VIRY.CZ

Zdravíčko...jak to tady projíždím tak vidím, že nejsem sám co se bohužel nachytal...nejsem žádný expert na počítače tak ani neznám hrozby internetu či facebooku...takže bohužel

Věc se má takhle...píše mi na facebooku jeden můj kamarád anglicky: "Hi. How Are you"...potom jsme si psali a mi to nepřišlo nijak divné, protože si píšeme anglicky často...no a potom mi poslal odkaz na video na youtube...video chtelo nainstalovat nový Adobe flash player...klikl jsem, protože jsem nedávno přeinstalovával počítač a došlo mi, že jsem si ho tam nenainstaloval...no a pomocí exe souboru se mi dostal do počítače vir...

VIR ZAVINIL: úplnou blokaci ESET NOD32 antiviru...dal jsem ho i pryč a zkoušel jsem ho naistalovat znovu, ale prostě nic...píše mi to
takovou červenou tabulku a píše se tam, že antivir je zablokovaný, protože usilovně pracuje nebo tak něco...
- dále zpomalený internet...v jednu dobu mě to nechtělo vůbec pustit na některé web. stránky včetně facebooku

Takže bych poprosil o pomoc ...projížděl jsem příspěvky a všichni na konec příspěvku zadávají nějaký LOG...absolutně nevím co to je ...jinak jsem si stáhl program OTL, kterým jste řešili stejný problém s jiným kolegou zde na forum...

Hezké odpoledne
začneme logem ze rsitu, viz můj podpis

Děkuji za odpověď ...tady je LOG:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jakub at 2011-07-20 17:22:13
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 138 GB (90%) free of 153 GB
Total RAM: 3037 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:22:15, on 20.7.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Jakub\Data aplikací\dwm.exe
C:\DOCUME~1\Jakub\LOCALS~1\Temp\csrss.exe
C:\WINDOWS\PLFSetI.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\WINDOWS\update.tray-2-0\svchost.exe
C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe
C:\WINDOWS\l1rezerv.exe
C:\WINDOWS\systemup.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\update.2\svchost.exe
C:\WINDOWS\sysdriver32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\update.1\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\update.5.0\svchost.exe
C:\WINDOWS\ufa\ufa.exe
C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe
C:\Program Files\Pinnacle\Studio 14\Programs\PER.exe
C:\Program Files\Pinnacle\Studio 14\Programs\UMI.EXE
C:\Program Files\Pinnacle\Studio 14\Programs\RM.EXE
C:\Program Files\Pinnacle\Studio 14\Import\programs\Importer.exe
C:\Program Files\Pinnacle\Studio 14\Import\programs\UMI.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Jakub.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com/?l=dis&o=15383
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:55333
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F3 - REG:win.ini: load=C:\DOCUME~1\Jakub\LOCALS~1\Temp\csrss.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (file missing)
O4 - HKLM\..\Run: [DWPersistentQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE -a
O4 - HKLM\..\Run: [PLFSetI] C:\WINDOWS\PLFSetI.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [wxpdrv] C:\WINDOWS\services32.exe
O4 - HKLM\..\Run: [tray_ico0] C:\WINDOWS\update.tray-2-0\svchost.exe
O4 - HKLM\..\Run: [6511828.exe] "C:\DOCUME~1\Jakub\LOCALS~1\Temp\6511828.exe"
O4 - HKLM\..\Run: [sysdriver32.exe] "C:\WINDOWS\sysdriver32.exe" rezerv
O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\WINDOWS\sysdriver32_.exe" rezerv
O4 - HKLM\..\Run: [7208023.exe] "C:\WINDOWS\TEMP\7208023.exe"
O4 - HKLM\..\Run: [4275483.exe] "C:\WINDOWS\TEMP\4275483.exe"
O4 - HKLM\..\Run: [6571768.exe] "C:\WINDOWS\TEMP\6571768.exe"
O4 - HKLM\..\Run: [conhost] C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe
O4 - HKLM\..\Run: [l1rezerv.exe] "C:\WINDOWS\l1rezerv.exe"
O4 - HKLM\..\Run: [systemup] "C:\WINDOWS\systemup.exe" stand
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [KB976002-v5] rundll32.exe advpack.dll,LaunchINFSection OPMWXPUP.inf,BrowserChoiceGoo (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: RailNotification - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: srvbtcclient - Unknown owner - C:\WINDOWS\update.5.0\svchost.exe
O23 - Service: srviecheck - Unknown owner - C:\WINDOWS\update.2\svchost.exe
O23 - Service: srvsysdriver32 - Unknown owner - C:\WINDOWS\sysdriver32.exe
O23 - Service: Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe (file missing)
O23 - Service: wxpdrivers - Unknown owner - C:\WINDOWS\update.1\svchost.exe

--
End of file - 9840 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.51204.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"=C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [2006-10-26 434528]
"PLFSetI"=C:\WINDOWS\PLFSetI.exe [2008-07-29 200704]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-11 13594624]
"nwiz"=nwiz.exe /install []
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"wxpdrv"=C:\WINDOWS\services32.exe []
"tray_ico"= []
"tray_ico0"=C:\WINDOWS\update.tray-2-0\svchost.exe [2011-07-18 1170432]
"tray_ico1"= []
"tray_ico2"= []
"tray_ico3"= []
"tray_ico4"= []
"6511828.exe"=C:\DOCUME~1\Jakub\LOCALS~1\Temp\6511828.exe [2011-07-18 232960]
"sysdriver32.exe"=C:\WINDOWS\sysdriver32.exe [2011-07-18 232960]
"sysdriver32_.exe"=C:\WINDOWS\sysdriver32_.exe [2011-07-18 232960]
"7208023.exe"=C:\WINDOWS\TEMP\7208023.exe [2011-07-18 232960]
"4275483.exe"=C:\WINDOWS\TEMP\4275483.exe [2011-07-18 232960]
"6571768.exe"=C:\WINDOWS\TEMP\6571768.exe [2011-07-18 483328]
"conhost"=C:\Documents and Settings\Jakub\Data aplikací\Microsoft\conhost.exe [2011-07-18 169472]
"l1rezerv.exe"=C:\WINDOWS\l1rezerv.exe [2011-07-18 110592]
"systemup"=C:\WINDOWS\systemup.exe [2011-07-18 114176]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-11 86016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\RailNotification]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2011-01-25 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2011-01-25 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2011-01-25 304128]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Documents and Settings\Jakub\Local Settings\Data aplikací\MediaGet2\mediaget.exe"="C:\Documents and Settings\Jakub\Local Settings\Data aplikací\MediaGet2\mediaget.exe:*:Enabled:MediaGet torrent client"
"D:\HRY\Battlefield 2\BF2.exe"="D:\HRY\Battlefield 2\BF2.exe:*:Enabled:BF2"
"C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe"="C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe:*:Enabled:C:\Documents and Settings\Jakub\Dokumenty\Stažené soubory\Flash-Player.exe"
"C:\WINDOWS\update.1\svchost.exe"="C:\WINDOWS\update.1\svchost.exe:*:Enabled:C:\WINDOWS\update.1\svchost.exe"
"C:\WINDOWS\update.tray-2-0\svchost.exe"="C:\WINDOWS\update.tray-2-0\svchost.exe:*:Enabled:C:\WINDOWS\update.tray-2-0\svchost.exe"
"C:\WINDOWS\update.2\svchost.exe"="C:\WINDOWS\update.2\svchost.exe:*:Enabled:C:\WINDOWS\update.2\svchost.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FMVC"=fmcodec.dll
"vidc.divx"=divx.dll
"vidc.yv12"=DivX.dll
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.xvid"=xvid.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mjpg"=pvmjpg30.dll

======List of files/folders created in the last 1 month======

2011-07-20 17:22:13 ----D---- C:\rsit
2011-07-20 17:22:13 ----D---- C:\Program Files\trend micro
2011-07-20 10:15:38 ----HD---- C:\WINDOWS\PIF
2011-07-19 11:31:58 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2011-07-19 11:31:57 ----D---- C:\Program Files\Common Files\Yahoo!
2011-07-19 11:31:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2011-07-19 11:31:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2011-07-19 11:29:49 ----D---- C:\WINDOWS\SxsCaPendDel
2011-07-18 21:15:50 ----D---- C:\WINDOWS\system32\LogFiles
2011-07-18 19:19:30 ----D---- C:\WINDOWS\Prefetch
2011-07-18 19:02:09 ----N---- C:\WINDOWS\system32\COMACF.tmp
2011-07-18 19:02:08 ----N---- C:\WINDOWS\system32\COMACD.tmp
2011-07-18 19:02:08 ----N---- C:\WINDOWS\system32\COMACB.tmp
2011-07-18 18:50:32 ----N---- C:\WINDOWS\system32\irclass.dll
2011-07-18 18:50:31 ----N---- C:\WINDOWS\system32\spxcoins.dll
2011-07-18 18:41:05 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-07-18 12:16:51 ----A---- C:\Documents and Settings\Jakub\Data aplikací\dwm.exe
2011-07-18 12:08:54 ----D---- C:\WINDOWS\ufa
2011-07-18 12:08:54 ----D---- C:\WINDOWS\rpcminer
2011-07-18 12:08:54 ----D---- C:\WINDOWS\phoenix
2011-07-18 12:08:53 ----A---- C:\WINDOWS\unrar.exe
2011-07-18 12:08:29 ----A---- C:\WINDOWS\ddh_iplist.txt
2011-07-18 12:08:28 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-07-18 12:08:27 ----A---- C:\WINDOWS\systemup.exe
2011-07-18 12:08:25 ----A---- C:\WINDOWS\l1rezerv.exe
2011-07-18 12:08:23 ----D---- C:\Microsoft
2011-07-18 12:08:22 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-07-18 12:08:12 ----A---- C:\WINDOWS\gbot111.exe
2011-07-18 12:08:07 ----HD---- C:\WINDOWS\update.2
2011-07-18 12:08:00 ----HD---- C:\WINDOWS\update.5.0
2011-07-18 12:06:23 ----N---- C:\WINDOWS\system32\drivers\athw.sys
2011-07-18 12:06:23 ----N---- C:\WINDOWS\system32\athw.sys
2011-07-18 12:06:23 ----D---- C:\WINDOWS\Options
2011-07-18 12:06:10 ----D---- C:\temp
2011-07-18 11:37:28 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-18 10:45:53 ----A---- C:\WINDOWS\iplist.txt
2011-07-18 10:45:50 ----A---- C:\WINDOWS\sysdriver32_.exe
2011-07-18 10:45:48 ----A---- C:\WINDOWS\sysdriver32.exe
2011-07-18 10:45:29 ----A---- C:\WINDOWS\front_ip_list.txt
2011-07-18 10:45:21 ----D---- C:\WINDOWS\av_ico
2011-07-18 10:44:16 ----HD---- C:\WINDOWS\update.1
2011-07-18 10:44:09 ----HD---- C:\WINDOWS\update.tray-2-0-lnk
2011-07-18 10:44:09 ----HD---- C:\WINDOWS\update.tray-2-0
2011-07-18 10:33:56 ----A---- C:\WINDOWS\winlog-ids.txt
2011-07-18 10:33:56 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-07-17 17:44:46 ----D---- C:\Program Files\Kodek CZ
2011-07-16 21:45:47 ----N---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2011-07-16 21:45:40 ----D---- C:\Program Files\Common Files\Pinnacle
2011-07-16 21:41:36 ----D---- C:\Program Files\Pinnacle
2011-07-16 21:32:09 ----D---- C:\Program Files\Common Files\Adobe
2011-07-16 21:32:09 ----D---- C:\Program Files\Adobe
2011-07-16 21:31:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-16 20:42:51 ----D---- C:\Documents and Settings\Jakub\Data aplikací\DivX
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\vxblock.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxwave.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxsfs.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxmas.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\px.dll
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2011-07-16 20:42:26 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2011-07-16 20:41:59 ----D---- C:\Program Files\Common Files\DivX Shared
2011-07-16 20:40:14 ----D---- C:\Program Files\Google
2011-07-16 20:40:11 ----D---- C:\Program Files\DivX
2011-07-16 20:39:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2011-07-16 20:36:31 ----D---- C:\Documents and Settings\Jakub\Data aplikací\skypePM
2011-07-16 20:36:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-16 20:36:11 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Skype
2011-07-16 20:36:01 ----D---- C:\Program Files\Common Files\Skype
2011-07-16 20:35:58 ----RD---- C:\Program Files\Skype
2011-07-16 20:12:03 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Mirillis
2011-07-16 20:12:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mirillis
2011-07-16 20:10:35 ----D---- C:\Program Files\Mirillis
2011-07-16 19:58:22 ----D---- C:\Program Files\DsNET Corp
2011-07-16 19:37:25 ----A---- C:\WINDOWS\nsreg.dat
2011-07-16 19:37:24 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Mozilla
2011-07-16 19:37:19 ----D---- C:\Program Files\Mozilla Firefox
2011-07-16 19:34:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2011-07-16 19:34:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\LangSoft
2011-07-16 19:34:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-07-16 19:34:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-07-16 19:34:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate
2011-07-16 19:34:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2011-07-16 19:34:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony Ericsson
2011-07-16 19:34:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-07-16 19:34:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2011-07-16 19:34:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-07-16 18:28:36 ----SHD---- C:\RECYCLER
2011-07-16 18:00:12 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Macromedia
2011-07-16 18:00:12 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Adobe
2011-07-05 11:00:40 ----N---- C:\WINDOWS\system32\msonpmon.dll
2011-07-05 10:59:45 ----D---- C:\Program Files\Microsoft Works
2011-07-05 10:59:25 ----D---- C:\Program Files\Microsoft Visual Studio
2011-07-05 10:59:25 ----D---- C:\Program Files\Common Files\DESIGNER
2011-07-05 10:57:24 ----D---- C:\Program Files\Microsoft Visual Studio 8
2011-07-05 10:56:51 ----HD---- C:\WINDOWS\ShellNew
2011-07-05 10:56:39 ----D---- C:\Program Files\Microsoft Office
2011-07-05 10:56:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-07-05 10:56:29 ----RHD---- C:\MSOCache
2011-07-04 14:29:30 ----N---- C:\WINDOWS\system32\h323log.txt
2011-07-04 14:28:57 ----N---- C:\WINDOWS\system32\drivers\MSTEE.sys
2011-07-04 14:28:51 ----N---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2011-07-04 14:28:48 ----N---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2011-07-04 14:28:47 ----N---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2011-07-04 14:28:39 ----N---- C:\WINDOWS\system32\drivers\audstub.sys
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\vfwwdm32.dll
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\ksuser.dll
2011-07-04 14:28:22 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-07-04 14:28:09 ----N---- C:\WINDOWS\system32\drivers\redbook.sys
2011-07-04 14:26:12 ----A---- C:\WINDOWS\imsins.BAK
2011-07-04 14:26:10 ----SHD---- C:\WINDOWS\Installer
2011-07-04 14:26:10 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-04 14:26:09 ----D---- C:\Program Files\Common Files\ODBC
2011-07-04 14:26:09 ----A---- C:\WINDOWS\ODBCINST.INI
2011-07-04 14:26:06 ----RD---- C:\Program Files
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-04 14:26:06 ----D---- C:\Program Files\Common Files
2011-07-04 14:25:47 ----N---- C:\WINDOWS\system32\dgrpsetu.dll
2011-07-04 14:25:46 ----N---- C:\WINDOWS\system32\EqnClass.Dll
2011-07-04 14:25:44 ----N---- C:\WINDOWS\system32\drivers\irenum.sys
2011-07-04 14:25:44 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-07-04 14:25:43 ----N---- C:\WINDOWS\system32\storprop.dll
2011-07-04 14:25:35 ----AS---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-07-04 14:25:17 ----D---- C:\WINDOWS\system32\CatRoot2
2011-07-04 14:25:17 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-04 14:25:11 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-07-04 14:24:52 ----A---- C:\WINDOWS\setuplog.txt
2011-07-04 14:24:49 ----D---- C:\Documents and Settings
2011-07-04 14:24:48 ----SHD---- C:\System Volume Information
2011-07-04 14:24:48 ----N---- C:\WINDOWS\system32\FNTCACHE.DAT
2011-07-04 14:24:12 ----SH---- C:\boot.ini
2011-07-04 14:20:31 ----SD---- C:\WINDOWS\Offline Web Pages
2011-07-04 14:20:31 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-07-04 14:20:31 ----RSD---- C:\WINDOWS\Fonts
2011-07-04 14:20:31 ----RD---- C:\WINDOWS\Web
2011-07-04 14:20:31 ----HD---- C:\WINDOWS\inf
2011-07-04 14:20:31 ----DC---- C:\WINDOWS\system32\dllcache
2011-07-04 14:20:31 ----D---- C:\WINDOWS\WinSxS
2011-07-04 14:20:31 ----D---- C:\WINDOWS\WBEM
2011-07-04 14:20:31 ----D---- C:\WINDOWS\twain_32
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Temp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\wins
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\wbem
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\usmt
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\spool
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ShellExt
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\Setup
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ras
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\oobe
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\npp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\mui
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\inetsrv
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\IME
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\icsxml
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\ias
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\export
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\drivers
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\dhcp
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\cs-cz
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\cs
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\config
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\3com_dmi
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\3076
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\2052
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1054
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1042
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1041
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1037
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1033
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1031
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1029
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1028
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32\1025
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system32
2011-07-04 14:20:31 ----D---- C:\WINDOWS\system
2011-07-04 14:20:31 ----D---- C:\WINDOWS\security
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Resources
2011-07-04 14:20:31 ----D---- C:\WINDOWS\repair
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Provisioning
2011-07-04 14:20:31 ----D---- C:\WINDOWS\pchealth
2011-07-04 14:20:31 ----D---- C:\WINDOWS\PeerNet
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Network Diagnostic
2011-07-04 14:20:31 ----D---- C:\WINDOWS\mui
2011-07-04 14:20:31 ----D---- C:\WINDOWS\msapps
2011-07-04 14:20:31 ----D---- C:\WINDOWS\msagent
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Media
2011-07-04 14:20:31 ----D---- C:\WINDOWS\L2Schemas
2011-07-04 14:20:31 ----D---- C:\WINDOWS\java
2011-07-04 14:20:31 ----D---- C:\WINDOWS\ime
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Help
2011-07-04 14:20:31 ----D---- C:\WINDOWS\ehome
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Driver Cache
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Debug
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Cursors
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Connection Wizard
2011-07-04 14:20:31 ----D---- C:\WINDOWS\Config
2011-07-04 14:20:31 ----D---- C:\WINDOWS\AppPatch
2011-07-04 14:20:31 ----D---- C:\WINDOWS\addins
2011-07-04 14:20:31 ----D---- C:\WINDOWS
2011-07-04 14:20:31 ----ASH---- C:\pagefile.sys
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\rt2860.sys
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\RaCoInst.dll
2011-07-04 13:49:47 ----N---- C:\WINDOWS\system32\RaCoInst.dat
2011-07-04 13:49:47 ----D---- C:\Program Files\Ralink
2011-07-04 13:49:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ralink
2011-07-04 13:49:06 ----D---- C:\Program Files\Atheros
2011-07-04 13:48:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Atheros
2011-07-04 13:46:58 ----N---- C:\WINDOWS\system32\nvudisp.exe
2011-07-04 13:46:58 ----D---- C:\WINDOWS\nview
2011-07-04 13:46:28 ----N---- C:\WINDOWS\system32\NVUNINST.EXE
2011-07-04 13:45:11 ----N---- C:\WINDOWS\system32\drivers\l1c51x86.sys
2011-07-04 13:45:05 ----D---- C:\WINDOWS\system32\Atheros_L1e
2011-07-04 13:44:08 ----D---- C:\Program Files\Acer
2011-07-04 13:41:23 ----N---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-07-04 13:41:23 ----N---- C:\WINDOWS\system32\drivers\btwsecfl.sys
2011-07-04 13:41:22 ----N---- C:\WINDOWS\system32\drivers\btkrnl.sys
2011-07-04 13:41:22 ----N---- C:\WINDOWS\system32\btw_ci.dll
2011-07-04 13:41:15 ----D---- C:\Program Files\WIDCOMM
2011-07-04 13:37:40 ----N---- C:\WINDOWS\system32\drivers\splitter.sys
2011-07-04 13:37:38 ----N---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-07-04 13:37:20 ----N---- C:\WINDOWS\system32\UCI32A34.dll
2011-07-04 13:37:20 ----N---- C:\WINDOWS\system32\drivers\CHDAU32.sys
2011-07-04 13:37:20 ----D---- C:\Program Files\CONEXANT
2011-07-04 13:32:08 ----A---- C:\WINDOWS\USB_VIDEO_REG.exe
2011-07-04 13:32:08 ----A---- C:\WINDOWS\PLFSetI.exe
2011-07-04 13:32:08 ----A---- C:\WINDOWS\PidList.ini
2011-07-04 13:32:08 ----A---- C:\WINDOWS\Image.dll
2011-07-04 13:32:08 ----A---- C:\WINDOWS\Acer Crystal Eye webcam.EXE
2011-07-04 13:32:07 ----HD---- C:\Program Files\InstallShield Installation Information
2011-07-04 13:32:03 ----D---- C:\Documents and Settings\Jakub\Data aplikací\InstallShield
2011-07-04 13:28:12 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-07-04 13:28:10 ----N---- C:\WINDOWS\system32\CSVer.dll
2011-07-04 13:28:10 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-04 13:28:10 ----D---- C:\Program Files\Intel
2011-07-04 13:27:57 ----D---- C:\Intel
2011-07-04 13:02:00 ----N---- C:\WINDOWS\system32\d3d8caps.dat
2011-07-04 12:58:16 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Windows Search
2011-07-04 12:55:13 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Windows Desktop Search
2011-07-04 12:54:36 ----N---- C:\WINDOWS\system32\wmpns.dll
2011-07-04 12:54:35 ----D---- C:\Documents and Settings\Jakub\Data aplikací\Identities
2011-07-04 12:54:33 ----HD---- C:\Program Files\Uninstall Information
2011-07-04 12:54:24 ----ASH---- C:\Documents and Settings\Jakub\Data aplikací\desktop.ini
2011-07-04 12:54:23 ----SD---- C:\Documents and Settings\Jakub\Data aplikací\Microsoft
2011-07-04 12:53:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-07-04 12:52:06 ----AS---- C:\WINDOWS\bootstat.dat
2011-07-04 12:50:40 ----D---- C:\WINDOWS\system32\xircom
2011-07-04 12:50:40 ----D---- C:\Program Files\xerox
2011-07-04 12:50:40 ----D---- C:\Program Files\microsoft frontpage
2011-07-04 12:50:05 ----D---- C:\WINDOWS\system32\Microsoft
2011-07-04 12:50:03 ----N---- C:\WINDOWS\system32\deployJava1.dll
2011-07-04 12:49:57 ----D---- C:\Program Files\Java
2011-07-04 12:49:28 ----RASH---- C:\MSDOS.SYS
2011-07-04 12:49:28 ----RASH---- C:\IO.SYS
2011-07-04 12:49:28 ----A---- C:\WINDOWS\control.ini
2011-07-04 12:49:28 ----A---- C:\CONFIG.SYS
2011-07-04 12:49:28 ----A---- C:\AUTOEXEC.BAT
2011-07-04 12:48:44 ----A---- C:\WINDOWS\OEWABLog.txt
2011-07-04 12:48:38 ----N---- C:\WINDOWS\system32\mapi32.dll
2011-07-04 12:47:37 ----HD---- C:\Program Files\WindowsUpdate
2011-07-04 12:47:33 ----D---- C:\Program Files\Online Services
2011-07-04 12:47:18 ----D---- C:\Program Files\Windows Media Connect 2
2011-07-04 12:47:05 ----D---- C:\WINDOWS\system32\DirectX
2011-07-04 12:46:56 ----N---- C:\WINDOWS\system32\atrace.dll
2011-07-04 12:46:53 ----N---- C:\WINDOWS\system32\desktop.ini
2011-07-04 12:46:53 ----A---- C:\WINDOWS\desktop.ini
2011-07-04 12:46:45 ----N---- C:\WINDOWS\system32\nmevtmsg.dll
2011-07-04 12:46:44 ----N---- C:\WINDOWS\system32\acctres.dll
2011-07-04 12:46:43 ----D---- C:\Program Files\Common Files\Services
2011-07-04 12:46:41 ----SD---- C:\WINDOWS\Tasks
2011-07-04 12:46:41 ----N---- C:\WINDOWS\system32\icfgnt5.dll
2011-07-04 12:46:39 ----D---- C:\Program Files\Common Files\MSSoap
2011-07-04 12:46:33 ----D---- C:\WINDOWS\srchasst
2011-07-04 12:46:31 ----D---- C:\WINDOWS\system32\Macromed
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuweb.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wucltui.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuauserv.dll
2011-07-04 12:46:28 ----N---- C:\WINDOWS\system32\wuaueng1.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wups.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuaueng.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuauclt1.exe
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuauclt.exe
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\wuapi.dll
2011-07-04 12:46:27 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\qmgrprxy.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\qmgr.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2011-07-04 12:46:26 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2011-07-04 12:46:26 ----D---- C:\WINDOWS\system32\bits
2011-07-04 12:46:22 ----D---- C:\Program Files\Movie Maker
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrslv.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrdm.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\safrcdlg.dll
2011-07-04 12:46:05 ----N---- C:\WINDOWS\system32\racpldlg.dll
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\fltMc.exe
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\fltlib.dll
2011-07-04 12:46:01 ----N---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srsvc.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srrstr.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\srclient.dll
2011-07-04 12:46:00 ----N---- C:\WINDOWS\system32\drivers\sr.sys
2011-07-04 12:46:00 ----D---- C:\WINDOWS\system32\Restore
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\nmmkcert.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\msconf.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\mnmsrvc.exe
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\mnmdd.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\isrdbg32.dll
2011-07-04 12:45:59 ----N---- C:\WINDOWS\system32\ils.dll
2011-07-04 12:45:56 ----D---- C:\Program Files\NetMeeting
2011-07-04 12:45:55 ----N---- C:\WINDOWS\system32\msoert2.dll
2011-07-04 12:45:55 ----N---- C:\WINDOWS\system32\msoeacct.dll
2011-07-04 12:45:54 ----N---- C:\WINDOWS\system32\inetres.dll
2011-07-04 12:45:54 ----N---- C:\WINDOWS\system32\inetcomm.dll
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\schedsvc.dll
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\mstinit.exe
2011-07-04 12:45:52 ----N---- C:\WINDOWS\system32\mstask.dll
2011-07-04 12:45:52 ----D---- C:\Program Files\Outlook Express
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\isign32.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\inetcfg.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\icwphbk.dll
2011-07-04 12:45:51 ----N---- C:\WINDOWS\system32\icwdial.dll
2011-07-04 12:45:46 ----D---- C:\Program Files\Common Files\System
2011-07-04 12:42:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-07-04 12:36:57 ----RSD---- C:\WINDOWS\assembly
2011-07-04 12:36:36 ----N---- C:\WINDOWS\system32\emptyregdb.dat
2011-07-04 12:36:27 ----D---- C:\Program Files\ComPlus Applications
2011-07-04 12:36:25 ----A---- C:\WINDOWS\vbaddin.ini
2011-07-04 12:36:25 ----A---- C:\WINDOWS\vb.ini
2011-07-04 12:36:20 ----D---- C:\WINDOWS\Registration
2011-07-04 12:36:12 ----D---- C:\Program Files\Windows Media Player
2011-07-04 12:35:28 ----N---- C:\WINDOWS\system32\msvcr100_clr0400.dll
2011-07-04 12:35:06 ----D---- C:\Program Files\Microsoft.NET
2011-07-04 12:35:05 ----N---- C:\WINDOWS\system32\aspnet_counters.dll
2011-07-04 12:34:43 ----D---- C:\WINDOWS\system32\XPSViewer
2011-07-04 12:34:43 ----D---- C:\Program Files\MSBuild
2011-07-04 12:34:42 ----N---- C:\WINDOWS\system32\TsWpfWrp.exe
2011-07-04 12:34:36 ----N---- C:\WINDOWS\system32\rgb9rast_2.dll
2011-07-04 12:34:35 ----N---- C:\WINDOWS\system32\PresentationNative_v0300.dll
2011-07-04 12:34:35 ----N---- C:\WINDOWS\system32\PresentationHostProxy.dll
2011-07-04 12:34:35 ----D---- C:\WINDOWS\system32\en-US
2011-07-04 12:34:34 ----N---- C:\WINDOWS\system32\PresentationHost.exe
2011-07-04 12:34:32 ----N---- C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2011-07-04 12:34:30 ----N---- C:\WINDOWS\system32\infocardapi.dll
2011-07-04 12:34:29 ----N---- C:\WINDOWS\system32\icardres.dll
2011-07-04 12:34:29 ----N---- C:\WINDOWS\system32\icardagt.exe
2011-07-04 12:34:29 ----D---- C:\Program Files\Reference Assemblies
2011-07-04 12:34:28 ----N---- C:\WINDOWS\system32\evr.dll
2011-07-04 12:34:28 ----N---- C:\WINDOWS\system32\dxva2.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcr80.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcp80.dll
2011-07-04 12:34:05 ----N---- C:\WINDOWS\system32\msvcm80.dll
2011-07-04 12:33:50 ----N---- C:\WINDOWS\system32\dfshim.dll
2011-07-04 12:33:25 ----N---- C:\WINDOWS\system32\netfxperf.dll
2011-07-04 12:33:22 ----N---- C:\WINDOWS\system32\mscories.dll
2011-07-04 12:33:22 ----N---- C:\WINDOWS\system32\mscorier.dll
2011-07-04 12:33:22 ----D---- C:\Program Files\Internet Explorer
2011-07-04 12:33:21 ----N---- C:\WINDOWS\system32\mscoree.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-07-04 12:33:08 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-07-04 12:32:59 ----D---- C:\WINDOWS\BitLockerDiscoveryVolumeContents
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\SecProc_ssp_isv.dll
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\SecProc_ssp.dll
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\RmActivate_ssp_isv.exe
2011-07-04 12:32:58 ----N---- C:\WINDOWS\system32\RmActivate_ssp.exe
2011-07-04 12:32:58 ----D---- C:\WINDOWS\system32\DRM
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\SecProc_isv.dll
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\SecProc.dll
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\RmActivate_isv.exe
2011-07-04 12:32:57 ----N---- C:\WINDOWS\system32\RmActivate.exe
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\WgaTray.exe
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\WgaLogon.dll
2011-07-04 12:32:56 ----N---- C:\WINDOWS\system32\msdrm.dll
2011-07-04 12:32:55 ----N---- C:\WINDOWS\system32\winUsbCoinstaller.dll
2011-07-04 12:32:55 ----N---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2011-07-04 12:32:54 ----N---- C:\WINDOWS\system32\WUDFUpdate_01007.dll
2011-07-04 12:32:53 ----N---- C:\WINDOWS\system32\imapi2fs.dll
2011-07-04 12:32:53 ----N---- C:\WINDOWS\system32\imapi2.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncRes.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncPH.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncNE.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncDMS.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\UncCplExt.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\oephRes.dll
2011-07-04 12:32:52 ----N---- C:\WINDOWS\system32\oeph.dll
2011-07-04 12:32:46 ----D---- C:\Program Files\Windows Desktop Search
2011-07-04 12:32:44 ----N---- C:\WINDOWS\system32\propsys.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\xmlfilter.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\srchadmin.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\rtffilt.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\msshsq.dll
2011-07-04 12:32:43 ----N---- C:\WINDOWS\system32\msshooks.dll
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\msscb.dll
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\idxcntrs.ini
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\gthrctr.ini
2011-07-04 12:32:42 ----N---- C:\WINDOWS\system32\gsrvctr.ini
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\tquery.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\propdefs.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\msstrc.dll
2011-07-04 12:32:41 ----N---- C:\WINDOWS\system32\mssrch.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchprotocolhost.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchindexer.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\searchfilterhost.exe
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssprxy.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssphtb.dll
2011-07-04 12:32:40 ----N---- C:\WINDOWS\system32\mssph.dll
2011-07-04 12:32:39 ----N---- C:\WINDOWS\system32\mssitlb.dll
2011-07-04 12:32:39 ----N---- C:\WINDOWS\system32\msscntrs.dll
2011-07-04 12:32:38 ----N---- C:\WINDOWS\system32\msxml4r.dll
2011-07-04 12:32:38 ----N---- C:\WINDOWS\system32\msxml4.dll
2011-07-04 12:32:37 ----D---- C:\Program Files\MSXML 4.0
2011-07-04 12:32:32 ----D---- C:\WINDOWS\Microsoft.NET
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_3.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_2.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\xinput1_1.dll
2011-07-04 12:32:29 ----N---- C:\WINDOWS\system32\XAudio2_7.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_6.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_5.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_4.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_3.dll
2011-07-04 12:32:28 ----N---- C:\WINDOWS\system32\XAudio2_2.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAudio2_1.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAudio2_0.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-07-04 12:32:27 ----N---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_7.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_6.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_5.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_4.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_3.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_2.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_1.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine3_0.dll
2011-07-04 12:32:26 ----N---- C:\WINDOWS\system32\xactengine2_9.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_8.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_7.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_6.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_5.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_4.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_3.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_2.dll
2011-07-04 12:32:25 ----N---- C:\WINDOWS\system32\xactengine2_10.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\xactengine2_1.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\xactengine2_0.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-07-04 12:32:24 ----N---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-07-04 12:32:23 ----N---- C:\WINDOWS\system32\D3DX9_43.dll
2011-07-04 12:32:22 ----N---- C:\WINDOWS\system32\D3DX9_42.dll
2011-07-04 12:32:21 ----N---- C:\WINDOWS\system32\D3DX9_41.dll
2011-07-04 12:32:20 ----N---- C:\WINDOWS\system32\D3DX9_40.dll
2011-07-04 12:32:20 ----N---- C:\WINDOWS\system32\D3DX9_39.dll
2011-07-04 12:32:19 ----N---- C:\WINDOWS\system32\D3DX9_38.dll
2011-07-04 12:32:18 ----N---- C:\WINDOWS\system32\D3DX9_37.dll
2011-07-04 12:32:17 ----N---- C:\WINDOWS\system32\d3dx9_36.dll
2011-07-04 12:32:16 ----N---- C:\WINDOWS\system32\d3dx9_35.dll
2011-07-04 12:32:15 ----N---- C:\WINDOWS\system32\d3dx9_34.dll
2011-07-04 12:32:14 ----N---- C:\WINDOWS\system32\d3dx9_33.dll
2011-07-04 12:32:14 ----N---- C:\WINDOWS\system32\d3dx9_32.dll
2011-07-04 12:32:13 ----N---- C:\WINDOWS\system32\d3dx9_31.dll
2011-07-04 12:32:12 ----N---- C:\WINDOWS\system32\d3dx9_30.dll
2011-07-04 12:32:12 ----N---- C:\WINDOWS\system32\d3dx9_29.dll
2011-07-04 12:32:11 ----N---- C:\WINDOWS\system32\d3dx9_28.dll
2011-07-04 12:32:11 ----N---- C:\WINDOWS\system32\d3dx9_27.dll
2011-07-04 12:32:10 ----N---- C:\WINDOWS\system32\d3dx9_26.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx9_25.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx9_24.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx11_43.dll
2011-07-04 12:32:09 ----N---- C:\WINDOWS\system32\d3dx11_42.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_43.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_42.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_41.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_40.dll
2011-07-04 12:32:08 ----N---- C:\WINDOWS\system32\d3dx10_39.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_38.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_37.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_36.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_35.dll
2011-07-04 12:32:07 ----N---- C:\WINDOWS\system32\d3dx10_34.dll
2011-07-04 12:32:06 ----N---- C:\WINDOWS\system32\d3dx10_33.dll
2011-07-04 12:32:06 ----N---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-07-04 12:32:04 ----N---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-07-04 12:32:04 ----N---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-07-04 12:32:03 ----N---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-07-04 12:32:03 ----N---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-07-04 12:32:02 ----N---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-07-04 12:32:02 ----N---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-07-04 12:32:01 ----N---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-07-04 12:32:01 ----N---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-07-04 12:32:00 ----N---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-07-04 12:31:59 ----N---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-07-04 12:31:34 ----N---- C:\WINDOWS\system32\muweb.dll
2011-07-04 12:31:34 ----N---- C:\WINDOWS\system32\mucltui.dll
2011-07-04 12:31:34 ----D---- C:\WINDOWS\SoftwareDistribution
2011-07-04 12:31:34 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\spupdsvc.exe
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2011-07-04 12:31:33 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-07-04 12:31:32 ----D---- C:\WINDOWS\system32\PreInstall
2011-07-04 12:31:29 ----N---- C:\WINDOWS\system32\pwrshplugin.dll
2011-07-04 12:31:13 ----N---- C:\WINDOWS\system32\wevtfwd.dll
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\winrm
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\WindowsPowerShell
2011-07-04 12:31:13 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmprovhost.exe
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmplpxy.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\wsmanhttpconfig.exe
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrssrv.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrsmgr.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrscmd.dll
2011-07-04 12:31:12 ----N---- C:\WINDOWS\system32\winrmprov.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmWmiPl.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmSvc.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmRes.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\WsmAuto.dll
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\winrshost.exe
2011-07-04 12:31:11 ----N---- C:\WINDOWS\system32\winrs.exe
2011-07-04 12:31:10 ----N---- C:\WINDOWS\system32\winrm.vbs
2011-07-04 12:31:10 ----N---- C:\WINDOWS\system32\winrm.cmd
2011-07-04 12:31:09 ----D---- C:\Program Files\Messenger
2011-07-04 12:31:04 ----N---- C:\WINDOWS\system32\write.exe
2011-07-04 12:31:04 ----D---- C:\Program Files\MSN Gaming Zone
2011-07-04 12:30:56 ----N---- C:\WINDOWS\system32\sndvol32.exe
2011-07-04 12:30:56 ----N---- C:\WINDOWS\system32\hticons.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\winchat.exe
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avwav.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avtapi.dll
2011-07-04 12:30:55 ----N---- C:\WINDOWS\system32\avmeter.dll
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\charmap.exe
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\getuname.dll
2011-07-04 12:30:48 ----N---- C:\WINDOWS\system32\calc.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\winmine.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\sol.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\mshearts.exe
2011-07-04 12:30:47 ----N---- C:\WINDOWS\system32\freecell.exe
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\tspubwmi.dll
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\rdpshell.exe
2011-07-04 12:30:46 ----N---- C:\WINDOWS\system32\rdpinit.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\wksprtps.dll
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\wksprt.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\winlogonnotification.dll
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\usrlogon.cmd
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\tswbprxy.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\reset.exe
2011-07-04 12:30:45 ----N---- C:\WINDOWS\system32\MsRdpWebAccess.dll
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tsshutdn.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tslabels.ini
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tskill.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tsdiscon.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\tscon.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\shadow.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\rwinsta.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\regini.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\rdpcfgex.dll
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\qwinsta.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\qappsrv.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\msg.exe
2011-07-04 12:30:44 ----N---- C:\WINDOWS\system32\logoff.exe
2011-07-04 12:30:43 ----N---- C:\WINDOWS\system32\msdtcprf.ini
2011-07-04 12:30:43 ----N---- C:\WINDOWS\system32\cdmodem.dll
2011-07-04 12:30:38 ----N---- C:\WINDOWS\system32\wmimgmt.msc
2011-07-04 12:30:37 ----N---- C:\WINDOWS\system32\accwiz.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\sndrec32.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\mplay32.exe
2011-07-04 12:30:36 ----N---- C:\WINDOWS\system32\hypertrm.dll
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\spider.exe
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\mspaint.exe
2011-07-04 12:30:35 ----N---- C:\WINDOWS\system32\clipbrd.exe
2011-07-04 12:30:35 ----D---- C:\Program Files\Windows NT
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\tscfgwmi.dll
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-07-04 12:30:34 ----N---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-07-04 12:30:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-07-04 12:30:33 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\sessmgr.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\remotepg.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdshost.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdsaddin.exe
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\rdchost.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\mstscax.dll
2011-07-04 12:30:32 ----N---- C:\WINDOWS\system32\mstsc.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\termsrv.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpwsx.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpsnd.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\rdpclip.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\qprocess.exe
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\msdtcuiu.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\icaapi.dll
2011-07-04 12:30:31 ----N---- C:\WINDOWS\system32\cfgbkend.dll
2011-07-04 12:30:31 ----D---- C:\WINDOWS\system32\MsDtc
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\xolehlp.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\mtxoci.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtctm.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtcprx.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtclog.dll
2011-07-04 12:30:30 ----N---- C:\WINDOWS\system32\msdtc.exe
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxlegih.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxex.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\mtxdm.dll
2011-07-04 12:30:29 ----N---- C:\WINDOWS\system32\dcomcnfg.exe
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\stclient.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\comrepl.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\comaddin.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\colbact.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\clbcatex.dll
2011-07-04 12:30:28 ----N---- C:\WINDOWS\system32\catsrvps.dll
2011-07-04 12:30:28 ----D---- C:\WINDOWS\system32\Com
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\comuid.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\comsvcs.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\catsrvut.dll
2011-07-04 12:30:27 ----N---- C:\WINDOWS\system32\catsrv.dll
2011-07-04 12:30:26 ----N---- C:\WINDOWS\system32\comsnap.dll
2011-07-04 12:30:26 ----N---- C:\WINDOWS\system32\clbcatq.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\servdeps.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\mmfutil.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\licwmi.dll
2011-07-04 12:30:20 ----N---- C:\WINDOWS\system32\cmprops.dll
2011-07-04 12:30:15 ----N---- C:\WINDOWS\system32\drivers\termdd.sys
2011-07-04 12:30:15 ----N---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2011-07-18 19:13:47 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2011-07-18 19:13:03 ----A---- C:\WINDOWS\win.ini
2011-07-18 18:50:56 ----N---- C:\WINDOWS\system32\oeminfo.ini
2011-07-18 18:50:51 ----A---- C:\WINDOWS\system.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-05-14 94360]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2011-01-25 8832]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 rspndr;Odpovídající zařízení zjišťování topologie linkové vrstvy; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2011-01-25 62848]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-06-22 1574112]
R3 BTKRNL;Enumenátor sběrnice Bluetooth; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2009-04-15 991136]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAU32.sys [2009-03-09 805888]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-04-07 39424]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2011-01-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-11 6249728]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2011-01-25 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2009-05-12 122240]
S1 DumpDrv;Crash Dump Driver; C:\WINDOWS\system32\drivers\DumpDrv.sys [2011-01-25 9472]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2009-06-18 45984]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2011-01-25 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2011-01-25 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2011-01-25 82944]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2011-01-25 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2009-06-20 349528]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-11 168005]
R2 srvbtcclient;srvbtcclient; C:\WINDOWS\update.5.0\svchost.exe [2011-07-20 340480]
R2 srviecheck;srviecheck; C:\WINDOWS\update.2\svchost.exe [2011-07-18 483328]
R2 srvsysdriver32;srvsysdriver32; C:\WINDOWS\sysdriver32.exe [2011-07-18 232960]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2011-01-25 439808]
R2 wxpdrivers;wxpdrivers; C:\WINDOWS\update.1\svchost.exe [2011-07-18 1170432]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-16 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-07-16 135664]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WinRM;Vzdálená správa systému Windows (WS-Management); C:\WINDOWS\System32\svchost.exe [2011-01-25 14848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2011-01-25 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2011-01-25 14848]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Stahněte Rkill z jednoho z odkazů, pokud by ho vir blokoval, zkuste stahnout jiný

Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill COM:
http://download.bleepingcomputer.com/grinler/rkill.com



Rkill PIF:
http://download.bleepingcomputer.com/grinler/rkill.pif

-spusťte ho a nechejte pracovat. Sám se ukončí.

- Ted nerestartujte počítač!



Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
- přejmenujte combofix na potvůrka.com

Vše splněno ...nejsem si jistý, jestli jste chtěla log z combofixu, ale udělal jsem ho:
PS: jen takový dodatek...chtělo to po mě, že mám vypnout ESET NOD32 antivirus...ale já ho nemám v počítači...to ten vir asi dělá, že tam je, ale není tam...

---------------------------------------------------------------------------------------------------------------------------
ComboFix 11-07-20.02 - Jakub 20.07.2011 18:11:44.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3037.2404 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jakub\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\docume~1\Jakub\LOCALS~1\Temp\6511828.exe
c:\documents and settings\Jakub\Data aplikací\dwm.exe
c:\documents and settings\Jakub\Data aplikací\Microsoft\conhost.exe
C:\Microsoft
c:\program files\Internet Explorer\conhost.exe
c:\windows\btc_client_iplist.txt
c:\windows\ddh_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\gbot111.exe
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\phoenix.rar
c:\windows\proc_list1.log
c:\windows\rpcminer.rar
c:\windows\sysdriver32.exe
c:\windows\sysdriver32_.exe
c:\windows\system\oeminfo.ini
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\systemup.exe
c:\windows\TEMP\4275483.exe
c:\windows\TEMP\7208023.exe
c:\windows\ufa.rar
c:\windows\update.1
c:\windows\update.1\svchost.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\svchost.exe
c:\windows\winlog-dirs.txt
c:\windows\winlog-ids.txt
c:\windows\winsetupapi.log
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_WXPDRIVERS
-------\Service_srviecheck
-------\Service_srvsysdriver32
-------\Service_wxpdrivers
-------\Legacy_srvbtcclient
-------\Legacy_srvbtcclient
-------\Service_srvbtcclient
-------\Service_srvbtcclient
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-20 do 2011-07-20 )))))))))))))))))))))))))))))))
.
.
2011-07-20 15:22 . 2011-07-20 15:22 -------- d-----w- C:\rsit
2011-07-20 13:41 . 2011-07-20 13:41 512 ----a-w- C:\PhysicalMBR.bin
2011-07-18 10:06 . 2011-07-18 10:06 -------- d-----w- C:\temp
2011-07-05 08:56 . 2011-07-05 08:56 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-20 16:16 . 2011-07-20 16:17 232960 ----a-w- c:\windows\sysdriver32_.exe
2011-07-20 16:16 . 2011-07-20 16:16 232960 ----a-w- c:\windows\sysdriver32.exe
2011-06-02 17:53 . 2011-06-02 17:53 94208 ------w- c:\windows\system32\dpl100.dll
2011-07-08 07:29 . 2011-07-16 17:37 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-01-25 . 8F41FD1CC693054347C6FB7B0E618B07 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"="c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE" [2006-10-26 434528]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-11 13594624]
"nwiz"="nwiz.exe" [2009-03-11 1657376]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"tray_ico0"="c:\windows\update.tray-2-0\svchost.exe" [2011-07-18 1170432]
"sysdriver32.exe"="c:\windows\sysdriver32.exe" [2011-07-20 232960]
"sysdriver32_.exe"="c:\windows\sysdriver32_.exe" [2011-07-20 232960]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-11 86016]
"7556721.exe"="c:\docume~1\Jakub\LOCALS~1\Temp\7556721.exe" [2011-07-20 232960]
"9708798.exe"="c:\windows\TEMP\9708798.exe" [2011-07-20 232960]
"1469911.exe"="c:\windows\TEMP\1469911.exe" [2011-07-20 483328]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"KB976002-v5"="advpack.dll" [2011-01-25 128512]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-6-20 607584]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2011-7-4 123904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
"EnableLUA"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2011-01-25 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"d:\\HRY\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\update.tray-2-0\\svchost.exe"=
"c:\\WINDOWS\\update.2\\svchost.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [28.4.2010 8:17 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2.7.2010 12:43 94360]
R2 srviecheck;srviecheck;c:\windows\update.2\svchost.exe srv --> c:\windows\update.2\svchost.exe srv [?]
R2 srvsysdriver32;srvsysdriver32;c:\windows\sysdriver32.exe srv --> c:\windows\sysdriver32.exe srv [?]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4.7.2011 13:45 39424]
S1 DumpDrv;Crash Dump Driver;c:\windows\system32\drivers\dumpdrv.sys [25.1.2011 10:15 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4.7.2011 12:35 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe -k WinRM [25.1.2011 10:12 14848]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SRVIECHECK
*NewlyCreated* - SRVSYSDRIVER32
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=15383
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\documents and settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 55333
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
HKLM-Run-wxpdrv - c:\windows\services32.exe
HKLM-Run-tray_ico - (no file)
HKLM-Run-tray_ico1 - (no file)
HKLM-Run-tray_ico2 - (no file)
HKLM-Run-tray_ico3 - (no file)
HKLM-Run-tray_ico4 - (no file)
HKLM-Run-l1rezerv.exe - c:\windows\l1rezerv.exe
HKLM-Run-systemup - c:\windows\systemup.exe
Notify-RailNotification - (no file)
SafeBoot-wxpdrivers
AddRemove-Microsoft .NET Framework 3.5 SP1 - c:\windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
AddRemove-Microsoft .NET Framework 4 Client Profile - c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe
AddRemove-Microsoft .NET Framework 4 Extended - c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-20 18:17
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\SearchFilterHost.exe
c:\windows\update.2\svchost.exe
c:\windows\update.2\svchost.exe
c:\\.\globalroot\Device\svchost.exe\svchost.exe
.
**************************************************************************
.
Celkový čas: 2011-07-20 18:18:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-20 16:18
.
Před spuštěním: Volných bajtů: 144 482 619 392
Po spuštění: Volných bajtů: 144 446 799 872
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /noexecute=alwaysoff /fastdetect
.
- - End Of File - - 2A1FC22947FA78655E7DCE2190A48756

Ale máte, Vy jste ho odinstalovával? Jeslti ano, tak špatně. Mám Vám ho smazat?

hmm...pokud to dokážete tak určitě...prohledal jsem to a nikde nic...

Zdravím. Ač nejsem zrovna v PC amatér, na tohle jsem se nachtal (demence...). Stalo se mi to samé co kolegovi. Anglicky mluvící známý mi napsal, tak sme lehce "pokecali" a on mi poslal ten odkaz, a dál už to znáte...
Použil sem Rkill i combofix...po resetu systému combofixem mi nešel nahodit vůbec windows. Ještě že existuje obnovovací funkce z CD...
teď se zdá systém v pohodě, NOD32 mi virus nehlásí a není už blokovaný.
Přesto bych se zeptal, co ještě mohu udělat, abych měl 100% jistotu, že je vše ok?

Díky.

Zdravim
DKmat
prosim zaloz si vlastny novy topic.
dakujem

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka
-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Hezký den přeji ...udělal jsem co jste žádala, zde je LOG z COMBOFIXU:

ComboFix 11-07-20.02 - Jakub 21.07.2011 11:41:17.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3037.2648 [GMT 2:00]
Spuštěný z: c:\documents and settings\Jakub\Plocha\potvůrka.com.exe
Použité ovládací přepínače :: c:\documents and settings\Jakub\Plocha\CFScript.txt.txt
AV: ESET NOD32 Antivirus 4.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\assembly\GAC_MSIL\desktop.ini
c:\windows\btc_client_iplist.txt
c:\windows\ddh_iplist.txt
c:\windows\front_ip_list.txt
c:\windows\iecheck_iplist.txt
c:\windows\info1
c:\windows\iplist.txt
c:\windows\l1rezerv.exe
c:\windows\loader2.exe_ok
c:\windows\proc_list1.log
c:\windows\sysdriver32.exe
c:\windows\sysdriver32_.exe
c:\windows\system32\drivers\etc\HSTS~1
c:\windows\systemup.exe
c:\windows\update.2
c:\windows\update.2\svchost.exe
c:\windows\update.5.0
c:\windows\update.5.0\svchost.exe
c:\windows\winsetupapi.log
.
Nakažená kopie c:\windows\system32\wuauclt.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\system32\dllcache\wuauclt.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_SRVIECHECK
-------\Legacy_SRVSYSDRIVER32
-------\Legacy_srvbtcclient
-------\Legacy_srvbtcclient
-------\Service_srvbtcclient
-------\Service_srvbtcclient
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-06-21 do 2011-07-21 )))))))))))))))))))))))))))))))
.
.
2011-07-20 16:10 . 2011-07-20 16:18 -------- d-----w- C:\ComboFix
2011-07-20 15:22 . 2011-07-20 15:22 -------- d-----w- C:\rsit
2011-07-20 13:41 . 2011-07-20 13:41 512 ----a-w- C:\PhysicalMBR.bin
2011-07-18 10:06 . 2011-07-18 10:06 -------- d-----w- C:\temp
2011-07-05 08:56 . 2011-07-05 08:56 -------- d-----r- C:\MSOCache
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-21 09:47 . 2011-07-21 09:47 232960 ----a-w- c:\windows\sysdriver32.exe
2011-06-02 17:53 . 2011-06-02 17:53 94208 ------w- c:\windows\system32\dpl100.dll
2011-07-08 07:29 . 2011-07-16 17:37 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2011-01-25 . 8F41FD1CC693054347C6FB7B0E618B07 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-07-20_16.16.37 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-07-21 09:46 . 2011-07-21 09:46 16384 c:\windows\temp\Perflib_Perfdata_cc0.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 87344 c:\windows\system32\perfc009.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 87344 c:\windows\system32\perfc009.dat
+ 2011-07-04 10:32 . 2011-01-25 08:17 186880 c:\windows\system32\searchprotocolhost.exe
+ 2011-07-04 10:32 . 2011-01-25 08:17 441856 c:\windows\system32\searchindexer.exe
- 2008-04-14 11:00 . 2011-07-20 07:21 501716 c:\windows\system32\perfh009.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 501716 c:\windows\system32\perfh009.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 517560 c:\windows\system32\perfh005.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 517560 c:\windows\system32\perfh005.dat
- 2008-04-14 11:00 . 2011-07-20 07:21 110088 c:\windows\system32\perfc005.dat
+ 2008-04-14 11:00 . 2011-07-21 09:12 110088 c:\windows\system32\perfc005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWPersistentQueuedReporting"="c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE" [2006-10-26 434528]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-03-11 13594624]
"nwiz"="nwiz.exe" [2009-03-11 1657376]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752]
"tray_ico0"="c:\windows\update.tray-2-0\svchost.exe" [2011-07-18 1170432]
"sysdriver32.exe"="c:\windows\sysdriver32.exe" [2011-07-21 232960]
"sysdriver32_.exe"="c:\windows\sysdriver32_.exe" [2011-07-21 232960]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-03-11 86016]
"l1rezerv.exe"="c:\windows\l1rezerv.exe" [BU]
"systemup"="c:\windows\systemup.exe" [BU]
"7399499.exe"="c:\docume~1\Jakub\LOCALS~1\Temp\7399499.exe" [2011-07-21 232960]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"KB976002-v5"="advpack.dll" [2011-01-25 128512]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-6-20 607584]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2011-7-4 123904]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableSecureUIAPaths"= 0 (0x0)
"EnableLUA"= 0 (0x0)
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2011-01-25 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"DisableThumbnailCache"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 14\\Programs\\umi.exe"=
"d:\\HRY\\Battlefield 2\\BF2.exe"=
"c:\\WINDOWS\\update.tray-2-0\\svchost.exe"=
.
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [28.4.2010 8:17 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2.7.2010 12:43 94360]
R2 srvsysdriver32;srvsysdriver32;c:\windows\sysdriver32.exe srv --> c:\windows\sysdriver32.exe srv [?]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [4.7.2011 13:45 39424]
S1 DumpDrv;Crash Dump Driver;c:\windows\system32\drivers\dumpdrv.sys [25.1.2011 10:15 9472]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [4.7.2011 12:35 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [16.7.2011 20:40 135664]
S3 WinRM;Vzdálená správa systému Windows (WS-Management);c:\windows\System32\svchost.exe -k WinRM [25.1.2011 10:12 14848]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe --> c:\windows\Microsoft.NET\Framework\v4.0.30319\WPFFontCache_v0400.exe [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - SRVSYSDRIVER32
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Obsah adresáře 'Naplánované úlohy'
.
2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-16 18:40]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=15383
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
LSP: mswsock.dll
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\documents and settings\Jakub\Data aplikací\Mozilla\Firefox\Profiles\gc73v2we.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 55333
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-07-21 11:46
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
c:\windows\$NtUninstallKB11960$:SummaryInformation 0 bytes hidden from API
.
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\\.\globalroot\Device\svchost.exe\svchost.exe
c:\potvc:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\nvsvc32.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
.
**************************************************************************
.
Celkový čas: 2011-07-21 11:48:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-07-21 09:48
ComboFix2.txt 2011-07-20 16:18
.
Před spuštěním: Volných bajtů: 144 740 311 040
Po spuštění: Volných bajtů: 144 731 590 656
.
- - End Of File - - AD2DBC733976B30F1FB394DC7D8BF971

Ahojte, už mě více lidí na facebooku spamovali anglickými větami a poté poslali odkaz:
http://78.106.6.72/100000145886522
takže na to neklikat !!!!!

Ještě se nám tam pořád něco drží.

Stáhněte TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
- a uložte ho na plochu.
- 2x klikněte na ikonu programu a spusťte
- dejte volbu Spustit kontrolu - pak potvrdte start sken
- pokud program najde infikovaný soubor, ukáže se Vám předvolená akce Cure, v tom případě potvrdte tlačítko Continue
- pokud bude chtít program restartovat počítač, klikněte na tlačítko Reboot Now
- pokud si restart nevyžádá, klikněte na tlačítko Report. Měl vy na Vás vyskočit log, obsah logu zkopírujte do svého topicu.
- pokud se log nezobrazí, je uložený ve Vašem kořenovém adresáři.



Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Tady je log z TDSSKiller:

ohledne MBAM...naistaloval jsem, vše v pořádku, dal jsem úplný sken, ale jak program začal skenovat tak asi po 4s program úplně spadl. Když ho chci pustit znovu z C:MBAM, tak mi to píše