Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Keylogger v PC, jak zjistit a odstranit?

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Keylogger v PC, jak zjistit a odstranit?

#1 Příspěvek od kala »

Obracim se tu o radu.
Mam podezreni, ze do meho PC byl nainstalovan nejaky Keylogger. Nejspis se to stalo behem instalace systemu v nedavne dobe (Windows XP) nebo nekdy potom.
Kazdopadne se chci zeptat jakym zpusobem muzu zjistit jestli tam ten Keylogger je nebo neni a jak ho 100% odinstalovat? Kdyz chci stahnout Antikeylogger, tak mi vzdycky spadne kazdy prohlizec a kdyz jsem si jej nechal stahnout jinde, tak zase nejde spustit instalace toho programu, protoze instalacka okamzite spadne take. Je i tohle jasny dukaz o keyloggeru v PC? Je mozne aby mi nekdo vnucoval to, ze jsem si ho tam stahl sam nejakym programem ktery mel u sebe hack nebo crack? Jsou to programy 100x odzkousene z minulosti a tenhle problem nikdy nebyl. Nebo je jasne, ze ho tam musel dat nekdo kdo mel pristup k PC?
Ten clovek mi doporucuje at stahnu Commodo, ze pokud tam neco je ze to najde a odinstaluje. Je to mozne? Zkousel jsem scan Spybotem a nic jakoze zavadneho nenasel. Presto jsou ty problemy s Antiloggerem a u jedne osoby se v PC ojevily slozka na FTP prave s timto nazvem Keyloggeru.

Snad jsem to napsal srozumitelne. Budu vrlmi rad za kazdou odpoved a radu co s tim. Dekuji!

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#2 Příspěvek od JaRon »

budem strucny - vloz log RSIT a pozrieme na to :James008:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#3 Příspěvek od kala »

Díky, ale nejsem zbehly v PC zkratkach a programech. potrebuju to vice polopaticky. Jak mam to co potrebujete ziskat? Diky.

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#4 Příspěvek od JaRon »

klikni na fialove RSIT v mojom podpise - tam je navod :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#5 Příspěvek od kala »

Bezva, diky. Provedu to a poslu to asi radeji do soukrome posty? Nebo je bezpecne ho zverejnit tady?

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#6 Příspěvek od JaRon »

kludne ho vloz do fora ako tisice ludi pred Tebou :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#7 Příspěvek od kala »

Dobře.

Kód: Vybrat vše

Logfile of random's system information tool 1.09 (written by random/random)
Run by Lada at 2013-04-05 11:16:48
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 819 GB (86%) free of 954 GB
Total RAM: 3071 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:17:00, on 5.4.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Lada\Plocha\Download\RSIT.exe
C:\Program Files\trend micro\Lada.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://get.adobe.com/flashplayer/completion/aih/?exitcode=0&type=install
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 6737 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job
C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Lada\Data aplikací\Mozilla\Firefox\Profiles\ah7fsb89.default

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.6.602.180 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nitropdf.com/NitroPDF]
"Description"=NitroPDF Web Browser Plugin
"Path"=C:\Program Files\Nitro\Reader 3\npnitromozilla.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll [2012-11-13 3214392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-26 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-26 170912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-08-25 33660928]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-03-28 345312]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-07-04 98304]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"SDTray"=C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [2012-11-13 3825176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2012-07-04 192512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SDWinLogon]
SDWinLogon.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
"C:\Program Files\PANDORA.TV\PanService\PanProcess.exe"="C:\Program Files\PANDORA.TV\PanService\PanProcess.exe:*:Enabled:PanProcess"
"C:\Program Files\PANDORA.TV\PanService\PandoraService.exe"="C:\Program Files\PANDORA.TV\PanService\PandoraService.exe:*:Enabled:PandoraService"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll

======List of files/folders created in the last 1 month======

2013-04-05 11:16:48 ----D---- C:\rsit
2013-04-05 11:16:48 ----D---- C:\Program Files\trend micro
2013-04-04 18:21:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-04-04 18:21:26 ----A---- C:\WINDOWS\system32\sdnclean.exe
2013-04-04 18:21:20 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2013-04-04 17:10:57 ----HD---- C:\WINDOWS\PIF
2013-04-04 17:10:25 ----A---- C:\WINDOWS\system32\zip32.dll
2013-04-04 17:10:24 ----A---- C:\WINDOWS\system32\asmwmenu.dll
2013-04-04 17:10:22 ----A---- C:\WINDOWS\system32\Zipit.dll
2013-04-04 17:10:22 ----A---- C:\WINDOWS\system32\Zipdll.dll
2013-04-04 17:10:17 ----D---- C:\Program Files\AsmwSoft
2013-04-04 13:38:27 ----D---- C:\Program Files\Mozilla Firefox
2013-03-28 11:12:19 ----A---- C:\WINDOWS\ntbtlog.txt
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\Lada\Data aplikací\Nitro
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\Lada\Data aplikací\FileOpen
2013-03-26 16:41:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\FileOpen
2013-03-26 14:35:14 ----D---- C:\WINDOWS\Sun
2013-03-26 14:32:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2013-03-26 14:32:26 ----D---- C:\Program Files\Common Files\Java
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\javaws.exe
2013-03-26 14:32:07 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\javaw.exe
2013-03-26 14:32:02 ----A---- C:\WINDOWS\system32\java.exe
2013-03-26 14:31:43 ----D---- C:\Program Files\Java
2013-03-26 14:30:52 ----D---- C:\Documents and Settings\Lada\Data aplikací\Sun
2013-03-25 23:27:03 ----RD---- C:\Dvd3
2013-03-25 23:26:59 ----RD---- C:\DVD4
2013-03-25 18:24:31 ----D---- C:\Program Files\GetFLV
2013-03-25 17:43:03 ----D---- C:\HD exporty video projektů a DVD
2013-03-21 13:10:06 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2013-03-20 11:49:05 ----A---- C:\WINDOWS\system32\unrar.dll
2013-03-20 11:49:01 ----D---- C:\Program Files\K-Lite Codec Pack
2013-03-19 22:38:50 ----D---- C:\Documents and Settings\Lada\Data aplikací\Skype
2013-03-19 22:38:36 ----D---- C:\Program Files\Common Files\Skype
2013-03-19 22:38:35 ----RD---- C:\Program Files\Skype
2013-03-19 22:38:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2013-03-19 21:19:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2013-03-19 21:08:11 ----D---- C:\Program Files\MSXML 4.0
2013-03-19 16:12:41 ----D---- C:\Program Files\PANDORA.TV
2013-03-19 15:10:06 ----D---- C:\Program Files\DVDVideoSoft
2013-03-19 15:10:06 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2013-03-19 15:10:06 ----D---- C:\Documents and Settings\Lada\Data aplikací\DVDVideoSoft
2013-03-19 15:08:05 ----D---- C:\Program Files\DsNET Corp
2013-03-19 13:24:58 ----A---- C:\WINDOWS\unvise32.exe
2013-03-19 13:24:55 ----D---- C:\Program Files\LooksBuilderSE
2013-03-19 12:36:57 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2013-03-19 12:36:51 ----D---- C:\Program Files\Common Files\Pinnacle
2013-03-19 12:36:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2013-03-19 12:31:30 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2013-03-19 12:31:25 ----D---- C:\Program Files\Common Files\Yahoo!
2013-03-19 12:31:24 ----D---- C:\Program Files\Pinnacle
2013-03-19 12:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2013-03-19 12:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2013-03-19 12:12:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2013-03-19 12:00:44 ----N---- C:\WINDOWS\system32\spmsg2.dll
2013-03-19 12:00:39 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2013-03-19 11:57:58 ----D---- C:\WINDOWS\system32\XPSViewer
2013-03-19 11:57:54 ----D---- C:\Program Files\MSBuild
2013-03-19 11:57:47 ----D---- C:\Program Files\Reference Assemblies
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-03-19 11:56:59 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-03-19 11:56:58 ----D---- C:\0607433db81cfbbeb5f5b762edf26d
2013-03-19 11:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2013-03-19 11:29:41 ----D---- C:\Documents and Settings\Lada\Data aplikací\Nitro PDF
2013-03-19 11:29:10 ----D---- C:\Documents and Settings\Lada\Data aplikací\WinRAR
2013-03-19 11:29:04 ----D---- C:\Program Files\WinRAR
2013-03-19 11:12:54 ----D---- C:\Program Files\Common Files\Adobe
2013-03-19 11:12:54 ----D---- C:\Program Files\Adobe
2013-03-19 11:11:36 ----A---- C:\WINDOWS\IsUn0405.exe
2013-03-18 23:28:05 ----D---- C:\Documents and Settings\Lada\Data aplikací\vlc
2013-03-18 22:59:32 ----D---- C:\Documents and Settings\Lada\Data aplikací\Adobe
2013-03-18 22:59:03 ----D---- C:\Program Files\VideoLAN
2013-03-18 22:56:24 ----D---- C:\Documents and Settings\Lada\Data aplikací\Mozilla
2013-03-18 22:56:17 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-03-18 22:56:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2013-03-18 22:43:52 ----D---- C:\Documents and Settings\Lada\Data aplikací\ATI
2013-03-18 22:43:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2013-03-18 22:38:10 ----A---- C:\WINDOWS\system32\drivers\AtihdXP3.sys
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativvamv.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativva6x.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativva5x.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atitvo32.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atioglxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIODE.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atimpc32.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atikvmag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atibtmon.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati3duag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2013-03-18 22:37:49 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2013-03-18 22:29:26 ----D---- C:\Program Files\ATI
2013-03-18 22:28:27 ----D---- C:\AMD
2013-03-18 22:13:24 ----D---- C:\Program Files\DIFX
2013-03-18 21:57:15 ----D---- C:\Program Files\ATI Technologies
2013-03-18 21:56:33 ----D---- C:\ATI
2013-03-18 21:36:45 ----D---- C:\Documents and Settings\Lada\Data aplikací\Macromedia
2013-03-18 19:58:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2013-03-18 17:38:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-03-18 17:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-03-18 17:38:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-03-18 17:36:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2799494$
2013-03-18 17:36:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2778344$
2013-03-18 17:32:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-03-18 17:32:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-03-18 17:32:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-03-18 17:32:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-03-18 17:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-03-18 17:32:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-03-18 17:32:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2013-03-18 17:31:57 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-03-18 17:31:41 ----D---- C:\Documents and Settings\Lada\Data aplikací\Avira
2013-03-18 17:20:56 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2013-03-18 17:20:47 ----A---- C:\WINDOWS\system32\MSSTDFMT.DLL
2013-03-18 17:20:46 ----A---- C:\WINDOWS\system32\IJL_11.DLL
2013-03-18 17:14:07 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2013-03-18 17:14:05 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2013-03-18 17:14:03 ----D---- C:\Program Files\Avira
2013-03-18 17:14:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2013-03-18 17:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-03-18 17:05:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-03-18 17:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-03-18 17:05:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-03-18 17:05:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2736233$
2013-03-18 17:05:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-03-18 17:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-03-18 17:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-03-18 17:04:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-03-18 17:04:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-03-18 17:04:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-03-18 17:04:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-03-18 17:04:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-03-18 17:01:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-03-18 17:00:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-03-18 16:59:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2013-03-18 16:58:55 ----D---- C:\WINDOWS\ie8updates
2013-03-18 16:58:30 ----D---- C:\WINDOWS\WBEM
2013-03-18 16:56:25 ----HDC---- C:\WINDOWS\ie8
2013-03-18 16:54:04 ----A---- C:\WINDOWS\system32\MRT.exe
2013-03-18 16:50:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2013-03-18 16:50:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-03-18 16:50:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-03-18 16:50:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-03-18 16:50:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-03-18 16:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-03-18 16:49:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-03-18 16:48:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-03-18 16:48:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-03-18 16:48:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-03-18 16:48:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-03-18 16:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-03-18 16:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-03-18 16:48:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-03-18 16:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-03-18 16:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-03-18 16:48:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-03-18 16:48:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-03-18 16:48:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-03-18 16:48:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2013-03-18 16:48:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-03-18 16:48:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-03-18 16:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-03-18 16:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2013-03-18 16:47:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-03-18 16:47:45 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2013-03-18 16:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-03-18 16:47:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-03-18 16:47:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-03-18 16:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-03-18 16:47:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2013-03-18 16:47:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2013-03-18 16:47:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2013-03-18 16:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-03-18 16:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2013-03-18 16:47:01 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2013-03-18 16:46:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2013-03-18 16:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-03-18 16:46:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2013-03-18 16:46:45 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2013-03-18 16:46:42 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2013-03-18 16:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2013-03-18 16:46:35 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2013-03-18 16:46:32 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2013-03-18 16:46:29 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2013-03-18 16:46:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2013-03-18 16:46:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-03-18 16:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-03-18 16:46:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-03-18 16:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-03-18 16:46:09 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-03-18 16:46:05 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-03-18 16:46:02 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2013-03-18 16:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-03-18 16:45:55 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-03-18 16:45:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-03-18 16:45:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-03-18 16:45:43 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-03-18 16:45:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2013-03-18 16:45:33 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-03-18 16:45:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-03-18 16:45:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2013-03-18 16:45:23 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-03-18 16:45:18 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-03-18 16:45:15 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-03-18 16:45:11 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-03-18 16:45:08 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-03-18 16:45:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-03-18 16:45:02 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-03-18 16:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-03-18 16:44:55 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-03-18 16:44:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-03-18 16:44:48 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-03-18 16:44:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-03-18 16:44:42 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2013-03-18 16:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-03-18 16:44:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-03-18 16:44:29 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-03-18 16:44:25 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-03-18 16:44:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-03-18 16:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-03-18 16:44:05 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-03-18 16:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-03-18 16:43:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-03-18 16:43:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-03-18 16:43:51 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-03-18 16:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-03-18 16:43:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2013-03-18 16:43:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-03-18 16:43:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-03-18 16:37:38 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-03-18 16:29:47 ----N---- C:\WINDOWS\system32\browserchoice.exe
2013-03-18 16:23:52 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2013-03-18 16:22:54 ----A---- C:\WINDOWS\system32\h323log.txt
2013-03-18 16:21:36 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-03-18 16:20:21 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-03-18 16:19:04 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2013-03-18 16:18:37 ----A---- C:\WINDOWS\system32\usbui.dll
2013-03-18 16:18:26 ----RSD---- C:\WINDOWS\assembly
2013-03-18 16:18:08 ----D---- C:\WINDOWS\system32\en-US
2013-03-18 16:18:06 ----D---- C:\Program Files\Microsoft.NET
2013-03-18 16:18:05 ----D---- C:\WINDOWS\Microsoft.NET
2013-03-18 16:16:57 ----A---- C:\WINDOWS\imsins.BAK
2013-03-18 16:16:55 ----SHD---- C:\WINDOWS\Installer
2013-03-18 16:16:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-03-18 16:16:53 ----D---- C:\Program Files\Common Files\ODBC
2013-03-18 16:16:53 ----A---- C:\WINDOWS\ODBCINST.INI
2013-03-18 16:16:50 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-03-18 16:16:49 ----RD---- C:\Program Files
2013-03-18 16:16:49 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-03-18 16:16:49 ----D---- C:\Program Files\Common Files
2013-03-18 16:16:45 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-03-18 16:16:44 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-03-18 16:16:44 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-03-18 16:16:42 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-03-18 16:16:40 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-03-18 16:16:39 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-03-18 16:16:38 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-03-18 16:16:38 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-03-18 16:16:37 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdsl.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdro.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdpl.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdhu.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\kbdcr.dll
2013-03-18 16:16:34 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2013-03-18 16:16:33 ----A---- C:\WINDOWS\system32\kbdycl.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\irclass.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-03-18 16:16:32 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-03-18 16:16:31 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-03-18 16:16:31 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-03-18 16:16:29 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-03-18 16:16:29 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-03-18 16:16:28 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-03-18 16:16:28 ----A---- C:\WINDOWS\system32\batt.dll
2013-03-18 16:16:28 ----A---- C:\WINDOWS\NOTEPAD.EXE
2013-03-18 16:16:27 ----A---- C:\WINDOWS\system32\storprop.dll
2013-03-18 16:16:12 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-03-18 16:16:09 ----RA---- C:\WINDOWS\SET8.tmp
2013-03-18 16:16:05 ----RA---- C:\WINDOWS\SET4.tmp
2013-03-18 16:16:02 ----RA---- C:\WINDOWS\SET3.tmp
2013-03-18 16:15:58 ----D---- C:\WINDOWS\system32\CatRoot2
2013-03-18 16:15:58 ----D---- C:\WINDOWS\system32\CatRoot
2013-03-18 16:15:51 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-03-18 16:15:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2013-03-18 16:15:30 ----D---- C:\WINDOWS\system32\PreInstall
2013-03-18 16:15:29 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-03-18 16:15:28 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2013-03-18 16:15:28 ----HD---- C:\WINDOWS\$hf_mig$
2013-03-18 16:15:27 ----A---- C:\WINDOWS\setuplog.txt
2013-03-18 16:15:25 ----SHD---- C:\System Volume Information
2013-03-18 16:15:25 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-03-18 16:15:25 ----D---- C:\Documents and Settings
2013-03-18 16:15:24 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-03-18 16:14:47 ----SH---- C:\boot.ini
2013-03-18 16:13:02 ----A---- C:\WINDOWS\system32\wups2.dll
2013-03-18 16:13:01 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-03-18 16:12:02 ----SHD---- C:\RECYCLER
2013-03-18 16:10:50 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2013-03-18 16:10:48 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2013-03-18 16:10:44 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2013-03-18 16:10:42 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2013-03-18 16:10:37 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2013-03-18 16:10:35 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2013-03-18 16:10:33 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2013-03-18 16:10:31 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2013-03-18 16:10:28 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2013-03-18 16:10:26 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2013-03-18 16:10:22 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2013-03-18 16:10:18 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-03-18 16:10:18 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2013-03-18 16:10:17 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2013-03-18 16:10:02 ----N---- C:\WINDOWS\system32\difxapi.dll
2013-03-18 16:10:01 ----D---- C:\Program Files\VIA
2013-03-18 16:09:57 ----D---- C:\Program Files\Common Files\InstallShield
2013-03-18 16:09:29 ----A---- C:\WINDOWS\system32\nitrolocalui2.dll
2013-03-18 16:09:29 ----A---- C:\WINDOWS\system32\nitrolocalmon2.dll
2013-03-18 16:09:22 ----D---- C:\Program Files\Nitro
2013-03-18 16:09:22 ----D---- C:\Program Files\Common Files\Nitro
2013-03-18 16:09:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nitro
2013-03-18 16:09:01 ----D---- C:\Documents and Settings\Lada\Data aplikací\Downloaded Installations
2013-03-18 16:07:52 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-03-18 16:07:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-03-18 16:07:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-03-18 16:07:23 ----RSD---- C:\WINDOWS\Fonts
2013-03-18 16:07:23 ----RD---- C:\WINDOWS\Web
2013-03-18 16:07:23 ----HD---- C:\WINDOWS\inf
2013-03-18 16:07:23 ----D---- C:\WINDOWS\WinSxS
2013-03-18 16:07:23 ----D---- C:\WINDOWS\twain_32
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Temp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\wins
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\wbem
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\usmt
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\spool
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ShellExt
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\Setup
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ras
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\oobe
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\npp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\mui
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\inetsrv
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\IME
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\icsxml
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\ias
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\export
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers\etc
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\drivers
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\dhcp
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\cs-cz
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\cs
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\config
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\3com_dmi
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\3076
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\2052
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1054
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1042
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1041
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1037
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1033
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1031
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1029
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1028
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32\1025
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system32
2013-03-18 16:07:23 ----D---- C:\WINDOWS\system
2013-03-18 16:07:23 ----D---- C:\WINDOWS\security
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Resources
2013-03-18 16:07:23 ----D---- C:\WINDOWS\repair
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Provisioning
2013-03-18 16:07:23 ----D---- C:\WINDOWS\pchealth
2013-03-18 16:07:23 ----D---- C:\WINDOWS\PeerNet
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Network Diagnostic
2013-03-18 16:07:23 ----D---- C:\WINDOWS\mui
2013-03-18 16:07:23 ----D---- C:\WINDOWS\msapps
2013-03-18 16:07:23 ----D---- C:\WINDOWS\msagent
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Media
2013-03-18 16:07:23 ----D---- C:\WINDOWS\L2Schemas
2013-03-18 16:07:23 ----D---- C:\WINDOWS\java
2013-03-18 16:07:23 ----D---- C:\WINDOWS\ime
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Help
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Driver Cache
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Debug
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Cursors
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Connection Wizard
2013-03-18 16:07:23 ----D---- C:\WINDOWS\Config
2013-03-18 16:07:23 ----D---- C:\WINDOWS\AppPatch
2013-03-18 16:07:23 ----D---- C:\WINDOWS\addins
2013-03-18 16:07:23 ----D---- C:\WINDOWS
2013-03-18 16:07:23 ----ASH---- C:\pagefile.sys
2013-03-18 16:04:36 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-03-18 16:04:34 ----DC---- C:\WINDOWS\system32\DRVSTORE
2013-03-18 16:04:34 ----A---- C:\WINDOWS\system32\CSVer.dll
2013-03-18 16:04:33 ----D---- C:\Program Files\Intel
2013-03-18 16:04:23 ----D---- C:\Intel
2013-03-18 16:03:35 ----A---- C:\WINDOWS\system32\wpa.bak
2013-03-18 16:02:34 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2013-03-18 16:02:34 ----A---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2013-03-18 16:02:33 ----HD---- C:\Program Files\InstallShield Installation Information
2013-03-18 16:02:33 ----D---- C:\WINDOWS\OPTIONS
2013-03-18 16:02:33 ----D---- C:\Program Files\Realtek
2013-03-18 16:02:23 ----D---- C:\Documents and Settings\Lada\Data aplikací\InstallShield
2013-03-18 15:59:42 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2013-03-18 15:41:05 ----D---- C:\Documents and Settings\Lada\Data aplikací\Identities
2013-03-18 15:41:03 ----HD---- C:\Program Files\Uninstall Information
2013-03-18 15:40:57 ----SD---- C:\Documents and Settings\Lada\Data aplikací\Microsoft
2013-03-18 15:40:57 ----ASH---- C:\Documents and Settings\Lada\Data aplikací\desktop.ini
2013-03-18 15:39:55 ----D---- C:\WINDOWS\SoftwareDistribution
2013-03-18 15:39:54 ----D---- C:\WINDOWS\Prefetch
2013-03-18 15:39:53 ----SD---- C:\WINDOWS\system32\Microsoft
2013-03-18 15:39:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-03-18 15:35:58 ----AS---- C:\WINDOWS\bootstat.dat
2013-03-18 15:33:46 ----D---- C:\WINDOWS\system32\xircom
2013-03-18 15:33:46 ----D---- C:\Program Files\xerox
2013-03-18 15:33:46 ----D---- C:\Program Files\microsoft frontpage
2013-03-18 15:33:29 ----RASH---- C:\MSDOS.SYS
2013-03-18 15:33:29 ----RASH---- C:\IO.SYS
2013-03-18 15:33:29 ----A---- C:\WINDOWS\control.ini
2013-03-18 15:33:29 ----A---- C:\CONFIG.SYS
2013-03-18 15:33:29 ----A---- C:\AUTOEXEC.BAT
2013-03-18 15:33:16 ----A---- C:\WINDOWS\OEWABLog.txt
2013-03-18 15:33:10 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-03-18 15:31:59 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-03-18 15:31:59 ----RD---- C:\WINDOWS\Offline Web Pages
2013-03-18 15:31:43 ----HD---- C:\Program Files\WindowsUpdate
2013-03-18 15:31:36 ----D---- C:\Program Files\Online Services
2013-03-18 15:31:13 ----D---- C:\WINDOWS\system32\DirectX
2013-03-18 15:31:06 ----A---- C:\WINDOWS\system32\atrace.dll
2013-03-18 15:31:03 ----A---- C:\WINDOWS\system32\desktop.ini
2013-03-18 15:31:03 ----A---- C:\WINDOWS\desktop.ini
2013-03-18 15:30:55 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-03-18 15:30:54 ----A---- C:\WINDOWS\system32\acctres.dll
2013-03-18 15:30:53 ----D---- C:\Program Files\Common Files\Services
2013-03-18 15:30:50 ----SD---- C:\WINDOWS\Tasks
2013-03-18 15:30:50 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-03-18 15:30:49 ----D---- C:\Program Files\Common Files\MSSoap
2013-03-18 15:30:44 ----D---- C:\WINDOWS\srchasst
2013-03-18 15:30:43 ----D---- C:\WINDOWS\system32\Macromed
2013-03-18 15:30:40 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-03-18 15:30:40 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wups.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-03-18 15:30:39 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-03-18 15:30:38 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-03-18 15:30:33 ----D---- C:\Program Files\Movie Maker
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-03-18 15:30:12 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-03-18 15:30:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-03-18 15:30:07 ----D---- C:\WINDOWS\system32\Restore
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-03-18 15:30:07 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\srclient.dll
2013-03-18 15:30:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\msconf.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-03-18 15:30:05 ----A---- C:\WINDOWS\system32\ils.dll
2013-03-18 15:30:02 ----D---- C:\Program Files\NetMeeting
2013-03-18 15:30:02 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-03-18 15:30:01 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-03-18 15:30:00 ----A---- C:\WINDOWS\system32\inetres.dll
2013-03-18 15:30:00 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-03-18 15:29:58 ----D---- C:\Program Files\Outlook Express
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\mstask.dll
2013-03-18 15:29:57 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\isign32.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-03-18 15:29:56 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-03-18 15:29:49 ----D---- C:\Program Files\Common Files\System
2013-03-18 15:29:48 ----D---- C:\Program Files\Internet Explorer
2013-03-18 15:29:45 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-03-18 15:29:25 ----D---- C:\Program Files\ComPlus Applications
2013-03-18 15:29:21 ----A---- C:\WINDOWS\vbaddin.ini
2013-03-18 15:29:21 ----A---- C:\WINDOWS\vb.ini
2013-03-18 15:29:13 ----D---- C:\WINDOWS\Registration
2013-03-18 15:28:28 ----D---- C:\Program Files\Windows Media Player
2013-03-18 15:28:18 ----D---- C:\Program Files\Messenger
2013-03-18 15:28:14 ----D---- C:\Program Files\MSN Gaming Zone
2013-03-18 15:28:14 ----A---- C:\WINDOWS\system32\write.exe
2013-03-18 15:28:03 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-03-18 15:28:03 ----A---- C:\WINDOWS\system32\hticons.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avwav.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-03-18 15:28:02 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-03-18 15:28:01 ----A---- C:\WINDOWS\system32\winchat.exe
2013-03-18 15:27:54 ----A---- C:\WINDOWS\system32\getuname.dll
2013-03-18 15:27:53 ----A---- C:\WINDOWS\system32\charmap.exe
2013-03-18 15:27:53 ----A---- C:\WINDOWS\system32\calc.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\winmine.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\sol.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-03-18 15:27:52 ----A---- C:\WINDOWS\system32\freecell.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tskill.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\tscon.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\shadow.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\reset.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\regini.exe
2013-03-18 15:27:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\msg.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\logoff.exe
2013-03-18 15:27:50 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-03-18 15:27:44 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-03-18 15:27:43 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-03-18 15:27:42 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-03-18 15:27:41 ----D---- C:\Program Files\Windows NT
2013-03-18 15:27:41 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-03-18 15:27:41 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-03-18 15:27:40 ----A---- C:\WINDOWS\system32\spider.exe
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\tsgqec.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-03-18 15:27:39 ----A---- C:\WINDOWS\system32\aaclient.dll
2013-03-18 15:27:38 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-03-18 15:27:38 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-03-18 15:27:37 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-03-18 15:27:36 ----D---- C:\WINDOWS\system32\MsDtc
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-03-18 15:27:36 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-03-18 15:27:35 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-03-18 15:27:34 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-03-18 15:27:33 ----D---- C:\WINDOWS\system32\Com
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\stclient.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-03-18 15:27:33 ----A---- C:\WINDOWS\system32\colbact.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-03-18 15:27:32 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comuid.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-03-18 15:27:31 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-03-18 15:27:30 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-03-18 15:27:24 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-03-18 15:27:24 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-03-18 15:27:23 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-03-18 15:27:23 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-03-18 15:27:19 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-03-18 15:27:18 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2013-03-18 16:16:47 ----A---- C:\WINDOWS\system.ini
2013-03-18 15:33:29 ----A---- C:\WINDOWS\win.ini
2013-03-18 15:32:55 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2013-03-28 135136]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2013-03-28 37352]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2013-03-18 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2013-03-28 84744]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2012-07-04 7874560]
R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\WINDOWS\system32\drivers\AtihdXP3.sys [2012-05-14 103040]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-07-10 1381632]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-03-28 110816]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-03-28 86752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2012-07-04 643072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-03-26 170912]
R2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3; C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe [2013-03-05 196624]
R2 PanService;PandoraService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [2012-09-28 625304]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]
R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-28 161384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-04-04 115608]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#8 Příspěvek od JaRon »

- odinstaluj SpyBot - je zbytocny
- mas to ciste - preventivne mozes prescanovat s TDSSKiller - pokial nic nenajde, nemusis log vkladat
+ citat:
TFC http://oldtimer.geekstogo.com/TFC.exe
• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#9 Příspěvek od kala »

Diky moc! Takze muzu byt na 100% v klidu ze tam VUBEC nic neni? Nemuze tam byt nejaky figl na pozadi?

Ten program jsem spustil, projel a nez jsem prisel k PC tak se restartoval a nevidim nejake vysledky nikde. Znamena to ze to bylo ok?

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#10 Příspěvek od JaRon »

TDSSKiller - vypise vysledok po ukonceni
TFC - maze docasne subory - tiez oznami, kolko MB je k zmazaniu
resume: myslim, ze to mas ciste - ale kludne mozes akciu zopakovat (ale neodchadzaj od PC aby si videl vysledky) :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

kala
Návštěvník
Návštěvník
Příspěvky: 63
Registrován: 05 dub 2013 10:00

Re: Keylogger v PC, jak zjistit a odstranit?

#11 Příspěvek od kala »

TDDSKiller byl dost rychly a nic nenasel (snad koukal dobre :) )

Tak snad to bude ok. I kdyz uplne jisty si tim nejsem. Dekuji za pomoc!

Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15713
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Keylogger v PC, jak zjistit a odstranit?

#12 Příspěvek od JaRon »

za malo
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Zamčeno