Použité ovládací přepínače :: c:\documents and settings\Jakub\Plocha\CFScript.txt.txt
AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\GAC_MSIL\desktop.ini
c:\windows\btc_client_iplist.txt
c:\windows\ddh_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\proc_list1.log
c:\windows\sysdriver32.exe
c:\windows\sysdriver32_.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\systemup.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\svchost.exe
c:\windows\winsetupapi.log
.
Nakažená kopie c:\windows\system32\wuauclt.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\system32\dllcache\wuauclt.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_srvbtcclient
-------\Legacy_srvbtcclient
-------\Service_srvbtcclient
-------\Service_srvbtcclient
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-21 do 2011-07-21 )))))))))))))))))))))))))))))))
.
.
2011-07-20 16:10 . 2011-07-20 16:18 -------- d-----w- C:\ComboFix
2011-07-20 15:22 . 2011-07-20 15:22 -------- d-----w- C:\rsit
2011-07-20 13:41 . 2011-07-20 13:41 512 ----a-w- C:\PhysicalMBR.bin
2011-07-18 10:06 . 2011-07-18 10:06 -------- d-----w- C:\temp
2011-07-05 08:56 . 2011-07-05 08:56 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-21 09:47 . 2011-07-21 09:47 232960 ----a-w- c:\windows\sysdriver32.exe
2011-06-02 17:53 . 2011-06-02 17:53 94208 ------w- c:\windows\system32\dpl100.dll
2011-07-08 07:29 . 2011-07-16 17:37 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-01-25 . 8F41FD1CC693054347C6FB7B0E618B07 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-07-20_16.16.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-07-21 09:46 . 2011-07-21 09:46 16384 c:\windows\temp\Perflib_Perfdata_cc0.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 87344 c:\windows\system32\perfc009.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 87344 c:\windows\system32\perfc009.dat
+ 2011-07-04 10:32 . 2011-01-25 08:17 186880 c:\windows\system32\searchprotocolhost.exe
+ 2011-07-04 10:32 . 2011-01-25 08:17 441856 c:\windows\system32\searchindexer.exe
- 2008-04-14 11:00 . 2011-07-20 07:21 501716 c:\windows\system32\perfh009.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 501716 c:\windows\system32\perfh009.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 517560 c:\windows\system32\perfh005.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 517560 c:\windows\system32\perfh005.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 110088 c:\windows\system32\perfc005.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 110088 c:\windows\system32\perfc005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"="c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE" [2006-10-26 434528]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-11 13594624]
"nwiz"="nwiz.exe" [2009-03-11 1657376]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"tray_ico0"="c:\windows\update.tray-2-0\svchost.exe" [2011-07-18 1170432]
"sysdriver32.exe"="c:\windows\sysdriver32.exe" [2011-07-21 232960]
"sysdriver32_.exe"="c:\windows\sysdriver32_.exe" [2011-07-21 232960]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-11 86016]
"l1rezerv.exe"="c:\windows\l1rezerv.exe" [BU]
"systemup"="c:\windows\systemup.exe" [BU]
"7399499.exe"="c:\docume~1\Jakub\LOCALS~1\Temp\7399499.exe" [2011-07-21 232960]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"KB976002-v5"="advpack.dll" [2011-01-25 128512]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-6-20 607584]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2011-7-4 123904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
"EnableLUA"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2011-01-25 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"d:\\HRY\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\update.tray-2-0\\svchost.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [28.4.2010 8:17 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2.7.2010 12:43 94360]
R2 srvsysdriver32;srvsysdriver32;c:\windows\sysdriver32.exe srv --> c:\windows\sysdriver32.exe srv [?]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4.7.2011 13:45 39424]
S1 DumpDrv;Crash Dump Driver;c:\windows\system32\drivers\dumpdrv.sys [25.1.2011 10:15 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4.7.2011 12:35 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe -k WinRM [25.1.2011 10:12 14848]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SRVSYSDRIVER32
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=15383
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
LSP: mswsock.dll
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\documents and settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 55333
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-21 11:46
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
c:\windows\$NtUninstallKB11960$:SummaryInformation 0 bytes hidden from API
.
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\\.\globalroot\Device\svchost.exe\svchost.exe
c:\potvc:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
.
**************************************************************************
.
Celkový čas: 2011-07-21 11:48:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-21 09:48
ComboFix2.txt 2011-07-20 16:18
.
Před spuštěním: Volných bajtů: 144 740 311 040
Po spuštění: Volných bajtů: 144 731 590 656
.
- - End Of File - - AD2DBC733976B30F1FB394DC7D8BF971

CaNDo · #12 Příspěvek od **CaNDo** » 21 Črc 2011 11:21

Ahojte, už mě více lidí na facebooku spamovali anglickými větami a poté poslali odkaz:
http://78.106.6.72/100000145886522
takže na to neklikat !!!!!

#13 Příspěvek od **motji** » 21 Črc 2011 11:42

Ještě se nám tam pořád něco drží.

Stáhněte TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- a uložte ho na plochu.
- 2x klikněte na ikonu programu a spusťte
- dejte volbu Spustit kontrolu - pak potvrdte start sken
- pokud program najde infikovaný soubor, ukáže se Vám předvolená akce Cure, v tom případě potvrdte tlačítko Continue
- pokud bude chtít program restartovat počítač, klikněte na tlačítko Reboot Now
- pokud si restart nevyžádá, klikněte na tlačítko Report. Měl vy na Vás vyskočit log, obsah logu zkopírujte do svého topicu.
- pokud se log nezobrazí, je uložený ve Vašem kořenovém adresáři.

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT

-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Zeron · #14 Příspěvek od **Zeron** » 21 Črc 2011 12:24

Tady je log z TDSSKiller:

Kód: Vybrat vše

2011/07/21 13:22:13.0656 0676	TDSS rootkit removing tool 2.5.11.0 Jul 11 2011 16:56:56
2011/07/21 13:22:15.0656 0676	================================================================================
2011/07/21 13:22:15.0656 0676	SystemInfo:
2011/07/21 13:22:15.0656 0676	
2011/07/21 13:22:15.0656 0676	OS Version: 5.1.2600 ServicePack: 3.0
2011/07/21 13:22:15.0656 0676	Product type: Workstation
2011/07/21 13:22:15.0656 0676	ComputerName: DOMA-42D291BF18
2011/07/21 13:22:15.0656 0676	UserName: Jakub
2011/07/21 13:22:15.0656 0676	Windows directory: C:\WINDOWS
2011/07/21 13:22:15.0656 0676	System windows directory: C:\WINDOWS
2011/07/21 13:22:15.0656 0676	Processor architecture: Intel x86
2011/07/21 13:22:15.0656 0676	Number of processors: 2
2011/07/21 13:22:15.0656 0676	Page size: 0x1000
2011/07/21 13:22:15.0656 0676	Boot type: Normal boot
2011/07/21 13:22:15.0656 0676	================================================================================
2011/07/21 13:22:16.0953 0676	Initialize success
2011/07/21 13:22:29.0046 0812	================================================================================
2011/07/21 13:22:29.0046 0812	Scan started
2011/07/21 13:22:29.0046 0812	Mode: Manual; 
2011/07/21 13:22:29.0046 0812	================================================================================
2011/07/21 13:22:29.0640 0812	ACPI            (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/07/21 13:22:29.0671 0812	ACPIEC          (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
2011/07/21 13:22:29.0734 0812	aec             (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/07/21 13:22:29.0765 0812	AFD             (e840fd588cd9da721500e2cc3c0efca2) C:\WINDOWS\System32\drivers\afd.sys
2011/07/21 13:22:29.0937 0812	AR5416          (41074707ba49d02e240c7b960217aabe) C:\WINDOWS\system32\DRIVERS\athw.sys
2011/07/21 13:22:30.0093 0812	AsyncMac        (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/07/21 13:22:30.0140 0812	atapi           (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/07/21 13:22:30.0187 0812	Atmarpc         (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/07/21 13:22:30.0218 0812	audstub         (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/07/21 13:22:30.0265 0812	Beep            (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/07/21 13:22:30.0343 0812	BTKRNL          (75130181fa2fd6cbe83083c5311abe78) C:\WINDOWS\system32\DRIVERS\btkrnl.sys
2011/07/21 13:22:30.0390 0812	BTWUSB          (1166cb501e1c34750a91600579efeab3) C:\WINDOWS\system32\Drivers\btwusb.sys
2011/07/21 13:22:30.0562 0812	cbidf2k         (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/07/21 13:22:30.0578 0812	CCDECODE        (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/07/21 13:22:30.0625 0812	Cdaudio         (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/07/21 13:22:30.0671 0812	Cdfs            (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/07/21 13:22:30.0687 0812	Cdrom           (95d0985fbb85b1262e3a6495ea134f0a) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/07/21 13:22:30.0687 0812	Suspicious file (Forged): C:\WINDOWS\system32\DRIVERS\cdrom.sys. Real md5: 95d0985fbb85b1262e3a6495ea134f0a, Fake md5: 4b0a100eaf5c49ef3cca8c641431eacc
2011/07/21 13:22:30.0687 0812	Cdrom - detected ForgedFile.Multi.Generic (1)
2011/07/21 13:22:30.0781 0812	CmBatt          (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
2011/07/21 13:22:30.0859 0812	CnxtHdAudService (61175c2375a19725fc1b7ea38f9f5bb2) C:\WINDOWS\system32\drivers\CHDAU32.sys
2011/07/21 13:22:31.0140 0812	Compbatt        (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
2011/07/21 13:22:31.0250 0812	Disk            (47b6aaec570f2c11d8bad80a064d8ed1) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/07/21 13:22:31.0296 0812	dmboot          (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
2011/07/21 13:22:31.0359 0812	dmio            (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\DRIVERS\dmio.sys
2011/07/21 13:22:31.0390 0812	dmload          (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/07/21 13:22:31.0437 0812	DMusic          (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/07/21 13:22:31.0515 0812	drmkaud         (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/07/21 13:22:31.0546 0812	DumpDrv         (b327281012b48bd73f587799f9f29be2) C:\WINDOWS\system32\drivers\DumpDrv.sys
2011/07/21 13:22:31.0578 0812	eamon           (e31464ce787e3a0ffea55baa591897f0) C:\WINDOWS\system32\DRIVERS\eamon.sys
2011/07/21 13:22:31.0609 0812	ehdrv           (2c95a7a87e4272c1fff9baf579677db3) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
2011/07/21 13:22:31.0640 0812	epfwtdir        (4699a50183b792d994be657c68f18e9e) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
2011/07/21 13:22:31.0687 0812	exFat           (4d893323dae445e34a4c9038b0551bc9) C:\WINDOWS\system32\drivers\exFat.sys
2011/07/21 13:22:31.0734 0812	Fastfat         (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/07/21 13:22:31.0750 0812	Fdc             (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
2011/07/21 13:22:31.0781 0812	Fips            (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
2011/07/21 13:22:31.0796 0812	Flpydisk        (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
2011/07/21 13:22:31.0843 0812	FltMgr          (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
2011/07/21 13:22:31.0890 0812	Fs_Rec          (30d42943a54704ef13e2562911dbfcea) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/07/21 13:22:31.0921 0812	Ftdisk          (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/07/21 13:22:31.0953 0812	Gpc             (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/07/21 13:22:32.0000 0812	HDAudBus        (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/07/21 13:22:32.0031 0812	HidUsb          (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/07/21 13:22:32.0078 0812	HTTP            (937031c085718c1c04a9c0864625ec6b) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/07/21 13:22:32.0156 0812	i8042prt        (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/07/21 13:22:32.0171 0812	Imapi           (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/07/21 13:22:32.0250 0812	intelppm        (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/07/21 13:22:32.0281 0812	Ip6Fw           (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
2011/07/21 13:22:32.0312 0812	IpFilterDriver  (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/07/21 13:22:32.0343 0812	IpInIp          (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/07/21 13:22:32.0375 0812	IpNat           (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/07/21 13:22:32.0390 0812	IPSec           (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/07/21 13:22:32.0421 0812	IRENUM          (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/07/21 13:22:32.0453 0812	isapnp          (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/07/21 13:22:32.0484 0812	Kbdclass        (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/07/21 13:22:32.0515 0812	kmixer          (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/07/21 13:22:32.0546 0812	KSecDD          (c6ebf1d6ad71df30db49b8d3287e1368) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/07/21 13:22:32.0562 0812	L1c             (140f9b777fa84e2f5eeea5cadc112e53) C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
2011/07/21 13:22:32.0640 0812	MarvinBus       (a3e700d78eec390f1208098cdca5c6b6) C:\WINDOWS\system32\DRIVERS\MarvinBus.sys
2011/07/21 13:22:32.0671 0812	mnmdd           (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/07/21 13:22:32.0703 0812	Modem           (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
2011/07/21 13:22:32.0718 0812	Mouclass        (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/07/21 13:22:32.0750 0812	mouhid          (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/07/21 13:22:32.0781 0812	MountMgr        (1a1faa5102466f418494e94ff9b0b091) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/07/21 13:22:32.0828 0812	MRxDAV          (4fefd389d71126ee581b9f9cb2918be4) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/07/21 13:22:32.0859 0812	MRxSmb          (0af15a971f120246c9eef2c46e290539) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/07/21 13:22:32.0906 0812	Msfs            (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/07/21 13:22:32.0937 0812	MSKSSRV         (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/07/21 13:22:32.0968 0812	MSPCLOCK        (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/07/21 13:22:33.0000 0812	MSPQM           (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/07/21 13:22:33.0046 0812	mssmbios        (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/07/21 13:22:33.0078 0812	MSTEE           (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/07/21 13:22:33.0109 0812	Mup             (6546fe6639499fa4bef180bdf08266a1) C:\WINDOWS\system32\drivers\Mup.sys
2011/07/21 13:22:33.0140 0812	NABTSFEC        (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/07/21 13:22:33.0171 0812	NDIS            (b5b1080d35974c0e718d64280761bcd5) C:\WINDOWS\system32\drivers\NDIS.sys
2011/07/21 13:22:33.0203 0812	NdisIP          (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/07/21 13:22:33.0234 0812	NdisTapi        (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/07/21 13:22:33.0250 0812	Ndisuio         (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/07/21 13:22:33.0281 0812	NdisWan         (b053a8411045fd0664b389a090cb2bbc) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/07/21 13:22:33.0312 0812	NDProxy         (816460bd4b4acd27937d1d0813e2e9e9) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/07/21 13:22:33.0343 0812	NetBIOS         (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/07/21 13:22:33.0375 0812	NetBT           (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/07/21 13:22:33.0437 0812	Npfs            (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/07/21 13:22:33.0468 0812	Ntfs            (ae8cad8f28db13b515a68510a539b0b8) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/07/21 13:22:33.0515 0812	Null            (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/07/21 13:22:33.0703 0812	nv              (87e3d99c51dcf2ab859ea1d903b9809c) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2011/07/21 13:22:33.0906 0812	NwlnkFlt        (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/07/21 13:22:33.0937 0812	NwlnkFwd        (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/07/21 13:22:34.0000 0812	Parport         (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
2011/07/21 13:22:34.0031 0812	PartMgr         (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/07/21 13:22:34.0062 0812	ParVdm          (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/07/21 13:22:34.0093 0812	PCI             (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/07/21 13:22:34.0156 0812	PCIIde          (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/07/21 13:22:34.0187 0812	Pcmcia          (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/07/21 13:22:34.0359 0812	PptpMiniport    (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/07/21 13:22:34.0390 0812	PSched          (d8e11d311785f89f1d70a28b0e879127) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/07/21 13:22:34.0421 0812	Ptilink         (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/07/21 13:22:34.0453 0812	PxHelp20        (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/07/21 13:22:34.0546 0812	RasAcd          (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/07/21 13:22:34.0562 0812	Rasl2tp         (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/07/21 13:22:34.0609 0812	RasPppoe        (2c9d4620a0fd35de1828370b392f6e2d) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/07/21 13:22:34.0640 0812	Raspti          (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/07/21 13:22:34.0671 0812	Rdbss           (77050c6615f6eb5402f832b27fd695e0) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/07/21 13:22:34.0718 0812	RDPCDD          (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/07/21 13:22:34.0765 0812	rdpdr           (47ea20320e3d6fdc7b7bb22b2b881ca6) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/07/21 13:22:34.0796 0812	RDPWD           (e8e3107243b16a549b88d145ec051b06) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/07/21 13:22:34.0843 0812	redbook         (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/07/21 13:22:34.0906 0812	rspndr          (743d7d59767073a617b1dcc6c546f234) C:\WINDOWS\system32\DRIVERS\rspndr.sys
2011/07/21 13:22:34.0953 0812	Secdrv          (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/07/21 13:22:35.0000 0812	Serial          (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\drivers\Serial.sys
2011/07/21 13:22:35.0046 0812	Sfloppy         (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/07/21 13:22:35.0109 0812	SLIP            (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/07/21 13:22:35.0171 0812	splitter        (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/07/21 13:22:35.0218 0812	SR              (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/07/21 13:22:35.0265 0812	Srv             (70cd8b8dd2a680b128617c19eb0ab94f) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/07/21 13:22:35.0312 0812	streamip        (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/07/21 13:22:35.0343 0812	swenum          (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/07/21 13:22:35.0375 0812	swmidi          (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/07/21 13:22:35.0484 0812	sysaudio        (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/07/21 13:22:35.0546 0812	Tcpip           (51e41f16acd80b8b39c0ae703a213f09) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/07/21 13:22:35.0578 0812	TDPIPE          (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/07/21 13:22:35.0593 0812	TDTCP           (c0578456f29e5f26285f81b7b71fe57d) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/07/21 13:22:35.0640 0812	TermDD          (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/07/21 13:22:35.0734 0812	Udfs            (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/07/21 13:22:35.0812 0812	Update          (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/07/21 13:22:35.0859 0812	usbccgp         (c18d6c74953621346df6b0a11f80c1cc) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/07/21 13:22:35.0890 0812	usbehci         (52674b5dbee499342a599c7771abecaa) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/07/21 13:22:35.0921 0812	usbhub          (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/07/21 13:22:35.0953 0812	USBSTOR         (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/07/21 13:22:35.0984 0812	usbuhci         (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/07/21 13:22:36.0015 0812	usbvideo        (ee1c82338f2b831b2a863935c831db21) C:\WINDOWS\system32\Drivers\usbvideo.sys
2011/07/21 13:22:36.0062 0812	VgaSave         (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/07/21 13:22:36.0093 0812	VolSnap         (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/07/21 13:22:36.0156 0812	Wanarp          (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/07/21 13:22:36.0203 0812	wdmaud          (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/07/21 13:22:36.0250 0812	WmiAcpi         (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
2011/07/21 13:22:36.0296 0812	WSTCODEC        (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/07/21 13:22:36.0328 0812	WudfPf          (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/07/21 13:22:36.0343 0812	WudfRd          (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/07/21 13:22:36.0406 0812	MBR (0x1B8)     (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
2011/07/21 13:22:36.0578 0812	Boot (0x1200)   (c484bbc0c9b81cb0e78c8387d949458f) \Device\Harddisk0\DR0\Partition0
2011/07/21 13:22:36.0578 0812	Boot (0x1200)   (282967e879206622bcffdb25ef242626) \Device\Harddisk0\DR0\Partition1
2011/07/21 13:22:36.0593 0812	================================================================================
2011/07/21 13:22:36.0593 0812	Scan finished
2011/07/21 13:22:36.0593 0812	================================================================================
2011/07/21 13:22:36.0593 3444	Detected object count: 1
2011/07/21 13:22:36.0593 3444	Actual detected object count: 1
2011/07/21 13:22:45.0953 3444	ForgedFile.Multi.Generic(Cdrom) - User select action: Skip

Zeron · #15 Příspěvek od **Zeron** » 21 Črc 2011 12:34

ohledne MBAM...naistaloval jsem, vše v pořádku, dal jsem úplný sken, ale jak program začal skenovat tak asi po 4s program úplně spadl. Když ho chci pustit znovu z C:MBAM, tak mi to píše

Kód: Vybrat vše

Systém Windows nemá přístup k určenému zařízení, cestě nebo souboru. K přístupu k položce pravděpodobně nemáte dostatečná oprávnění.

VIRY.CZ

Facebook vir pres chat...

Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...

Re: Facebook vir pres chat...