VIRY.CZ

Prosím o kontrolu - PC po zadání hesla dlouho nabíhá, dlouho trvá, než se objeví ikony na ploše. Ve správci úloh se mi jeví "aktivní" procesy: nSvcIp.exe a GoogleCrashHandler.exe, ovšem podle informací z netu jsou zřejmě neškodné.







Logfile of random's system information tool 1.06 (written by random/random)
Run by qqqq at 2009-12-28 22:36:38
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 9 GB (27%) free of 32 GB
Total RAM: 1535 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:42, on 28.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\WINDOWS\system32\svchost.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SmartClock\SmartClock.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe
C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Plocha\Stáhnuto\RSIT.exe
C:\Program Files\trend micro\Richard Buček.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [gemstrmw] C:\WINDOWS\system32\gemstrmw.exe /r
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HotSync] "C:\Program Files\PalmSource\Desktop\HotSync.exe" -AllUsers
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [SmartClock] C:\Program Files\SmartClock\SmartClock.exe /boot
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: xxx.lnk = C:\Moje\xxx.ahk
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra 'Tools' menuitem: Nastavení aplikace &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} (ICASign Class) - https://ib24.csob.cz/Comp/IcaSignerCZ.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EXSJVYBHZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Desktop Manager 5.9.906.4286 (GoogleDesktopManager-060409-093314) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LNQVJZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 9020 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-73586283-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-73586283-839522115-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-08-10 1218560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}]
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll [2009-10-16 2101248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-08-10 1218560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-06-18 67584]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-28 344064]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2005-06-29 32768]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-12 30192]
"gemstrmw"=C:\WINDOWS\system32\gemstrmw.exe [2003-08-29 24576]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-15 981384]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"HotSync"=C:\Program Files\PalmSource\Desktop\HotSync.exe -AllUsers []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-12-03 429392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"=C:\Program Files\SmartClock\SmartClock.exe [2003-04-26 880128]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-08-17 3055616]
"Software Informer"=C:\Program Files\Software Informer\softinfo.exe [2009-11-25 2011205]
"fsm"= []
"Google Update"=C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-15 135664]

C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění
HotSync Manager.lnk - C:\Program Files\Palm\Hotsync.exe

xxx.lnk - C:\Moje\xxx.ahk

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-06-29 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Disabled:Crawler Spyware Terminator"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{43e226d4-aff7-11de-a691-0013d46559af}]
shell\AutoRun\command - G:\preinst.exe


======List of files/folders created in the last 1 months======

2009-12-19 21:50:34 ----A---- C:\podpis.txt
2009-12-19 21:49:53 ----D---- C:\Nová složka
2009-12-15 13:05:05 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\TeamViewer
2009-12-15 13:04:57 ----D---- C:\Program Files\TeamViewer
2009-12-11 16:45:36 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Software Informer
2009-12-11 16:45:35 ----D---- C:\Program Files\Software Informer
2009-12-10 09:20:01 ----D---- C:\Program Files\MSXML 4.0
2009-12-09 18:57:57 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Arcsoft
2009-12-09 18:55:03 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\HotSync
2009-12-09 18:55:01 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\HotSync
2009-12-09 11:31:20 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 11:31:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 11:31:01 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-09 11:30:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 11:30:42 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 11:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-02 16:56:06 ----A---- C:\WINDOWS\movexe.exe
2009-12-02 16:56:03 ----D---- C:\Program Files\SokoMind

======List of files/folders modified in the last 1 months======

2009-12-28 22:36:43 ----A---- C:\WINDOWS\system32\mappings.txt
2009-12-28 22:36:42 ----D---- C:\WINDOWS\Prefetch
2009-12-28 22:36:40 ----D---- C:\Program Files\trend micro
2009-12-28 22:30:20 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-28 22:12:45 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-28 22:12:42 ----D---- C:\WINDOWS\system32\drivers
2009-12-28 22:07:34 ----D---- C:\WINDOWS\Internet Logs
2009-12-28 21:54:58 ----D---- C:\Program Files\Mozilla Firefox
2009-12-28 21:52:22 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spyware Terminator
2009-12-28 21:52:08 ----AD---- C:\WINDOWS
2009-12-28 21:52:05 ----A---- C:\WINDOWS\hpbafd.ini
2009-12-28 21:51:49 ----SHD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\MPK
2009-12-28 21:51:10 ----D---- C:\WINDOWS\Temp
2009-12-28 18:48:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-28 10:53:17 ----D---- C:\Program Files\Mozilla Thunderbird
2009-12-27 15:14:02 ----D---- C:\WINDOWS\system32
2009-12-24 21:53:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-23 14:01:48 ----D---- C:\Program Files\Palm
2009-12-23 12:41:34 ----A---- C:\WINDOWS\win.ini
2009-12-16 14:50:28 ----SHD---- C:\WINDOWS\Installer
2009-12-16 14:50:21 ----D---- C:\Program Files\Google
2009-12-16 14:50:09 ----SD---- C:\WINDOWS\Tasks
2009-12-16 14:17:09 ----SHD---- C:\System Volume Information
2009-12-16 13:56:38 ----HD---- C:\WINDOWS\inf
2009-12-16 13:56:38 ----D---- C:\WINDOWS\system32\ShellExt
2009-12-15 15:30:28 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla
2009-12-15 13:04:57 ----RD---- C:\Program Files
2009-12-10 09:20:09 ----D---- C:\WINDOWS\WinSxS
2009-12-09 13:21:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 11:31:22 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-09 11:31:16 ----A---- C:\WINDOWS\imsins.BAK
2009-12-09 11:30:48 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-15 353672]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-06-21 626204]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-29 1241088]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-07-28 33024]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-07-28 12928]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 AVMUNET;AVM FRITZ!Box; C:\WINDOWS\system32\DRIVERS\avmunet.sys [2005-02-22 15104]
S3 catchme;catchme; \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\catchme.sys []
S3 GTwinUSB;GTwinUSB; C:\WINDOWS\System32\Drivers\GTwinUSB.sys [2002-10-04 61776]
S3 PalmUSBD;PalmUSBD; C:\WINDOWS\system32\drivers\PalmUSBD.sys [2007-12-04 16640]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-29 376832]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 ForcewareWebInterface;Forceware Web Interface; C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2004-08-18 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 nSvcIp;ForceWare IP service; C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe [2004-08-19 110658]
R2 nSvcLog;ForceWare user log service; C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe [2004-08-19 53318]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-08-17 487424]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-02-15 2402184]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2005-06-28 516096]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-16 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 EXSJVYBHZ;EXSJVYBHZ; C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe [2009-08-28 469888]
S3 GoogleDesktopManager-060409-093314;Google Desktop Manager 5.9.906.4286; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-12 30192]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 LNQVJZ;LNQVJZ; C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe [2009-08-28 461696]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Dobrý den

odinstalujte NVIDIA NetworkAccessManager a pošlete ještě log z Combofix:

Stáhneme na plochu, ukončíme všechna aktivní okna a spustíme ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Po spuštění potvrdíme podmínky užití
- Dále postupujeme dle pokynů, během aplikování ComboFixu neklikejte do zobrazujících se oken
- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt
- ComboFix je třeba spustit pod účtem s právy administrátora

ComboFix 09-12-29.05 - Richard Buček 30.12.2009 15:29:20.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1044 [GMT 1:00]
Spuštěný z: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\Stáhnuto\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 091230-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\LOG.TXT
c:\windows\system32\ieuinit.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-11-28 do 2009-12-30 )))))))))))))))))))))))))))))))
.

2009-12-28 23:40 . 2009-12-28 23:40 -------- d-----w- C:\vypinac
2009-12-28 23:18 . 2009-12-28 23:18 392320 ----a-w- c:\windows\system32\drivers\timntr.sys
2009-12-28 23:18 . 2009-12-28 23:18 32768 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2009-12-28 23:18 . 2009-12-28 23:18 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Common Files\Acronis
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Acronis
2009-12-24 17:45 . 2009-12-24 17:45 -------- d-s---w- c:\documents and settings\Admin\UserData
2009-12-19 20:49 . 2009-12-19 20:49 -------- d-----w- C:\Nová složka
2009-12-17 10:12 . 2009-12-27 14:14 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-15 12:04 . 2009-12-15 12:04 -------- d-----w- c:\program files\TeamViewer
2009-12-11 15:45 . 2009-12-11 15:45 -------- d-----w- c:\program files\Software Informer
2009-12-10 08:20 . 2009-12-10 08:20 -------- d-----w- c:\program files\MSXML 4.0
2009-12-09 18:08 . 2007-12-04 16:10 16640 ----a-r- c:\windows\system32\drivers\PalmUSBD.sys
2009-12-02 15:56 . 2009-12-02 15:56 6688 ----a-w- c:\windows\movexe.exe
2009-12-02 15:56 . 2009-12-02 16:05 -------- d-----w- c:\program files\SokoMind

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-30 12:08 . 2009-07-10 21:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-30 10:19 . 2009-07-10 22:23 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-28 21:36 . 2009-07-22 02:54 -------- d-----w- c:\program files\trend micro
2009-12-28 21:12 . 2009-07-21 19:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-28 09:17 . 2009-09-06 09:31 10220292 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
2009-12-23 13:01 . 2009-08-29 10:36 -------- d-----w- c:\program files\Palm
2009-12-16 13:50 . 2009-07-12 08:59 -------- d-----w- c:\program files\Google
2009-12-09 12:21 . 2004-08-18 10:00 61958 ----a-w- c:\windows\system32\perfc005.dat
2009-12-09 12:21 . 2004-08-18 10:00 379294 ----a-w- c:\windows\system32\perfh005.dat
2009-12-03 15:14 . 2009-07-22 02:50 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-07-22 02:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-26 19:05 . 2009-11-26 19:05 -------- d-----w- c:\program files\QuickTime
2009-11-24 23:54 . 2009-07-10 21:28 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2009-07-10 21:28 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:50 . 2009-07-10 21:28 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-11-24 23:50 . 2009-07-10 21:28 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2009-07-10 21:28 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2009-07-10 21:28 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2009-07-10 21:28 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2009-07-10 21:28 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2009-07-10 21:28 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-20 01:45 . 2009-11-20 08:34 1674240 ----a-w- c:\windows\Internet Logs\xDB3.tmp
2009-11-17 14:29 . 2009-11-17 14:15 -------- d-----w- c:\program files\Room Arranger
2009-11-17 14:21 . 2009-11-17 14:21 -------- d-----w- c:\program files\Nábytek 1.1 Demo
2009-11-17 14:18 . 2009-11-17 14:18 -------- d-----w- c:\program files\Common Files\ParallelGraphics
2009-11-09 10:42 . 2009-11-09 10:41 1024 ----a-w- c:\windows\system32\WTCY9853.dat
2009-11-04 07:30 . 2009-07-13 08:15 -------- d-----w- c:\program files\Java
2009-10-29 05:26 . 2006-03-04 03:35 668160 ----a-w- c:\windows\system32\wininet.dll
2009-10-21 05:40 . 2004-08-18 10:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-18 10:00 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-18 10:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 21:28 . 2008-02-22 09:21 437920 ----a-w- c:\windows\system32\ICASigner.dll
2009-10-13 10:34 . 2004-08-18 10:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:40 . 2004-08-18 10:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:40 . 2004-08-18 10:00 150016 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2009-07-13 20:54 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-02 17:27 . 2009-10-02 17:27 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2009-07-12 08:59 . 2009-07-12 08:59 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-17_21.33.12 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-28 22:42 . 2009-06-28 22:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
+ 2009-12-09 17:55 . 2009-12-09 17:55 82432 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2009-12-30 09:27 . 2009-12-30 09:27 16384 c:\windows\Temp\Perflib_Perfdata_708.dat
+ 2009-12-30 09:27 . 2009-12-30 09:27 16384 c:\windows\Temp\Perflib_Perfdata_200.dat
+ 2009-08-20 05:05 . 2009-02-15 22:10 97672 c:\windows\system32\ZoneLabs\zlquarantine.dll
+ 2009-08-20 05:05 . 2008-11-17 00:24 51688 c:\windows\system32\ZoneLabs\srescan.sys
+ 2009-08-20 05:05 . 2009-02-15 22:10 94088 c:\windows\system32\ZoneLabs\lib\zvpn.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 20360 c:\windows\system32\ZoneLabs\lib\zsys.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 59272 c:\windows\system32\ZoneLabs\lib\zpdp.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 14216 c:\windows\system32\ZoneLabs\lib\zmenu.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 24968 c:\windows\system32\ZoneLabs\lib\zic.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 84872 c:\windows\system32\ZoneLabs\lib\ZAlert.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 34696 c:\windows\system32\ZoneLabs\lib\UpdateUI.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 17800 c:\windows\system32\ZoneLabs\lib\oem_1466.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 10120 c:\windows\system32\ZoneLabs\lib\oem_1454.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 10632 c:\windows\system32\ZoneLabs\lib\oem_1445.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 13704 c:\windows\system32\ZoneLabs\lib\oem_1440.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 11656 c:\windows\system32\ZoneLabs\lib\oem_1413.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 11144 c:\windows\system32\ZoneLabs\lib\oem_1010.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 29576 c:\windows\system32\ZoneLabs\lib\NavBar.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 12168 c:\windows\system32\ZoneLabs\lib\MainLoop.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 35720 c:\windows\system32\ZoneLabs\lib\Alert.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 38280 c:\windows\system32\ZoneLabs\featuremap.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 98184 c:\windows\system32\ZoneLabs\fbl.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 74632 c:\windows\system32\ZoneLabs\camupd.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 69000 c:\windows\system32\zlcomm.dll
+ 2008-10-16 12:09 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 55808 c:\windows\system32\WudfSvc.dll
+ 2006-09-28 18:13 . 2006-09-28 18:13 95344 c:\windows\system32\WUDFCoinstaller.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2006-11-02 09:51 . 2006-11-02 09:51 39936 c:\windows\system32\wpdshextres.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 17408 c:\windows\system32\wpdshextautoplay.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 63488 c:\windows\system32\wpdmtpus.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 35840 c:\windows\system32\wpdconns.dll
+ 2004-08-18 10:00 . 2007-01-05 18:57 99840 c:\windows\system32\wmpshell.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 37376 c:\windows\system32\wmdmps.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 33792 c:\windows\system32\wmdmlog.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 35208 c:\windows\system32\vswmi.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 58248 c:\windows\system32\vsregexp.dll
+ 2008-01-03 17:19 . 2008-01-03 17:19 53248 c:\windows\system32\USBPort.dll
+ 2009-07-11 08:33 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
- 2009-07-10 17:45 . 2008-07-08 12:59 18296 c:\windows\system32\spmsg.dll
+ 2009-09-03 19:05 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll
+ 2009-10-21 08:36 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2009-10-21 08:36 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
- 2004-08-18 10:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 2007-02-16 17:50 . 2007-02-16 17:50 14368 c:\windows\system32\relog_ap.dll
+ 2009-09-11 18:05 . 2001-06-26 05:15 38912 c:\windows\system32\picn20.dll
- 2004-08-18 10:00 . 2009-07-11 22:52 52764 c:\windows\system32\perfc009.dat
+ 2004-08-18 10:00 . 2009-12-09 12:21 52764 c:\windows\system32\perfc009.dat
+ 2007-12-04 16:53 . 2007-12-04 16:53 53248 c:\windows\system32\PalmDevC.dll
+ 2002-06-17 08:54 . 2002-06-17 08:54 40960 c:\windows\system32\mweclass.dll
+ 2003-04-18 15:29 . 2003-04-18 15:29 82432 c:\windows\system32\msxml4r.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 27136 c:\windows\system32\mspmsnsv.dll
+ 2004-08-18 10:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll
+ 2009-07-12 09:16 . 2009-12-17 13:57 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2009-07-12 09:16 . 2009-07-12 09:16 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2004-08-18 10:00 . 2006-10-18 19:47 11264 c:\windows\system32\LAPRXY.dll
+ 2009-10-02 17:27 . 2009-10-02 17:27 11973 c:\windows\system32\Lang\Thai.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13267 c:\windows\system32\Lang\SWEDISH.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15093 c:\windows\system32\Lang\Spanish.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15176 c:\windows\system32\Lang\Russian.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14329 c:\windows\system32\Lang\Portuguese.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11682 c:\windows\system32\Lang\Korean.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13055 c:\windows\system32\Lang\Japanese.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15410 c:\windows\system32\Lang\Italian.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14413 c:\windows\system32\Lang\German.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15434 c:\windows\system32\Lang\French.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11743 c:\windows\system32\Lang\English.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14173 c:\windows\system32\Lang\Dutch.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13536 c:\windows\system32\Lang\Danish.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11548 c:\windows\system32\Lang\Arabic.bin
- 2004-08-18 10:00 . 2009-06-26 16:51 81920 c:\windows\system32\ieencode.dll
+ 2004-08-18 10:00 . 2009-09-25 05:37 81920 c:\windows\system32\ieencode.dll
+ 2009-02-17 13:33 . 2009-02-17 13:33 89256 c:\windows\system32\ElbyCDIO.dll
+ 2009-08-30 10:29 . 2007-03-08 14:18 18432 c:\windows\system32\DRVSTORE\grmnusb_09F3E629557EBE4D2BA1A9469BDAE635AC0807AE\I386\grmngen.sys
+ 2006-09-28 17:00 . 2006-09-28 17:00 82944 c:\windows\system32\drivers\WudfRd.sys
+ 2006-09-28 16:55 . 2006-09-28 16:55 77568 c:\windows\system32\drivers\WudfPf.sys
+ 2006-10-18 18:00 . 2006-10-18 18:00 38528 c:\windows\system32\drivers\wpdusb.sys
+ 2004-08-18 10:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
+ 2009-02-17 17:11 . 2009-02-17 17:11 24232 c:\windows\system32\drivers\ElbyCDIO.sys
+ 2007-02-16 00:57 . 2007-02-16 00:57 34760 c:\windows\system32\drivers\ElbyCDFL.sys
+ 2005-02-22 13:33 . 2005-02-22 13:33 15104 c:\windows\system32\drivers\avmunet.sys
+ 2009-07-10 17:43 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2004-08-18 10:00 . 2007-01-05 18:57 99840 c:\windows\system32\dllcache\wmpshell.dll
+ 2009-07-10 17:03 . 2007-01-05 18:56 64000 c:\windows\system32\dllcache\wmplayer.exe
+ 2009-07-10 17:03 . 2007-01-05 18:56 96256 c:\windows\system32\dllcache\wmpband.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 37376 c:\windows\system32\dllcache\wmdmps.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
+ 2009-10-05 14:20 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
+ 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
+ 2009-10-05 14:20 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 2009-04-29 04:35 . 2009-06-26 16:51 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-04-29 04:35 . 2009-09-25 05:37 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2004-08-18 10:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2009-08-17 21:22 . 2008-10-16 12:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 82432 c:\windows\system32\dllcache\cache\ws2_32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 26112 c:\windows\system32\dllcache\cache\userinit.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 14336 c:\windows\system32\dllcache\cache\svchost.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 88576 c:\windows\system32\dllcache\cache\rasauto.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 17408 c:\windows\system32\dllcache\cache\powrprof.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 13312 c:\windows\system32\dllcache\cache\lsass.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 22016 c:\windows\system32\dllcache\cache\lpk.dll
+ 2009-08-17 21:22 . 2008-04-14 05:59 24576 c:\windows\system32\dllcache\cache\kbdclass.sys
+ 2009-08-17 21:22 . 2008-04-13 22:23 36608 c:\windows\system32\dllcache\cache\ip6fw.sys
+ 2009-08-17 21:22 . 2008-04-14 06:52 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
+ 2009-08-17 21:22 . 2008-04-13 22:27 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
+ 2009-08-17 21:22 . 2004-08-18 10:00 11776 c:\windows\system32\dllcache\cache\acpiec.sys
+ 2004-08-18 10:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
+ 2004-04-17 14:05 . 2004-04-17 14:05 36864 c:\windows\system32\ametrans.dll
+ 2007-02-14 18:14 . 2007-02-14 18:14 17440 c:\windows\system32\acrotls.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2007-04-13 18:58 . 2007-04-13 18:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2009-12-16 13:50 . 2009-12-16 13:50 47104 c:\windows\Installer\67e8d0.msi
+ 2009-12-16 13:50 . 2009-12-16 13:50 22528 c:\windows\Installer\67e8c9.msi
+ 2009-08-29 12:55 . 2009-08-29 12:55 62464 c:\windows\Installer\17e5692.msi
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut6_45BA714564B04B5DBDC240E20FCDC6DC.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut2_CEE9A021A79C462F7256725618452FF1.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 77824 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut2.041BC1C4_61CF_4566_B322_09A7A1F3FCD3.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut1_45BA714564B04B5DBDC240E20FCDC6DC.exe
+ 2009-12-10 08:20 . 2009-12-10 08:20 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2009-11-17 14:18 . 2009-11-17 14:18 86358 c:\windows\Installer\{C06CE867-0019-4BDD-88C3-CD96F79FCDC7}\controlPanelIcon.exe
+ 2009-12-10 08:20 . 2009-12-10 08:20 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2009-10-14 05:30 . 2009-10-14 05:30 27136 c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2009-08-29 11:17 . 2002-12-06 07:10 24576 c:\windows\DvzCommon\DvzMsgr.exe
+ 2009-08-29 11:17 . 2002-12-06 07:10 40960 c:\windows\DvzCommon\DvzMsgr.dll
+ 2009-08-29 11:17 . 2002-12-06 07:10 94208 c:\windows\DvzCommon\DsMgr.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_880dc467\System.Drawing.Design.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c3bdecb1\CustomMarshalers.dll
+ 2009-09-03 19:01 . 2006-09-28 17:01 58368 c:\windows\$NtUninstallWudf01000$\spuninst\WudfCustom.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 73728 c:\windows\$NtUninstallwmp11$\wmplayer.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 98304 c:\windows\$NtUninstallwmp11$\wmpband.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 23552 c:\windows\$NtUninstallWMFDist11$\wmdmps.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 27136 c:\windows\$NtUninstallWMFDist11$\wmdmlog.dll
+ 2009-09-03 19:02 . 2006-11-02 09:46 13312 c:\windows\$NtUninstallWMFDist11$\spuninst\wpdinstallutil.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 52224 c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
+ 2009-11-25 06:30 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
+ 2009-11-25 06:30 . 2009-10-29 02:05 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
+ 2009-10-17 05:15 . 2008-04-14 06:51 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll
+ 2009-10-17 05:18 . 2009-06-26 16:51 81920 c:\windows\$NtUninstallKB974455$\ieencode.dll
+ 2009-08-26 21:14 . 2008-10-23 10:06 62976 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
+ 2009-08-26 21:14 . 2009-07-16 04:18 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
+ 2009-10-05 14:37 . 2008-04-14 06:52 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-10-05 14:37 . 2009-02-03 19:58 56832 c:\windows\$NtUninstallKB968389$\secur32.dll
+ 2009-10-05 14:37 . 2008-04-13 22:01 92288 c:\windows\$NtUninstallKB968389$\ksecdd.sys
+ 2009-11-04 21:56 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976749\update\spcustom.dll
+ 2009-11-04 21:56 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB976749\spmsg.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975467\spmsg.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975025\spmsg.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974571\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974571\spmsg.dll
+ 2009-09-04 21:01 . 2009-09-04 21:01 58880 c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974455\update\spcustom.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974455\spmsg.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 81920 c:\windows\$hf_mig$\KB974455\SP3QFE\ieencode.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974112\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974112\spmsg.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973687\spmsg.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973525\update\spcustom.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973525\spmsg.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971961\update\spcustom.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971961\spmsg.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971486\update\spcustom.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971486\spmsg.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969947\update\spcustom.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969947\spmsg.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969059\update\spcustom.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969059\spmsg.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB968389\spmsg.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
+ 2009-10-05 14:20 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
+ 2009-09-10 04:00 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956844\spmsg.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 9608 c:\windows\system32\ZoneLabs\lib\oem_1460.zip.dll
- 2009-07-10 22:11 . 2009-07-10 22:11 4212 c:\windows\system32\zllictbl.dat
+ 2009-07-10 22:11 . 2009-08-20 05:05 4212 c:\windows\system32\zllictbl.dat
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmod.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVE.DLL
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmod.dll
+ 2006-10-18 19:58 . 2006-10-18 19:58 8704 c:\windows\system32\wdfmgr.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\wdfapi.dll
+ 2006-10-18 19:58 . 2006-10-18 19:58 8704 c:\windows\system32\uwdf.exe
+ 2009-08-27 18:55 . 2001-10-24 10:25 5632 c:\windows\system32\ptpusb.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MPG4DMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP4SDMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP43DMOD.dll
+ 2009-10-02 17:27 . 2009-10-02 17:27 9909 c:\windows\system32\Lang\TradChin.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 9695 c:\windows\system32\Lang\SimChin.bin
+ 2009-08-30 10:29 . 2007-03-08 14:18 8320 c:\windows\system32\DRVSTORE\grmnusb_09F3E629557EBE4D2BA1A9469BDAE635AC0807AE\I386\grmnusb.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmod.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmod.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MPG4DMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP4SDMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP43DMOD.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 5120 c:\windows\system32\dllcache\cache\sfc.dll
+ 2009-08-17 21:22 . 2004-08-18 10:00 2944 c:\windows\system32\dllcache\cache\null.sys
+ 2009-08-17 21:22 . 2004-08-18 10:00 4224 c:\windows\system32\dllcache\cache\beep.sys
+ 2004-08-18 10:00 . 2007-01-05 18:50 6656 c:\windows\system32\dllcache\asferror.dll
+ 2004-08-18 10:00 . 2007-01-05 18:50 6656 c:\windows\system32\asferror.dll
+ 2009-09-03 19:04 . 2008-04-14 05:39 7680 c:\windows\$NtUninstallwmp11$\asferror.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 6656 c:\windows\$NtUninstallWMFDist11$\laprxy.dll
+ 2009-07-12 00:12 . 2009-07-12 00:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-12 00:09 . 2009-07-12 00:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-12 00:08 . 2009-07-12 00:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
+ 2009-11-17 14:20 . 1998-02-06 21:37 299520 c:\windows\uninst.exe
+ 2009-08-20 05:05 . 2009-02-15 22:10 108424 c:\windows\system32\ZoneLabs\zlupdate.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 302472 c:\windows\system32\ZoneLabs\zlsre.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 178568 c:\windows\system32\ZoneLabs\zlparser.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 172936 c:\windows\system32\ZoneLabs\vsvault.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 108424 c:\windows\system32\ZoneLabs\vsdb.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 176520 c:\windows\system32\ZoneLabs\updclient.exe
+ 2009-08-20 05:05 . 2007-10-11 14:51 832984 c:\windows\system32\ZoneLabs\updating.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 431496 c:\windows\system32\ZoneLabs\ssleay32.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 134536 c:\windows\system32\ZoneLabs\scheduler.dll
+ 2009-08-20 05:05 . 2008-11-17 00:23 796128 c:\windows\system32\ZoneLabs\qrsrecl.dll
+ 2009-08-20 05:05 . 2008-11-17 00:23 722400 c:\windows\system32\ZoneLabs\qrbase.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 118664 c:\windows\system32\ZoneLabs\lib\zui.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 151944 c:\windows\system32\ZoneLabs\lib\ztv.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 188808 c:\windows\system32\ZoneLabs\lib\Overview.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 344968 c:\windows\system32\ZoneLabs\lib\LicenseUI.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 136584 c:\windows\system32\ZoneLabs\lib\DashBoard.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 344456 c:\windows\system32\ZoneLabs\lib\ConfigWizard.zip.dll
+ 2009-08-20 05:04 . 2009-02-04 16:27 548128 c:\windows\system32\ZoneLabs\icslta.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 159112 c:\windows\system32\ZoneLabs\httpblocker.dll
+ 2009-08-20 05:05 . 2008-03-17 14:52 813568 c:\windows\system32\ZoneLabs\dbghelp.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 103816 c:\windows\system32\zlcommdb.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 316416 c:\windows\system32\WUDFx.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 165376 c:\windows\system32\WudfPlatform.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 146432 c:\windows\system32\WudfHost.exe
+ 2009-07-10 17:43 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 356352 c:\windows\system32\wpdsp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 133632 c:\windows\system32\WPDShServiceObj.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 154624 c:\windows\system32\wpdmtp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 629760 c:\windows\system32\wpd_ci.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 656896 c:\windows\system32\WMVXENCD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 767488 c:\windows\system32\WMVSENCD.dll
+ 2004-08-18 10:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 204288 c:\windows\system32\wmpsrcwp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 130048 c:\windows\system32\wmpps.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 613376 c:\windows\system32\wmpmde.dll
+ 2006-10-18 19:47 . 2008-06-24 16:12 295936 c:\windows\system32\wmpeffects.dll
+ 2004-08-18 10:00 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 242688 c:\windows\system32\wmpasf.dll
+ 2004-08-18 10:00 . 2008-06-18 03:03 938496 c:\windows\system32\WMNetmgr.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 157184 c:\windows\system32\wmidx.dll
+ 2004-08-18 10:00 . 2007-01-05 18:55 238592 c:\windows\system32\wmerror.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 535040 c:\windows\system32\wmdrmsdk.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 348672 c:\windows\system32\wmdrmnet.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 429056 c:\windows\system32\wmdrmdev.dll
+ 2004-08-18 10:00 . 2007-10-25 07:28 222720 c:\windows\system32\wmasf.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 757248 c:\windows\system32\WMADMOD.dll
+ 2004-08-18 10:00 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 109960 c:\windows\system32\vsxml.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 482184 c:\windows\system32\vsutil.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 309128 c:\windows\system32\vspubapi.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 107912 c:\windows\system32\vsmonapi.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 229256 c:\windows\system32\vsinit.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 353672 c:\windows\system32\vsdatant.sys
+ 2009-08-20 05:04 . 2009-02-15 22:10 110472 c:\windows\system32\vsdata.dll
+ 2006-03-18 11:11 . 2009-10-29 05:26 627200 c:\windows\system32\urlmon.dll
+ 2009-09-11 18:05 . 2004-07-09 06:43 364544 c:\windows\system32\TwnLib4.dll
+ 2009-09-11 18:05 . 2000-06-26 08:45 106496 c:\windows\system32\TwnLib20.dll
- 2004-08-18 10:00 . 2008-10-03 10:04 247326 c:\windows\system32\strmdll.dll
+ 2004-08-18 10:00 . 2009-08-26 08:02 247326 c:\windows\system32\strmdll.dll
+ 2007-02-14 18:01 . 2007-02-14 18:01 206368 c:\windows\system32\snapapi.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 147456 c:\windows\system32\schannel.dll
+ 2001-11-03 13:39 . 2001-11-03 13:39 278528 c:\windows\system32\ShellExt\Cryptext.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 211456 c:\windows\system32\qasf.dll
+ 2009-08-27 18:55 . 2008-04-14 06:51 159232 c:\windows\system32\ptpusd.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 199168 c:\windows\system32\PortableDeviceWMDRM.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 166912 c:\windows\system32\PortableDeviceTypes.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 101888 c:\windows\system32\PortableDeviceClassExtension.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 284160 c:\windows\system32\PortableDeviceApi.dll
+ 2004-08-18 10:00 . 2009-12-09 12:21 380350 c:\windows\system32\perfh009.dat
- 2004-08-18 10:00 . 2009-07-11 22:52 380350 c:\windows\system32\perfh009.dat
+ 2009-09-11 18:05 . 2001-07-09 08:50 155648 c:\windows\system32\NeroCheck.exe
+ 2003-12-15 11:24 . 2003-12-15 11:24 196608 c:\windows\system32\NCTWMAFile2.dll
+ 2003-12-08 11:19 . 2003-12-08 11:19 335872 c:\windows\system32\NCTAudioVisualization2.dll
+ 2004-03-02 11:14 . 2004-03-02 11:14 425984 c:\windows\system32\NCTAudioTransform2.dll
+ 2004-03-02 11:14 . 2004-03-02 11:14 307200 c:\windows\system32\NCTAudioRecord2.dll
+ 2004-03-02 11:07 . 2004-03-02 11:07 315392 c:\windows\system32\NCTAudioPlayer2.dll
+ 2003-12-08 11:16 . 2003-12-08 11:16 327680 c:\windows\system32\NCTAudioGrabber2.dll
+ 2004-03-02 11:24 . 2004-03-02 11:24 724992 c:\windows\system32\NCTAudioEditor2.dll
+ 2004-11-04 11:31 . 2004-11-04 11:31 835584 c:\windows\system32\NCTAudioCDGrabber2.dll
+ 2002-06-17 09:06 . 2002-06-17 09:06 122880 c:\windows\system32\mwecmdlg.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 321536 c:\windows\system32\mswmdm.dll
+ 2004-08-18 10:00 . 2009-09-11 14:19 136192 c:\windows\system32\msv1_0.dll
+ 2000-07-14 23:00 . 2000-07-14 23:00 118784 c:\windows\system32\Msstdfmt.dll
+ 2004-08-18 10:00 . 2006-12-04 14:21 414720 c:\windows\system32\msscp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 175616 c:\windows\system32\mspmsp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 179712 c:\windows\system32\msnetobj.dll
+ 2006-10-02 13:28 . 2006-10-02 13:28 312128 c:\windows\system32\msdelta.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MPG4DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 317440 c:\windows\system32\MP4SDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MP43DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 212992 c:\windows\system32\MFPLAT.dll
+ 2009-10-28 03:40 . 2009-10-28 03:40 257440 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2004-08-18 10:00 . 2009-06-25 08:27 729088 c:\windows\system32\lsasrv.dll
+ 2004-08-18 10:00 . 2008-06-17 23:09 100864 c:\windows\system32\logagent.exe
+ 2003-08-07 13:01 . 2003-08-07 13:01 237568 c:\windows\system32\lame_enc.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll
- 2004-08-18 10:00 . 2008-05-09 10:56 512000 c:\windows\system32\jscript.dll
+ 2004-08-18 10:00 . 2009-08-13 15:24 512000 c:\windows\system32\jscript.dll
+ 2009-11-04 07:30 . 2009-10-11 03:17 149280 c:\windows\system32\javaws.exe
+ 2009-11-04 07:30 . 2009-10-11 03:17 145184 c:\windows\system32\javaw.exe
+ 2009-11-04 07:30 . 2009-10-11 03:17 145184 c:\windows\system32\java.exe
+ 2009-09-11 18:05 . 2004-07-20 14:24 471040 c:\windows\system32\ImagXRA7.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 262144 c:\windows\system32\ImagXR7.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 476320 c:\windows\system32\ImagXpr7.dll
+ 2009-07-10 19:36 . 2009-11-11 14:53 164320 c:\windows\system32\FNTCACHE.DAT
+ 2009-08-29 11:17 . 2002-12-06 07:11 151552 c:\windows\system32\DVZAddin.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 991744 c:\windows\system32\drmv2clt.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 249856 c:\windows\system32\drmupgds.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 671232 c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2004-08-18 10:00 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2004-08-18 10:00 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 242688 c:\windows\system32\dllcache\wmpasf.dll
+ 2004-08-18 10:00 . 2008-06-18 03:03 938496 c:\windows\system32\dllcache\WMNetmgr.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 157184 c:\windows\system32\dllcache\wmidx.dll
+ 2004-08-18 10:00 . 2007-01-05 18:55 238592 c:\windows\system32\dllcache\wmerror.dll
+ 2004-08-18 10:00 . 2007-10-25 07:28 222720 c:\windows\system32\dllcache\wmasf.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 757248 c:\windows\system32\dllcache\WMADMOD.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 668160 c:\windows\system32\dllcache\wininet.dll
+ 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 627200 c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-18 10:00 . 2007-06-27 13:31 317952 c:\windows\system32\dllcache\unregmp2.exe
+ 2009-09-09 03:47 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
- 2004-08-18 10:00 . 2008-10-03 10:04 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2004-08-18 10:00 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-12-05 06:57 . 2009-06-25 08:27 147456 c:\windows\system32\dllcache\schannel.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll
+ 2009-10-13 10:34 . 2009-10-13 10:34 271360 c:\windows\system32\dllcache\oakley.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 321536 c:\windows\system32\dllcache\mswmdm.dll
+ 2009-10-05 14:20 . 2009-09-11 14:19 136192 c:\windows\system32\dllcache\msv1_0.dll
+ 2004-08-18 10:00 . 2006-12-04 14:21 414720 c:\windows\system32\dllcache\msscp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 175616 c:\windows\system32\dllcache\mspmsp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 179712 c:\windows\system32\dllcache\msnetobj.dll
+ 2009-07-10 17:03 . 2007-01-05 18:51 244224 c:\windows\system32\dllcache\mpvis.dll
+ 2009-07-10 22:16 . 2009-06-25 08:27 729088 c:\windows\system32\dllcache\lsasrv.dll
+ 2004-08-18 10:00 . 2008-06-17 23:09 100864 c:\windows\system32\dllcache\logagent.exe
+ 2009-10-05 14:20 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-05-09 10:56 . 2009-08-13 15:24 512000 c:\windows\system32\dllcache\jscript.dll
- 2008-05-09 10:56 . 2008-05-09 10:56 512000 c:\windows\system32\dllcache\jscript.dll
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 991744 c:\windows\system32\dllcache\drmv2clt.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 229376 c:\windows\system32\dllcache\cewmdm.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 507904 c:\windows\system32\dllcache\cache\winlogon.exe
+ 2009-08-17 21:22 . 2009-06-26 16:51 667648 c:\windows\system32\dllcache\cache\wininet.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 578560 c:\windows\system32\dllcache\cache\user32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 295936 c:\windows\system32\dllcache\cache\termsrv.dll
+ 2009-08-17 21:22 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\cache\tcpip.sys
+ 2009-08-17 21:22 . 2008-04-14 06:52 171008 c:\windows\system32\dllcache\cache\srsvc.dll
+ 2009-08-17 21:22 . 2009-02-09 11:25 111104 c:\windows\system32\dllcache\cache\services.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 185856 c:\windows\system32\dllcache\cache\scecli.dll
+ 2009-08-17 21:22 . 2009-02-09 10:56 401408 c:\windows\system32\dllcache\cache\rpcss.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 409088 c:\windows\system32\dllcache\cache\qmgr.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 435712 c:\windows\system32\dllcache\cache\ntmssvc.dll
+ 2009-08-17 21:22 . 2008-04-13 22:45 574976 c:\windows\system32\dllcache\cache\ntfs.sys
+ 2009-08-17 21:22 . 2008-04-14 06:51 407040 c:\windows\system32\dllcache\cache\netlogon.dll
+ 2009-08-17 21:22 . 2008-04-13 22:50 182656 c:\windows\system32\dllcache\cache\ndis.sys
+ 2009-08-17 21:22 . 2008-04-14 06:51 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
+ 2009-08-17 21:22 . 2009-03-21 14:09 988160 c:\windows\system32\dllcache\cache\kernel32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 110080 c:\windows\system32\dllcache\cache\imm32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 806912 c:\windows\system32\dllcache\cache\comres.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 617472 c:\windows\system32\dllcache\cache\comctl32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 171008 c:\windows\system32\dllcache\cache\appmgmts.dll
+ 2009-08-17 21:22 . 2008-04-13 20:09 142592 c:\windows\system32\dllcache\cache\aec.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 542720 c:\windows\system32\dllcache\blackbox.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 229376 c:\windows\system32\cewmdm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 542720 c:\windows\system32\blackbox.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 276992 c:\windows\system32\audiodev.dll
+ 2002-08-27 09:11 . 2002-08-27 09:11 212480 c:\windows\Pcdlib32.dll
- 2007-04-13 18:58 . 2007-04-13 18:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 18:56 . 2007-04-13 18:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

+ 2009-11-17 14:18 . 2009-11-17 14:18 642048 c:\windows\Installer\4a2b2df.msi
+ 2009-12-10 08:20 . 2009-12-10 08:20 432640 c:\windows\Installer\4567a4.msi
+ 2009-12-10 08:20 . 2009-12-10 08:20 429568 c:\windows\Installer\45679b.msi
+ 2009-11-26 19:05 . 2009-11-26 19:05 796672 c:\windows\Installer\26654a0.msi
+ 2009-08-29 12:54 . 2009-08-29 12:54 717312 c:\windows\Installer\17e5689.msi
+ 2009-08-29 12:52 . 2009-08-29 12:52 676352 c:\windows\Installer\17e567f.msi
+ 2009-08-30 10:29 . 2009-08-30 10:29 699904 c:\windows\Installer\10e22c6.msi
+ 2009-12-15 14:30 . 2009-12-15 14:30 301568 c:\windows\Installer\10911cf.msi
+ 2004-08-18 10:00 . 2007-06-27 13:31 317952 c:\windows\inf\unregmp2.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2009-10-17 05:15 . 2009-10-17 05:15 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_4f017162\System.Drawing.dll
+ 2009-09-03 19:01 . 2006-09-15 23:05 379184 c:\windows\$NtUninstallWudf01000$\spuninst\updspapi.dll
+ 2009-09-03 19:01 . 2006-09-15 23:05 221488 c:\windows\$NtUninstallWudf01000$\spuninst\spuninst.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 102400 c:\windows\$NtUninstallwmp11$\wmpshell.dll
+ 2009-09-03 19:04 . 2009-07-12 10:21 233472 c:\windows\$NtUninstallwmp11$\wmpdxm.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 114688 c:\windows\$NtUninstallwmp11$\wmpasf.dll
+ 2009-09-03 19:04 . 2008-04-14 05:49 173056 c:\windows\$NtUninstallwmp11$\wmerror.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 208896 c:\windows\$NtUninstallwmp11$\unregmp2.exe
+ 2009-09-03 19:04 . 2006-08-03 15:00 394464 c:\windows\$NtUninstallwmp11$\spuninst\updspapi.dll
+ 2009-09-03 19:04 . 2006-05-16 16:11 213216 c:\windows\$NtUninstallwmp11$\spuninst\spuninst.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 774144 c:\windows\$NtUninstallwmp11$\setup_wm.exe
+ 2009-09-03 19:04 . 2008-04-14 06:51 368640 c:\windows\$NtUninstallwmp11$\mpvis.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 809984 c:\windows\$NtUninstallWMFDist11$\wmvdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 897024 c:\windows\$NtUninstallWMFDist11$\wmspdmoe.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 485376 c:\windows\$NtUninstallWMFDist11$\wmspdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 759296 c:\windows\$NtUninstallWMFDist11$\wmsdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 151552 c:\windows\$NtUninstallWMFDist11$\wmidx.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 230912 c:\windows\$NtUninstallWMFDist11$\wmasf.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 670720 c:\windows\$NtUninstallWMFDist11$\wmadmoe.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 408064 c:\windows\$NtUninstallWMFDist11$\wmadmod.dll
+ 2009-09-03 19:02 . 2006-05-16 16:11 371424 c:\windows\$NtUninstallWMFDist11$\spuninst\updspapi.dll
+ 2009-09-03 19:02 . 2006-05-16 16:11 213216 c:\windows\$NtUninstallWMFDist11$\spuninst\spuninst.exe
+ 2009-09-03 19:02 . 2008-04-14 06:51 237568 c:\windows\$NtUninstallWMFDist11$\qasf.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 245760 c:\windows\$NtUninstallWMFDist11$\mswmdm.dll
+ 2009-09-03 19:02 . 2008-04-14 06:53 356352 c:\windows\$NtUninstallWMFDist11$\msscp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 201728 c:\windows\$NtUninstallWMFDist11$\mspmsp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:53 259072 c:\windows\$NtUninstallWMFDist11$\msnetobj.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 240640 c:\windows\$NtUninstallWMFDist11$\mpg4dmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 384512 c:\windows\$NtUninstallWMFDist11$\mp4sdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 310272 c:\windows\$NtUninstallWMFDist11$\mp43dmod.dll
+ 2009-09-03 19:02 . 2008-06-10 01:11 103936 c:\windows\$NtUninstallWMFDist11$\logagent.exe
+ 2009-09-03 19:02 . 2008-04-14 06:53 695808 c:\windows\$NtUninstallWMFDist11$\drmv2clt.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 159232 c:\windows\$NtUninstallWMFDist11$\cewmdm.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 286720 c:\windows\$NtUninstallWMFDist11$\blackbox.dll
+ 2009-09-03 19:05 . 2006-09-25 15:58 379184 c:\windows\$NtUninstallMSCompPackV1$\spuninst\updspapi.dll
+ 2009-09-03 19:05 . 2006-09-25 15:58 221488 c:\windows\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe
+ 2009-11-04 21:56 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976749$\spuninst\updspapi.dll
+ 2009-11-04 21:56 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB976749$\spuninst\spuninst.exe
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-06-25 08:27 136192 c:\windows\$NtUninstallKB975467$\msv1_0.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
+ 2009-10-17 05:18 . 2009-06-26 16:51 667648 c:\windows\$NtUninstallKB974455$\wininet.dll
+ 2009-10-17 05:18 . 2009-06-26 16:51 619520 c:\windows\$NtUninstallKB974455$\urlmon.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974455$\spuninst\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974455$\spuninst\spuninst.exe
+ 2009-10-17 05:15 . 2008-10-03 10:04 247326 c:\windows\$NtUninstallKB974112$\strmdll.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971961$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971961$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2008-05-09 10:56 512000 c:\windows\$NtUninstallKB971961$\jscript.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
+ 2009-08-26 21:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
+ 2009-08-26 21:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
+ 2009-11-10 22:13 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
+ 2009-10-05 14:37 . 2008-12-05 06:57 144896 c:\windows\$NtUninstallKB968389$\schannel.dll
+ 2009-10-05 14:37 . 2008-04-14 06:51 132608 c:\windows\$NtUninstallKB968389$\msv1_0.dll
+ 2009-10-05 14:37 . 2009-02-09 10:56 728064 c:\windows\$NtUninstallKB968389$\lsasrv.dll
+ 2009-10-05 14:37 . 2008-04-14 06:51 299520 c:\windows\$NtUninstallKB968389$\kerberos.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2008-04-14 06:52 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
+ 2009-10-17 05:16 . 2006-10-18 19:47 603648 c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
+ 2009-10-17 05:16 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
+ 2009-10-17 05:16 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2006-10-18 19:47 295936 c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
+ 2009-09-04 01:00 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
+ 2009-09-04 01:01 . 2006-10-18 19:47 222208 c:\windows\$NtUninstallKB941569$\wmasf.dll
+ 2009-09-04 01:01 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2009-09-04 01:01 . 2005-06-28 08:23 215776 c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2007-01-05 18:55 316416 c:\windows\$NtUninstallKB939683$\unregmp2.exe
+ 2009-09-04 01:00 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB939683$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2005-06-28 08:23 215776 c:\windows\$NtUninstallKB939683$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB929399$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2005-06-28 08:23 213216 c:\windows\$NtUninstallKB929399$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2006-10-18 19:47 414208 c:\windows\$NtUninstallKB929399$\msscp.dll
+ 2009-11-04 21:56 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB976749\update\updspapi.dll
+ 2009-11-04 21:56 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB976749\update\update.exe
+ 2009-11-04 21:56 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB976749\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2009-10-17 05:14 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:15 . 2009-09-11 14:15 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974571\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974571\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974571\spuninst.exe
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974455\update\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974455\update\update.exe
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974455\spuninst.exe
+ 2009-09-25 05:33 . 2009-09-25 05:33 669696 c:\windows\$hf_mig$\KB974455\SP3QFE\wininet.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 628224 c:\windows\$hf_mig$\KB974455\SP3QFE\urlmon.dll
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974112\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974112\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974112\spuninst.exe
+ 2009-08-26 08:03 . 2009-08-26 08:03 247326 c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973687\update\update.exe
+ 2009-11-25 06:30 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973687\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973525\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973525\update\update.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973525\spuninst.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971961\update\updspapi.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971961\update\update.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971961\spuninst.exe
+ 2009-09-09 03:46 . 2009-08-13 15:04 512000 c:\windows\$hf_mig$\KB971961\SP3QFE\jscript.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971486\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971486\update\update.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971486\spuninst.exe
+ 2009-11-10 22:13 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969947\update\updspapi.dll
+ 2009-11-10 22:13 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969947\update\update.exe
+ 2009-11-10 22:13 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969947\spuninst.exe
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969059\update\updspapi.dll
+ 2009-10-17 05:16 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969059\update\update.exe
+ 2009-10-17 05:16 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969059\spuninst.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2009-10-05 14:37 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-10-05 14:20 . 2009-06-25 08:42 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 13:12 . 2009-06-26 13:12 729088 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB956844\update\update.exe
+ 2009-09-10 04:00 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956844\spuninst.exe
+ 2009-09-09 03:47 . 2009-06-21 21:50 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
+ 2009-10-16 10:05 . 2009-08-13 13:56 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
+ 2009-07-20 23:03 . 2009-07-20 23:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
+ 2008-09-30 15:42 . 2008-09-30 15:42 1286152 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2009-12-09 17:55 . 2009-12-09 17:55 1233920 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1221512 c:\windows\system32\zpeng25.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1648520 c:\windows\system32\ZoneLabs\vsruledb.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 2402184 c:\windows\system32\ZoneLabs\vsmon.exe
+ 2009-08-20 05:05 . 2008-11-17 00:23 1512928 c:\windows\system32\ZoneLabs\srescan.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1536392 c:\windows\system32\ZoneLabs\lib\zpy.zip.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 2603008 c:\windows\system32\WpdShext.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1382912 c:\windows\system32\WMVSDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1574912 c:\windows\system32\WMVENCOD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1543680 c:\windows\system32\WMVDECOD.dll
+ 2004-08-18 10:00 . 2009-05-20 02:56 2458112 c:\windows\system32\WMVCore.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1329152 c:\windows\system32\WMSPDMOE.dll
+ 2004-08-18 10:00 . 2007-01-05 19:33 8257536 c:\windows\system32\wmploc.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1661440 c:\windows\system32\wmpencen.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1117696 c:\windows\system32\WMADMOE.dll
+ 2004-08-18 10:00 . 2009-08-14 15:15 1850624 c:\windows\system32\win32k.sys
+ 2006-03-30 09:28 . 2009-10-29 05:26 1510400 c:\windows\system32\shdocvw.dll
- 2006-03-30 09:28 . 2009-07-18 16:05 1510400 c:\windows\system32\shdocvw.dll
- 2004-08-18 10:00 . 2008-04-14 06:51 1437696 c:\windows\system32\query.dll
+ 2004-08-18 10:00 . 2009-07-17 16:17 1437696 c:\windows\system32\query.dll
+ 2005-03-30 17:37 . 2009-08-04 20:59 2191360 c:\windows\system32\ntoskrnl.exe
+ 2005-03-30 17:37 . 2009-08-04 17:29 2068224 c:\windows\system32\ntkrnlpa.exe
- 2005-03-30 17:37 . 2009-02-10 17:09 2068224 c:\windows\system32\ntkrnlpa.exe
+ 2004-03-02 11:10 . 2004-03-02 11:10 1036288 c:\windows\system32\NCTAudioInformation2.dll
+ 2004-03-02 11:05 . 2004-03-02 11:05 1839104 c:\windows\system32\NCTAudioFile2.dll
+ 2009-07-11 08:33 . 2009-07-31 09:05 1372672 c:\windows\system32\msxml6.dll
+ 2009-07-20 23:05 . 2009-07-20 23:05 1348432 c:\windows\system32\msxml4.dll
+ 2004-08-18 10:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2006-03-23 17:31 . 2009-10-29 18:56 3091968 c:\windows\system32\mshtml.dll
+ 2009-10-28 03:40 . 2009-10-28 03:40 3885984 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 1568768 c:\windows\system32\ImagX7.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2004-08-18 10:00 . 2009-05-20 02:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
+ 2004-08-18 10:00 . 2007-01-05 19:33 8257536 c:\windows\system32\dllcache\wmploc.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1117696 c:\windows\system32\dllcache\WMADMOE.dll
+ 2009-07-11 01:07 . 2009-08-14 15:15 1850624 c:\windows\system32\dllcache\win32k.sys
- 2009-04-29 04:35 . 2009-07-18 16:05 1510400 c:\windows\system32\dllcache\shdocvw.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 1510400 c:\windows\system32\dllcache\shdocvw.dll
+ 2009-07-10 17:03 . 2007-01-05 19:22 1674752 c:\windows\system32\dllcache\setup_wm.exe
+ 2009-07-17 16:17 . 2009-07-17 16:17 1437696 c:\windows\system32\dllcache\query.dll
+ 2009-07-10 22:16 . 2009-08-04 20:59 2191360 c:\windows\system32\dllcache\ntoskrnl.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
- 2009-02-10 17:09 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-02-10 17:09 . 2009-08-04 17:29 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-07-11 08:33 . 2009-07-31 09:05 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2009-07-11 01:08 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-04-29 04:35 . 2009-10-29 18:56 3091968 c:\windows\system32\dllcache\mshtml.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 1571840 c:\windows\system32\dllcache\cache\sfcfiles.dll
+ 2009-08-17 21:22 . 2009-02-09 11:26 2191232 c:\windows\system32\dllcache\cache\ntoskrnl.exe
+ 2009-08-17 21:22 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
+ 2009-08-17 21:22 . 2009-07-18 16:05 3090432 c:\windows\system32\dllcache\cache\mshtml.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 1034240 c:\windows\system32\dllcache\cache\explorer.exe
+ 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2007-04-13 18:50 . 2007-04-13 18:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2009-08-29 11:23 . 2009-08-29 11:23 3103744 c:\windows\Installer\fde4e0.msi
+ 2009-08-29 11:21 . 2009-08-29 11:21 3143168 c:\windows\Installer\fde4c9.msi
+ 2009-10-22 16:41 . 2009-10-22 16:41 3940352 c:\windows\Installer\7907021.msi
+ 2009-10-14 05:30 . 2009-10-14 05:30 1549312 c:\windows\Installer\3c834b.msi
+ 2009-11-26 19:05 . 2009-11-26 19:05 9473024 c:\windows\Installer\266548d.msi
+ 2009-08-30 10:29 . 2009-08-30 10:29 1091584 c:\windows\Installer\10e22bf.msi
+ 2009-08-29 11:17 . 2002-04-04 11:00 1597440 c:\windows\DvzCommon\xerces-c_1_6_0.dll
+ 2009-07-10 22:16 . 2009-08-04 20:59 2191360 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-02-10 17:09 . 2009-02-10 17:09 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-02-10 17:09 . 2009-08-04 17:29 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-10-17 05:15 . 2009-10-17 05:15 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_576b30dc\System.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_0c4601bc\System.Xml.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c7cb4d4a\System.Windows.Forms.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_bfdff889\System.Design.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_3acac8f8\mscorlib.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-07-12 21:14 . 2009-07-12 21:14 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-07-12 21:14 . 2009-07-12 21:14 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-09-03 19:04 . 2008-04-14 05:55 2957312 c:\windows\$NtUninstallwmp11$\wmploc.dll
+ 2009-09-03 19:04 . 2009-07-12 10:21 4874240 c:\windows\$NtUninstallwmp11$\wmp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 1001472 c:\windows\$NtUninstallWMFDist11$\wmvdmoe2.dll
+ 2009-09-03 19:02 . 2008-11-07 14:45 2174976 c:\windows\$NtUninstallWMFDist11$\wmvcore.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 1119744 c:\windows\$NtUninstallWMFDist11$\wmsdmoe2.dll
+ 2009-09-03 19:02 . 2008-06-10 04:11 1053696 c:\windows\$NtUninstallWMFDist11$\wmnetmgr.dll
+ 2009-11-04 21:56 . 2009-09-25 05:37 3091968 c:\windows\$NtUninstallKB976749$\mshtml.dll
+ 2009-10-17 05:18 . 2009-07-18 16:05 1510400 c:\windows\$NtUninstallKB974455$\shdocvw.dll
+ 2009-10-17 05:18 . 2009-07-18 16:05 3090432 c:\windows\$NtUninstallKB974455$\mshtml.dll
+ 2009-11-25 06:30 . 2008-09-10 01:16 1307648 c:\windows\$NtUninstallKB973687$\msxml6.dll
+ 2009-11-25 06:30 . 2008-09-04 17:17 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
+ 2009-10-17 05:14 . 2009-02-09 11:26 2191232 c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
+ 2009-10-17 05:14 . 2009-02-09 11:26 2025984 c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
+ 2009-10-17 05:14 . 2009-02-10 17:09 2068224 c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
+ 2009-10-17 05:14 . 2009-02-09 11:26 2147328 c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
+ 2009-11-10 22:13 . 2009-04-19 19:52 1847168 c:\windows\$NtUninstallKB969947$\win32k.sys
+ 2009-10-17 05:16 . 2008-04-14 06:51 1437696 c:\windows\$NtUninstallKB969059$\query.dll
+ 2009-09-10 04:00 . 2008-06-18 03:03 2458112 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
+ 2009-10-19 23:50 . 2009-10-19 23:50 3093504 c:\windows\$hf_mig$\KB976749\SP3QFE\mshtml.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 1510400 c:\windows\$hf_mig$\KB974455\SP3QFE\shdocvw.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 3093504 c:\windows\$hf_mig$\KB974455\SP3QFE\mshtml.dll
+ 2009-11-25 05:41 . 2009-07-31 04:30 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
+ 2009-11-25 05:41 . 2009-07-31 04:30 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
+ 2009-10-16 10:03 . 2009-08-04 17:23 2191488 c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
+ 2009-10-16 10:03 . 2009-08-04 17:23 2025984 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
+ 2009-08-04 20:53 . 2009-08-04 20:53 2068352 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
+ 2009-10-16 10:03 . 2009-08-04 17:23 2147328 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
+ 2009-08-14 16:00 . 2009-08-14 16:00 1859712 c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
+ 2009-07-17 16:02 . 2009-07-17 16:02 1437696 c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
+ 2009-08-20 05:05 . 2008-12-14 23:11 10465257 c:\windows\system32\ZoneLabs\zlasdbup.dat
+ 2009-08-20 05:05 . 2008-12-14 23:11 10465257 c:\windows\system32\ZoneLabs\spyware.dat
+ 2004-08-18 10:00 . 2009-07-13 21:43 10841088 c:\windows\system32\wmp.dll
+ 2009-07-16 20:12 . 2009-12-01 20:06 25966024 c:\windows\system32\MRT.exe
+ 2004-08-18 10:00 . 2009-07-13 21:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2009-08-10 19:08 . 2009-08-10 19:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
+ 2009-12-28 23:18 . 2009-12-28 23:18 10166784 c:\windows\Installer\8a26a6.msi
+ 2009-12-09 17:56 . 2009-12-09 17:56 32330240 c:\windows\Installer\4f4251.msi
+ 2009-08-10 12:09 . 2009-08-10 12:09 17254912 c:\windows\Installer\226cf.msp
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"="c:\program files\SmartClock\SmartClock.exe" [2003-04-26 880128]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-08-17 3055616]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2009-11-25 2011205]
"Google Update"="c:\documents and settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2009-12-15 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-06-18 67584]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-06-28 32768]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-07-12 30192]
"gemstrmw"="c:\windows\system32\gemstrmw.exe" [2003-08-29 24576]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2007-02-19 1188456]
"AcronisTimounterMonitor"="c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe" [2007-02-19 1962896]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-16 149024]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

xxx.lnk - c:\moje\xxx.ahk [2009-7-30 171]

c:\documents and settings\All Users.WINDOWS\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2008-1-3 1392640]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [10.7.2009 22:28 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [17.8.2009 21:32 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [10.7.2009 22:28 20560]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.12.2009 14:49 135664]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [22.2.2005 14:33 15104]
S3 EXSJVYBHZ;EXSJVYBHZ;c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe --> c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe [?]
S3 GoogleDesktopManager-060409-093314;Google Desktop Manager 5.9.906.4286;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [12.7.2009 9:59 30192]
S3 GTwinUSB;GTwinUSB;c:\windows\system32\drivers\GTwinUSB.sys [15.7.2009 16:17 61776]
S3 LNQVJZ;LNQVJZ;c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe --> c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe [?]
.
Obsah adresáře 'Naplánované úlohy'

2009-12-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-16 13:49]

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-16 13:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: Crawler Search - tbr:iemenu
Trusted Zone: csob.cz\bb24
Trusted Zone: csob.cz\ib24
Trusted Zone: ica.cz\b
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} - hxxps://ib24.csob.cz/Comp/IcaSignerCZ.cab
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig
FF - component: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff35\gears.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Palm\PACKAG~1\NPInstal.dll
FF - plugin: c:\program files\Common Files\ParallelGraphics\Cortona\npCortona.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npCortona.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-fsm - (no file)
HKLM-Run-HotSync - c:\program files\PalmSource\Desktop\HotSync.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-30 15:35
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(776)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(832)
c:\windows\system32\relog_ap.dll
.
Celkový čas: 2009-12-30 15:38:01
ComboFix-quarantined-files.txt 2009-12-30 14:37
ComboFix2.txt 2009-08-17 21:34

Před spuštěním: Volných bajtů: 10 164 621 312
Po spuštění: Volných bajtů: 11 175 133 184

- - End Of File - - 5C136C8A33DF1C0A2303638F18E0C5DE

tento soubor znáte? - c:\moje\xxx.ahk

přesuňte Combofix na C:\

otevřte poznámkový blok (Notepad) a zkopírujte do něj následující text:

KillAll::
Driver::
gupdate
GoogleDesktopManager-060409-093314
EXSJVYBHZ
LNQVJZ

File::
c:\windows\Internet Logs\tvDebug.Zip
c:\windows\Internet Logs\xDB3.tmp
c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe
c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe
c:\windows\Tasks\AppleSoftwareUpdate.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Desktop Search"=-
"CloneCDTray"=-
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"QuickTime Task"=-

Extra::
Firefox::
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\

Soubor uložte na C:\ jako CFScript.txt a podle obrázku přetáhněte nad ComboFix



spustí se ComboFix a vykoná příkaz ze skriptu - potom pošlete nový log

Combofix jsem spustil, a přestože verze byla pár hodin stará, stáhl si novou verzi, restartoval počítač, obrazovka často zhasínala, celá akce trvala poměrně dlouho. Dá se nějak ověřit, že už je vše v pořádku? Co jsem to v počítači vlastně měl?

Přikládám log...

Soubor xxx.ahk znám, je to moje makro pro program AutoHotKey.




ComboFix 09-12-29.06 - Richard Buček 30.12.2009 22:25:11.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.963 [GMT 1:00]
Spuštěný z: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\CFScript.txt.txt
AV: avast! antivirus 4.8.1368 [VPS 091230-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

FILE ::
"c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe"
"c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe"
"c:\windows\Internet Logs\tvDebug.Zip"
"c:\windows\Internet Logs\xDB3.tmp"
"c:\windows\Tasks\AppleSoftwareUpdate.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Internet Logs\tvDebug.Zip
c:\windows\Internet Logs\xDB3.tmp
c:\windows\Tasks\AppleSoftwareUpdate.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EXSJVYBHZ
-------\Legacy_GOOGLEDESKTOPMANAGER-060409-093314
-------\Legacy_GUPDATE
-------\Legacy_LNQVJZ
-------\Service_EXSJVYBHZ
-------\Service_GoogleDesktopManager-060409-093314
-------\Service_gupdate
-------\Service_LNQVJZ


((((((((((((((((((((((((( Soubory vytvořené od 2009-11-28 do 2009-12-30 )))))))))))))))))))))))))))))))
.

2009-12-28 23:40 . 2009-12-28 23:40 -------- d-----w- C:\vypinac
2009-12-28 23:18 . 2009-12-28 23:18 392320 ----a-w- c:\windows\system32\drivers\timntr.sys
2009-12-28 23:18 . 2009-12-28 23:18 32768 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2009-12-28 23:18 . 2009-12-28 23:18 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Common Files\Acronis
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Acronis
2009-12-24 17:45 . 2009-12-24 17:45 -------- d-s---w- c:\documents and settings\Admin\UserData
2009-12-19 20:49 . 2009-12-19 20:49 -------- d-----w- C:\Nová složka
2009-12-17 10:12 . 2009-12-30 18:57 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-15 12:04 . 2009-12-15 12:04 -------- d-----w- c:\program files\TeamViewer
2009-12-11 15:45 . 2009-12-11 15:45 -------- d-----w- c:\program files\Software Informer
2009-12-10 08:20 . 2009-12-10 08:20 -------- d-----w- c:\program files\MSXML 4.0
2009-12-09 18:08 . 2007-12-04 16:10 16640 ----a-r- c:\windows\system32\drivers\PalmUSBD.sys
2009-12-02 15:56 . 2009-12-02 15:56 6688 ----a-w- c:\windows\movexe.exe
2009-12-02 15:56 . 2009-12-02 16:05 -------- d-----w- c:\program files\SokoMind

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-30 12:08 . 2009-07-10 21:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-30 10:19 . 2009-07-10 22:23 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-28 21:36 . 2009-07-22 02:54 -------- d-----w- c:\program files\trend micro
2009-12-28 21:12 . 2009-07-21 19:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-23 13:01 . 2009-08-29 10:36 -------- d-----w- c:\program files\Palm
2009-12-16 13:50 . 2009-07-12 08:59 -------- d-----w- c:\program files\Google
2009-12-09 12:21 . 2004-08-18 10:00 61958 ----a-w- c:\windows\system32\perfc005.dat
2009-12-09 12:21 . 2004-08-18 10:00 379294 ----a-w- c:\windows\system32\perfh005.dat
2009-12-03 15:14 . 2009-07-22 02:50 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-07-22 02:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-26 19:05 . 2009-11-26 19:05 -------- d-----w- c:\program files\QuickTime
2009-11-24 23:54 . 2009-07-10 21:28 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2009-07-10 21:28 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:50 . 2009-07-10 21:28 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-11-24 23:50 . 2009-07-10 21:28 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2009-07-10 21:28 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2009-07-10 21:28 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2009-07-10 21:28 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2009-07-10 21:28 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2009-07-10 21:28 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-17 14:29 . 2009-11-17 14:15 -------- d-----w- c:\program files\Room Arranger
2009-11-17 14:21 . 2009-11-17 14:21 -------- d-----w- c:\program files\Nábytek 1.1 Demo
2009-11-17 14:18 . 2009-11-17 14:18 -------- d-----w- c:\program files\Common Files\ParallelGraphics
2009-11-09 10:42 . 2009-11-09 10:41 1024 ----a-w- c:\windows\system32\WTCY9853.dat
2009-11-04 07:30 . 2009-07-13 08:15 -------- d-----w- c:\program files\Java
2009-10-29 05:26 . 2006-03-04 03:35 668160 ------w- c:\windows\system32\wininet.dll
2009-10-21 05:40 . 2004-08-18 10:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-18 10:00 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-18 10:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 21:28 . 2008-02-22 09:21 437920 ----a-w- c:\windows\system32\ICASigner.dll
2009-10-13 10:34 . 2004-08-18 10:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:40 . 2004-08-18 10:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:40 . 2004-08-18 10:00 150016 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2009-07-13 20:54 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-02 17:27 . 2009-10-02 17:27 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2009-07-12 08:59 . 2009-07-12 08:59 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot_2009-12-30_14.35.36 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-12-30 21:30 . 2009-12-30 21:30 16384 c:\windows\Temp\Perflib_Perfdata_72c.dat
+ 2009-12-30 21:30 . 2009-12-30 21:30 16384 c:\windows\Temp\Perflib_Perfdata_1f0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"="c:\program files\SmartClock\SmartClock.exe" [2003-04-26 880128]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-08-17 3055616]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2009-11-25 2011205]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-06-18 67584]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-06-28 32768]
"gemstrmw"="c:\windows\system32\gemstrmw.exe" [2003-08-29 24576]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2007-02-19 1188456]
"AcronisTimounterMonitor"="c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe" [2007-02-19 1962896]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-16 149024]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Richard Buźek.RICHARD-87F6F60\Nabˇdka Start\Programy\Po spuçtŘnˇ\
xxx.lnk - c:\moje\xxx.ahk [2009-7-30 171]

c:\documents and settings\All Users.WINDOWS\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2008-1-3 1392640]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [10.7.2009 22:28 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [17.8.2009 21:32 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [10.7.2009 22:28 20560]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [22.2.2005 14:33 15104]
S3 GTwinUSB;GTwinUSB;c:\windows\system32\drivers\GTwinUSB.sys [15.7.2009 16:17 61776]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: Crawler Search - tbr:iemenu
Trusted Zone: csob.cz\bb24
Trusted Zone: csob.cz\ib24
Trusted Zone: ica.cz\b
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} - hxxps://ib24.csob.cz/Comp/IcaSignerCZ.cab
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig
FF - component: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff35\gears.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Palm\PACKAG~1\NPInstal.dll
FF - plugin: c:\program files\Common Files\ParallelGraphics\Cortona\npCortona.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npCortona.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-30 22:32
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(800)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(856)
c:\windows\system32\relog_ap.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\System32\SCardSvr.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
.
**************************************************************************
.
Celkový čas: 2009-12-30 22:34:16 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-12-30 21:34
ComboFix2.txt 2009-12-30 14:38
ComboFix3.txt 2009-08-17 21:34

Před spuštěním: Volných bajtů: 11 202 007 040
Po spuštění: Volných bajtů: 11 201 638 400

- - End Of File - - 266CA4417486D53A6946547D5E456D41

RichardB píše:Combofix jsem spustil, a přestože verze byla pár hodin stará, stáhl si novou verzi, restartoval počítač, obrazovka často zhasínala, celá akce trvala poměrně dlouho. Dá se nějak ověřit, že už je vše v pořádku? Co jsem to v počítači vlastně měl?

no měl jste tam předvším 2 firewally (kromě ZoneAlarmu ten hardwareový od NVIDIA) a potom nějaké zbytečně spuštěné služby - většinou hlídače aktualizací pro google a apple)

ještě použijte http://sweb.cz/Marinus/T-Cleaner.exe - pro potvrzení stiskněte vždy klávesu A nebo Enter
(utilita může být označena antivirem jako vir - po použití ji smažte)

potom CCleaner - položky Čistič a Registry - čištění opakujte do odstranění všech problémů

a nakonec ATF Cleaner - http://www.atribune.org/ccount/click.php?id=1:

po spuštění staženého souboru se objeví okno:



zatrhněte Select All, klikněte na Empty Selected a Exit

stejným způsobem vymažte případně cache Firefoxu a Opery

restartujte PC

Děkuji za pomoc, ale počítač nabíhá stále pomalu. Zkusím ještě kontrolu disku.

Jak dlouho ten náběh PC asi trvá? Zkuste před zapnutím PC odpojit od netu, jestli poznáte nějakou změnu.

Ano, po odpojení síťového kablu nabíhá okamžitě....

tak ho zase zapojte, vypněte u Avastu možnost "Spustit při startu PC", restartujte a opět napiše, jestli se to nějak projevilo

Přímo taková volba tam není

Myslíte volbu:

Spouštět služby programu avast! až po ostatních systémových službách. ???

spíš mu tedy zakázat, aby si hned po startu nestahoval aktualizace

Takže takhle?