Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Trojan a rundll32.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Petura
Návštěvník
Návštěvník
Příspěvky: 190
Registrován: 16 lis 2005 16:09

Trojan a rundll32.exe

#1 Příspěvek od Petura »

Dobrý večer, prosím o pomoc. Avast mi našel trojana a při vypínaní windousů vyskakuje hláška že nejde ukončit prgram rundll32.exe.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Naďa at 2012-07-16 21:53:37
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 72 GB (94%) free of 76 GB
Total RAM: 503 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:53:48, on 16.7.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\IObit\IObit Malware Fighter\IMF.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\wincmd\WINCMD32.EXE
c:\StahovanĂ­\RSIT.exe
C:\Program Files\trend micro\Naďa.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSIDLL] rundll32.exe msitav32.dll,RduGLSOed
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 5365 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Naďa\Data aplikací\Mozilla\Firefox\Profiles\bvtmvt57.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =380920&p="

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.265 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}]
IObit Toolbar - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll [2012-06-27 1207176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - IObit Toolbar - C:\Program Files\IObit Toolbar\IE\6.0\iobitToolbarIE.dll [2012-06-27 1207176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-06-27 1090440]
"IObit Malware Fighter"=C:\Program Files\IObit\IObit Malware Fighter\IMF.exe [2012-07-02 4473728]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-09-20 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-09-20 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-09-20 114688]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"MSIDLL"=msitav32.dll,RduGLSOed []
"Advanced SystemCare 5"=C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2012-05-28 288128]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-09-20 135168]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"c:\Záloha\Autocad 2004\crack\AutoCad_keygen.exe"="c:\Záloha\Autocad 2004\crack\AutoCad_keygen.exe:*:Enabled:AutoCad_keygen"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.scr - open - "c:\WINDOWS\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-07-16 21:53:38 ----D---- C:\Program Files\trend micro
2012-07-16 21:53:37 ----D---- C:\rsit
2012-07-16 21:53:11 ----D---- C:\StahovanĂ­
2012-07-16 20:56:03 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-07-16 20:56:03 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-07-16 20:45:33 ----RA---- C:\WINDOWS\system32\igfxres.dll
2012-07-16 20:37:04 ----D---- C:\WINDOWS\Prefetch
2012-07-16 20:28:58 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2012-07-16 20:26:26 ----A---- C:\WINDOWS\system32\irclass.dll
2012-07-16 20:26:25 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-07-16 20:26:08 ----RA---- C:\WINDOWS\SET35.tmp
2012-07-16 20:26:06 ----RA---- C:\WINDOWS\SET29.tmp
2012-07-16 20:26:04 ----RA---- C:\WINDOWS\SET26.tmp
2012-07-16 20:17:32 ----A---- C:\WINDOWS\UPGRADE.TXT
2012-07-16 20:04:24 ----D---- C:\Documents and Settings\Naďa\Data aplikací\wtxpcom
2012-07-16 19:57:43 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Malwarebytes
2012-07-16 19:56:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2012-07-16 19:56:15 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-07-16 19:56:15 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-07-16 19:46:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-07-16 19:41:14 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Search Settings
2012-07-16 19:41:05 ----D---- C:\Program Files\IObit Toolbar
2012-07-16 19:41:05 ----D---- C:\Program Files\Common Files\Spigot
2012-07-16 19:41:05 ----D---- C:\Program Files\Application Updater
2012-07-16 19:40:24 ----D---- C:\Documents and Settings\Naďa\Data aplikací\IObit
2012-07-16 19:40:22 ----D---- C:\Program Files\IObit
2012-07-16 19:25:55 ----D---- C:\Program Files\Common Files\Adobe
2012-07-16 19:25:55 ----D---- C:\Program Files\Adobe
2012-07-16 19:25:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-07-16 19:21:27 ----D---- C:\Program Files\CCleaner
2012-07-16 19:21:10 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe
2012-07-16 19:19:52 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Macromedia
2012-07-16 19:19:52 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Adobe
2012-07-16 19:19:33 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-07-16 19:17:27 ----D---- C:\Stahovaní
2012-07-16 19:17:07 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Mozilla
2012-07-16 19:17:02 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-07-16 19:17:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2012-07-16 19:16:59 ----D---- C:\Program Files\Mozilla Firefox
2012-07-16 19:03:05 ----D---- C:\Program Files\WinZip
2012-07-16 19:02:43 ----A---- C:\WINDOWS\iun6002.exe
2012-07-16 19:02:40 ----D---- C:\Program Files\Codec Pack - All In 1
2012-07-16 19:02:16 ----D---- C:\Program Files\WinRAR
2012-07-16 19:02:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\CyberLink
2012-07-16 19:02:01 ----D---- C:\Program Files\CyberLink
2012-07-16 19:00:27 ----HD---- C:\WINDOWS\ShellNew
2012-07-16 18:56:25 ----A---- C:\WINDOWS\ODBC.INI
2012-07-16 18:50:34 ----D---- C:\WINDOWS\RegisteredPackages
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-07-16 18:50:07 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-07-16 18:50:06 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-07-16 18:50:06 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MSVCR71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MSVCP71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\MFC71.dll
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\AVASTSS.scr
2012-07-16 18:50:03 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-07-16 18:50:01 ----D---- C:\Program Files\Alwil Software
2012-07-16 18:48:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Macrovision
2012-07-16 18:39:00 ----D---- C:\Program Files\Autodesk
2012-07-16 18:38:59 ----D---- C:\Program Files\Common Files\Macrovision Shared
2012-07-16 18:38:59 ----A---- C:\WINDOWS\system32\drivers\CDAC15BA.SYS
2012-07-16 18:38:58 ----A---- C:\WINDOWS\system32\drivers\CDAC11BA.EXE
2012-07-16 18:38:23 ----D---- C:\Program Files\AnswerWorks 4.0
2012-07-16 18:38:22 ----D---- C:\Program Files\Microsoft Office
2012-07-16 18:38:21 ----D---- C:\Program Files\Common Files\Designer
2012-07-16 18:37:46 ----D---- C:\Program Files\Common Files\Autodesk Shared
2012-07-16 18:37:46 ----D---- C:\Program Files\AutoCAD 2004
2012-07-16 18:37:46 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Autodesk
2012-07-16 18:37:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Autodesk
2012-07-16 18:34:30 ----A---- C:\WINDOWS\system32\msitav32.dll
2012-07-16 18:32:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
2012-07-16 18:32:10 ----D---- C:\Program Files\Common Files\ACD Systems
2012-07-16 18:32:10 ----D---- C:\Program Files\ACD Systems
2012-07-16 18:32:09 ----A---- C:\WINDOWS\system32\drivers\pfc.sys
2012-07-16 18:31:16 ----D---- C:\WINDOWS\Downloaded Installations
2012-07-16 18:29:31 ----D---- C:\Záloha
2012-07-16 18:29:05 ----SHD---- C:\RECYCLER
2012-07-16 18:28:10 ----D---- C:\Program Files\wincmd
2012-07-16 18:28:10 ----A---- C:\WINDOWS\wincmd.ini
2012-07-16 18:28:10 ----A---- C:\WINDOWS\UC.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\RAR.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\PKZIP.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\PKUNZIP.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\NOCLOSE.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\LHA.PIF
2012-07-16 18:28:10 ----A---- C:\WINDOWS\ARJ.PIF
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuTRK.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuTHA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuSVE.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuRUS.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPTG.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPTB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuPLK.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuNOR.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuNLD.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuKOR.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuJPN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuITA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCHT.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCHS.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuHUN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuHEB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFRC.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFRA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuFIN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuESP.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuENG.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuELL.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmudlg.exe
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuDEU.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuDAN.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuCSY.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuARB.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\ialmuARA.dll
2012-07-16 18:24:22 ----RA---- C:\WINDOWS\system32\iAlmCoIn_v4396.dll
2012-07-16 18:24:21 ----RA---- C:\WINDOWS\system32\igldev32.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\iglicd32.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\igfxext.exe
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\igfxexps.dll
2012-07-16 18:24:18 ----RA---- C:\WINDOWS\system32\ialmrem.dll
2012-07-16 18:24:16 ----RA---- C:\WINDOWS\system32\igfxpers.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxzoom.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxtray.exe
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxress.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxdo.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\igfxdev.dll
2012-07-16 18:24:15 ----RA---- C:\WINDOWS\system32\hkcmd.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxsrvc.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxsrvc.dll
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxpph.dll
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\igfxcfg.exe
2012-07-16 18:24:14 ----RA---- C:\WINDOWS\system32\hccutils.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmrnt5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdnt5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdev5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\ialmdd5.dll
2012-07-16 18:24:13 ----RA---- C:\WINDOWS\system32\drivers\ialmnt5.sys
2012-07-16 18:23:28 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-07-16 18:23:25 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\udaprop.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\drivers\cmuda.sys
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmuda.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmirmdrv.exe
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\cmirmdrv.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\Audio3D.dll
2012-07-16 18:23:10 ----RA---- C:\WINDOWS\system32\a3d.dll
2012-07-16 18:23:09 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-07-16 18:23:03 ----A---- C:\WINDOWS\CMISETUP.INI
2012-07-16 18:23:02 ----A---- C:\WINDOWS\CMCDPLAY.INI
2012-07-16 18:23:00 ----A---- C:\WINDOWS\Wininit.ini
2012-07-16 18:22:55 ----D---- C:\Program Files\C-Media 3D Audio
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CMIUninstall.exe
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2012-07-16 18:22:55 ----A---- C:\WINDOWS\CMIRmDriver.dll
2012-07-16 18:22:54 ----HD---- C:\Program Files\InstallShield Installation Information
2012-07-16 18:22:39 ----D---- C:\Program Files\Common Files\InstallShield
2012-07-16 18:22:09 ----A---- C:\WINDOWS\Ascd_tmp.ini
2012-07-16 18:22:08 ----A---- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2012-07-16 18:19:35 ----D---- C:\Documents and Settings\Naďa\Data aplikací\Identities
2012-07-16 18:19:33 ----HD---- C:\Program Files\Uninstall Information
2012-07-16 18:19:25 ----SD---- C:\Documents and Settings\Naďa\Data aplikací\Microsoft
2012-07-16 18:19:25 ----ASH---- C:\Documents and Settings\Naďa\Data aplikací\desktop.ini
2012-07-16 18:18:40 ----D---- C:\WINDOWS\SoftwareDistribution
2012-07-16 18:18:38 ----SD---- C:\WINDOWS\system32\Microsoft
2012-07-16 18:18:38 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-07-16 18:16:23 ----AS---- C:\WINDOWS\bootstat.dat
2012-07-16 18:13:59 ----D---- C:\WINDOWS\system32\xircom
2012-07-16 18:13:59 ----D---- C:\Program Files\xerox
2012-07-16 18:13:59 ----D---- C:\Program Files\microsoft frontpage
2012-07-16 18:13:42 ----RASH---- C:\MSDOS.SYS
2012-07-16 18:13:42 ----RASH---- C:\IO.SYS
2012-07-16 18:13:42 ----A---- C:\WINDOWS\control.ini
2012-07-16 18:13:42 ----A---- C:\CONFIG.SYS
2012-07-16 18:13:42 ----A---- C:\AUTOEXEC.BAT
2012-07-16 18:13:22 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-07-16 18:12:27 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-07-16 18:12:27 ----RD---- C:\WINDOWS\Offline Web Pages
2012-07-16 18:12:16 ----HD---- C:\Program Files\WindowsUpdate
2012-07-16 18:12:13 ----D---- C:\Program Files\Online Services
2012-07-16 18:11:57 ----D---- C:\WINDOWS\system32\DirectX
2012-07-16 18:11:38 ----A---- C:\WINDOWS\system32\atrace.dll
2012-07-16 18:11:36 ----A---- C:\WINDOWS\system32\desktop.ini
2012-07-16 18:11:36 ----A---- C:\WINDOWS\desktop.ini
2012-07-16 18:11:29 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-07-16 18:11:27 ----D---- C:\Program Files\Common Files\Services
2012-07-16 18:11:27 ----A---- C:\WINDOWS\system32\acctres.dll
2012-07-16 18:11:24 ----SD---- C:\WINDOWS\Tasks
2012-07-16 18:11:24 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-07-16 18:11:23 ----D---- C:\Program Files\Common Files\MSSoap
2012-07-16 18:11:20 ----D---- C:\WINDOWS\srchasst
2012-07-16 18:11:19 ----D---- C:\WINDOWS\system32\Macromed
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuweb.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wucltui.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2012-07-16 18:11:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wups.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2012-07-16 18:11:15 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2012-07-16 18:11:11 ----D---- C:\Program Files\Movie Maker
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-07-16 18:11:07 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\fltMc.exe
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\fltlib.dll
2012-07-16 18:11:04 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-07-16 18:11:03 ----D---- C:\WINDOWS\system32\Restore
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\srclient.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\ils.dll
2012-07-16 18:11:03 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\msconf.dll
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-07-16 18:11:02 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-07-16 18:10:59 ----D---- C:\Program Files\NetMeeting
2012-07-16 18:10:59 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-07-16 18:10:59 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-07-16 18:10:58 ----A---- C:\WINDOWS\system32\inetres.dll
2012-07-16 18:10:58 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-07-16 18:10:57 ----D---- C:\Program Files\Outlook Express
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-07-16 18:10:57 ----A---- C:\WINDOWS\system32\mstask.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\isign32.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-07-16 18:10:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-07-16 18:10:51 ----D---- C:\Program Files\Common Files\System
2012-07-16 18:10:46 ----D---- C:\Program Files\Internet Explorer
2012-07-16 18:10:19 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-07-16 18:10:12 ----D---- C:\Program Files\ComPlus Applications
2012-07-16 18:10:10 ----A---- C:\WINDOWS\vbaddin.ini
2012-07-16 18:10:10 ----A---- C:\WINDOWS\vb.ini
2012-07-16 18:10:06 ----D---- C:\WINDOWS\Registration
2012-07-16 18:10:01 ----D---- C:\Program Files\Windows Media Player
2012-07-16 18:09:56 ----D---- C:\Program Files\Messenger
2012-07-16 18:09:52 ----D---- C:\Program Files\MSN Gaming Zone
2012-07-16 18:09:52 ----A---- C:\WINDOWS\system32\write.exe
2012-07-16 18:09:43 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-07-16 18:09:43 ----A---- C:\WINDOWS\system32\hticons.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\winchat.exe
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avwav.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-07-16 18:09:42 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\sol.exe
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\charmap.exe
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\getuname.dll
2012-07-16 18:09:35 ----A---- C:\WINDOWS\system32\calc.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\winmine.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\reset.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-07-16 18:09:34 ----A---- C:\WINDOWS\system32\freecell.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tskill.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\tscon.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\shadow.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\regini.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\msg.exe
2012-07-16 18:09:33 ----A---- C:\WINDOWS\system32\logoff.exe
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-07-16 18:09:32 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\stclient.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-07-16 18:09:31 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-07-16 18:09:26 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-07-16 18:09:25 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-07-16 18:09:24 ----D---- C:\Program Files\Windows NT
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-07-16 18:09:24 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\spider.exe
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-07-16 18:09:23 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-07-16 18:09:22 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-07-16 18:09:21 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-07-16 18:09:20 ----D---- C:\WINDOWS\system32\MsDtc
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-07-16 18:09:20 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-07-16 18:09:19 ----D---- C:\WINDOWS\system32\Com
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-07-16 18:09:19 ----A---- C:\WINDOWS\system32\colbact.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\comuid.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-07-16 18:09:18 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-07-16 18:09:17 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-07-16 18:09:11 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-07-16 18:09:11 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-07-16 18:09:08 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-07-16 18:09:08 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-07-16 18:09:05 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2012-07-16 18:09:04 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2012-07-16 22:24:24 ----D---- C:\WINDOWS\system
2012-07-16 22:24:23 ----D---- C:\WINDOWS\system32\Setup
2012-07-16 22:24:14 ----D---- C:\WINDOWS\system32\usmt
2012-07-16 22:24:03 ----D---- C:\WINDOWS\AppPatch
2012-07-16 22:24:02 ----D---- C:\WINDOWS\ehome
2012-07-16 22:24:01 ----D---- C:\WINDOWS\ime
2012-07-16 22:24:00 ----RSD---- C:\WINDOWS\Fonts
2012-07-16 22:23:59 ----D---- C:\WINDOWS\Media
2012-07-16 22:23:49 ----D---- C:\WINDOWS\PeerNet
2012-07-16 22:23:39 ----D---- C:\WINDOWS\system32\npp
2012-07-16 22:23:32 ----D---- C:\WINDOWS\msagent
2012-07-16 22:21:43 ----D---- C:\WINDOWS\system32\1029
2012-07-16 22:21:36 ----D---- C:\WINDOWS\twain_32
2012-07-16 22:21:24 ----D---- C:\WINDOWS\system32\icsxml
2012-07-16 22:20:57 ----D---- C:\WINDOWS\system32\1033
2012-07-16 22:19:57 ----D---- C:\WINDOWS\Driver Cache
2012-07-16 22:19:56 ----D---- C:\WINDOWS\WinSxS
2012-07-16 21:53:38 ----RD---- C:\Program Files
2012-07-16 21:51:35 ----D---- C:\WINDOWS
2012-07-16 21:51:33 ----D---- C:\WINDOWS\system32\CatRoot2
2012-07-16 21:08:54 ----D---- C:\WINDOWS\Debug
2012-07-16 20:58:20 ----D---- C:\WINDOWS\Temp
2012-07-16 20:56:03 ----D---- C:\WINDOWS\system32\drivers
2012-07-16 20:55:18 ----D---- C:\WINDOWS\system32
2012-07-16 20:49:17 ----D---- C:\WINDOWS\security
2012-07-16 20:46:07 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-07-16 20:45:50 ----HD---- C:\WINDOWS\inf
2012-07-16 20:37:10 ----SHD---- C:\System Volume Information
2012-07-16 20:36:42 ----D---- C:\WINDOWS\system32\config
2012-07-16 20:35:36 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-07-16 20:33:08 ----D---- C:\WINDOWS\Help
2012-07-16 20:32:36 ----A---- C:\WINDOWS\ODBCINST.INI
2012-07-16 20:32:21 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-07-16 20:32:18 ----D---- C:\WINDOWS\system32\ias
2012-07-16 20:31:56 ----RD---- C:\WINDOWS\Web
2012-07-16 20:31:41 ----A---- C:\WINDOWS\win.ini
2012-07-16 20:31:38 ----D---- C:\WINDOWS\system32\oobe
2012-07-16 20:30:29 ----D---- C:\WINDOWS\system32\wbem
2012-07-16 20:29:57 ----SH---- C:\boot.ini
2012-07-16 20:26:30 ----A---- C:\WINDOWS\system.ini
2012-07-16 20:26:17 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2012-07-16 20:26:11 ----D---- C:\WINDOWS\system32\CatRoot
2012-07-16 19:41:13 ----SHD---- C:\WINDOWS\Installer
2012-07-16 19:41:05 ----D---- C:\Program Files\Common Files
2012-07-16 19:00:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-07-16 19:00:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-07-16 18:19:24 ----D---- C:\Documents and Settings
2012-07-16 18:13:59 ----D---- C:\WINDOWS\repair
2012-07-16 18:11:07 ----D---- C:\WINDOWS\pchealth
2012-07-16 18:09:49 ----D---- C:\WINDOWS\Cursors
2012-07-16 17:59:50 ----D---- C:\WINDOWS\system32\spool

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 CdaC15BA;CdaC15BA; \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2005-05-12 1332544]
R3 FileMonitor;FileMonitor; \??\C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys []
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-09-20 1302332]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2012-07-16 9856]
R3 RegFilter;RegFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\regfilter.sys []
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 UrlFilter;UrlFilter; \??\C:\Program Files\IObit\IObit Malware Fighter\drivers\wxp_x86\UrlFilter.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2012-05-26 913792]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2012-06-27 791488]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 C-DillaCdaC11BA;C-DillaCdaC11BA; C:\WINDOWS\system32\drivers\CDAC11BA.EXE [2012-07-16 54784]
R2 IMFservice;IMF Service; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [2012-01-09 821592]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-16 250056]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-15 113120]
S3 UMWdf;Sada ovladačů pro uživatelský režim systému Windows; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]

-----------------EOF-----------------

Uživatelský avatar
cernohous13
VIP in memoriam
VIP in memoriam
Příspěvky: 8721
Registrován: 09 pro 2006 06:19
Bydliště: Jablonec nad Nisou
Kontaktovat uživatele:

Re: Trojan a rundll32.exe

#2 Příspěvek od cernohous13 »

Zdravím,

po našich nedobrých zkušenostech doporučuji odinstalovat produkty od IObit - umí slušně nabourat systém.
:arrow: Použij REVO
Stáhni a nainstaluj
http://www.stahuj.centrum.cz/utility_a_ ... staller/?g
Odinstaluj programy:
C:\Program Files\IObit\IObit Malware Fighter
C:\Program Files\IObit\Advanced SystemCare 5
C:\Program Files\Application Updater
označ vše co najde a dej smazat (postupně přes "Další").
:arrow: Doinstaluj SP3 - http://www.update.microsoft.com/windows ... aspx?ln=cs (nebo máš snad problém s legálností systému?)

:arrow: Máš tam MBAM - aktualizace a úplná kontrola (bez mazání) - log mi dej

:arrow: až provedeš navrhované úpravy, tak nový RSIT
Doporučení:
V průběhu léčení prováděj nové instalace a odinstalace jen na můj pokyn.
Důkladně prostuduj a proveď celou operaci podle mé odpovědi.
V případě nejasností se zeptej - vysvětlím Obrázek

-------------------------------------------------------------------------------------------------
> Podpora fóra <

Odpovědět