Začla blbnout klavesnice při CryptoLocker
Napsal: 02 dub 2015 11:35
Dobrý den , prosím vás o pomoc jak si se mi dostal do NB vír pod názvem Cryptolocker ten sem odstranil pomoci Norton Virus Removel , ale nejde mi stále klávesnice integrovana , externí jde
před virusem žadný problém s klavesnici nebyl a je v dobrém stavu . Takže prosím o pomoc právě vás
a prosím o omluvu za Windows XP vím že to je v celku moje chyba stym virusem ale jsem nejvíce spokojený s Win XP . Děkují moc za vaši pomoc .
Zde log z RSIT :
před virusem žadný problém s klavesnici nebyl a je v dobrém stavu . Takže prosím o pomoc právě vás
a prosím o omluvu za Windows XP vím že to je v celku moje chyba stym virusem ale jsem nejvíce spokojený s Win XP . Děkují moc za vaši pomoc .
Zde log z RSIT :
- Logfile of random's system information tool 1.10 (written by random/random)
Run by Owner at 2015-04-02 12:33:01
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 68 MB (2%) free of 4 GB
Total RAM: 1015 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:33:06, on 2.4.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Owner\Local Settings\Data aplikací\Mozilla\Firefox\Mozilla Firefox\updates\0\updater.exe
C:\Documents and Settings\Owner\Plocha\RSIT.exe
C:\Program Files\trend micro\Owner.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: Shell=
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{69AF2D7A-8A40-4293-9DF7-A4C8EB8A5BE4}: NameServer = 62.129.50.20,85.135.32.100
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe (file missing)
--
End of file - 3664 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job - C:\WINDOWS\system32\xp_eos.exe -c
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Owner\Data aplikací\Mozilla\Firefox\Profiles\6lixl20v.default
prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.305 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll
======Registry dump======
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsusACPIServer]
C:\Program Files\Asus\EeePC ACPI\AsAcpiSvr.exe [2007-10-02 450560]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsusTray]
C:\Program Files\Asus\EeePC ACPI\AsTray.exe [2007-09-28 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\WINDOWS\system32\hkcmd.exe [2007-09-22 121368]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\WINDOWS\system32\igfxtray.exe [2007-09-22 104984]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LiveUpdate]
C:\Program Files\Asus\LiveUpdate\LiveUpdate.exe [2011-07-13 1095080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\WINDOWS\system32\igfxpers.exe [2007-09-22 100888]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2007-09-04 16841216]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ScanRegistry]
C:\WINDOWS\tune.vbs [2000-05-02 7249]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
C:\WINDOWS\SkyTel.EXE [2007-08-04 1826816]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2006-10-08 155648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"D:\QuadCoreM2\pack\core.bin"="D:\QuadCoreM2\pack\core.bin:*:Enabled:core"
"E:\QuadCoreM2\pack\core.bin"="E:\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\Program Files\Abyss Web Server\abyssws.exe"="C:\Program Files\Abyss Web Server\abyssws.exe:*:Enabled:Abyss Web Server X1"
"D:\Last-World\lw.bin"="D:\Last-World\lw.bin:*:Enabled:lw"
"F:\QuadCoreM2\pack\core.bin"="F:\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======List of files/folders created in the last 1 month======
2015-04-02 12:25:51 ----D---- C:\Program Files\trend micro
2015-04-02 12:25:48 ----D---- C:\rsit
2015-04-02 12:20:01 ----D---- C:\WINDOWS\LastGood
2015-04-02 12:08:27 ----A---- C:\WINDOWS\ntbtlog.txt
2015-04-02 12:05:13 ----SHD---- C:\Config.Msi
2015-04-02 12:02:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\SMR430
2015-04-02 12:02:17 ----A---- C:\WINDOWS\system32\drivers\SMR430.SYS
2015-04-02 12:02:02 ----AH---- C:\WINDOWS\system32\mlfcache.dat
2015-04-02 12:01:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2015-04-02 11:57:57 ----D---- C:\031c32979dc82df896949062
2015-04-02 11:57:49 ----D---- C:\128ebaaed07220ad0e3000
2015-03-29 10:42:02 ----D---- C:\Program Files\Mozilla Firefox
2015-03-29 09:30:47 ----D---- C:\WINDOWS\ie8updates
2015-03-28 09:39:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2015-03-28 09:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2015-03-28 09:38:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2015-03-28 09:37:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2015-03-28 09:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2015-03-28 09:36:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2015-03-28 09:36:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2015-03-28 09:35:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2015-03-28 09:35:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2015-03-28 09:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2015-03-28 09:34:48 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2015-03-28 09:34:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2015-03-28 09:34:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2015-03-28 09:33:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2015-03-28 09:33:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2015-03-28 09:32:53 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2015-03-28 09:32:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2015-03-28 09:32:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2015-03-28 09:31:48 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2015-03-28 09:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2015-03-28 09:30:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2015-03-28 09:30:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2015-03-28 09:30:02 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2015-03-28 09:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2015-03-28 09:29:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2859537$
2015-03-27 16:08:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2922229$
2015-03-27 16:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2015-03-27 16:07:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2015-03-27 16:06:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2015-03-27 16:06:20 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2015-03-27 16:05:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2015-03-27 16:05:34 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2015-03-27 16:05:34 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2015-03-27 16:05:33 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2015-03-27 16:05:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2015-03-27 16:04:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2916036$
2015-03-27 16:04:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2015-03-27 16:03:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2015-03-27 16:03:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2834886$
2015-03-27 16:03:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2015-03-27 16:01:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2015-03-27 16:00:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$
2015-03-27 15:59:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2930275$
2015-03-27 15:58:51 ----A---- C:\mbam-setup-2.1.4.1018.exe
2015-03-27 15:58:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2015-03-27 15:58:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2015-03-27 15:57:46 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2015-03-27 15:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2015-03-27 15:56:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2015-03-27 15:56:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2015-03-27 15:55:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2015-03-27 15:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2015-03-27 15:51:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2015-03-27 15:50:16 ----D---- C:\WINDOWS\WBEM
2015-03-27 15:47:36 ----HDC---- C:\WINDOWS\ie8
2015-03-27 15:34:13 ----D---- C:\4c9419799ecdeda1b102973c9f
2015-03-27 15:33:24 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2015-03-27 15:32:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2015-03-27 15:31:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2964358$
2015-03-27 15:30:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2015-03-27 15:29:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2015-03-27 15:28:08 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2015-03-27 15:26:17 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2015-03-21 12:30:16 ----A---- C:\WINDOWS\winsck.vbs
2015-03-21 12:30:16 ----A---- C:\WINDOWS\tune.vbs
2015-03-21 12:30:16 ----A---- C:\WINDOWS\system32\tune.vbs
2015-03-21 12:30:16 ----A---- C:\WINDOWS\system32\kernel.vbs
2015-03-21 12:30:16 ----A---- C:\WINDOWS\system32\explorer.vbs
2015-03-21 12:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2015-03-21 12:22:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2015-03-21 12:21:48 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2015-03-21 12:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2015-03-21 12:18:18 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2015-03-16 22:23:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2015-03-16 21:40:19 ----D---- C:\Documents and Settings\Owner\Data aplikací\EncryptStick
2015-03-13 23:11:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2015-03-12 17:16:58 ----D---- C:\WINDOWS\system32\LogFiles
2015-03-11 09:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$
2015-03-11 09:20:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2015-03-11 09:19:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2015-03-11 08:44:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2015-03-08 18:55:48 ----A---- C:\WINDOWS\system32\hal.dll
2015-03-08 18:40:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2015-03-08 18:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2015-03-08 18:39:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2015-03-08 18:39:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2015-03-08 18:38:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2015-03-08 18:38:16 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2015-03-08 18:38:05 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2015-03-08 18:36:28 ----ASH---- C:\pagefile.sys
2015-03-07 11:07:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2015-03-07 11:06:51 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2015-03-06 23:08:47 ----D---- C:\pebuilder3110a
2015-03-06 22:37:31 ----A---- C:\WINDOWS\dm_batch.bak
2015-03-06 22:36:53 ----D---- C:\Program Files\NTFS To FAT32 Converter
2015-03-06 22:20:29 ----A---- C:\WINDOWS\system32\ampa.sys
2015-03-06 22:20:29 ----A---- C:\WINDOWS\ampa.exe
2015-03-05 08:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2015-03-04 13:08:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$
2015-03-04 13:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2015-03-03 14:14:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$
2015-03-03 14:12:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2015-03-03 14:09:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2015-03-03 14:08:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2015-03-03 14:05:08 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2015-03-03 14:03:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2015-03-03 14:02:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2015-03-03 14:01:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2015-03-03 14:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2015-03-03 13:58:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2015-03-03 13:53:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2015-03-03 13:51:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2015-03-03 13:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
======List of files/folders modified in the last 1 month======
2015-04-02 12:25:51 ----RD---- C:\Program Files
2015-04-02 12:21:13 ----D---- C:\WINDOWS\system32
2015-04-02 12:21:10 ----D---- C:\WINDOWS\Temp
2015-04-02 12:20:39 ----D---- C:\WINDOWS\system32\drivers
2015-04-02 12:20:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-02 12:20:01 ----D---- C:\WINDOWS
2015-04-02 12:18:25 ----D---- C:\WINDOWS\system32\CatRoot2
2015-04-02 12:15:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-04-02 12:15:02 ----A---- C:\boot.ini
2015-04-02 12:07:41 ----RSD---- C:\WINDOWS\assembly
2015-04-02 12:07:19 ----D---- C:\WINDOWS\WinSxS
2015-04-02 12:05:52 ----SHD---- C:\WINDOWS\Installer
2015-04-02 11:57:08 ----HD---- C:\WINDOWS\inf
2015-03-29 10:46:01 ----D---- C:\Program Files\Mozilla Maintenance Service
2015-03-29 09:33:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2015-03-29 09:33:08 ----A---- C:\WINDOWS\imsins.BAK
2015-03-29 09:32:26 ----D---- C:\Program Files\Internet Explorer
2015-03-29 09:30:45 ----HD---- C:\WINDOWS\$hf_mig$
2015-03-28 09:43:33 ----D---- C:\WINDOWS\system32\wbem
2015-03-27 15:52:43 ----D---- C:\WINDOWS\system32\cs-cz
2015-03-27 15:52:42 ----D---- C:\WINDOWS\AppPatch
2015-03-27 15:50:22 ----D---- C:\WINDOWS\system32\config
2015-03-27 15:50:04 ----D---- C:\WINDOWS\Media
2015-03-27 15:49:57 ----D---- C:\WINDOWS\Help
2015-03-27 15:43:54 ----A---- C:\WINDOWS\win.ini
2015-03-27 15:43:54 ----A---- C:\WINDOWS\system.ini
2015-03-27 15:28:14 ----D---- C:\Program Files\Movie Maker
2015-03-27 15:26:24 ----D---- C:\WINDOWS\Prefetch
2015-03-21 12:13:12 ----D---- C:\Documents and Settings
2015-03-15 16:01:39 ----A---- C:\WINDOWS\setuplog.txt
2015-03-11 08:54:42 ----D---- C:\WINDOWS\system32\CatRoot
2015-03-05 17:41:16 ----D---- C:\Program Files\Outlook Express
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 SMR430;Symantec SMR Utility Service 4.3.0; C:\WINDOWS\System32\drivers\SMR430.SYS [2015-04-02 104120]
R1 AsUpIO;AsUpIO; C:\WINDOWS\system32\drivers\AsUpIO.sys [2011-02-09 11832]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2009-10-20 50704]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-05-04 546976]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2007-07-26 11264]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l251x86.sys [2007-08-22 30208]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2006-10-08 1181824]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-06 4611072]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-07-17 123008]
S3 ampa;ampa; \??\C:\WINDOWS\system32\ampa.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MDA_NTDRV;MDA_NTDRV; \??\C:\WINDOWS\system32\MDA_NTDRV.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2015-03-17 1080120]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-20 267440]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe /medsvc []
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-03-29 148080]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe -d -f C:\Program Files\WinPcap\rpcapd.ini []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]
-----------------EOF-----------------
