Stránka 1 z 2

Dvojité psaní ˇˇ´´

Napsal: 18 dub 2008 10:35
od tKoudy
Zdravim, prosim o radu jak odstranit vir, ktery (mj.) zpusobuje dvojite psani hacku a carek (ˇˇ´´). Na netu jsem nasel informaci, ze by to mel byt BadTrans nebo BugBear, a tak jsem zkousel tyhle nastroje, ale neuspesne:

http://securityresponse.symantec.com/av ... .tool.html - po chvili prace se objevila klasicka hlaska o tom, z program je potreba ukoncit
http://securityresponse.symantec.com/av ... .tool.html - vse proskenoval a tento vir nenasel

(stahoval jsem je odtud: http://sac-ftp.externet.hu/avir11.html)

Tady je log, predem moc dik za pomoc!

Kód: Vybrat vše

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:25:54, on 18.4.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\System32\alg.exe
E:\Program Files\BlueSoleil\BTNtService.exe
C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\Program Files\Totalcmd7\TOTALCMD.EXE
E:\Program Files\Maxthon2\Maxthon.exe
E:\Program Files\Internet Download Manager\IDMan.exe
D:\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gta4.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\ntos.exe,
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] E:\Program Files\ICQLite\ICQLite.exe -trayboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie_ctx.htm
O8 - Extra context menu item: Stáhnout obsah FLV videa s IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout s IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp01.photoprintit.de/microsite/5176/defaults/activex/IPSUploader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - E:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PHPGeekUtil - Unknown owner - c:\apache\APACHE.EXE (file missing)

--
End of file - 6059 bytes

Napsal: 18 dub 2008 11:36
od l.kantor
zdar použijte sdfix v nouzovém režimu,návod zde http://www.viry.cz/forum/viewtopic.php?t=40395
po provedení vložte log z sdfix+aktuální z hjt(nedávejte ho do "code",blbě se to luští :wink: )

Napsal: 18 dub 2008 12:13
od tKoudy
SDFix:

System Report
*************

Run on pá 18.04.2008 at 13:01

Microsoft Windows XP [Verze 5.1.2600]

Current user is an administrator

Running Processes:

\SystemRoot\System32\smss.exe [204]
\??\C:\WINDOWS\system32\csrss.exe [260]
\??\C:\WINDOWS\system32\winlogon.exe [284]
C:\WINDOWS\system32\services.exe [328]
C:\WINDOWS\system32\lsass.exe [340]
C:\WINDOWS\system32\svchost.exe [504]
C:\WINDOWS\system32\svchost.exe [528]
C:\WINDOWS\Explorer.EXE [776]
C:\Program Files\Totalcmd7\TOTALCMD.EXE [944]


Drivers - Running:

ACPI
ASAPIW2k
atapi
Beep
BTHidEnum
BTHidMgr
Cdfs
Cdrom
Disk
dmio
dmload
ElbyCDFL
Fastfat
Fdc
Flpydisk
Ftdisk
i8042prt
Imapi
isapnp
Kbdclass
KSecDD
Mouclass
MountMgr
Msfs
Mup
NDIS
Npfs
Ntfs
Null
PartMgr
PCI
PxHelp20
rdpdr
redbook
sptd
sr
swenum
TermDD
Update
usbehci
usbhub
usbuhci
VgaSave
ViaIde
VolSnap


Drivers - Stopped:

Abiosdsk
abp480n5
ACPIEC
adpu160m
aec
AF15BDA
AFD
Aha154x
aic78u2
aic78xx
AliIde
AmdK7
AMON
amsint
asc
asc3350p
asc3550
Aspi32
AsyncMac
Atdisk
Atmarpc
audstub
BlueletAudio
BlueletSCOAudio
BT
BT848
btaudio
Btcsrusb
BTDriver
BTKRNL
BTNetFilter
BTWDNDIS
btwhid
catchme
cbidf2k
CCDECODE
cd20xrnt
Cdaudio
cglptnt
Changer
CmdIde
cmuda
Cpqarray
dac960nt
dmboot
DMusic
dpti2o
drmkaud
ElbyCDIO
es1371
FETNDIS
Fips
gameenum
Gpc
HidUsb
hpn
i2omgmt
i2omp
ini910u
IntelIde
IpFilterDriver
IpInIp
IpNat
IPSec
IRENUM
kbdhid
kmixer
lbrtfdc
LVUSBSta
mnmdd
Modem
mouhid
MPE
mraid35x
MRxDAV
MRxSmb
MSKSSRV
MSPCLOCK
MSPQM
MSTEE
NABTSFEC
NdisIP
NdisTapi
Ndisuio
NdisWan
NDProxy
NetBIOS
NetBT
nod32drv
nv
NwlnkFlt
NwlnkFwd
P1Scanner
Parport
ParVdm
PCIDump
PCIIde
Pcmcia
PDCOMP
PDFRAME
PDRELI
PDRFRAME
perc2
perc2hib
PID_0928
PptpMiniport
PSched
Ptilink
ql1080
Ql10wnt
ql12160
ql1240
ql1280
RasAcd
Rasl2tp
RasPppoe
Raspti
Rdbss
RDPCDD
RDPWD
ROOTMODEM
Secdrv
Ser2pl
serenum
Serial
Sfloppy
Simbad
SLIP
Sparrow
splitter
Srv
streamip
swmidi
symc810
symc8xx
sym_hi
sym_u3
sysaudio
Tcpip
TDPIPE
TDTCP
TosIde
tv2ktunr
Tv2kXbar
Udfs
ultra
usbccgp
usbprint
usbscan
USBSTOR
VComm
VcommMgr
VIAudio
w89c940
Wanarp
WDICA
wdmaud
WS2IFSL
WSTCODEC


Services - Running:

CryptSvc
dmserver
Eventlog
helpsvc
PlugPlay
RpcSs
srservice
winmgmt


Services - Stopped:

Alerter
ALG
AppMgmt
aspnet_state
AudioSrv
BITS
BlueSoleil
Browser
btwdins
CiSvc
ClipSrv
clr_optimization_v2.0.50727_32
COMSysApp
Dhcp
dmadmin
Dnscache
EPSONStatusAgent2
ERSvc
EventSystem
FastUserSwitchingCompatibility
gusvc
HidServ
ImapiService
lanmanserver
lanmanworkstation
LmHosts
mnmsrvc
MSDTC
MSIServer
Nero
NetDDE
NetDDEdsdm
Netlogon
Netman
Nla
NMIndexingService
NMSAccessU
NOD32krn
NtLmSsp
NtmsSvc
NVSvc
PHPGeekUtil
PolicyAgent
ProtectedStorage
RasAuto
RasMan
RDSessMgr
RemoteAccess
RemoteRegistry
RpcLocator
RSVP
SamSs
SCardDrv
SCardSvr
Schedule
seclogon
SENS
SharedAccess
ShellHWDetection
Spooler
SSDPSRV
stisvc
SwPrv
SysmonLog
TapiSrv
TermService
Themes
TlntSvr
TrkWks
UMWdf
uploadmgr
upnphost
UPS
VSS
W32Time
WebClient
WmdmPmSN
Wmi
WmiApSrv
wuauserv
WZCSVC


Files Created/Modified - 60 Days:


C:\

ÇĽ’
ëTöDu&&‹öD
uöÄ€tC€äÇĽ’
öDuÇĽ’
ë(&‹&‹UöD - 1250,
18 Apr 2008 12.59.50 805 306 368 A.SH. "C:\pagefile.sys"


C:\WINDOWS\

6 Apr 2008 17.10.28 303 A.... "C:\WINDOWS\system.ini"
17 Apr 2008 15.01.50 4 529 A.... "C:\WINDOWS\WDICT32.INI"
10 Apr 2008 18.39.00 597 A.... "C:\WINDOWS\win.ini"
18 Apr 2008 12.58.14 216 A.... "C:\WINDOWS\wiadebug.log"
18 Apr 2008 7.34.54 1 397 447 A.... "C:\WINDOWS\setupapi.log"
18 Apr 2008 12.58.12 49 A.... "C:\WINDOWS\wiaservc.log"
28 Feb 2008 14.16.00 9 662 A.... "C:\WINDOWS\EPISME00.SWB"
17 Apr 2008 16.54.06 3 067 A.... "C:\WINDOWS\mozver.dat"
12 Apr 2008 16.53.44 409 110 A.... "C:\WINDOWS\Windows Update.log"
18 Apr 2008 13.00.08 2 048 A.S.. "C:\WINDOWS\bootstat.dat"
18 Apr 2008 12.58.14 32 626 A.... "C:\WINDOWS\SchedLgU.Txt"
18 Apr 2008 9.11.36 0 A.... "C:\WINDOWS\0.log"
12 Apr 2008 16.48.18 316 640 A.... "C:\WINDOWS\WMSysPr9.prx"
8 Mar 2008 20.10.44 4 696 A.... "C:\WINDOWS\WTRAN32.INI"
8 Mar 2008 20.10.44 0 A.... "C:\WINDOWS\XXLGSC"
20 Mar 2008 20.19.12 1 236 A.... "C:\WINDOWS\IE4 Error Log.txt"
18 Apr 2008 13.01.24 769 496 A.... "C:\WINDOWS\ntbtlog.txt"
15 Mar 2008 9.51.04 5 661 A.... "C:\WINDOWS\COOL.INI"
17 Apr 2008 12.25.30 1 978 A.... "C:\WINDOWS\ModemLog_Bluetooth Fax Modem.txt"
17 Apr 2008 12.25.30 1 984 A.... "C:\WINDOWS\ModemLog_Bluetooth DUN Modem.txt"
17 Apr 2008 12.25.30 1 980 A.... "C:\WINDOWS\ModemLog_Bluetooth LAP Modem.txt"
17 Apr 2008 12.25.30 1 980 A.... "C:\WINDOWS\ModemLog_Bluetooth LAP Modem #2.txt"
17 Apr 2008 12.25.30 69 A.... "C:\WINDOWS\NeroDigital.ini"
11 Apr 2008 14.03.30 2 206 A.... "C:\WINDOWS\system32\wpa.dbl"
30 Mar 2008 9.57.28 519 336 A.... "C:\WINDOWS\system32\FNTCACHE.DAT"
30 Mar 2008 10.55.48 1 343 528 A.... "C:\WINDOWS\inf\INFCACHE.1"
30 Mar 2008 10.54.16 13 432 A.... "C:\WINDOWS\inf\dxdllreg.PNF"
30 Mar 2008 10.55.20 4 400 A.... "C:\WINDOWS\inf\oeaccess.PNF"
30 Mar 2008 10.55.12 6 260 A.... "C:\WINDOWS\inf\mpg4sax.PNF"
30 Mar 2008 10.55.20 66 856 A.... "C:\WINDOWS\inf\syssetup.PNF"
30 Mar 2008 10.55.16 1 012 376 A.... "C:\WINDOWS\inf\LAYOUT.PNF"
30 Mar 2008 10.54.46 2 608 A.... "C:\WINDOWS\inf\SVCPACK.PNF"
30 Mar 2008 10.55.14 218 108 A.... "C:\WINDOWS\inf\drvindex.PNF"
30 Mar 2008 10.54.08 17 152 A.... "C:\WINDOWS\inf\1394.PNF"
30 Mar 2008 10.54.08 7 800 A.... "C:\WINDOWS\inf\certclas.PNF"
30 Mar 2008 10.54.08 5 668 A.... "C:\WINDOWS\inf\1394vdbg.PNF"
30 Mar 2008 10.54.08 7 256 A.... "C:\WINDOWS\inf\61883.PNF"
30 Mar 2008 10.54.10 9 596 A.... "C:\WINDOWS\inf\avc.PNF"
30 Mar 2008 10.55.12 13 416 A.... "C:\WINDOWS\inf\battery.PNF"
30 Mar 2008 10.55.12 56 772 A.... "C:\WINDOWS\inf\cdrom.PNF"
30 Mar 2008 10.55.12 13 408 A.... "C:\WINDOWS\inf\cpu.PNF"
30 Mar 2008 10.54.12 6 092 A.... "C:\WINDOWS\inf\enum1394.PNF"
30 Mar 2008 10.54.14 11 420 A.... "C:\WINDOWS\inf\flash.PNF"
30 Mar 2008 10.55.14 12 240 A.... "C:\WINDOWS\inf\disk.PNF"
30 Mar 2008 10.54.12 54 260 A.... "C:\WINDOWS\inf\display.PNF"
30 Mar 2008 10.54.12 67 912 A.... "C:\WINDOWS\inf\dot4.PNF"
30 Mar 2008 10.54.12 6 476 A.... "C:\WINDOWS\inf\dot4prt.PNF"
30 Mar 2008 10.54.12 8 116 A.... "C:\WINDOWS\inf\fdc.PNF"
30 Mar 2008 10.54.14 8 616 A.... "C:\WINDOWS\inf\flpydisk.PNF"
30 Mar 2008 10.54.14 5 844 A.... "C:\WINDOWS\inf\genprint.PNF"
30 Mar 2008 10.54.14 11 836 A.... "C:\WINDOWS\inf\hal.PNF"
30 Mar 2008 10.55.16 97 360 A.... "C:\WINDOWS\inf\input.PNF"
30 Mar 2008 10.55.16 58 388 A.... "C:\WINDOWS\inf\keyboard.PNF"
30 Mar 2008 10.54.16 3 972 A.... "C:\WINDOWS\inf\legcydrv.PNF"
30 Mar 2008 10.54.16 155 496 A.... "C:\WINDOWS\inf\machine.PNF"
30 Mar 2008 10.54.18 43 220 A.... "C:\WINDOWS\inf\mchgr.PNF"
30 Mar 2008 10.54.34 4 000 A.... "C:\WINDOWS\inf\mdmsetup.PNF"
30 Mar 2008 10.54.36 5 584 A.... "C:\WINDOWS\inf\mf.PNF"
30 Mar 2008 10.54.38 108 468 A.... "C:\WINDOWS\inf\monitor.PNF"
30 Mar 2008 10.55.18 47 384 A.... "C:\WINDOWS\inf\mshdc.PNF"
30 Mar 2008 10.54.38 63 560 A.... "C:\WINDOWS\inf\msmouse.PNF"
30 Mar 2008 10.54.40 30 232 A.... "C:\WINDOWS\inf\msports.PNF"
30 Mar 2008 10.54.40 5 844 A.... "C:\WINDOWS\inf\multiprt.PNF"
30 Mar 2008 10.55.10 6 708 A.... "C:\WINDOWS\inf\ntapm.PNF"
30 Mar 2008 10.54.40 3 696 A.... "C:\WINDOWS\inf\netclass.PNF"
30 Mar 2008 10.54.42 24 720 A.... "C:\WINDOWS\inf\netirsir.PNF"
30 Mar 2008 10.55.20 1 317 440 A.... "C:\WINDOWS\inf\ntprint.PNF"
30 Mar 2008 10.54.44 47 228 A.... "C:\WINDOWS\inf\pcmcia.PNF"
30 Mar 2008 10.55.20 107 240 A.... "C:\WINDOWS\inf\pnpscsi.PNF"
30 Mar 2008 10.54.46 6 808 A.... "C:\WINDOWS\inf\sbp2.PNF"
30 Mar 2008 10.55.20 22 424 A.... "C:\WINDOWS\inf\scsi.PNF"
30 Mar 2008 10.54.46 36 544 A.... "C:\WINDOWS\inf\smartcrd.PNF"
30 Mar 2008 10.54.46 27 968 A.... "C:\WINDOWS\inf\sti.PNF"
30 Mar 2008 10.55.20 59 452 A.... "C:\WINDOWS\inf\tape.PNF"
30 Mar 2008 10.54.46 44 864 A.... "C:\WINDOWS\inf\usb.PNF"
30 Mar 2008 10.54.52 45 016 A.... "C:\WINDOWS\inf\wdmaudio.PNF"
30 Mar 2008 10.54.50 4 808 A.... "C:\WINDOWS\inf\volume.PNF"
30 Mar 2008 10.54.50 4 972 A.... "C:\WINDOWS\inf\volsnap.PNF"
30 Mar 2008 10.55.12 11 928 A.... "C:\WINDOWS\inf\wceusbsh.PNF"
30 Mar 2008 10.54.36 8 916 A.... "C:\WINDOWS\inf\memstpci.PNF"
30 Mar 2008 10.55.02 54 832 A.... "C:\WINDOWS\inf\mwtpdsp.PNF"
30 Mar 2008 10.55.16 433 716 A.... "C:\WINDOWS\inf\intl.PNF"
30 Mar 2008 10.54.14 62 380 A.... "C:\WINDOWS\inf\font.PNF"
30 Mar 2008 10.54.46 139 136 A.... "C:\WINDOWS\inf\sapi5.PNF"
30 Mar 2008 10.55.20 7 200 A.... "C:\WINDOWS\inf\SYSOC.PNF"
30 Mar 2008 10.54.50 14 024 A.... "C:\WINDOWS\inf\wbemoc.PNF"
30 Mar 2008 10.55.14 56 656 A.... "C:\WINDOWS\inf\fxsocm.PNF"
30 Mar 2008 10.55.18 16 108 A.... "C:\WINDOWS\inf\netoc.PNF"
30 Mar 2008 10.55.14 977 888 A.... "C:\WINDOWS\inf\iis.PNF"
30 Mar 2008 10.54.10 135 668 A.... "C:\WINDOWS\inf\comnt5.PNF"
30 Mar 2008 10.54.12 10 168 A.... "C:\WINDOWS\inf\dtcnt5.PNF"
30 Mar 2008 10.55.20 41 588 A.... "C:\WINDOWS\inf\setupqry.PNF"
30 Mar 2008 10.55.20 122 760 A.... "C:\WINDOWS\inf\tsoc.PNF"
30 Mar 2008 10.54.40 13 688 A.... "C:\WINDOWS\inf\msmqocm.PNF"
30 Mar 2008 10.55.16 106 176 A.... "C:\WINDOWS\inf\ims.PNF"
30 Mar 2008 10.55.14 20 180 A.... "C:\WINDOWS\inf\fp40ext.PNF"
30 Mar 2008 10.55.22 12 040 A.... "C:\WINDOWS\inf\au.PNF"
30 Mar 2008 10.55.24 82 148 A.... "C:\WINDOWS\inf\msmsgs.PNF"
30 Mar 2008 10.55.24 4 200 A.... "C:\WINDOWS\inf\wmaccess.PNF"
30 Mar 2008 10.54.44 3 964 A.... "C:\WINDOWS\inf\rootau.PNF"
30 Mar 2008 10.55.14 4 480 A.... "C:\WINDOWS\inf\ieaccess.PNF"
30 Mar 2008 10.55.22 4 440 A.... "C:\WINDOWS\inf\wmpocm.PNF"
30 Mar 2008 10.54.14 15 156 A.... "C:\WINDOWS\inf\games.PNF"
30 Mar 2008 10.54.08 48 312 A.... "C:\WINDOWS\inf\accessor.PNF"
30 Mar 2008 10.54.10 17 524 A.... "C:\WINDOWS\inf\communic.PNF"
30 Mar 2008 10.54.40 12 272 A.... "C:\WINDOWS\inf\multimed.PNF"
30 Mar 2008 10.54.44 21 776 A.... "C:\WINDOWS\inf\optional.PNF"
30 Mar 2008 10.54.44 12 408 A.... "C:\WINDOWS\inf\pinball.PNF"
30 Mar 2008 10.54.52 16 656 A.... "C:\WINDOWS\inf\wordpad.PNF"
30 Mar 2008 10.54.16 13 292 A.... "C:\WINDOWS\inf\igames.PNF"
30 Mar 2008 10.55.22 418 032 A.... "C:\WINDOWS\inf\tabletpc.PNF"
30 Mar 2008 10.55.24 16 776 A.... "C:\WINDOWS\inf\msnmsn.PNF"
30 Mar 2008 10.55.18 173 976 A.... "C:\WINDOWS\inf\netfxocm.PNF"
30 Mar 2008 10.54.44 20 116 A.... "C:\WINDOWS\inf\netsnmp.PNF"
30 Mar 2008 10.54.50 7 016 A.... "C:\WINDOWS\inf\wbemsnmp.PNF"
30 Mar 2008 10.54.44 10 780 A.... "C:\WINDOWS\inf\nettpsmp.PNF"
30 Mar 2008 10.54.44 4 004 A.... "C:\WINDOWS\inf\netupnp.PNF"
30 Mar 2008 10.55.18 3 652 A.... "C:\WINDOWS\inf\netbeac.PNF"
30 Mar 2008 10.54.42 6 264 A.... "C:\WINDOWS\inf\netiprip.PNF"
30 Mar 2008 10.54.42 10 524 A.... "C:\WINDOWS\inf\netlpd.PNF"
30 Mar 2008 10.54.10 310 028 A.... "C:\WINDOWS\inf\defltwk.PNF"
30 Mar 2008 10.55.20 6 540 A.... "C:\WINDOWS\inf\mpg4sdmo.PNF"
30 Mar 2008 10.55.24 45 748 A.... "C:\WINDOWS\inf\wdma_int.PNF"
30 Mar 2008 10.55.24 30 376 A.... "C:\WINDOWS\inf\nvts.PNF"
30 Mar 2008 10.55.24 45 912 A.... "C:\WINDOWS\inf\nvdm.PNF"
30 Mar 2008 10.55.24 30 244 A.... "C:\WINDOWS\inf\nvct.PNF"
30 Mar 2008 10.55.24 32 612 A.... "C:\WINDOWS\inf\nv4_disp.PNF"
30 Mar 2008 10.55.24 19 536 A.... "C:\WINDOWS\inf\netwv48.PNF"
30 Mar 2008 10.55.24 15 172 A.... "C:\WINDOWS\inf\netwlan2.PNF"
30 Mar 2008 10.55.24 28 024 A.... "C:\WINDOWS\inf\netwlan.PNF"
30 Mar 2008 10.55.24 19 972 A.... "C:\WINDOWS\inf\netrtsnt.PNF"
30 Mar 2008 10.55.24 18 912 A.... "C:\WINDOWS\inf\netklsi.PNF"
30 Mar 2008 10.55.24 306 060 A.... "C:\WINDOWS\inf\mdmrpci.PNF"
30 Mar 2008 10.55.22 96 400 A.... "C:\WINDOWS\inf\mdmlt3.PNF"
30 Mar 2008 10.55.22 9 384 A.... "C:\WINDOWS\inf\HidDigi.PNF"
30 Mar 2008 10.55.22 12 836 A.... "C:\WINDOWS\inf\g400.PNF"
30 Mar 2008 10.55.22 69 224 A.... "C:\WINDOWS\inf\biosinfo.PNF"
30 Mar 2008 10.55.22 43 960 A.... "C:\WINDOWS\inf\atixpwdm.PNF"
30 Mar 2008 10.55.22 26 532 A.... "C:\WINDOWS\inf\atiradn1.PNF"
30 Mar 2008 10.55.22 30 460 A.... "C:\WINDOWS\inf\atiixpag.PNF"
30 Mar 2008 10.55.22 29 012 A.... "C:\WINDOWS\inf\atiixpaa.PNF"
30 Mar 2008 10.55.22 38 732 A.... "C:\WINDOWS\inf\wmp.PNF"
30 Mar 2008 10.55.22 33 804 A.... "C:\WINDOWS\inf\wdma_via.PNF"
30 Mar 2008 10.55.22 75 032 A.... "C:\WINDOWS\inf\wdma_ali.PNF"
30 Mar 2008 10.55.20 45 952 A.... "C:\WINDOWS\inf\usbport.PNF"
30 Mar 2008 10.55.36 8 368 A.... "C:\WINDOWS\inf\swflash.PNF"
30 Mar 2008 10.55.20 7 180 A.... "C:\WINDOWS\inf\ramdisk.PNF"
30 Mar 2008 10.55.20 12 828 A.... "C:\WINDOWS\inf\pchealth.PNF"
30 Mar 2008 10.55.18 41 820 A.... "C:\WINDOWS\inf\nt5java.PNF"
30 Mar 2008 10.55.18 6 348 A.... "C:\WINDOWS\inf\nettun.PNF"
30 Mar 2008 10.55.18 43 760 A.... "C:\WINDOWS\inf\netrass.PNF"
30 Mar 2008 10.55.18 14 800 A.... "C:\WINDOWS\inf\netnm.PNF"
30 Mar 2008 10.55.18 9 596 A.... "C:\WINDOWS\inf\netip6.PNF"
30 Mar 2008 10.55.18 36 124 A.... "C:\WINDOWS\inf\msoe50.PNF"
30 Mar 2008 10.55.18 40 676 A.... "C:\WINDOWS\inf\mdmsuprv.PNF"
30 Mar 2008 10.55.18 62 708 A.... "C:\WINDOWS\inf\mdmetech.PNF"
30 Mar 2008 10.55.46 38 900 A.... "C:\WINDOWS\inf\kscaptur.PNF"
30 Mar 2008 10.55.16 5 848 A.... "C:\WINDOWS\inf\irbus.PNF"
30 Mar 2008 10.55.14 81 920 A.... "C:\WINDOWS\inf\ie.PNF"
30 Mar 2008 10.55.14 13 576 A.... "C:\WINDOWS\inf\hidserv.PNF"
30 Mar 2008 10.55.14 321 372 A.... "C:\WINDOWS\inf\dwup.PNF"
30 Mar 2008 10.55.26 20 100 A.... "C:\WINDOWS\inf\bda.PNF"
30 Mar 2008 10.55.12 12 512 A.... "C:\WINDOWS\inf\acpi.PNF"
30 Mar 2008 10.55.12 9 960 A.... "C:\WINDOWS\inf\xscan_xp.PNF"
30 Mar 2008 10.55.12 96 888 A.... "C:\WINDOWS\inf\wdma_aur.PNF"
30 Mar 2008 10.55.12 303 720 A.... "C:\WINDOWS\inf\wdma10k1.PNF"
30 Mar 2008 10.55.12 10 668 A.... "C:\WINDOWS\inf\wbfirdma.PNF"
30 Mar 2008 10.55.12 9 716 A.... "C:\WINDOWS\inf\viafir2k.PNF"
30 Mar 2008 10.55.46 6 244 A.... "C:\WINDOWS\inf\wmad.PNF"
30 Mar 2008 10.55.12 8 628 A.... "C:\WINDOWS\inf\tridxp.PNF"
30 Mar 2008 10.55.12 9 716 A.... "C:\WINDOWS\inf\tridkb.PNF"
30 Mar 2008 10.55.12 9 916 A.... "C:\WINDOWS\inf\trid3d.PNF"
30 Mar 2008 10.55.12 8 804 A.... "C:\WINDOWS\inf\tgiu.PNF"
30 Mar 2008 10.55.12 57 444 A.... "C:\WINDOWS\inf\swnt.PNF"
30 Mar 2008 10.55.12 8 004 A.... "C:\WINDOWS\inf\stalport.PNF"
30 Mar 2008 10.55.12 12 188 A.... "C:\WINDOWS\inf\spxports.PNF"
30 Mar 2008 10.55.10 20 252 A.... "C:\WINDOWS\inf\spx.PNF"
30 Mar 2008 10.55.10 7 300 A.... "C:\WINDOWS\inf\smi.PNF"
30 Mar 2008 10.55.10 7 716 A.... "C:\WINDOWS\inf\sisv6326.PNF"
30 Mar 2008 10.55.10 11 252 A.... "C:\WINDOWS\inf\sisgr.PNF"
30 Mar 2008 10.55.10 7 988 A.... "C:\WINDOWS\inf\sis6306.PNF"
30 Mar 2008 10.55.10 9 068 A.... "C:\WINDOWS\inf\sis300i.PNF"
30 Mar 2008 10.55.10 8 572 A.... "C:\WINDOWS\inf\sgiu.PNF"
30 Mar 2008 10.55.10 6 740 A.... "C:\WINDOWS\inf\s3trio3d.PNF"
30 Mar 2008 10.55.10 8 676 A.... "C:\WINDOWS\inf\s3savmx.PNF"
30 Mar 2008 10.55.10 8 644 A.... "C:\WINDOWS\inf\s3sav4.PNF"
30 Mar 2008 10.55.10 8 484 A.... "C:\WINDOWS\inf\s3sav3d.PNF"
30 Mar 2008 10.55.10 7 924 A.... "C:\WINDOWS\inf\s3nb.PNF"
30 Mar 2008 10.55.10 6 940 A.... "C:\WINDOWS\inf\ppa3.PNF"
30 Mar 2008 10.55.10 6 900 A.... "C:\WINDOWS\inf\ppa.PNF"
30 Mar 2008 10.55.10 9 668 A.... "C:\WINDOWS\inf\nv3.PNF"
30 Mar 2008 10.55.10 9 992 A.... "C:\WINDOWS\inf\netxcpq.PNF"
30 Mar 2008 10.55.10 11 096 A.... "C:\WINDOWS\inf\netx56n5.PNF"
30 Mar 2008 10.55.10 19 464 A.... "C:\WINDOWS\inf\netx500.PNF"
30 Mar 2008 10.55.10 6 660 A.... "C:\WINDOWS\inf\netw940.PNF"
30 Mar 2008 10.55.10 7 176 A.... "C:\WINDOWS\inf\netw926.PNF"
30 Mar 2008 10.55.10 9 948 A.... "C:\WINDOWS\inf\netw840.PNF"
30 Mar 2008 10.55.10 14 964 A.... "C:\WINDOWS\inf\netvt86.PNF"
30 Mar 2008 10.55.10 7 480 A.... "C:\WINDOWS\inf\nettpro.PNF"
30 Mar 2008 10.55.08 11 312 A.... "C:\WINDOWS\inf\nettiger.PNF"
30 Mar 2008 10.55.08 8 196 A.... "C:\WINDOWS\inf\nettdkb.PNF"
30 Mar 2008 10.55.08 9 388 A.... "C:\WINDOWS\inf\nettb155.PNF"
30 Mar 2008 10.55.08 10 372 A.... "C:\WINDOWS\inf\netsnip.PNF"
30 Mar 2008 10.55.08 6 412 A.... "C:\WINDOWS\inf\netsmc.PNF"
30 Mar 2008 10.55.08 7 612 A.... "C:\WINDOWS\inf\netsla30.PNF"
30 Mar 2008 10.55.08 14 912 A.... "C:\WINDOWS\inf\netsk98.PNF"
30 Mar 2008 10.55.08 23 584 A.... "C:\WINDOWS\inf\netsk_fp.PNF"
30 Mar 2008 10.55.08 21 728 A.... "C:\WINDOWS\inf\netsis.PNF"
30 Mar 2008 10.55.08 10 708 A.... "C:\WINDOWS\inf\netrtpnt.PNF"
30 Mar 2008 10.55.08 7 568 A.... "C:\WINDOWS\inf\netrlw2k.PNF"
30 Mar 2008 10.55.08 11 428 A.... "C:\WINDOWS\inf\netpwr2.PNF"
30 Mar 2008 10.55.08 10 268 A.... "C:\WINDOWS\inf\netpnic.PNF"
30 Mar 2008 10.55.08 8 452 A.... "C:\WINDOWS\inf\netpc100.PNF"
30 Mar 2008 10.55.08 13 124 A.... "C:\WINDOWS\inf\netosi5.PNF"
30 Mar 2008 10.55.08 14 928 A.... "C:\WINDOWS\inf\netosi2c.PNF"
30 Mar 2008 10.55.08 10 956 A.... "C:\WINDOWS\inf\netngr.PNF"
30 Mar 2008 10.55.08 22 176 A.... "C:\WINDOWS\inf\netnf3.PNF"
30 Mar 2008 10.55.08 11 220 A.... "C:\WINDOWS\inf\netmhzn5.PNF"
30 Mar 2008 10.55.08 8 228 A.... "C:\WINDOWS\inf\netlnev2.PNF"
30 Mar 2008 10.55.08 7 368 A.... "C:\WINDOWS\inf\netlm56.PNF"
30 Mar 2008 10.55.08 7 484 A.... "C:\WINDOWS\inf\netlm.PNF"
30 Mar 2008 10.55.08 8 664 A.... "C:\WINDOWS\inf\netktc.PNF"
30 Mar 2008 10.55.08 14 988 A.... "C:\WINDOWS\inf\netibm2.PNF"
30 Mar 2008 10.55.08 17 952 A.... "C:\WINDOWS\inf\netibm.PNF"
30 Mar 2008 10.55.08 7 632 A.... "C:\WINDOWS\inf\netforeh.PNF"
30 Mar 2008 10.55.06 7 296 A.... "C:\WINDOWS\inf\netfjvj.PNF"
30 Mar 2008 10.55.06 7 264 A.... "C:\WINDOWS\inf\netfjvi.PNF"
30 Mar 2008 10.55.06 7 996 A.... "C:\WINDOWS\inf\netfa410.PNF"
30 Mar 2008 10.55.06 9 988 A.... "C:\WINDOWS\inf\netfa312.PNF"
30 Mar 2008 10.55.06 9 864 A.... "C:\WINDOWS\inf\netf56n5.PNF"
30 Mar 2008 10.55.06 7 124 A.... "C:\WINDOWS\inf\netex10.PNF"
30 Mar 2008 10.55.06 8 288 A.... "C:\WINDOWS\inf\netepro.PNF"
30 Mar 2008 10.55.06 10 944 A.... "C:\WINDOWS\inf\netepicn.PNF"
30 Mar 2008 10.55.06 17 500 A.... "C:\WINDOWS\inf\netel99x.PNF"
30 Mar 2008 10.55.06 12 780 A.... "C:\WINDOWS\inf\netel980.PNF"
30 Mar 2008 10.55.06 7 320 A.... "C:\WINDOWS\inf\netel5x9.PNF"
30 Mar 2008 10.55.06 11 212 A.... "C:\WINDOWS\inf\netel574.PNF"
30 Mar 2008 10.55.06 7 560 A.... "C:\WINDOWS\inf\netel515.PNF"
30 Mar 2008 10.55.06 8 412 A.... "C:\WINDOWS\inf\netejxmp.PNF"
30 Mar 2008 10.55.06 11 700 A.... "C:\WINDOWS\inf\nete100i.PNF"
30 Mar 2008 10.55.06 30 100 A.... "C:\WINDOWS\inf\nete1000.PNF"
30 Mar 2008 10.55.06 8 012 A.... "C:\WINDOWS\inf\net650d.PNF"
30 Mar 2008 10.55.06 10 688 A.... "C:\WINDOWS\inf\netdm.PNF"
30 Mar 2008 10.55.06 8 552 A.... "C:\WINDOWS\inf\netdf650.PNF"
30 Mar 2008 10.55.06 12 264 A.... "C:\WINDOWS\inf\netdlh5x.PNF"
30 Mar 2008 10.55.06 10 468 A.... "C:\WINDOWS\inf\netctmrk.PNF"
30 Mar 2008 10.55.06 10 520 A.... "C:\WINDOWS\inf\netcpqmt.PNF"
30 Mar 2008 10.55.06 17 940 A.... "C:\WINDOWS\inf\netcpqi.PNF"
30 Mar 2008 10.55.06 17 576 A.... "C:\WINDOWS\inf\netcpqg.PNF"
30 Mar 2008 10.55.06 12 912 A.... "C:\WINDOWS\inf\netcpqc.PNF"
30 Mar 2008 10.55.06 14 572 A.... "C:\WINDOWS\inf\netcem56.PNF"
30 Mar 2008 10.55.06 9 220 A.... "C:\WINDOWS\inf\netcem33.PNF"
30 Mar 2008 10.55.06 9 244 A.... "C:\WINDOWS\inf\netcem28.PNF"
30 Mar 2008 10.55.04 14 776 A.... "C:\WINDOWS\inf\netce3.PNF"
30 Mar 2008 10.55.04 10 152 A.... "C:\WINDOWS\inf\netce2.PNF"
30 Mar 2008 10.55.04 8 892 A.... "C:\WINDOWS\inf\netcb102.PNF"
30 Mar 2008 10.55.04 16 708 A.... "C:\WINDOWS\inf\netcbe.PNF"
30 Mar 2008 10.55.04 14 996 A.... "C:\WINDOWS\inf\netcb325.PNF"
30 Mar 2008 10.55.04 15 124 A.... "C:\WINDOWS\inf\netcicap.PNF"
30 Mar 2008 10.55.04 12 612 A.... "C:\WINDOWS\inf\netbrzw.PNF"
30 Mar 2008 10.55.04 8 884 A.... "C:\WINDOWS\inf\netbcm4e.PNF"
30 Mar 2008 10.55.04 8 824 A.... "C:\WINDOWS\inf\netbcm4u.PNF"
30 Mar 2008 10.55.04 9 440 A.... "C:\WINDOWS\inf\netbcm4p.PNF"
30 Mar 2008 10.55.04 35 248 A.... "C:\WINDOWS\inf\netb57xp.PNF"
30 Mar 2008 10.55.04 12 056 A.... "C:\WINDOWS\inf\netasp2k.PNF"
30 Mar 2008 10.55.04 10 488 A.... "C:\WINDOWS\inf\netamdhl.PNF"
30 Mar 2008 10.55.04 6 568 A.... "C:\WINDOWS\inf\netambi.PNF"
30 Mar 2008 10.55.04 18 088 A.... "C:\WINDOWS\inf\netamd2.PNF"
30 Mar 2008 10.55.04 9 852 A.... "C:\WINDOWS\inf\netamd.PNF"
30 Mar 2008 10.55.04 16 472 A.... "C:\WINDOWS\inf\netan983.PNF"
30 Mar 2008 10.55.04 7 748 A.... "C:\WINDOWS\inf\netali.PNF"
30 Mar 2008 10.55.04 7 800 A.... "C:\WINDOWS\inf\netac300.PNF"
30 Mar 2008 10.55.04 25 844 A.... "C:\WINDOWS\inf\net8511.PNF"
30 Mar 2008 10.55.04 16 204 A.... "C:\WINDOWS\inf\net83820.PNF"
30 Mar 2008 10.55.04 8 620 A.... "C:\WINDOWS\inf\net713.PNF"
30 Mar 2008 10.55.04 9 244 A.... "C:\WINDOWS\inf\net656c5.PNF"
30 Mar 2008 10.55.04 10 924 A.... "C:\WINDOWS\inf\net656n5.PNF"
30 Mar 2008 10.55.04 10 684 A.... "C:\WINDOWS\inf\net575nt.PNF"
30 Mar 2008 10.55.04 8 524 A.... "C:\WINDOWS\inf\net559ib.PNF"
30 Mar 2008 10.55.04 83 816 A.... "C:\WINDOWS\inf\net557.PNF"
30 Mar 2008 10.55.02 6 916 A.... "C:\WINDOWS\inf\net3sr.PNF"
30 Mar 2008 10.55.02 14 512 A.... "C:\WINDOWS\inf\net3c985.PNF"
30 Mar 2008 10.55.02 11 664 A.... "C:\WINDOWS\inf\net3c589.PNF"
30 Mar 2008 10.55.02 8 900 A.... "C:\WINDOWS\inf\net3c556.PNF"
30 Mar 2008 10.55.02 6 236 A.... "C:\WINDOWS\inf\net10.PNF"
30 Mar 2008 10.55.02 8 020 A.... "C:\WINDOWS\inf\neo20xx.PNF"
30 Mar 2008 10.55.02 12 224 A.... "C:\WINDOWS\inf\mxport.PNF"
30 Mar 2008 10.55.02 9 960 A.... "C:\WINDOWS\inf\mxboard.PNF"
30 Mar 2008 10.55.02 16 924 A.... "C:\WINDOWS\inf\mwremove.PNF"
30 Mar 2008 10.55.02 8 508 A.... "C:\WINDOWS\inf\mwmbatam.PNF"
30 Mar 2008 10.55.02 38 224 A.... "C:\WINDOWS\inf\mwavmdm1.PNF"
30 Mar 2008 10.55.02 59 908 A.... "C:\WINDOWS\inf\msnetmtg.PNF"
30 Mar 2008 10.55.02 15 924 A.... "C:\WINDOWS\inf\mpsstln.PNF"
30 Mar 2008 10.55.02 10 004 A.... "C:\WINDOWS\inf\mgau.PNF"
30 Mar 2008 10.55.02 9 460 A.... "C:\WINDOWS\inf\mfx56nf.PNF"
30 Mar 2008 10.55.02 12 292 A.... "C:\WINDOWS\inf\mfosi5.PNF"
30 Mar 2008 10.55.02 9 712 A.... "C:\WINDOWS\inf\mflm56.PNF"
30 Mar 2008 10.55.02 9 296 A.... "C:\WINDOWS\inf\mflm.PNF"
30 Mar 2008 10.55.02 11 076 A.... "C:\WINDOWS\inf\mfmhzn5.PNF"
30 Mar 2008 10.55.02 9 704 A.... "C:\WINDOWS\inf\mff56n5.PNF"
30 Mar 2008 10.55.02 19 024 A.... "C:\WINDOWS\inf\mfcem56.PNF"
30 Mar 2008 10.55.02 7 396 A.... "C:\WINDOWS\inf\mfcem33.PNF"
30 Mar 2008 10.55.02 7 668 A.... "C:\WINDOWS\inf\mfcem28.PNF"
30 Mar 2008 10.55.02 74 036 A.... "C:\WINDOWS\inf\mdmxirmp.PNF"
30 Mar 2008 10.55.02 76 812 A.... "C:\WINDOWS\inf\mdmxircc.PNF"
30 Mar 2008 10.55.00 23 000 A.... "C:\WINDOWS\inf\mdmsgsmu.PNF"
30 Mar 2008 10.55.00 6 076 A.... "C:\WINDOWS\inf\mdmsgsml.PNF"
30 Mar 2008 10.55.00 1 536 452 A.... "C:\WINDOWS\inf\mdmrpciw.PNF"
30 Mar 2008 10.54.56 6 776 A.... "C:\WINDOWS\inf\mdmrisa.PNF"
30 Mar 2008 10.54.56 68 664 A.... "C:\WINDOWS\inf\mdmpctel.PNF"
30 Mar 2008 10.54.56 39 416 A.... "C:\WINDOWS\inf\mdmosice.PNF"
30 Mar 2008 10.54.56 77 168 A.... "C:\WINDOWS\inf\mdmltsft.PNF"
30 Mar 2008 10.54.56 76 292 A.... "C:\WINDOWS\inf\mdmltleo.PNF"
30 Mar 2008 10.54.56 49 228 A.... "C:\WINDOWS\inf\mdmess.PNF"
30 Mar 2008 10.54.56 31 784 A.... "C:\WINDOWS\inf\mdmdigi.PNF"
30 Mar 2008 10.54.56 628 064 A.... "C:\WINDOWS\inf\mdmcxsft.PNF"
30 Mar 2008 10.54.56 81 048 A.... "C:\WINDOWS\inf\mdmbcmsm.PNF"
30 Mar 2008 10.54.56 56 852 A.... "C:\WINDOWS\inf\mdm656n5.PNF"
30 Mar 2008 10.54.56 99 404 A.... "C:\WINDOWS\inf\mdm3mini.PNF"
30 Mar 2008 10.54.56 49 072 A.... "C:\WINDOWS\inf\mdm3cpcm.PNF"
30 Mar 2008 10.54.56 11 892 A.... "C:\WINDOWS\inf\irtos4mo.PNF"
30 Mar 2008 10.54.56 8 948 A.... "C:\WINDOWS\inf\irdaalif.PNF"
30 Mar 2008 10.54.56 6 124 A.... "C:\WINDOWS\inf\i81xwtv4.PNF"
30 Mar 2008 10.54.56 6 124 A.... "C:\WINDOWS\inf\i81xwtv3.PNF"
30 Mar 2008 10.54.56 6 124 A.... "C:\WINDOWS\inf\i81xwtv2.PNF"
30 Mar 2008 10.54.56 6 124 A.... "C:\WINDOWS\inf\i81xwtv1.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwtv0.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwfp4.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwfp3.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwfp2.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwfp1.PNF"
30 Mar 2008 10.54.54 6 124 A.... "C:\WINDOWS\inf\i81xwfp0.PNF"
30 Mar 2008 10.54.54 11 220 A.... "C:\WINDOWS\inf\i81xnt5.PNF"
30 Mar 2008 10.54.54 8 996 A.... "C:\WINDOWS\inf\i740nt5.PNF"
30 Mar 2008 10.54.54 11 868 A.... "C:\WINDOWS\inf\g200.PNF"
30 Mar 2008 10.54.54 2 648 A.... "C:\WINDOWS\inf\fsvgadel.PNF"
30 Mar 2008 10.54.54 2 648 A.... "C:\WINDOWS\inf\fsvgaadd.PNF"
30 Mar 2008 10.54.54 8 708 A.... "C:\WINDOWS\inf\fsvga.PNF"
30 Mar 2008 10.54.54 6 584 A.... "C:\WINDOWS\inf\eqnport.PNF"
30 Mar 2008 10.54.54 8 760 A.... "C:\WINDOWS\inf\dshowext.PNF"
30 Mar 2008 10.54.54 23 804 A.... "C:\WINDOWS\inf\divasrv.PNF"
30 Mar 2008 10.54.54 33 636 A.... "C:\WINDOWS\inf\divac.PNF"
30 Mar 2008 10.54.54 21 512 A.... "C:\WINDOWS\inf\ctmaport.PNF"
30 Mar 2008 10.54.54 9 908 A.... "C:\WINDOWS\inf\banshee.PNF"
30 Mar 2008 10.54.54 33 304 A.... "C:\WINDOWS\inf\avmisdn.PNF"
30 Mar 2008 10.54.54 9 428 A.... "C:\WINDOWS\inf\atirage3.PNF"
30 Mar 2008 10.54.54 38 660 A.... "C:\WINDOWS\inf\atimpab.PNF"
30 Mar 2008 10.54.54 29 332 A.... "C:\WINDOWS\inf\atim128.PNF"
30 Mar 2008 10.54.54 13 628 A.... "C:\WINDOWS\inf\asynceqn.PNF"
30 Mar 2008 10.54.54 6 492 A.... "C:\WINDOWS\inf\adm_port.PNF"
30 Mar 2008 10.54.54 8 240 A.... "C:\WINDOWS\inf\adm_mult.PNF"
30 Mar 2008 10.54.52 28 852 A.... "C:\WINDOWS\inf\3dfxvs2k.PNF"
30 Mar 2008 10.54.52 16 880 A.... "C:\WINDOWS\inf\oobe.PNF"
30 Mar 2008 10.54.10 9 072 A.... "C:\WINDOWS\inf\wstcodec.PNF"
30 Mar 2008 10.54.52 15 932 A.... "C:\WINDOWS\inf\wsh.PNF"
30 Mar 2008 10.54.52 6 644 A.... "C:\WINDOWS\inf\wmtour.PNF"
30 Mar 2008 10.54.52 19 976 A.... "C:\WINDOWS\inf\wdmjoy.PNF"
30 Mar 2008 10.54.52 17 488 A.... "C:\WINDOWS\inf\wdma_ymh.PNF"
30 Mar 2008 10.54.52 30 420 A.... "C:\WINDOWS\inf\wdma_ym2.PNF"
30 Mar 2008 10.54.52 74 620 A.... "C:\WINDOWS\inf\wdma_usb.PNF"
30 Mar 2008 10.54.52 44 356 A.... "C:\WINDOWS\inf\wdma_sis.PNF"
30 Mar 2008 10.54.52 26 200 A.... "C:\WINDOWS\inf\wdma_rip.PNF"
30 Mar 2008 10.54.52 18 920 A.... "C:\WINDOWS\inf\wdma_ne2.PNF"
30 Mar 2008 10.54.52 25 112 A.... "C:\WINDOWS\inf\wdma_neo.PNF"
30 Mar 2008 10.54.52 43 920 A.... "C:\WINDOWS\inf\wdma_m2e.PNF"
30 Mar 2008 10.54.52 42 240 A.... "C:\WINDOWS\inf\wdma_ess.PNF"
30 Mar 2008 10.54.52 36 640 A.... "C:\WINDOWS\inf\wdma_ens.PNF"
30 Mar 2008 10.54.50 123 868 A.... "C:\WINDOWS\inf\wdma_es3.PNF"
30 Mar 2008 10.54.50 102 540 A.... "C:\WINDOWS\inf\wdma_es2.PNF"
30 Mar 2008 10.54.50 32 044 A.... "C:\WINDOWS\inf\wdma_cwr.PNF"
30 Mar 2008 10.54.50 64 008 A.... "C:\WINDOWS\inf\wdma_ctl.PNF"
30 Mar 2008 10.54.50 45 872 A.... "C:\WINDOWS\inf\wdma_csf.PNF"
30 Mar 2008 10.54.50 41 964 A.... "C:\WINDOWS\inf\wdma_csc.PNF"
30 Mar 2008 10.54.50 35 772 A.... "C:\WINDOWS\inf\wdma_azt.PNF"
30 Mar 2008 10.54.50 18 312 A.... "C:\WINDOWS\inf\wdma_avc.PNF"
30 Mar 2008 10.54.50 10 812 A.... "C:\WINDOWS\inf\wave.PNF"
30 Mar 2008 10.54.50 21 368 A.... "C:\WINDOWS\inf\wab50.PNF"
30 Mar 2008 10.54.50 4 376 A.... "C:\WINDOWS\inf\vgx.PNF"
30 Mar 2008 10.54.48 38 104 A.... "C:\WINDOWS\inf\usbstor.PNF"
30 Mar 2008 10.54.48 5 492 A.... "C:\WINDOWS\inf\usbprint.PNF"
30 Mar 2008 10.54.46 4 896 A.... "C:\WINDOWS\inf\unknown.PNF"
30 Mar 2008 10.54.46 11 032 A.... "C:\WINDOWS\inf\umaxpp.PNF"
30 Mar 2008 10.54.46 68 420 A.... "C:\WINDOWS\inf\umax.PNF"
30 Mar 2008 10.54.46 9 776 A.... "C:\WINDOWS\inf\tshoot.PNF"
30 Mar 2008 10.54.46 9 916 A.... "C:\WINDOWS\inf\tsbvcap.PNF"
30 Mar 2008 10.54.46 3 204 A.... "C:\WINDOWS\inf\syscomp.PNF"
30 Mar 2008 10.54.38 11 796 A.... "C:\WINDOWS\inf\streamip.PNF"
30 Mar 2008 10.54.46 87 424 A.... "C:\WINDOWS\inf\stillcam.PNF"
30 Mar 2008 10.54.46 11 724 A.... "C:\WINDOWS\inf\srusbusd.PNF"
30 Mar 2008 10.54.46 5 988 A.... "C:\WINDOWS\inf\srchasst.PNF"
30 Mar 2008 10.54.46 12 064 A.... "C:\WINDOWS\inf\sr.PNF"
30 Mar 2008 10.54.46 6 200 A.... "C:\WINDOWS\inf\sonypvu1.PNF"
30 Mar 2008 10.54.40 9 068 A.... "C:\WINDOWS\inf\slip.PNF"
30 Mar 2008 10.54.46 6 348 A.... "C:\WINDOWS\inf\skins.PNF"
30 Mar 2008 10.54.46 16 120 A.... "C:\WINDOWS\inf\shl_img.PNF"
30 Mar 2008 10.54.46 31 144 A.... "C:\WINDOWS\inf\shell.PNF"
30 Mar 2008 10.54.46 26 044 A.... "C:\WINDOWS\inf\secrecs.PNF"
30 Mar 2008 10.54.46 4 096 A.... "C:\WINDOWS\inf\secdrv.PNF"
30 Mar 2008 10.54.46 37 520 A.... "C:\WINDOWS\inf\sdwndr2k.PNF"
30 Mar 2008 10.54.46 37 824 A.... "C:\WINDOWS\inf\scsidev.PNF"
30 Mar 2008 10.54.46 38 484 A.... "C:\WINDOWS\inf\sceregvl.PNF"
30 Mar 2008 10.54.44 18 492 A.... "C:\WINDOWS\inf\ricoh.PNF"
30 Mar 2008 10.54.44 8 276 A.... "C:\WINDOWS\inf\qmgr.PNF"
30 Mar 2008 10.54.44 10 788 A.... "C:\WINDOWS\inf\ptpusb.PNF"
30 Mar 2008 10.54.44 146 476 A.... "C:\WINDOWS\inf\prtupg9x.PNF"
30 Mar 2008 10.54.44 44 964 A.... "C:\WINDOWS\inf\printupg.PNF"
30 Mar 2008 10.54.44 17 008 A.... "C:\WINDOWS\inf\pmxmcro.PNF"
30 Mar 2008 10.54.44 13 292 A.... "C:\WINDOWS\inf\philtune.PNF"
30 Mar 2008 10.54.44 13 228 A.... "C:\WINDOWS\inf\phildec.PNF"
30 Mar 2008 10.54.44 13 828 A.... "C:\WINDOWS\inf\phil2vid.PNF"
30 Mar 2008 10.54.44 10 484 A.... "C:\WINDOWS\inf\phil1vid.PNF"
30 Mar 2008 10.54.44 12 604 A.... "C:\WINDOWS\inf\phdsext.PNF"
30 Mar 2008 10.54.44 9 004 A.... "C:\WINDOWS\inf\perm3.PNF"
30 Mar 2008 10.54.44 12 556 A.... "C:\WINDOWS\inf\perm2.PNF"
30 Mar 2008 10.54.44 12 420 A.... "C:\WINDOWS\inf\ovsound.PNF"
30 Mar 2008 10.54.44 5 868 A.... "C:\WINDOWS\inf\ovcomp.PNF"
30 Mar 2008 10.54.44 24 764 A.... "C:\WINDOWS\inf\ovcam.PNF"
30 Mar 2008 10.54.44 7 104 A.... "C:\WINDOWS\inf\ntgrip.PNF"
30 Mar 2008 10.54.44 6 960 A.... "C:\WINDOWS\inf\netwzc.PNF"
30 Mar 2008 10.54.44 8 864 A.... "C:\WINDOWS\inf\netupnph.PNF"
30 Mar 2008 10.54.44 35 352 A.... "C:\WINDOWS\inf\nettcpip.PNF"
30 Mar 2008 10.54.42 8 684 A.... "C:\WINDOWS\inf\netserv.PNF"
30 Mar 2008 10.54.42 7 572 A.... "C:\WINDOWS\inf\netsap.PNF"
30 Mar 2008 10.54.42 8 484 A.... "C:\WINDOWS\inf\netrwan.PNF"
30 Mar 2008 10.54.42 8 392 A.... "C:\WINDOWS\inf\netrsvp.PNF"
30 Mar 2008 10.54.42 12 184 A.... "C:\WINDOWS\inf\netrast.PNF"
30 Mar 2008 10.54.42 24 080 A.... "C:\WINDOWS\inf\netrasa.PNF"
30 Mar 2008 10.54.42 6 248 A.... "C:\WINDOWS\inf\netpschd.PNF"
30 Mar 2008 10.54.42 5 796 A.... "C:\WINDOWS\inf\netpsa.PNF"
30 Mar 2008 10.54.42 16 260 A.... "C:\WINDOWS\inf\netnwlnk.PNF"
30 Mar 2008 10.54.42 10 856 A.... "C:\WINDOWS\inf\netnwcli.PNF"
30 Mar 2008 10.54.42 14 668 A.... "C:\WINDOWS\inf\netnovel.PNF"
30 Mar 2008 10.54.42 6 056 A.... "C:\WINDOWS\inf\netnb.PNF"
30 Mar 2008 10.54.42 20 648 A.... "C:\WINDOWS\inf\netmscli.PNF"
30 Mar 2008 10.54.42 27 932 A.... "C:\WINDOWS\inf\netmadge.PNF"
30 Mar 2008 10.54.42 7 456 A.... "C:\WINDOWS\inf\netloop.PNF"
30 Mar 2008 10.54.42 6 324 A.... "C:\WINDOWS\inf\netlanep.PNF"
30 Mar 2008 10.54.42 5 428 A.... "C:\WINDOWS\inf\netlanem.PNF"
30 Mar 2008 10.54.42 9 676 A.... "C:\WINDOWS\inf\netirda.PNF"
30 Mar 2008 10.54.42 9 804 A.... "C:\WINDOWS\inf\netias.PNF"
30 Mar 2008 10.54.42 5 340 A.... "C:\WINDOWS\inf\netgpc.PNF"
30 Mar 2008 10.54.42 7 656 A.... "C:\WINDOWS\inf\netfore.PNF"
30 Mar 2008 10.54.42 6 484 A.... "C:\WINDOWS\inf\netepvcp.PNF"
30 Mar 2008 10.54.42 7 016 A.... "C:\WINDOWS\inf\netepvcm.PNF"
30 Mar 2008 10.54.42 19 568 A.... "C:\WINDOWS\inf\netel90b.PNF"
30 Mar 2008 10.54.42 12 000 A.... "C:\WINDOWS\inf\netel90a.PNF"
30 Mar 2008 10.54.40 57 556 A.... "C:\WINDOWS\inf\netdgdxb.PNF"
30 Mar 2008 10.54.40 9 380 A.... "C:\WINDOWS\inf\netdefxa.PNF"
30 Mar 2008 10.54.40 10 536 A.... "C:\WINDOWS\inf\netdav.PNF"
30 Mar 2008 10.54.40 4 416 A.... "C:\WINDOWS\inf\netcis.PNF"
30 Mar 2008 10.54.40 5 484 A.... "C:\WINDOWS\inf\netbrdgs.PNF"
30 Mar 2008 10.54.40 5 896 A.... "C:\WINDOWS\inf\netbrdgm.PNF"
30 Mar 2008 10.54.40 6 656 A.... "C:\WINDOWS\inf\netauni.PNF"
30 Mar 2008 10.54.40 12 252 A.... "C:\WINDOWS\inf\netana.PNF"
30 Mar 2008 10.54.40 8 580 A.... "C:\WINDOWS\inf\net5515n.PNF"
30 Mar 2008 10.54.40 26 792 A.... "C:\WINDOWS\inf\net21x4.PNF"
30 Mar 2008 10.54.40 6 356 A.... "C:\WINDOWS\inf\net1394.PNF"
30 Mar 2008 10.54.46 8 988 A.... "C:\WINDOWS\inf\ndisip.PNF"
30 Mar 2008 10.54.40 5 864 A.... "C:\WINDOWS\inf\ndisuio.PNF"
30 Mar 2008 10.54.46 9 500 A.... "C:\WINDOWS\inf\nabtsfec.PNF"
30 Mar 2008 10.54.40 4 000 A.... "C:\WINDOWS\inf\mymusic.PNF"
30 Mar 2008 10.54.40 8 720 A.... "C:\WINDOWS\inf\mtxvideo.PNF"
30 Mar 2008 10.54.40 14 032 A.... "C:\WINDOWS\inf\mstask.PNF"
30 Mar 2008 10.54.40 22 176 A.... "C:\WINDOWS\inf\mstape.PNF"
30 Mar 2008 10.54.40 7 012 A.... "C:\WINDOWS\inf\msrio.PNF"
30 Mar 2008 10.54.40 6 928 A.... "C:\WINDOWS\inf\msrio8.PNF"
30 Mar 2008 10.54.40 6 808 A.... "C:\WINDOWS\inf\msnike.PNF"
30 Mar 2008 10.54.40 15 340 A.... "C:\WINDOWS\inf\msmusb.PNF"
30 Mar 2008 10.54.40 29 196 A.... "C:\WINDOWS\inf\msmscsi.PNF"
30 Mar 2008 10.54.38 9 968 A.... "C:\WINDOWS\inf\msinfo32.PNF"
30 Mar 2008 10.54.38 39 292 A.... "C:\WINDOWS\inf\msdv.PNF"
30 Mar 2008 10.54.38 6 688 A.... "C:\WINDOWS\inf\mscpqpa1.PNF"
30 Mar 2008 10.54.38 2 808 A.... "C:\WINDOWS\inf\mqsysoc.PNF"
30 Mar 2008 10.55.12 8 164 A.... "C:\WINDOWS\inf\mpe.PNF"
30 Mar 2008 10.54.38 10 872 A.... "C:\WINDOWS\inf\moviemk.PNF"
30 Mar 2008 10.54.38 112 360 A.... "C:\WINDOWS\inf\monitor8.PNF"
30 Mar 2008 10.54.38 88 208 A.... "C:\WINDOWS\inf\monitor7.PNF"
30 Mar 2008 10.54.38 94 420 A.... "C:\WINDOWS\inf\monitor6.PNF"
30 Mar 2008 10.54.38 120 616 A.... "C:\WINDOWS\inf\monitor5.PNF"
30 Mar 2008 10.54.38 86 844 A.... "C:\WINDOWS\inf\monitor4.PNF"
30 Mar 2008 10.54.38 89 384 A.... "C:\WINDOWS\inf\monitor3.PNF"
30 Mar 2008 10.54.38 101 148 A.... "C:\WINDOWS\inf\monitor2.PNF"
30 Mar 2008 10.54.38 11 836 A.... "C:\WINDOWS\inf\modemcsa.PNF"
30 Mar 2008 10.54.38 42 740 A.... "C:\WINDOWS\inf\mmopt.PNF"
30 Mar 2008 10.54.38 3 788 A.... "C:\WINDOWS\inf\minioc.PNF"
30 Mar 2008 10.54.38 6 636 A.... "C:\WINDOWS\inf\mfsupra.PNF"
30 Mar 2008 10.54.38 9 604 A.... "C:\WINDOWS\inf\mfsocket.PNF"
30 Mar 2008 10.54.36 71 144 A.... "C:\WINDOWS\inf\mdmx5560.PNF"
30 Mar 2008 10.54.36 168 904 A.... "C:\WINDOWS\inf\mdmwhql0.PNF"
30 Mar 2008 10.54.36 26 836 A.... "C:\WINDOWS\inf\mdmvv.PNF"
30 Mar 2008 10.54.36 8 224 A.... "C:\WINDOWS\inf\mdmvdot.PNF"
30 Mar 2008 10.54.36 10 424 A.... "C:\WINDOWS\inf\mdmusrsp.PNF"
30 Mar 2008 10.54.36 74 520 A.... "C:\WINDOWS\inf\mdmusrk1.PNF"
30 Mar 2008 10.54.36 75 336 A.... "C:\WINDOWS\inf\mdmusrgl.PNF"
30 Mar 2008 10.54.36 23 852 A.... "C:\WINDOWS\inf\mdmusrg.PNF"
30 Mar 2008 10.54.36 9 332 A.... "C:\WINDOWS\inf\mdmusrf.PNF"
30 Mar 2008 10.54.36 23 188 A.... "C:\WINDOWS\inf\mdmtron.PNF"
30 Mar 2008 10.54.36 53 128 A.... "C:\WINDOWS\inf\mdmtosh.PNF"
30 Mar 2008 10.54.36 53 880 A.... "C:\WINDOWS\inf\mdmti.PNF"
30 Mar 2008 10.54.36 16 332 A.... "C:\WINDOWS\inf\mdmtexas.PNF"
30 Mar 2008 10.54.36 20 260 A.... "C:\WINDOWS\inf\mdmtdkj7.PNF"
30 Mar 2008 10.54.36 17 320 A.... "C:\WINDOWS\inf\mdmtdkj6.PNF"
30 Mar 2008 10.54.36 29 708 A.... "C:\WINDOWS\inf\mdmtdkj5.PNF"
30 Mar 2008 10.54.36 24 516 A.... "C:\WINDOWS\inf\mdmtdkj4.PNF"
30 Mar 2008 10.54.36 26 716 A.... "C:\WINDOWS\inf\mdmtdkj3.PNF"
30 Mar 2008 10.54.36 27 016 A.... "C:\WINDOWS\inf\mdmtdkj2.PNF"
30 Mar 2008 10.54.34 65 804 A.... "C:\WINDOWS\inf\mdmtdk.PNF"
30 Mar 2008 10.54.34 134 308 A.... "C:\WINDOWS\inf\mdmsupra.PNF"
30 Mar 2008 10.54.34 45 896 A.... "C:\WINDOWS\inf\mdmsupr3.PNF"
30 Mar 2008 10.54.34 34 272 A.... "C:\WINDOWS\inf\mdmsun2.PNF"
30 Mar 2008 10.54.34 11 292 A.... "C:\WINDOWS\inf\mdmsun1.PNF"
30 Mar 2008 10.54.34 23 408 A.... "C:\WINDOWS\inf\mdmsii64.PNF"
30 Mar 2008 10.54.34 23 608 A.... "C:\WINDOWS\inf\mdmsiil6.PNF"
30 Mar 2008 10.54.34 76 068 A.... "C:\WINDOWS\inf\mdmspq28.PNF"
30 Mar 2008 10.54.34 90 232 A.... "C:\WINDOWS\inf\mdmsonyu.PNF"
30 Mar 2008 10.54.34 14 536 A.... "C:\WINDOWS\inf\mdmsmart.PNF"
30 Mar 2008 10.54.34 44 876 A.... "C:\WINDOWS\inf\mdmsier.PNF"
30 Mar 2008 10.54.34 125 636 A.... "C:\WINDOWS\inf\mdmrock5.PNF"
30 Mar 2008 10.54.34 71 236 A.... "C:\WINDOWS\inf\mdmrock4.PNF"
30 Mar 2008 10.54.34 50 624 A.... "C:\WINDOWS\inf\mdmrock3.PNF"
30 Mar 2008 10.54.34 23 712 A.... "C:\WINDOWS\inf\mdmrock.PNF"
30 Mar 2008 10.54.34 80 624 A.... "C:\WINDOWS\inf\mdmracal.PNF"
30 Mar 2008 10.54.34 15 840 A.... "C:\WINDOWS\inf\mdmpsion.PNF"
30 Mar 2008 10.54.34 57 224 A.... "C:\WINDOWS\inf\mdmpp.PNF"
30 Mar 2008 10.54.34 10 424 A.... "C:\WINDOWS\inf\mdmpn1.PNF"
30 Mar 2008 10.54.32 19 268 A.... "C:\WINDOWS\inf\mdmpin.PNF"
30 Mar 2008 10.54.32 79 716 A.... "C:\WINDOWS\inf\mdmpenr.PNF"
30 Mar 2008 10.54.32 8 372 A.... "C:\WINDOWS\inf\mdmpbit.PNF"
30 Mar 2008 10.54.32 27 860 A.... "C:\WINDOWS\inf\mdmpace.PNF"
30 Mar 2008 10.54.32 49 096 A.... "C:\WINDOWS\inf\mdmosi.PNF"
30 Mar 2008 10.54.32 11 480 A.... "C:\WINDOWS\inf\mdmoptn.PNF"
30 Mar 2008 10.54.32 126 152 A.... "C:\WINDOWS\inf\mdmomrn3.PNF"
30 Mar 2008 10.54.32 19 048 A.... "C:\WINDOWS\inf\mdmolic.PNF"
30 Mar 2008 10.54.32 10 572 A.... "C:\WINDOWS\inf\mdmnttte.PNF"
30 Mar 2008 10.54.32 17 460 A.... "C:\WINDOWS\inf\mdmnttp2.PNF"
30 Mar 2008 10.54.32 16 196 A.... "C:\WINDOWS\inf\mdmnttp.PNF"
30 Mar 2008 10.54.32 11 516 A.... "C:\WINDOWS\inf\mdmnttme.PNF"
30 Mar 2008 10.54.32 22 004 A.... "C:\WINDOWS\inf\mdmnttd6.PNF"
30 Mar 2008 10.54.32 21 996 A.... "C:\WINDOWS\inf\mdmnttd2.PNF"
30 Mar 2008 10.54.32 13 800 A.... "C:\WINDOWS\inf\mdmntt1.PNF"
30 Mar 2008 10.54.32 20 216 A.... "C:\WINDOWS\inf\mdmnova.PNF"
30 Mar 2008 10.54.32 13 244 A.... "C:\WINDOWS\inf\mdmnokia.PNF"
30 Mar 2008 10.54.32 10 340 A.... "C:\WINDOWS\inf\Mdmnis5t.PNF"
30 Mar 2008 10.54.32 17 300 A.... "C:\WINDOWS\inf\memcard.PNF"
30 Mar 2008 10.54.32 10 364 A.... "C:\WINDOWS\inf\Mdmnis3t.PNF"
30 Mar 2008 10.54.32 134 964 A.... "C:\WINDOWS\inf\mdmzyxlg.PNF"
30 Mar 2008 10.54.32 11 340 A.... "C:\WINDOWS\inf\Mdmnis2u.PNF"
30 Mar 2008 10.54.32 122 052 A.... "C:\WINDOWS\inf\mdmzyxel.PNF"
30 Mar 2008 10.54.30 11 268 A.... "C:\WINDOWS\inf\Mdmnis1u.PNF"
30 Mar 2008 10.54.30 80 924 A.... "C:\WINDOWS\inf\mdmzyp.PNF"
30 Mar 2008 10.54.30 20 328 A.... "C:\WINDOWS\inf\mdmneuhs.PNF"
30 Mar 2008 10.54.30 81 760 A.... "C:\WINDOWS\inf\mdmmts.PNF"
30 Mar 2008 10.54.30 8 864 A.... "C:\WINDOWS\inf\mdmmotou.PNF"
30 Mar 2008 10.54.30 20 132 A.... "C:\WINDOWS\inf\mdmmoto1.PNF"
30 Mar 2008 10.54.30 72 136 A.... "C:\WINDOWS\inf\mdmmoto.PNF"
30 Mar 2008 10.54.30 18 540 A.... "C:\WINDOWS\inf\mdmmod.PNF"
30 Mar 2008 10.54.30 11 696 A.... "C:\WINDOWS\inf\mdmminij.PNF"
30 Mar 2008 10.54.30 89 996 A.... "C:\WINDOWS\inf\mdmmhzk1.PNF"
30 Mar 2008 10.54.30 199 760 A.... "C:\WINDOWS\inf\mdmmhzel.PNF"
30 Mar 2008 10.54.30 92 092 A.... "C:\WINDOWS\inf\mdmmhza.PNF"
30 Mar 2008 10.54.30 74 120 A.... "C:\WINDOWS\inf\mdmmhrtz.PNF"
30 Mar 2008 10.54.30 110 412 A.... "C:\WINDOWS\inf\mdmmetri.PNF"
30 Mar 2008 10.54.30 17 416 A.... "C:\WINDOWS\inf\mdmmega.PNF"
30 Mar 2008 10.54.30 63 176 A.... "C:\WINDOWS\inf\mdmmct.PNF"
30 Mar 2008 10.54.30 64 544 A.... "C:\WINDOWS\inf\mdmmcom.PNF"
30 Mar 2008 10.54.30 11 504 A.... "C:\WINDOWS\inf\mdmmcd.PNF"
30 Mar 2008 10.54.30 16 504 A.... "C:\WINDOWS\inf\mdmmc288.PNF"
30 Mar 2008 10.54.30 36 404 A.... "C:\WINDOWS\inf\mdmlucnt.PNF"
30 Mar 2008 10.54.28 42 660 A.... "C:\WINDOWS\inf\mdmlasno.PNF"
30 Mar 2008 10.54.28 20 868 A.... "C:\WINDOWS\inf\mdmlasat.PNF"
30 Mar 2008 10.54.28 12 644 A.... "C:\WINDOWS\inf\mdmkortx.PNF"
30 Mar 2008 10.54.28 11 892 A.... "C:\WINDOWS\inf\mdmke.PNF"
30 Mar 2008 10.54.28 25 996 A.... "C:\WINDOWS\inf\MDMJF56E.PNF"
30 Mar 2008 10.54.28 58 752 A.... "C:\WINDOWS\inf\mdmisdn.PNF"
30 Mar 2008 10.54.28 107 616 A.... "C:\WINDOWS\inf\mdmirmdm.PNF"
30 Mar 2008 10.54.28 30 748 A.... "C:\WINDOWS\inf\mdmiodat.PNF"
30 Mar 2008 10.54.28 27 208 A.... "C:\WINDOWS\inf\mdmintel.PNF"
30 Mar 2008 10.54.28 28 908 A.... "C:\WINDOWS\inf\mdminfot.PNF"
30 Mar 2008 10.54.28 102 112 A.... "C:\WINDOWS\inf\mdmhayes.PNF"
30 Mar 2008 10.54.28 69 848 A.... "C:\WINDOWS\inf\mdmhay2.PNF"
30 Mar 2008 10.54.28 59 556 A.... "C:\WINDOWS\inf\mdmhandy.PNF"
30 Mar 2008 10.54.28 8 560 A.... "C:\WINDOWS\inf\mdmhaeu.PNF"
30 Mar 2008 10.54.28 29 512 A.... "C:\WINDOWS\inf\mdmgsm.PNF"
30 Mar 2008 10.54.28 93 596 A.... "C:\WINDOWS\inf\mdmgl010.PNF"
30 Mar 2008 10.54.28 157 264 A.... "C:\WINDOWS\inf\mdmgl009.PNF"
30 Mar 2008 10.54.28 57 572 A.... "C:\WINDOWS\inf\mdmgl008.PNF"
30 Mar 2008 10.54.28 151 716 A.... "C:\WINDOWS\inf\mdmgl007.PNF"
30 Mar 2008 10.54.28 96 712 A.... "C:\WINDOWS\inf\mdmgl006.PNF"
30 Mar 2008 10.54.28 82 384 A.... "C:\WINDOWS\inf\mdmgl005.PNF"
30 Mar 2008 10.54.26 1 597 336 A.... "C:\WINDOWS\inf\mdmgl004.PNF"
30 Mar 2008 10.54.24 59 372 A.... "C:\WINDOWS\inf\mdmgl003.PNF"
30 Mar 2008 10.54.24 89 852 A.... "C:\WINDOWS\inf\mdmgl002.PNF"
30 Mar 2008 10.54.24 77 228 A.... "C:\WINDOWS\inf\mdmgl001.PNF"
30 Mar 2008 10.54.24 72 408 A.... "C:\WINDOWS\inf\mdmgen.PNF"
30 Mar 2008 10.54.22 42 676 A.... "C:\WINDOWS\inf\mdmgcs.PNF"
30 Mar 2008 10.54.22 69 540 A.... "C:\WINDOWS\inf\mdmgatew.PNF"
30 Mar 2008 10.54.22 21 124 A.... "C:\WINDOWS\inf\mdmfj2.PNF"
30 Mar 2008 10.54.22 47 316 A.... "C:\WINDOWS\inf\mdmexp.PNF"
30 Mar 2008 10.54.22 26 872 A.... "C:\WINDOWS\inf\mdmeric2.PNF"
30 Mar 2008 10.54.22 20 192 A.... "C:\WINDOWS\inf\mdmeric.PNF"
30 Mar 2008 10.54.22 115 112 A.... "C:\WINDOWS\inf\mdmelsa.PNF"
30 Mar 2008 10.54.22 30 596 A.... "C:\WINDOWS\inf\mdmeiger.PNF"
30 Mar 2008 10.54.22 57 164 A.... "C:\WINDOWS\inf\mdmdyna.PNF"
30 Mar 2008 10.54.22 169 544 A.... "C:\WINDOWS\inf\mdmdsi.PNF"
30 Mar 2008 10.54.22 17 500 A.... "C:\WINDOWS\inf\mdmdp2.PNF"
30 Mar 2008 10.54.22 20 368 A.... "C:\WINDOWS\inf\mdmdgden.PNF"
30 Mar 2008 10.54.22 20 052 A.... "C:\WINDOWS\inf\mdmdgitn.PNF"
30 Mar 2008 10.54.22 24 624 A.... "C:\WINDOWS\inf\mdmdf56F.PNF"
30 Mar 2008 10.54.20 129 992 A.... "C:\WINDOWS\inf\mdmzoom.PNF"
30 Mar 2008 10.54.20 34 084 A.... "C:\WINDOWS\inf\mdmdcm6.PNF"
30 Mar 2008 10.54.20 77 992 A.... "C:\WINDOWS\inf\mdmdcm5.PNF"
30 Mar 2008 10.54.20 21 372 A.... "C:\WINDOWS\inf\mdmcrtix.PNF"
30 Mar 2008 10.54.20 13 828 A.... "C:\WINDOWS\inf\mdmcpv.PNF"
30 Mar 2008 10.54.20 47 576 A.... "C:\WINDOWS\inf\mdmcpq2.PNF"
30 Mar 2008 10.54.20 136 128 A.... "C:\WINDOWS\inf\mdmcpq.PNF"
30 Mar 2008 10.54.20 12 528 A.... "C:\WINDOWS\inf\mdmcomp.PNF"
30 Mar 2008 10.54.20 10 456 A.... "C:\WINDOWS\inf\mdmcommu.PNF"
30 Mar 2008 10.54.20 43 240 A.... "C:\WINDOWS\inf\mdmcom1.PNF"
30 Mar 2008 10.54.20 24 468 A.... "C:\WINDOWS\inf\mdmcodex.PNF"
30 Mar 2008 10.54.20 91 508 A.... "C:\WINDOWS\inf\mdmcm28.PNF"
30 Mar 2008 10.54.18 12 544 A.... "C:\WINDOWS\inf\mdmcdp.PNF"
30 Mar 2008 10.54.18 22 428 A.... "C:\WINDOWS\inf\mdmc26a.PNF"
30 Mar 2008 10.54.18 26 316 A.... "C:\WINDOWS\inf\mdmbw561.PNF"
30 Mar 2008 10.54.18 10 516 A.... "C:\WINDOWS\inf\mdmbug3.PNF"
30 Mar 2008 10.54.18 23 888 A.... "C:\WINDOWS\inf\mdmbsb.PNF"
30 Mar 2008 10.54.18 64 292 A.... "C:\WINDOWS\inf\mdmboca.PNF"
30 Mar 2008 10.54.18 21 376 A.... "C:\WINDOWS\inf\mdmaus.PNF"
30 Mar 2008 10.54.18 34 212 A.... "C:\WINDOWS\inf\mdmatt.PNF"
30 Mar 2008 10.54.18 19 568 A.... "C:\WINDOWS\inf\mdmatm2k.PNF"
30 Mar 2008 10.54.18 77 752 A.... "C:\WINDOWS\inf\mdmati.PNF"
30 Mar 2008 10.54.18 16 420 A.... "C:\WINDOWS\inf\mdmarn.PNF"
30 Mar 2008 10.54.18 43 228 A.... "C:\WINDOWS\inf\mdmarch.PNF"
30 Mar 2008 10.54.18 15 528 A.... "C:\WINDOWS\inf\mdmar1.PNF"
30 Mar 2008 10.54.18 10 968 A.... "C:\WINDOWS\inf\mdmaiwat.PNF"
30 Mar 2008 10.54.18 26 676 A.... "C:\WINDOWS\inf\mdmaiwa5.PNF"
30 Mar 2008 10.54.18 105 104 A.... "C:\WINDOWS\inf\mdmaiwa4.PNF"
30 Mar 2008 10.54.18 18 488 A.... "C:\WINDOWS\inf\mdmaiwa3.PNF"
30 Mar 2008 10.54.18 23 988 A.... "C:\WINDOWS\inf\mdmaiwa.PNF"
30 Mar 2008 10.54.18 8 824 A.... "C:\WINDOWS\inf\mdmairte.PNF"
30 Mar 2008 10.54.18 15 036 A.... "C:\WINDOWS\inf\mdmadc.PNF"
30 Mar 2008 10.54.18 43 708 A.... "C:\WINDOWS\inf\mdm5674a.PNF"
30 Mar 2008 10.54.18 97 624 A.... "C:\WINDOWS\inf\mdm3com.PNF"
30 Mar 2008 10.54.18 12 708 A.... "C:\WINDOWS\inf\mdac.PNF"
30 Mar 2008 10.54.16 18 680 A.... "C:\WINDOWS\inf\lwusbhid.PNF"
30 Mar 2008 10.54.16 13 944 A.... "C:\WINDOWS\inf\lwngmadi.PNF"
30 Mar 2008 10.55.46 24 668 A.... "C:\WINDOWS\inf\ksfilter.PNF"
30 Mar 2008 10.55.46 91 616 A.... "C:\WINDOWS\inf\ks.PNF"
30 Mar 2008 10.54.16 10 268 A.... "C:\WINDOWS\inf\kodak.PNF"
30 Mar 2008 10.54.16 10 808 A.... "C:\WINDOWS\inf\kdkscan.PNF"
30 Mar 2008 10.54.16 22 640 A.... "C:\WINDOWS\inf\kdk2x0.PNF"
30 Mar 2008 10.54.16 9 172 A.... "C:\WINDOWS\inf\irstusb.PNF"
30 Mar 2008 10.54.16 8 988 A.... "C:\WINDOWS\inf\irmk7w2k.PNF"
30 Mar 2008 10.54.16 26 988 A.... "C:\WINDOWS\inf\irnsc.PNF"
30 Mar 2008 10.54.16 15 608 A.... "C:\WINDOWS\inf\irdasmc.PNF"
30 Mar 2008 10.54.16 22 908 A.... "C:\WINDOWS\inf\image.PNF"
30 Mar 2008 10.54.14 5 752 A.... "C:\WINDOWS\inf\iereset.PNF"
30 Mar 2008 10.54.14 15 512 A.... "C:\WINDOWS\inf\icwnt5.PNF"
30 Mar 2008 10.54.14 3 260 A.... "C:\WINDOWS\inf\icminst.PNF"
30 Mar 2008 10.54.14 13 708 A.... "C:\WINDOWS\inf\icam5usb.PNF"
30 Mar 2008 10.54.14 17 876 A.... "C:\WINDOWS\inf\icam4usb.PNF"
30 Mar 2008 10.54.14 13 148 A.... "C:\WINDOWS\inf\icam3.PNF"
30 Mar 2008 10.54.14 8 072 A.... "C:\WINDOWS\inf\ibmvcap.PNF"
30 Mar 2008 10.54.14 41 164 A.... "C:\WINDOWS\inf\hpscan.PNF"
30 Mar 2008 10.54.14 23 060 A.... "C:\WINDOWS\inf\hpojscan.PNF"
30 Mar 2008 10.54.14 7 080 A.... "C:\WINDOWS\inf\hpdigwia.PNF"
30 Mar 2008 10.54.14 14 232 A.... "C:\WINDOWS\inf\gameport.PNF"
30 Mar 2008 10.54.12 23 988 A.... "C:\WINDOWS\inf\fjtscan.PNF"
30 Mar 2008 10.54.12 5 864 A.... "C:\WINDOWS\inf\epstw2k.PNF"
30 Mar 2008 10.54.12 11 416 A.... "C:\WINDOWS\inf\epsnmfp.PNF"
30 Mar 2008 10.54.12 45 672 A.... "C:\WINDOWS\inf\epsnscan.PNF"
30 Mar 2008 10.54.12 5 888 A.... "C:\WINDOWS\inf\epcfw2k.PNF"
30 Mar 2008 10.54.12 26 660 A.... "C:\WINDOWS\inf\dvd.PNF"
30 Mar 2008 10.54.12 27 876 A.... "C:\WINDOWS\inf\dimaps.PNF"
30 Mar 2008 10.54.12 8 168 A.... "C:\WINDOWS\inf\digirprt.PNF"
30 Mar 2008 10.54.12 7 996 A.... "C:\WINDOWS\inf\digirp.PNF"
30 Mar 2008 10.54.12 16 384 A.... "C:\WINDOWS\inf\digimps.PNF"
30 Mar 2008 10.54.12 8 416 A.... "C:\WINDOWS\inf\digiisdn.PNF"
30 Mar 2008 10.54.12 6 424 A.... "C:\WINDOWS\inf\digiasyn.PNF"
30 Mar 2008 10.54.12 21 904 A.... "C:\WINDOWS\inf\dgasync.PNF"
30 Mar 2008 10.54.12 41 668 A.... "C:\WINDOWS\inf\dgaport.PNF"
30 Mar 2008 10.54.12 6 636 A.... "C:\WINDOWS\inf\dfrg.PNF"
30 Mar 2008 10.54.12 39 908 A.... "C:\WINDOWS\inf\devxprop.PNF"
30 Mar 2008 10.54.10 21 792 A.... "C:\WINDOWS\inf\cyzport.PNF"
30 Mar 2008 10.54.10 13 352 A.... "C:\WINDOWS\inf\cyyport.PNF"
30 Mar 2008 10.54.10 6 872 A.... "C:\WINDOWS\inf\cyclom-y.PNF"
30 Mar 2008 10.54.10 6 732 A.... "C:\WINDOWS\inf\cyclad-z.PNF"
30 Mar 2008 10.54.10 31 012 A.... "C:\WINDOWS\inf\corelist.PNF"
30 Mar 2008 10.54.40 9 516 A.... "C:\WINDOWS\inf\ccdecode.PNF"
30 Mar 2008 10.54.10 16 020 A.... "C:\WINDOWS\inf\camvid30.PNF"
30 Mar 2008 10.54.10 17 268 A.... "C:\WINDOWS\inf\camvid20.PNF"
30 Mar 2008 10.54.10 11 180 A.... "C:\WINDOWS\inf\camdsh20.PNF"
30 Mar 2008 10.54.10 15 312 A.... "C:\WINDOWS\inf\brmfport.PNF"
30 Mar 2008 10.54.10 37 384 A.... "C:\WINDOWS\inf\brmfcwia.PNF"
30 Mar 2008 10.54.10 8 656 A.... "C:\WINDOWS\inf\brmfcumd.PNF"
30 Mar 2008 10.54.10 8 924 A.... "C:\WINDOWS\inf\brmfcsto.PNF"
30 Mar 2008 10.54.10 66 240 A.... "C:\WINDOWS\inf\brmfcmf.PNF"
30 Mar 2008 10.54.10 47 528 A.... "C:\WINDOWS\inf\brmfcmdm.PNF"
30 Mar 2008 10.54.10 4 428 A.... "C:\WINDOWS\inf\axant5.PNF"
30 Mar 2008 10.54.08 41 732 A.... "C:\WINDOWS\inf\atividin.PNF"
30 Mar 2008 10.54.08 3 236 A.... "C:\WINDOWS\inf\asroc.PNF"
30 Mar 2008 10.54.08 109 260 A.... "C:\WINDOWS\inf\apps.PNF"
30 Mar 2008 10.54.08 2 856 A.... "C:\WINDOWS\inf\appmig.PNF"
30 Mar 2008 10.54.08 8 428 A.... "C:\WINDOWS\inf\apcompat.PNF"
30 Mar 2008 10.54.08 17 232 A.... "C:\WINDOWS\inf\agtinst.PNF"
30 Mar 2008 10.54.08 10 300 A.... "C:\WINDOWS\inf\acerscan.PNF"
30 Mar 2008 10.54.08 31 644 A.... "C:\WINDOWS\inf\mplayer2.PNF"
30 Mar 2008 10.54.18 2 312 A.... "C:\WINDOWS\inf\mdmchipv.PNF"
30 Mar 2008 10.55.26 7 488 A.... "C:\WINDOWS\inf\mpeg4acm.PNF"
30 Mar 2008 10.55.24 12 568 A.... "C:\WINDOWS\inf\oem5.PNF"
30 Mar 2008 10.55.24 53 552 A.... "C:\WINDOWS\inf\oem0.PNF"
30 Mar 2008 10.55.24 13 386 A.... "C:\WINDOWS\inf\dxxp.PNF"
30 Mar 2008 10.55.24 6 822 A.... "C:\WINDOWS\inf\oem1.PNF"
30 Mar 2008 10.55.26 18 066 A.... "C:\WINDOWS\inf\dxbda.PNF"
30 Mar 2008 10.55.24 13 018 A.... "C:\WINDOWS\inf\oem13.PNF"
12 Apr 2008 16.52.34 13 186 A.... "C:\WINDOWS\inf\oem2.PNF"
30 Mar 2008 10.55.26 12 434 A.... "C:\WINDOWS\inf\oem3.PNF"
30 Mar 2008 10.55.26 8 202 A.... "C:\WINDOWS\inf\oem4.PNF"
30 Mar 2008 10.55.34 13 408 A.... "C:\WINDOWS\inf\n9500BT.PNF"
30 Mar 2008 10.55.26 10 600 A.... &

Napsal: 18 dub 2008 14:35
od tKoudy
koukam, ze se to nevlozilo cele, tady je dokonceni sdfixu:

30 Mar 2008 10.55.26 10 600 A.... "C:\WINDOWS\inf\P1usd.PNF"
30 Mar 2008 10.55.26 7 124 A.... "C:\WINDOWS\inf\wmv9dmo.PNF"
30 Mar 2008 10.55.26 13 104 A.... "C:\WINDOWS\inf\oem14.PNF"
30 Mar 2008 10.55.26 7 484 A.... "C:\WINDOWS\inf\drm.PNF"
30 Mar 2008 10.55.26 17 436 A.... "C:\WINDOWS\inf\WMFSDK.PNF"
30 Mar 2008 10.55.26 21 500 A.... "C:\WINDOWS\inf\oem6.PNF"
30 Mar 2008 10.55.26 7 644 A.... "C:\WINDOWS\inf\oem15.PNF"
30 Mar 2008 10.55.26 13 352 A.... "C:\WINDOWS\inf\oem7.PNF"
30 Mar 2008 10.55.36 27 258 A.... "C:\WINDOWS\inf\oem8.PNF"
30 Mar 2008 10.55.36 22 836 A.... "C:\WINDOWS\inf\oem9.PNF"
30 Mar 2008 10.55.36 69 702 A.... "C:\WINDOWS\inf\oem10.PNF"
30 Mar 2008 10.55.36 64 242 A.... "C:\WINDOWS\inf\oem11.PNF"
30 Mar 2008 10.55.36 20 480 A.... "C:\WINDOWS\inf\oem12.PNF"
30 Mar 2008 10.55.26 14 160 A.... "C:\WINDOWS\inf\nokia6230IrDA.PNF"
30 Mar 2008 10.55.26 13 968 A.... "C:\WINDOWS\inf\Nokia6230Bluetooth.PNF"
30 Mar 2008 10.55.26 12 668 A.... "C:\WINDOWS\inf\n3200Cable.PNF"
30 Mar 2008 10.55.26 14 096 A.... "C:\WINDOWS\inf\nokia3200IrDA.PNF"
30 Mar 2008 10.55.26 12 668 A.... "C:\WINDOWS\inf\n3220Cable.PNF"
30 Mar 2008 10.55.26 13 408 A.... "C:\WINDOWS\inf\n3230BT.PNF"
30 Mar 2008 10.55.26 13 968 A.... "C:\WINDOWS\inf\Nokia3230Bluetooth.PNF"
30 Mar 2008 10.55.26 14 216 A.... "C:\WINDOWS\inf\Nokia3230IrDA.PNF"
30 Mar 2008 10.55.26 13 408 A.... "C:\WINDOWS\inf\n3250BT.PNF"
30 Mar 2008 10.55.26 13 968 A.... "C:\WINDOWS\inf\Nokia3250Bluetooth.PNF"
30 Mar 2008 10.55.26 12 684 A.... "C:\WINDOWS\inf\n5100Cable.PNF"
30 Mar 2008 10.55.26 14 168 A.... "C:\WINDOWS\inf\nokia5100IrDA.PNF"
30 Mar 2008 10.55.26 12 668 A.... "C:\WINDOWS\inf\n5140Cable.PNF"
30 Mar 2008 10.55.28 14 096 A.... "C:\WINDOWS\inf\nokia5140IrDA.PNF"
30 Mar 2008 10.55.28 12 668 A.... "C:\WINDOWS\inf\n5140iCable.PNF"
30 Mar 2008 10.55.28 14 104 A.... "C:\WINDOWS\inf\nokia5140iIrDA.PNF"
30 Mar 2008 10.55.28 12 668 A.... "C:\WINDOWS\inf\n6020Cable.PNF"
30 Mar 2008 10.55.28 14 144 A.... "C:\WINDOWS\inf\nokia6020IrDA.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n6021BT.PNF"
30 Mar 2008 10.55.28 12 668 A.... "C:\WINDOWS\inf\n6021Cable.PNF"
30 Mar 2008 10.55.28 14 096 A.... "C:\WINDOWS\inf\nokia6021IrDA.PNF"
30 Mar 2008 10.55.28 13 968 A.... "C:\WINDOWS\inf\Nokia6021Bluetooth.PNF"
30 Mar 2008 10.55.28 12 684 A.... "C:\WINDOWS\inf\n6100Cable.PNF"
30 Mar 2008 10.55.28 14 112 A.... "C:\WINDOWS\inf\nokia6100IrDA.PNF"
30 Mar 2008 10.55.28 12 684 A.... "C:\WINDOWS\inf\n6101_6102Cable.PNF"
30 Mar 2008 10.55.28 14 176 A.... "C:\WINDOWS\inf\nokia6101_6102IrDA.PNF"
30 Mar 2008 10.55.28 12 668 A.... "C:\WINDOWS\inf\n6108Cable.PNF"
30 Mar 2008 10.55.28 14 152 A.... "C:\WINDOWS\inf\nokia6108IrDA.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n6111BT.PNF"
30 Mar 2008 10.55.28 14 096 A.... "C:\WINDOWS\inf\nokia6111IrDA.PNF"
30 Mar 2008 10.55.28 13 968 A.... "C:\WINDOWS\inf\Nokia6111Bluetooth.PNF"
30 Mar 2008 10.55.28 14 096 A.... "C:\WINDOWS\inf\Nokia6170IrDA.PNF"
30 Mar 2008 10.55.28 12 668 A.... "C:\WINDOWS\inf\n6220Cable.PNF"
30 Mar 2008 10.55.28 14 152 A.... "C:\WINDOWS\inf\nokia6220IrDA.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n6230BT.PNF"
30 Mar 2008 10.55.28 13 416 A.... "C:\WINDOWS\inf\n6230iBT.PNF"
30 Mar 2008 10.55.28 14 168 A.... "C:\WINDOWS\inf\nokia6230iIrDA.PNF"
30 Mar 2008 10.55.28 13 976 A.... "C:\WINDOWS\inf\Nokia6230iBluetooth.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n6260BT.PNF"
30 Mar 2008 10.55.28 13 968 A.... "C:\WINDOWS\inf\Nokia6260Bluetooth.PNF"
30 Mar 2008 10.55.28 13 132 A.... "C:\WINDOWS\inf\Nokia6260IrDA.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n_6270_BT.PNF"
30 Mar 2008 10.55.28 14 096 A.... "C:\WINDOWS\inf\nokia_6270_IrDA.PNF"
30 Mar 2008 10.55.28 13 968 A.... "C:\WINDOWS\inf\Nokia_6270_Bluetooth.PNF"
30 Mar 2008 10.55.28 13 408 A.... "C:\WINDOWS\inf\n6280BT.PNF"
30 Mar 2008 10.55.30 14 096 A.... "C:\WINDOWS\inf\nokia6280IrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6280Bluetooth.PNF"
30 Mar 2008 10.55.30 12 684 A.... "C:\WINDOWS\inf\n6610Cable.PNF"
30 Mar 2008 10.55.30 14 112 A.... "C:\WINDOWS\inf\nokia6610IrDA.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n6610iCable.PNF"
30 Mar 2008 10.55.30 14 104 A.... "C:\WINDOWS\inf\nokia6610iIrDA.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6630BT.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6630Bluetooth.PNF"
30 Mar 2008 10.55.30 12 528 A.... "C:\WINDOWS\inf\n6650BT.PNF"
30 Mar 2008 10.55.30 13 188 A.... "C:\WINDOWS\inf\nokia6650IrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6650Bluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6670BT.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6670Bluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6680BT.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6680Bluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6681BT.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6681Bluetooth.PNF"
30 Mar 2008 10.55.30 12 684 A.... "C:\WINDOWS\inf\n6800Cable.PNF"
30 Mar 2008 10.55.30 14 168 A.... "C:\WINDOWS\inf\nokia6800IrDA.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6810BT.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n6810Cable.PNF"
30 Mar 2008 10.55.30 14 152 A.... "C:\WINDOWS\inf\nokia6810IrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6810Bluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6820BT.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n6820Cable.PNF"
30 Mar 2008 10.55.30 14 160 A.... "C:\WINDOWS\inf\nokia6820IrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6820Bluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6820bBT.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n6820bCable.PNF"
30 Mar 2008 10.55.30 14 160 A.... "C:\WINDOWS\inf\nokia6820bIrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6820bBluetooth.PNF"
30 Mar 2008 10.55.30 13 408 A.... "C:\WINDOWS\inf\n6822BT.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n6822Cable.PNF"
30 Mar 2008 10.55.30 14 160 A.... "C:\WINDOWS\inf\nokia6822IrDA.PNF"
30 Mar 2008 10.55.30 13 968 A.... "C:\WINDOWS\inf\Nokia6822Bluetooth.PNF"
30 Mar 2008 10.55.30 12 668 A.... "C:\WINDOWS\inf\n7200Cable.PNF"
30 Mar 2008 10.55.30 14 152 A.... "C:\WINDOWS\inf\nokia7200IrDA.PNF"
30 Mar 2008 10.55.30 12 684 A.... "C:\WINDOWS\inf\n7210Cable.PNF"
30 Mar 2008 10.55.30 14 112 A.... "C:\WINDOWS\inf\nokia7210IrDA.PNF"
30 Mar 2008 10.55.30 12 684 A.... "C:\WINDOWS\inf\n7250Cable.PNF"
30 Mar 2008 10.55.32 14 112 A.... "C:\WINDOWS\inf\nokia7250IrDA.PNF"
30 Mar 2008 10.55.32 12 684 A.... "C:\WINDOWS\inf\n7250iCable.PNF"
30 Mar 2008 10.55.32 13 228 A.... "C:\WINDOWS\inf\Nokia7250iIrDA.PNF"
30 Mar 2008 10.55.32 12 668 A.... "C:\WINDOWS\inf\n7260Cable.PNF"
30 Mar 2008 10.55.32 14 152 A.... "C:\WINDOWS\inf\nokia7260IrDA.PNF"
30 Mar 2008 10.55.32 14 088 A.... "C:\WINDOWS\inf\Nokia7270IrDA.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n7280BT.PNF"
30 Mar 2008 10.55.32 14 152 A.... "C:\WINDOWS\inf\nokia7280IrDA.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7280Bluetooth.PNF"
30 Mar 2008 10.55.32 12 668 A.... "C:\WINDOWS\inf\n7360Cable.PNF"
30 Mar 2008 10.55.32 14 096 A.... "C:\WINDOWS\inf\nokia7360IrDA.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n7370BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7370Bluetooth.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n7380BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7380Bluetooth.PNF"
30 Mar 2008 10.55.32 12 528 A.... "C:\WINDOWS\inf\n7600BT.PNF"
30 Mar 2008 10.55.32 13 132 A.... "C:\WINDOWS\inf\nokia7600IrDA.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7600Bluetooth.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n7610BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7610Bluetooth.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n7710BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia7710Bluetooth.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n8800BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia8800Bluetooth.PNF"
30 Mar 2008 10.55.32 15 512 A.... "C:\WINDOWS\inf\n8910iBT.PNF"
30 Mar 2008 10.55.32 16 976 A.... "C:\WINDOWS\inf\nokia8910iIrDA.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n9300BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia9300Bluetooth.PNF"
30 Mar 2008 10.55.32 14 152 A.... "C:\WINDOWS\inf\Nokia9300IrDA.PNF"
30 Mar 2008 10.55.32 13 408 A.... "C:\WINDOWS\inf\n9300_BT.PNF"
30 Mar 2008 10.55.32 13 968 A.... "C:\WINDOWS\inf\Nokia9300_Bluetooth.PNF"
30 Mar 2008 10.55.32 13 996 A.... "C:\WINDOWS\inf\Nokia9300_IrDA.PNF"
30 Mar 2008 10.55.34 14 152 A.... "C:\WINDOWS\inf\nokia9500IrDA.PNF"
30 Mar 2008 10.55.34 13 968 A.... "C:\WINDOWS\inf\Nokia9500Bluetooth.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nE60BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaE60Bluetooth.PNF"
30 Mar 2008 10.55.34 13 940 A.... "C:\WINDOWS\inf\NokiaE60IrDA.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nE61BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaE61Bluetooth.PNF"
30 Mar 2008 10.55.34 13 940 A.... "C:\WINDOWS\inf\nokiaE61IrDA.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nE70BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaE70Bluetooth.PNF"
30 Mar 2008 10.55.34 14 096 A.... "C:\WINDOWS\inf\nokiaE70IrDA.PNF"
30 Mar 2008 10.55.34 13 416 A.... "C:\WINDOWS\inf\nGundamBT.PNF"
30 Mar 2008 10.55.34 13 976 A.... "C:\WINDOWS\inf\NokiaGundamBluetooth.PNF"
30 Mar 2008 10.55.34 14 160 A.... "C:\WINDOWS\inf\NokiaGundamIrDA.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN70BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaN70Bluetooth.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN71BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaN71Bluetooth.PNF"
30 Mar 2008 10.55.34 14 096 A.... "C:\WINDOWS\inf\NokiaN71IrDA.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN80BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaN80Bluetooth.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN90BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaN90Bluetooth.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN91BT.PNF"
30 Mar 2008 10.55.34 13 960 A.... "C:\WINDOWS\inf\NokiaN91Bluetooth.PNF"
30 Mar 2008 10.55.34 13 400 A.... "C:\WINDOWS\inf\nN92BT.PNF"
30 Mar 2008 10.55.36 13 960 A.... "C:\WINDOWS\inf\NokiaN92Bluetooth.PNF"
30 Mar 2008 10.55.36 13 948 A.... "C:\WINDOWS\inf\NokiaN92IrDA.PNF"
30 Mar 2008 10.55.36 13 400 A.... "C:\WINDOWS\inf\nNM850iGBT.PNF"
30 Mar 2008 10.55.36 13 960 A.... "C:\WINDOWS\inf\NokiaNM850iGBluetooth.PNF"
30 Mar 2008 10.55.36 14 120 A.... "C:\WINDOWS\inf\Nokia_NMP660A_IrDA.PNF"
30 Mar 2008 10.55.36 6 602 A.... "C:\WINDOWS\inf\oem16.PNF"
30 Mar 2008 10.55.36 6 656 A.... "C:\WINDOWS\inf\oem17.PNF"
30 Mar 2008 10.55.36 6 682 A.... "C:\WINDOWS\inf\oem18.PNF"
30 Mar 2008 10.55.36 5 604 A.... "C:\WINDOWS\inf\wmv9vcm.PNF"
30 Mar 2008 10.55.36 9 220 A.... "C:\WINDOWS\inf\oem19.PNF"
30 Mar 2008 10.55.36 9 404 A.... "C:\WINDOWS\inf\oem20.PNF"
30 Mar 2008 10.55.38 18 254 A.... "C:\WINDOWS\inf\oem21.PNF"
30 Mar 2008 10.55.38 5 626 A.... "C:\WINDOWS\inf\oem22.PNF"
30 Mar 2008 10.55.36 28 724 A.... "C:\WINDOWS\inf\btcusb.PNF"
30 Mar 2008 10.55.38 17 132 A.... "C:\WINDOWS\inf\oem23.PNF"
30 Mar 2008 10.55.38 11 398 A.... "C:\WINDOWS\inf\oem24.PNF"
30 Mar 2008 10.55.40 12 614 A.... "C:\WINDOWS\inf\oem25.PNF"
30 Mar 2008 10.55.40 27 482 A.... "C:\WINDOWS\inf\oem26.PNF"
30 Mar 2008 10.55.40 11 946 A.... "C:\WINDOWS\inf\oem27.PNF"
30 Mar 2008 10.55.42 28 562 A.... "C:\WINDOWS\inf\oem28.PNF"
30 Mar 2008 10.55.42 18 010 A.... "C:\WINDOWS\inf\oem29.PNF"
30 Mar 2008 10.55.42 13 330 A.... "C:\WINDOWS\inf\oem30.PNF"
30 Mar 2008 10.55.44 27 760 A.... "C:\WINDOWS\inf\oem31.PNF"
30 Mar 2008 10.55.44 10 474 A.... "C:\WINDOWS\inf\oem32.PNF"
30 Mar 2008 10.55.26 7 536 A.... "C:\WINDOWS\inf\netBT.PNF"
30 Mar 2008 10.55.26 12 692 A.... "C:\WINDOWS\inf\bltn_13AE.PNF"
30 Mar 2008 10.55.26 12 716 A.... "C:\WINDOWS\inf\bltn_2F7E.PNF"
30 Mar 2008 10.55.36 13 972 A.... "C:\WINDOWS\inf\SocketSerialBT.PNF"
30 Mar 2008 10.55.36 12 432 A.... "C:\WINDOWS\inf\OX16C95x.PNF"
30 Mar 2008 10.55.36 12 896 A.... "C:\WINDOWS\inf\blueletaudio.PNF"
30 Mar 2008 10.55.36 9 280 A.... "C:\WINDOWS\inf\blueletfaxmdm.PNF"
30 Mar 2008 10.55.36 18 136 A.... "C:\WINDOWS\inf\blueletmdm.PNF"
30 Mar 2008 10.55.36 12 976 A.... "C:\WINDOWS\inf\BlueletSCOAudio.PNF"
30 Mar 2008 10.55.36 6 968 A.... "C:\WINDOWS\inf\brcmusb.PNF"
30 Mar 2008 10.55.36 5 508 A.... "C:\WINDOWS\inf\btnulmdm.PNF"
30 Mar 2008 10.55.36 9 040 A.... "C:\WINDOWS\inf\hidminidrv.PNF"
30 Mar 2008 10.55.36 5 772 A.... "C:\WINDOWS\inf\wssbtr1f.PNF"
30 Mar 2008 10.55.44 28 830 A.... "C:\WINDOWS\inf\oem33.PNF"
30 Mar 2008 10.55.44 6 178 A.... "C:\WINDOWS\inf\MPPRE10.PNF"
30 Mar 2008 10.55.44 6 770 A.... "C:\WINDOWS\inf\DRM10.PNF"
30 Mar 2008 10.55.44 13 082 A.... "C:\WINDOWS\inf\codecs10.PNF"
30 Mar 2008 10.55.44 10 744 A.... "C:\WINDOWS\inf\WMFSDK10.PNF"
30 Mar 2008 10.55.44 22 154 A.... "C:\WINDOWS\inf\WMDM10.PNF"
30 Mar 2008 10.55.44 10 684 A.... "C:\WINDOWS\inf\WPD10.PNF"
30 Mar 2008 10.55.46 65 996 A.... "C:\WINDOWS\inf\WMP10.PNF"
30 Mar 2008 10.55.46 5 322 A.... "C:\WINDOWS\inf\MPCD10.PNF"
30 Mar 2008 10.55.46 5 346 A.... "C:\WINDOWS\inf\MPSTUB10.PNF"
30 Mar 2008 10.55.46 5 242 A.... "C:\WINDOWS\inf\WMSET10.PNF"
30 Mar 2008 10.55.44 10 516 A.... "C:\WINDOWS\inf\wpdmtp.PNF"
30 Mar 2008 10.55.46 3 988 A.... "C:\WINDOWS\inf\wmsetsdk.PNF"
30 Mar 2008 10.55.46 5 284 A.... "C:\WINDOWS\inf\wvc1dmo.PNF"
30 Mar 2008 10.55.48 4 858 A.... "C:\WINDOWS\inf\d3dx9_30_x86.PNF"
30 Mar 2008 10.55.46 93 818 A.... "C:\WINDOWS\inf\oem34.PNF"
30 Mar 2008 10.55.46 41 128 A.... "C:\WINDOWS\inf\oem35.PNF"
30 Mar 2008 10.55.46 4 858 A.... "C:\WINDOWS\inf\d3dx9_28_x86.PNF"
8 Apr 2008 18.42.06 189 312 A.... "C:\WINDOWS\Fonts\AdobeFnt07.lst"
18 Feb 2008 20.27.32 0 A.... "C:\WINDOWS\TEMP\exp89C.tmp"
24 Feb 2008 10.20.50 0 A.... "C:\WINDOWS\TEMP\exp1B.tmp"
25 Feb 2008 14.09.24 0 A.... "C:\WINDOWS\TEMP\exp1C.tmp"
26 Feb 2008 15.07.10 0 A.... "C:\WINDOWS\TEMP\exp6B5.tmp"
27 Feb 2008 15.07.24 0 A.... "C:\WINDOWS\TEMP\exp392.tmp"
28 Feb 2008 15.10.50 0 A.... "C:\WINDOWS\TEMP\exp281.tmp"
29 Feb 2008 15.55.50 0 A.... "C:\WINDOWS\TEMP\exp80C.tmp"
1 Mar 2008 16.52.38 0 A.... "C:\WINDOWS\TEMP\exp1383.tmp"
2 Mar 2008 17.29.52 0 A.... "C:\WINDOWS\TEMP\exp85C.tmp"
3 Mar 2008 18.19.16 0 A.... "C:\WINDOWS\TEMP\exp1988.tmp"
4 Mar 2008 18.55.20 0 A.... "C:\WINDOWS\TEMP\expB4A.tmp"
5 Mar 2008 19.36.34 0 A.... "C:\WINDOWS\TEMP\exp1CDA.tmp"
6 Mar 2008 19.48.36 0 A.... "C:\WINDOWS\TEMP\exp14DF.tmp"
7 Mar 2008 20.01.28 0 A.... "C:\WINDOWS\TEMP\exp702.tmp"
8 Mar 2008 20.56.30 0 A.... "C:\WINDOWS\TEMP\exp1E20.tmp"
9 Mar 2008 21.24.42 0 A.... "C:\WINDOWS\TEMP\exp18C0.tmp"
11 Mar 2008 7.50.04 0 A.... "C:\WINDOWS\TEMP\exp1D.tmp"
12 Mar 2008 13.52.02 0 A.... "C:\WINDOWS\TEMP\exp1E.tmp"
13 Mar 2008 16.03.12 0 A.... "C:\WINDOWS\TEMP\exp1F.tmp"
14 Mar 2008 16.49.06 0 A.... "C:\WINDOWS\TEMP\exp20.tmp"
15 Mar 2008 17.38.34 0 A.... "C:\WINDOWS\TEMP\expF02.tmp"
16 Mar 2008 18.24.12 0 A.... "C:\WINDOWS\TEMP\exp138C.tmp"
17 Mar 2008 18.46.48 0 A.... "C:\WINDOWS\TEMP\exp13EB.tmp"
18 Mar 2008 19.10.18 0 A.... "C:\WINDOWS\TEMP\exp381.tmp"
19 Mar 2008 19.58.18 0 A.... "C:\WINDOWS\TEMP\expDA1.tmp"
20 Mar 2008 20.48.46 0 A.... "C:\WINDOWS\TEMP\exp1350.tmp"
21 Mar 2008 21.08.18 0 A.... "C:\WINDOWS\TEMP\exp22.tmp"
22 Mar 2008 21.41.20 0 A.... "C:\WINDOWS\TEMP\expD2E.tmp"
23 Mar 2008 22.08.28 0 A.... "C:\WINDOWS\TEMP\expB63.tmp"
25 Mar 2008 12.48.40 0 A.... "C:\WINDOWS\TEMP\exp23.tmp"
26 Mar 2008 14.08.06 0 A.... "C:\WINDOWS\TEMP\exp24.tmp"
27 Mar 2008 15.50.16 0 A.... "C:\WINDOWS\TEMP\exp25.tmp"
28 Mar 2008 16.15.06 0 A.... "C:\WINDOWS\TEMP\expBA5.tmp"
29 Mar 2008 16.55.38 0 A.... "C:\WINDOWS\TEMP\exp15AA.tmp"
30 Mar 2008 17.59.06 0 A.... "C:\WINDOWS\TEMP\exp2347.tmp"
31 Mar 2008 18.11.44 0 A.... "C:\WINDOWS\TEMP\exp9CE.tmp"
1 Apr 2008 22.08.40 0 A.... "C:\WINDOWS\TEMP\exp26.tmp"
3 Apr 2008 7.53.54 0 A.... "C:\WINDOWS\TEMP\exp27.tmp"
4 Apr 2008 12.39.10 0 A.... "C:\WINDOWS\TEMP\exp28.tmp"
5 Apr 2008 13.24.42 0 A.... "C:\WINDOWS\TEMP\exp126F.tmp"
6 Apr 2008 14.17.44 0 A.... "C:\WINDOWS\TEMP\exp1A51.tmp"
7 Apr 2008 15.26.46 0 A.... "C:\WINDOWS\TEMP\exp29.tmp"
8 Apr 2008 16.00.06 0 A.... "C:\WINDOWS\TEMP\exp5BE.tmp"
9 Apr 2008 16.21.48 0 A.... "C:\WINDOWS\TEMP\exp92C.tmp"
10 Apr 2008 17.06.52 0 A.... "C:\WINDOWS\TEMP\expBA9.tmp"
11 Apr 2008 18.04.50 0 A.... "C:\WINDOWS\TEMP\expA2B.tmp"
12 Apr 2008 20.00.04 0 A.... "C:\WINDOWS\TEMP\exp2A.tmp"
13 Apr 2008 20.23.34 0 A.... "C:\WINDOWS\TEMP\exp178F.tmp"
14 Apr 2008 21.03.14 0 A.... "C:\WINDOWS\TEMP\exp682.tmp"
16 Apr 2008 12.45.06 0 A.... "C:\WINDOWS\TEMP\exp2B.tmp"
17 Apr 2008 13.05.54 0 A.... "C:\WINDOWS\TEMP\exp61E.tmp"
18 Apr 2008 13.01.38 0 A.... "C:\WINDOWS\TEMP\scs3.tmp"
18 Apr 2008 7.34.54 44 544 A.... "C:\WINDOWS\TEMP\1B.tmp"
18 Apr 2008 7.34.48 31 744 A.... "C:\WINDOWS\TEMP\1C.tmp"
18 Apr 2008 13.00.10 0 A.... "C:\WINDOWS\Debug\PASSWD.LOG"
18 Apr 2008 7.34.26 0 A.... "C:\WINDOWS\Debug\oakley.log.sav"
18 Apr 2008 9.11.30 0 A.... "C:\WINDOWS\Debug\oakley.log"
18 Apr 2008 12.58.10 6 A..H. "C:\WINDOWS\Tasks\SA.DAT"
9 Apr 2008 18.23.14 6 443 A.... "C:\WINDOWS\twain_32\C6U14K\mtwm.ini"
25 Feb 2008 8.11.20 307 444 A.... "C:\WINDOWS\Debug\UserMode\userenv.bak"
18 Apr 2008 13.00.08 223 744 A.... "C:\WINDOWS\Debug\UserMode\userenv.log"
18 Apr 2008 9.39.36 495 A.... "C:\WINDOWS\system32\drivers\etc\hosts.ics"
18 Apr 2008 12.11.44 440 A.... "C:\WINDOWS\system32\drivers\etc\hosts"
12 Apr 2008 16.48.14 8 A.... "C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp"
17 Apr 2008 16.54.06 2 889 088 A.... "C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll"
17 Apr 2008 16.54.06 856 A.... "C:\WINDOWS\system32\Macromed\Flash\flashplayer.xpt"
17 Apr 2008 16.54.06 218 496 A.... "C:\WINDOWS\system32\Macromed\Flash\NPSWF32_FlashUtil.exe"
30 Mar 2008 18.26.34 19 596 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\ADPDF6.BPD"
30 Mar 2008 18.26.34 37 988 A.... "C:\WINDOWS\system32\spool\drivers\w32x86\3\OK610EX.BUD"


C:\Program Files\

29 Mar 2008 16.22.00 145 521 A.... "C:\Program Files\Winamp\UninstWA.exe"
27 Mar 2008 7.25.24 65 024 A.... "C:\Program Files\Winamp\tataki.dll"
27 Mar 2008 7.24.14 181 760 A.... "C:\Program Files\Winamp\libmp4v2.dll"
27 Mar 2008 7.25.38 136 704 A.... "C:\Program Files\Winamp\libFLAC.dll"
27 Mar 2008 7.24.32 201 728 A.... "C:\Program Files\Winamp\libsndfile.dll"
27 Mar 2008 7.24.38 88 064 A.... "C:\Program Files\Winamp\nde.dll"
27 Mar 2008 7.23.48 84 480 A.... "C:\Program Files\Winamp\burnlib.dll"
27 Mar 2008 7.36.26 1 307 136 A.... "C:\Program Files\Winamp\winamp.exe"
27 Mar 2008 7.23.56 46 592 A.... "C:\Program Files\Winamp\zlib.dll"
30 Mar 2008 0.00.06 56 A.... "C:\Program Files\TV Jukebox 3.0\schedules.dat"
27 Mar 2008 7.33.38 263 680 A.... "C:\Program Files\Winamp\Plugins\gen_ml.dll"
27 Mar 2008 7.27.24 271 872 A.... "C:\Program Files\Winamp\Plugins\ml_local.dll"
27 Mar 2008 7.32.34 72 192 A.... "C:\Program Files\Winamp\Plugins\ml_playlists.dll"
27 Mar 2008 7.27.54 191 488 A.... "C:\Program Files\Winamp\Plugins\ml_disc.dll"
27 Mar 2008 7.26.32 25 600 A.... "C:\Program Files\Winamp\Plugins\ml_rg.dll"
27 Mar 2008 7.35.34 567 296 A.... "C:\Program Files\Winamp\Plugins\enc_aacplus.dll"
27 Mar 2008 7.35.30 12 800 A.... "C:\Program Files\Winamp\Plugins\enc_lame.dll"
27 Mar 2008 7.26.26 40 960 A.... "C:\Program Files\Winamp\Plugins\ml_dash.dll"
27 Mar 2008 7.35.26 17 920 A.... "C:\Program Files\Winamp\Plugins\enc_wma.dll"
27 Mar 2008 7.30.58 184 832 A.... "C:\Program Files\Winamp\Plugins\ml_wire.dll"
27 Mar 2008 7.33.44 25 600 A.... "C:\Program Files\Winamp\Plugins\gen_hotkeys.dll"
27 Mar 2008 7.33.14 109 056 A.... "C:\Program Files\Winamp\Plugins\in_cdda.dll"
27 Mar 2008 7.32.50 6 656 A.... "C:\Program Files\Winamp\Plugins\in_linein.dll"
27 Mar 2008 7.32.48 98 304 A.... "C:\Program Files\Winamp\Plugins\in_midi.dll"
27 Mar 2008 7.32.40 160 768 A.... "C:\Program Files\Winamp\Plugins\in_mod.dll"
27 Mar 2008 7.32.24 381 440 A.... "C:\Program Files\Winamp\Plugins\in_mp3.dll"
27 Mar 2008 7.31.48 35 328 A.... "C:\Program Files\Winamp\Plugins\in_mp4.dll"
27 Mar 2008 7.31.30 220 672 A.... "C:\Program Files\Winamp\Plugins\in_vorbis.dll"
27 Mar 2008 7.29.22 13 824 A.... "C:\Program Files\Winamp\Plugins\in_wave.dll"
27 Mar 2008 7.29.58 297 472 A.... "C:\Program Files\Winamp\Plugins\in_wm.dll"
27 Mar 2008 7.26.56 72 704 A.... "C:\Program Files\Winamp\Plugins\ml_orb.dll"
27 Mar 2008 7.29.28 19 456 A.... "C:\Program Files\Winamp\Plugins\out_disk.dll"
27 Mar 2008 7.30.40 47 104 A.... "C:\Program Files\Winamp\Plugins\out_ds.dll"
27 Mar 2008 7.30.36 18 432 A.... "C:\Program Files\Winamp\Plugins\out_wave.dll"
27 Mar 2008 7.30.32 29 184 A.... "C:\Program Files\Winamp\Plugins\vis_nsfs.dll"
27 Mar 2008 7.25.46 38 400 A.... "C:\Program Files\Winamp\Plugins\in_flac.dll"
27 Mar 2008 7.25.58 10 240 A.... "C:\Program Files\Winamp\Plugins\enc_wav.dll"
27 Mar 2008 7.27.16 33 280 A.... "C:\Program Files\Winamp\Plugins\enc_flac.dll"
27 Mar 2008 7.28.00 19 968 A.... "C:\Program Files\Winamp\Plugins\ml_bookmarks.dll"
27 Mar 2008 7.27.40 37 376 A.... "C:\Program Files\Winamp\Plugins\ml_history.dll"
27 Mar 2008 7.27.34 19 456 A.... "C:\Program Files\Winamp\Plugins\ml_nowplaying.dll"
27 Mar 2008 7.28.26 98 304 A.... "C:\Program Files\Winamp\Plugins\ml_online.dll"
27 Mar 2008 7.31.10 57 856 A.... "C:\Program Files\Winamp\Plugins\ml_plg.dll"
27 Mar 2008 7.29.10 199 168 A.... "C:\Program Files\Winamp\Plugins\ml_pmp.dll"
27 Mar 2008 7.28.50 212 480 A.... "C:\Program Files\Winamp\Plugins\pmp_ipod.dll"
27 Mar 2008 7.28.38 17 920 A.... "C:\Program Files\Winamp\Plugins\pmp_njb.dll"
27 Mar 2008 7.26.02 26 624 A.... "C:\Program Files\Winamp\Plugins\ml_transcode.dll"
27 Mar 2008 7.28.32 114 176 A.... "C:\Program Files\Winamp\Plugins\pmp_p4s.dll"
27 Mar 2008 7.26.32 8 704 A.... "C:\Program Files\Winamp\Plugins\ReplayGainAnalysis.dll"
27 Mar 2008 7.26.40 40 448 A.... "C:\Program Files\Winamp\Plugins\pmp_usb.dll"
27 Mar 2008 7.31.16 26 112 A.... "C:\Program Files\Winamp\Plugins\ml_autotag.dll"
27 Mar 2008 7.35.16 1 528 320 A.... "C:\Program Files\Winamp\Plugins\gen_ff.dll"
27 Mar 2008 7.26.06 25 600 A.... "C:\Program Files\Winamp\Plugins\pmp_activesync.dll"
27 Mar 2008 7.25.24 65 024 A.... "C:\Program Files\Winamp\Plugins\tataki.dll"
27 Mar 2008 7.32.14 1 220 608 A.... "C:\Program Files\Winamp\Plugins\vis_milk2.dll"
27 Mar 2008 7.32.30 19 456 A.... "C:\Program Files\Winamp\Plugins\in_flv.dll"
30 Mar 2008 14.12.50 318 A.... "C:\Program Files\Winamp\Plugins\cddiscs.dat"
18 Apr 2008 12.58.12 2 378 A.... "C:\Program Files\Eset\logs\virlog.dat"
18 Apr 2008 12.58.12 102 896 A.... "C:\Program Files\Eset\logs\warnlog.dat"
17 Apr 2008 16.54.06 2 889 088 A.... "C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll"
17 Apr 2008 16.54.06 218 496 A.... "C:\Program Files\Mozilla Firefox\plugins\NPSWF32_FlashUtil.exe"
18 Apr 2008 12.16.50 881 A.... "C:\Program Files\Winamp\Plugins\ml\main.dat"
18 Apr 2008 12.16.48 633 587 A.... "C:\Program Files\Winamp\Plugins\ml\recent.dat"
3 Mar 2008 22.40.50 505 072 A.... "C:\Program Files\Winamp\Plugins\Gracenote\CddbFPX1.dll"
3 Mar 2008 22.40.50 275 696 A.... "C:\Program Files\Winamp\Plugins\Gracenote\CddbAFX3.dll"
3 Mar 2008 22.40.50 107 760 A.... "C:\Program Files\Winamp\Plugins\Gracenote\CddbCMSig_1_3.dll"
3 Mar 2008 22.40.50 652 528 A.... "C:\Program Files\Winamp\Plugins\Gracenote\CddbFEX.dll"
3 Mar 2008 22.40.50 382 192 A.... "C:\Program Files\Winamp\Plugins\Gracenote\CddbS12T.dll"


Files with hidden attributes:

Thu 14 Feb 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3505.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0005.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0410.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0741.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0922.tmp"
Thu 14 Feb 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2250.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL4020.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1035.tmp"
Thu 14 Feb 2008 19,968 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3679.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3718.tmp"
Tue 15 Jan 2008 21,504 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2897.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1324.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3077.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0844.tmp"
Tue 15 Jan 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2820.tmp"
Thu 14 Feb 2008 19,968 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2945.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2338.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0968.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0627.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0351.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0038.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0355.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0864.tmp"
Thu 14 Feb 2008 21,504 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1496.tmp"
Thu 14 Feb 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3225.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2975.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0048.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0172.tmp"
Thu 14 Feb 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1106.tmp"
Thu 14 Feb 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1807.tmp"
Thu 14 Feb 2008 23,552 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2419.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2389.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1606.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0691.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1925.tmp"
Thu 14 Feb 2008 25,088 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1579.tmp"
Thu 14 Feb 2008 25,088 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0494.tmp"
Thu 14 Feb 2008 26,112 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2150.tmp"
Thu 14 Feb 2008 26,112 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1521.tmp"
Thu 14 Feb 2008 27,136 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0878.tmp"
Thu 14 Feb 2008 28,672 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2211.tmp"
Wed 12 Mar 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2337.tmp"
Thu 14 Feb 2008 29,184 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL4051.tmp"
Thu 14 Feb 2008 29,184 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2035.tmp"
Wed 12 Mar 2008 20,992 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0591.tmp"
Thu 14 Feb 2008 30,208 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3374.tmp"
Thu 14 Feb 2008 31,232 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0935.tmp"
Sun 11 Feb 2007 22,528 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL1759.tmp"
Sun 11 Feb 2007 22,016 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL1129.tmp"
Sun 11 Feb 2007 20,992 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL3241.tmp"


Program Folders:

C:\Program Files\

Aberger
ANYCOM
Avast4
BearPaw1200
CeWe Color
Codec Pack - All In 1
Common Files
ComPlus Applications
droxi
EPSON
Eset
FDRLab
Google
hyporavc
ICQLite
InstallShield Installation Information
Internet Explorer
Kerio
Leadtek
Media Player Classic
MegauploadToolbar
Messenger
microsoft frontpage
Microsoft Office
MIKSOFT
MobiMB Mobile Media Browser
Movie Maker
Mozilla Firefox
MSN
MSN Gaming Zone
NetMeeting
OLYMPUS
Online Services
Outlook Express
Pinnacle
Popisovač CD-DVD 3
Praxisoft
Real
Serif
Totalcmd
Totalcmd7
TV Jukebox 3.0
Uninstall Information
Winamp
Windows Media Player
Windows NT
WindowsUpdate
xerox

C:\Program Files\Common Files\

Adobe
Ahead
Borland Shared
Designer
DirectX
EPSON
GTK
InstallShield
logishrd
LogoManager
Microsoft Shared
MSSoap
Nero
Nokia
ODBC
PCSuite
Real
Services
Skype
SpeechEngines
SWF Studio
System


Add/Remove Programs:

3GP Video Converter 3
Ad-Aware SE Personal
Adobe Flash Player ActiveX
Advanced RAR Repair v1.2
AudioEdit Deluxe
BearPaw 1200v3.0
BitComet 0.90
Browser Resolutions
CDex extraction audio
CloneCD
Cool Edit Pro 2.0
Codec Pack - All In 1 6.0.3.0
DivX Content Uploader
Software tiskárny EPSON
ffdshow (remove only)
FLV Player 1.3.3
GFX Outrider
GSiteCrawler
Guitar Pro 5.2
Happy Foto HF Asistent (Jen odstranit)
HijackThis 2.0.2
Pinnacle Hollywood FX 5
ICQ 5.1
Internet Download Manager
IrfanView (remove only)
Karaoke Anything!
Windows Installer 3.1 (KB893803)
KGB Archiver 1.2.0.23 fixed
Magic ISO Maker v4.9 (build 0144)
Maxthon Browser (remove only)
Maxthon2 Browser (remove only)
Megaupload Toolbar
Microsoft .NET Framework 2.0
MIKSOFT Mobile AMR converter
MobiMB Mobile Media Browser
Moje Cewe Fotokniha
Mozilla Firefox (1.5.0.12)
MPEG Video Wizard DVD
mpegable X4 live
NOD32 antivirus system
Nokia Multimedia Converter 2.0
NVIDIA Windows 2000/XP Display Drivers
Oxygen Phone Manager II for Nokia phones
Oxygen Phone Manager II for Nokia phones (Trial)
PexesoMaker Professional Edition
Popisovač CD 1.4
Popisovač CD/DVD 3.00
PSPad editor
QuickTime Alternative 1.70
RealPlayer Basic
Riva FLV Encoder 2.0
Adobe Flash Player 9 ActiveX
The KMPlayer (remove only)
Total Commander (Remove or Repair)
Tweak UI
Ulead COOL 3D 3.0
Undelete Plus 2.55
Winamp
Windows Media Format Runtime
Windows Media Player 10
GIMP 2.4.4
GTK+ 2.6.7 runtime environment
WinRAR archiver
WinXMedia DVD Audio Ripper 4.17
WiziWYG XP
Microsoft Office 2000 Professional
Nokia Multimedia Converter Pro v2.0
Nokia Series 40 Theme Studio 2.2
Counter-Strike 1.6
AutoUpdate
Google Earth
InstallRTC
Google Toolbar for Internet Explorer
OLYMPUS CAMEDIA Master 4.1
Opera 9.0
ANYCOM USB-200/250 Bluetooth Software
Nokia PC Suite
3DSexVilla-017.001 (Cracked)
Cerberus FTP Server
Skype™ 3.6
Serif PanoramaPlus 3
Microsoft .NET Framework 2.0
Borland Delphi 7
DivX Codec
CDBurnerXP
DivX Player
Nero 8
Counter-Strike 1.6
Studio 9
Adobe Acrobat 6.0 Professional
DivX Converter
EPSON PhotoQuicker3.2
DivX Web Player
Nokia Connectivity Cable Driver
WinFast(R) TV2000 XP / TV2000 XP Expert / VC100 XP(WDM Driver)
WinFast(R) TV2000 XP / TV2000 XP Expert / VC100 XP(Application)
NOD32 FiX
Google Toolbar for Internet Explorer
The Bat! Professional v3.64.01
BlueSoleil
PL-2303 USB-to-Serial
droxi Offline Client 2007
Adobe Photoshop CS
TV Jukebox 3.0


Run Values:

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"PinnacleDriverCheck"="C:\\WINDOWS\\System32\\PSDrvCheck.exe -CheckReg"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Nero\\Lib\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"ICQ Lite"="E:\\Program Files\\ICQLite\\ICQLite.exe -trayboot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex]
"Flag"=dword:00000002


Bot Check:

SERVICE_NAME: sharedaccess
DISPLAY_NAME : Sou
START_TYPE : 2 AUTO_START

SERVICE_NAME: wuauserv
DISPLAY_NAME : Automatické aktualizace
START_TYPE : 2 AUTO_START

SERVICE_NAME: srservice
DISPLAY_NAME : Slu
START_TYPE : 2 AUTO_START

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole]
"EnableDCOM"="Y"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"restrictanonymous"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update]
"AUOptions"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"WaitToKillServiceTimeout"="20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"SFCDisable"=dword:00000000
"SFCScan"=dword:00000000
"Shell"="Explorer.exe"
"Userinit"="C:\\WINDOWS\\system32\\userinit.exe,C:\\WINDOWS\\System32\\ntos.exe,"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shell extensions]
@=""

@=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters]
"TransportBindName"="\\Device\\"


ShellExecuteHooks:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""



Environment:


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager\environment
ComSpec REG_EXPAND_SZ %SystemRoot%\system32\cmd.exe
Path REG_EXPAND_SZ E:\Program Files\Borland\Delphi7\Bin;E:\Program Files\Borland\Delphi7\Projects\Bpl\;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\Common Files\GTK\2.0\bin
windir REG_EXPAND_SZ %SystemRoot%
OS REG_SZ Windows_NT
PATHEXT REG_SZ .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP REG_EXPAND_SZ %SystemRoot%\TEMP
TMP REG_EXPAND_SZ %SystemRoot%\TEMP
SAFEBOOT_OPTION REG_SZ MINIMAL

SecurityProviders:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders
SecurityProviders REG_SZ msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll


Authentication Packages:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0


Subsystem Startup:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems]
"Windows"="%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16"


Midi Drivers:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midi"="wdmaud.drv"
"midi1"="wdmaud.drv"
"midi2"="wdmaud.drv"
"midi3"="wdmaud.drv"


Non-Default IFEO Debugger:


Non-Default Installed Components:


HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{306d6c21-c1b6-4629-986c-e59e1875b8af}
StubPath REG_SZ "C:\WINDOWS\System32\rundll32.exe" "C:\Program Files\Messenger\msgsc.dll",ShowIconsUser
Version REG_SZ 4,7,0,0041


Non-Default Safeboot Minimal:


File Associations:


[HKEY_CLASSES_ROOT\batfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\cmdfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\comfile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\exefile\shell\open\command]
@="\"%1\" %*"

[HKEY_CLASSES_ROOT\htafile\shell\open\command]
@="C:\\WINDOWS\\System32\\mshta.exe \"%1\" %*"

[HKEY_CLASSES_ROOT\http\shell\open\command]
@="\"E:\\Program Files\\Maxthon2\\Maxthon.exe\" \"%1\""

[HKEY_CLASSES_ROOT\htmlfile\shell\open\command]
@="\"E:\\Program Files\\Maxthon2\\Maxthon.exe\" \"%1\""

[HKEY_CLASSES_ROOT\regedit\shell\open\command]
@="regedit.exe %1"

[HKEY_CLASSES_ROOT\regfile\shell\open\command]
@="regedit.exe \"%1\""

[HKEY_CLASSES_ROOT\scrfile\shell\open\command]
@="\"%1\" /S"

[HKEY_CLASSES_ROOT\txtfile\shell\open\command]
@="%SystemRoot%\system32\NOTEPAD.EXE %1"


Finished!

A tady HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:11:33, on 18.4.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\System32\alg.exe
E:\Program Files\BlueSoleil\BTNtService.exe
C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
E:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
E:\Program Files\Maxthon2\Maxthon.exe
C:\Program Files\Totalcmd7\TOTALCMD.EXE
D:\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gta4.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\ntos.exe,
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie_ctx.htm
O8 - Extra context menu item: Stáhnout obsah FLV videa s IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout s IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp01.photoprintit.de/microsite/ ... loader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - E:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PHPGeekUtil - Unknown owner - c:\apache\APACHE.EXE (file missing)

--
End of file - 5968 bytes


Predem dik za dalsi pomoc

Napsal: 18 dub 2008 15:04
od l.kantor
l.kantor píše:zdar použijte sdfix v nouzovém režimu,návod zde http://www.viry.cz/forum/viewtopic.php?t=40395
po provedení vložte log z sdfix+aktuální z hjt(nedávejte ho do "code",blbě se to luští :wink: )
sdfix použijte V NOUZOVÉM REŽIMU http://www.viry.cz/forum/viewtopic.php?t=7554

Napsal: 18 dub 2008 15:26
od tKoudy
To jsem ale udelal, take se mi pak objevilo toto http://www.james008.net/web/pluginy/vir ... sdfix1.jpg okno (akorat s cernym pozadim) a ne toto http://www.james008.net/web/pluginy/vir ... sdfix4.jpg
.. pote sdfix normalne skenoval..

Nevim, kde delam chybu..

Je fakt, ze nerozumim tomuhle:

" (pri restartu mackejte klavesu F8, pote zvolte z nabidky Stav nouze; pote chvili vyckejte, otevre se vam potvrzovaci okno s nabidkou spusteni zvlastniho diagnostickeho rezimu, ktere potvrdte OK)" - po zvoleni stavu nouze se mi zadne takove okno neotevre, jen potom nabidka na obnoveni systemu,kterou odmintu,protoze obn.sys. mam vypnute

Napsal: 18 dub 2008 16:37
od l.kantor
cituji:
V prípade, že sa ani po usilovnom stláčaní F8 (F2) nezobrazí ponuka s možnosťou na spustenie núdzového režimu klikneme na start -> spustit (run) -> napíšeme "msconfig" bez úvodzoviek a potvrdíme enterom.

preklikáme sa na kartu boot.ini a zafajkneme možnosť /safeboot
* minimal = bez siete/internetu
* sieť (network) = so sieťou/internetom (to isté ako Safe Mode with Networking)
* minimal (alternateShell) = použije sa shell definovaný v HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot (hodnota v AlternateShell, defaultne to je cmd.exe), čiže žiadne grafické rozhranie, len príkazový riadok.



Po reštarte počítač nabehne do núdzového režimu.
Po ukončení práce v núdzaku, treba voľbu /safeboot zase odfajknúť. Obrázek

Napsal: 18 dub 2008 19:16
od tKoudy
Omlouvam se za zmatky, ted uz by to melo byt ok.. :)

sdfix:


SDFix: Version 1.172
Run by Administrator on p  18.04.2008 at 20:05

Microsoft Windows XP [Verze 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system32\wsnpoem\audio.dll.cla - Deleted


Could Not Remove C:\WINDOWS\system32\ntos.exe
Could Not Remove C:\WINDOWS\system32\wsnpoem\audio.dll
Could Not Remove C:\WINDOWS\system32\wsnpoem\video.dll



Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1353.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-18 20:13:22
Windows 5.1.2600 Service Pack 1 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files :

C:\WINDOWS\system32\wsnpoem\audio.dll Found
C:\WINDOWS\system32\wsnpoem\video.dll Found

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Thu 14 Feb 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3505.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0005.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0410.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0741.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0922.tmp"
Thu 14 Feb 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2250.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL4020.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1035.tmp"
Thu 14 Feb 2008 19,968 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3679.tmp"
Tue 15 Jan 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3718.tmp"
Tue 15 Jan 2008 21,504 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2897.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1324.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3077.tmp"
Tue 15 Jan 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0844.tmp"
Tue 15 Jan 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2820.tmp"
Thu 14 Feb 2008 19,968 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2945.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2338.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0968.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0627.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0351.tmp"
Tue 15 Jan 2008 23,040 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0038.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0355.tmp"
Thu 14 Feb 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0864.tmp"
Thu 14 Feb 2008 21,504 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1496.tmp"
Thu 14 Feb 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3225.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2975.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0048.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0172.tmp"
Thu 14 Feb 2008 22,016 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1106.tmp"
Thu 14 Feb 2008 22,528 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1807.tmp"
Thu 14 Feb 2008 23,552 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2419.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2389.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1606.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0691.tmp"
Wed 12 Mar 2008 19,456 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1925.tmp"
Thu 14 Feb 2008 25,088 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1579.tmp"
Thu 14 Feb 2008 25,088 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0494.tmp"
Thu 14 Feb 2008 26,112 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2150.tmp"
Thu 14 Feb 2008 26,112 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL1521.tmp"
Thu 14 Feb 2008 27,136 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0878.tmp"
Thu 14 Feb 2008 28,672 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2211.tmp"
Wed 12 Mar 2008 20,480 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2337.tmp"
Thu 14 Feb 2008 29,184 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL4051.tmp"
Thu 14 Feb 2008 29,184 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL2035.tmp"
Wed 12 Mar 2008 20,992 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0591.tmp"
Thu 14 Feb 2008 30,208 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL3374.tmp"
Thu 14 Feb 2008 31,232 ...H. --- "C:\Documents and Settings\Koudel\Plocha\~WRL0935.tmp"
Sun 11 Feb 2007 22,528 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL1759.tmp"
Sun 11 Feb 2007 22,016 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL1129.tmp"
Sun 11 Feb 2007 20,992 ...H. --- "C:\Documents and Settings\Koudel\Data aplikacˇ\Microsoft\Word\~WRL3241.tmp"

Finished!

novy HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:15:22, on 18.4.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
E:\Program Files\BlueSoleil\BTNtService.exe
C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
E:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Totalcmd7\TOTALCMD.EXE
D:\HijackThis.exe
C:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gta4.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\System32\ntos.exe,
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie_ctx.htm
O8 - Extra context menu item: Stáhnout obsah FLV videa s IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout s IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp01.photoprintit.de/microsite/ ... loader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - E:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PHPGeekUtil - Unknown owner - c:\apache\APACHE.EXE (file missing)

--
End of file - 5962 bytes

Napsal: 19 dub 2008 09:16
od tKoudy
Jeste jednou prosim o pomoc, poradi nekdo prosim?

Predem dekuju..

Napsal: 19 dub 2008 09:35
od l.kantor
stáhněte a uložte na plochu ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

spusťte jako administrátor

hned po startu se zobrazí obrazovka s licenčními podmínkami, stiskněte klavesu YES pro pokračování
celá akce trva cca. 5-10 minut, někdy i déle -, postupujte dle pokynů na obrazovce, během skenu neprovádějte žádnou činnost na pc

váš stroj může být restartován

upozorneni: pokud pouzivate Spyware Terminator, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze se pri skenu Combofix pokousi infikovane soubory smazat a Spyware Terminator tomu muze branit


po restartu aplikace vytvori log, ulozeny na C:/Combofix.txt (pri opakovanem pouziti jsou logy oznaceny Combofix2.txt atd.), jeho obsah vlozte sem

Napsal: 19 dub 2008 09:49
od tKoudy
diky..
behem skenovani mi vyskocilo okno NODu, nechal jsem ho byt a po dokonceni ho zavrel, na to vyskocilo dalsi, ve kterem doporucoval smazani souboru q.dll, tak jsem mu to povolil..

tady je log:

ComboFix 08-04-18.3 - Koudel 2008-04-19 10:42:35.3 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.1.1250.1.1029.18.249 [GMT 2:00]
Running from: C:\Documents and Settings\Koudel\Plocha\ComboFix.exe
* Created a new restore point
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Koudel\Local Settings\Temporary Internet Files\SLOVA.WAV
C:\Documents and Settings\Koudel\Local Settings\Temporary Internet Files\WDICT32.INI
C:\WINDOWS\system32\Cfx32.lic
C:\WINDOWS\system32\cfx32.ocx

.
((((((((((((((((((((((((( Files Created from 2008-03-19 to 2008-04-19 )))))))))))))))))))))))))))))))
.

2008-04-19 10:03 . 2008-04-19 10:03 <DIR> d-------- C:\WINDOWS\system32\WinFast
2008-04-19 10:03 . 2008-04-19 10:03 <DIR> d-------- C:\Program Files\Leadtek
2008-04-18 20:02 . 2008-04-18 20:02 <DIR> d-------- C:\WINDOWS\ERUNT
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Plocha
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní tiskárny
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní síť
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Oblíbené položky
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Šablony
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> dr------- C:\Documents and Settings\Administrator\Nabídka Start
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Dokumenty
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> dr-h----- C:\Documents and Settings\Administrator\Data aplikací
2008-04-18 20:01 . 2008-04-18 20:01 <DIR> d-------- C:\Documents and Settings\Administrator
2008-04-18 20:01 . 2008-04-19 10:42 1,024 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT.LOG
2008-04-18 12:54 . 2008-04-18 09:45 <DIR> d-------- C:\SDFix
2008-04-18 12:54 . 2008-04-18 12:55 <DIR> d-------- C:\Sdf
2008-04-12 17:08 . 2008-04-12 17:08 <DIR> d--hs---- C:\FOUND.000
2008-04-12 16:53 . 2002-12-13 06:30 81,356 -ra------ C:\WINDOWS\system32\drivers\wf2kvcap.sys
2008-04-06 21:08 . 2008-04-06 21:08 <DIR> d-------- C:\Documents and Settings\Koudel\Data aplikací\CDBurnerXP_Soft
2008-03-19 14:49 . 2002-05-31 01:10 294,400 --a------ C:\WINDOWS\system32\ETXCodec.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-17 18:08 --------- d-----w C:\Documents and Settings\Koudel\Data aplikací\dvdcss
2008-03-01 14:12 --------- d-----w C:\Documents and Settings\Koudel\Data aplikací\gtk-2.0
2007-12-25 09:11 32 ----a-w C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"ICQ Lite"="E:\Program Files\ICQLite\ICQLite.exe" [2006-07-11 12:06 3144800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PinnacleDriverCheck"="C:\WINDOWS\System32\PSDrvCheck.exe" [2003-12-04 12:34 406016]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-07-07 10:15 949376]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)
"MemCheckBoxInRunDlg"= 0 (0x0)
"NoAutoTrayNotify"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoResolveSearch"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)
"NoDesktopCleanupWizard"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

R2 NMSAccessU;NMSAccessU;E:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 11:20]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\System32\DRIVERS\psched.sys [2002-08-28 23:35]
R3 w89c940;Winbond W89C940 PCI Ethernet Adapter Driver;C:\WINDOWS\System32\DRIVERS\w940nd.sys [2001-08-17 20:13]
R4 WINFOXIO;WINFOXIO;C:\WINDOWS\System32\Drivers\WINFOXIO.SYS [2002-11-28 21:27]
S2 BT848;WinFast TV2000 XP WDM Video Capture;C:\WINDOWS\System32\drivers\wf2kvcap.sys [2002-12-13 06:30]
S2 PHPGeekUtil;PHPGeekUtil;"c:\apache\APACHE.EXE" --ntservice []
S2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;C:\WINDOWS\System32\drivers\wf2ktunr.sys []
S2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;C:\WINDOWS\System32\drivers\wf2kxbar.sys []
S3 AF15BDA;AF9015 BDA Filter;C:\WINDOWS\System32\Drivers\AF15BDA.sys [2006-07-27 11:02]
S3 cglptnt;cglptnt;C:\Program Files\Totalcmd\cglptnt.sys [2005-05-31 06:53]
S3 P1Scanner;MUSTEK P1 Still Image Device Service;C:\WINDOWS\System32\drivers\usbscan.sys [2002-08-29 01:48]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB;C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2002-08-29 01:32]
S3 usbscan;Ovladač skeneru USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys [2002-08-29 01:48]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-08-29 01:32]

.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-19 10:45:20
Windows 5.1.2600 Service Pack 1 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


C:\WINDOWS\system32\ntos.exe 135168 bytes
C:\WINDOWS\system32\wsnpoem

scan completed successfully
hidden files: 2

**************************************************************************
.
Completion time: 2008-04-19 10:46:12
ComboFix2.txt 2007-12-28 09:34:44
ComboFix-quarantined-files.txt 2008-04-19 08:46:10

Adresářů: 7, Volných bajtů: 192,704,512
Adresářů: 10, Volných bajtů: 331,624,448

103

Napsal: 19 dub 2008 11:06
od l.kantor
vytvořte script -zkopírujte do něho modrý text
Skript musí být vytvořený v Poznámkovém bloku a uložený jako CFScript.txt. Po uložení je třeba uchopit vytvořený skript CFScript.txt, přesunout ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upustit. Dojde tak k novému spuštění ComboFixu a vykonání zadaných příkazů. Výsledky jsou zaznamenány v logu C:\ComboFix.txt.

File::
C:\WINDOWS\system32\ntos.exe

Folder::
C:\WINDOWS\system32\wsnpoem


Obrázek

Napsal: 19 dub 2008 11:49
od tKoudy
Hotovo, hacky a carky uz fungujou, predpokladam teda, ze vir je pryc.. (?)

Mockrat dekuji za pomoc!!

Napsal: 20 dub 2008 19:09
od l.kantor
vložte sem log z combofixu+aktuální z hjt

Napsal: 23 dub 2008 14:05
od tKoudy
ComboFix 08-04-18.3 - Koudel 2008-04-23 15:00:45.5 - FAT32x86
Systém Microsoft Windows XP Professional 5.1.2600.1.1250.1.1029.18.271 [GMT 2:00]
Running from: C:\Documents and Settings\Koudel\Plocha\ComboFix.exe
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
/wow section - STAGE 41
pv: No matching processes found
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.
Proces nemá přístup k souboru, neboť jej právě využívá jiný proces.


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\wsnpoem
C:\WINDOWS\system32\wsnpoem\audio.dll
C:\WINDOWS\system32\wsnpoem\video.dll

.
((((((((((((((((((((((((( Files Created from 2008-03-23 to 2008-04-23 )))))))))))))))))))))))))))))))
.

2008-04-19 10:03 . 2008-04-19 10:03 <DIR> d-------- C:\WINDOWS\system32\WinFast
2008-04-19 10:03 . 2008-04-19 10:03 <DIR> d-------- C:\Program Files\Leadtek
2008-04-18 20:02 . 2008-04-18 20:02 <DIR> d-------- C:\WINDOWS\ERUNT
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Plocha
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní tiskárny
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Okolní síť
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Oblíbené položky
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d--h----- C:\Documents and Settings\Administrator\Šablony
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> dr------- C:\Documents and Settings\Administrator\Nabídka Start
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> d-------- C:\Documents and Settings\Administrator\Dokumenty
2008-04-18 20:01 . 2006-06-06 18:16 <DIR> dr-h----- C:\Documents and Settings\Administrator\Data aplikací
2008-04-18 20:01 . 2008-04-18 20:01 <DIR> d-------- C:\Documents and Settings\Administrator
2008-04-18 20:01 . 2008-04-22 20:19 1,024 --ah----- C:\Documents and Settings\Administrator\NTUSER.DAT.LOG
2008-04-18 12:54 . 2008-04-18 09:45 <DIR> d-------- C:\SDFix
2008-04-18 12:54 . 2008-04-18 12:55 <DIR> d-------- C:\Sdf
2008-04-12 17:08 . 2008-04-12 17:08 <DIR> d--hs---- C:\FOUND.000
2008-04-12 16:53 . 2002-12-13 06:30 81,356 -ra------ C:\WINDOWS\system32\drivers\wf2kvcap.sys
2008-04-06 21:08 . 2008-04-06 21:08 <DIR> d-------- C:\Documents and Settings\Koudel\Data aplikací\CDBurnerXP_Soft

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-17 18:08 --------- d-----w C:\Documents and Settings\Koudel\Data aplikací\dvdcss
2008-03-01 14:12 --------- d-----w C:\Documents and Settings\Koudel\Data aplikací\gtk-2.0
2007-12-25 09:11 32 ----a-w C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
.

((((((((((((((((((((((((((((( snapshot@2008-04-19_10.45.45,12 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-04-19 07:58:00 2,048 --s-a-w C:\WINDOWS\bootstat.dat
+ 2008-04-23 10:53:52 2,048 --s-a-w C:\WINDOWS\bootstat.dat
- 2008-04-19 07:58:02 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-04-23 10:53:54 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-04-19 07:58:02 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2008-04-23 10:53:54 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
- 2008-04-19 07:58:02 49,152 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-04-23 10:53:54 49,152 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PinnacleDriverCheck"="C:\WINDOWS\System32\PSDrvCheck.exe" [2003-12-04 12:34 406016]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-07-07 10:15 949376]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"= 0 (0x0)
"SynchronousUserGroupPolicy"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMBalloonTip"= 1 (0x1)
"MemCheckBoxInRunDlg"= 0 (0x0)
"NoAutoTrayNotify"= 0 (0x0)
"NoResolveTrack"= 0 (0x0)
"NoResolveSearch"= 1 (0x1)
"NoWelcomeScreen"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)
"NoDesktopCleanupWizard"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

R2 NMSAccessU;NMSAccessU;E:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-03-09 11:20]
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\System32\DRIVERS\psched.sys [2002-08-28 23:35]
R3 w89c940;Winbond W89C940 PCI Ethernet Adapter Driver;C:\WINDOWS\System32\DRIVERS\w940nd.sys [2001-08-17 20:13]
S2 BT848;WinFast TV2000 XP WDM Video Capture;C:\WINDOWS\System32\drivers\wf2kvcap.sys [2002-12-13 06:30]
S2 PHPGeekUtil;PHPGeekUtil;"c:\apache\APACHE.EXE" --ntservice []
S2 tv2ktunr;WinFast TV2000 XP WDM TVTuner;C:\WINDOWS\System32\drivers\wf2ktunr.sys []
S2 Tv2kXbar;WinFast TV2000 XP WDM Crossbar;C:\WINDOWS\System32\drivers\wf2kxbar.sys []
S3 AF15BDA;AF9015 BDA Filter;C:\WINDOWS\System32\Drivers\AF15BDA.sys [2006-07-27 11:02]
S3 cglptnt;cglptnt;C:\Program Files\Totalcmd\cglptnt.sys [2005-05-31 06:53]
S3 P1Scanner;MUSTEK P1 Still Image Device Service;C:\WINDOWS\System32\drivers\usbscan.sys [2002-08-29 01:48]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB;C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2002-08-29 01:32]
S3 usbscan;Ovladač skeneru USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys [2002-08-29 01:48]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2002-08-29 01:32]

.
**************************************************************************

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-04-23 15:02:17
Windows 5.1.2600 Service Pack 1 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-04-23 15:02:39
ComboFix4.txt 2007-12-28 09:34:44
ComboFix-quarantined-files.txt 2008-04-23 13:02:38
ComboFix3.txt 2008-04-19 08:46:14
ComboFix2.txt 2008-04-19 10:47:00

Adresářů: 7, Volných bajtů: 309,096,448
Adresářů: 10, Volných bajtů: 315,375,616

115



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:03:33, on 23.4.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32kui.exe
E:\Program Files\BlueSoleil\BTNtService.exe
C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
E:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
E:\Program Files\The Bat!\thebat.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Totalcmd7\TOTALCMD.EXE
D:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gta4.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - E:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - E:\Program Files\BitComet\tools\BitCometBHO_1.1.6.14.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie_ctx.htm
O8 - Extra context menu item: Stáhnout obsah FLV videa s IDM - E:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stáhnout s IDM - E:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s IDM - E:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://E:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://asp01.photoprintit.de/microsite/ ... loader.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: BlueSoleil Hid Service - Unknown owner - E:\Program Files\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Program Files\Ahead\Nero\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - E:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PHPGeekUtil - Unknown owner - c:\apache\APACHE.EXE (file missing)

--
End of file - 6057 bytes