XP se spustí yamrynou cca 10 minut a pak je vše normální

Zpráva

Laaron · #1 Příspěvek od **Laaron** » 25 bře 2010 23:30

Při spuštění počítače XP home SP3 vše naběhne jako normálně, pak zamrzne lišta cca 10 minut - z ikon jdou programy v pohodě spouštět mimo průzkumníka. Avast ani MSE nehlásí nic podezřelého. Jen doplňuji, že se mi PC dostalo do ruky, když se majitel delší dobu pral a "něco jsem chtěl dát do truhly" - je prázdná bez záznamu. V nouzovém režimu se počítač chová normálně.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Zákazník at 2010-03-25 22:22:18
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 138 GB (91%) free of 153 GB
Total RAM: 1023 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:22:51, on 25.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16981)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Micronet Wireless Network Utility\RtWLan.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
F:\RSIT.exe
C:\Program Files\trend micro\Zákazník.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Micronet Wireless Network Utility.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5302 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-04-03 35840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-02-26 16125440]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-02-21 1093208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Micronet Wireless Network Utility.lnk - C:\Program Files\Micronet Wireless Network Utility\RtWLan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3d123a80-b4a2-11de-bd02-00113b0ae6d5}]
shell\AutoRun\command - WDSetup.exe

======File associations======

.scr - open - "%1" /S "%3"

======List of files/folders created in the last 1 months======

2010-03-25 22:22:20 ----D---- C:\Program Files\trend micro
2010-03-25 22:22:18 ----D---- C:\rsit
2010-03-25 22:12:16 ----A---- C:\WINDOWS\system32\muweb.dll
2010-03-25 22:12:16 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-03-25 22:12:16 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-03-25 22:12:14 ----D---- C:\WINDOWS\LastGood
2010-03-22 23:27:31 ----N---- C:\WINDOWS\system32\MpSigStub.exe
2010-03-22 23:25:40 ----D---- C:\Program Files\Microsoft Security Essentials
2010-03-22 16:27:04 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-03-22 14:52:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA
2010-03-14 21:03:28 ----A---- C:\WINDOWS\ntbtlog.txt

======List of files/folders modified in the last 1 months======

2010-03-25 22:22:47 ----D---- C:\WINDOWS\Temp
2010-03-25 22:22:26 ----D---- C:\WINDOWS\Prefetch
2010-03-25 22:22:20 ----RD---- C:\Program Files
2010-03-25 22:21:56 ----D---- C:\Program Files\Mozilla Firefox
2010-03-25 22:15:31 ----SD---- C:\WINDOWS\Tasks
2010-03-25 22:12:16 ----D---- C:\WINDOWS\system32
2010-03-25 22:12:14 ----HD---- C:\WINDOWS\inf
2010-03-25 22:12:14 ----D---- C:\WINDOWS
2010-03-25 22:11:26 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-23 08:19:53 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-22 23:48:20 ----D---- C:\Program Files\LYNX BLACK
2010-03-22 23:26:02 ----SHD---- C:\WINDOWS\Installer
2010-03-22 23:26:02 ----SHD---- C:\Config.Msi
2010-03-22 23:25:49 ----D---- C:\WINDOWS\system32\drivers
2010-03-22 23:25:47 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-03-22 16:35:15 ----A---- C:\WINDOWS\RTacDbg.txt
2010-03-22 16:27:07 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-22 16:27:06 ----D---- C:\Program Files\Movie Maker
2010-03-22 16:26:09 ----HD---- C:\WINDOWS\$hf_mig$
2010-03-22 15:03:26 ----A---- C:\WINDOWS\imsins.BAK
2010-03-22 14:50:59 ----D---- C:\Documents and Settings\Zákazník\Data aplikací\Skype
2010-03-22 14:49:54 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-03-14 22:39:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-03-14 22:32:25 ----RASH---- C:\boot.ini
2010-03-14 22:32:25 ----A---- C:\WINDOWS\win.ini
2010-03-14 22:32:25 ----A---- C:\WINDOWS\system.ini
2010-03-14 22:24:02 ----SHD---- C:\RECYCLER
2010-03-14 21:03:45 ----D---- C:\Documents and Settings
2010-03-02 06:30:12 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 MpFilter;Microsoft Malware Protection Driver; C:\WINDOWS\system32\DRIVERS\MpFilter.sys [2009-12-02 149040]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2007-06-27 21035]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-03-01 4484608]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-22 52736]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-22 18944]
R3 Pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 10368]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 RTLWUSB;Micronet SP907GK Wireless LAN USB Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187.sys [2006-04-21 172416]
S3 SjyPkt;SjyPkt; \??\C:\WINDOWS\System32\Drivers\SjyPkt.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Ad-Aware 2007 Service; C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe [2007-11-01 587096]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-04-03 152984]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-12-09 17904]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-05 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

#2 Příspěvek od **Rudy** » 25 bře 2010 23:36

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Laaron · #3 Příspěvek od **Laaron** » 26 bře 2010 00:02

testování skončilo, jak vytáhnu nějaký log?

j3šť3r · #4 Příspěvek od **j3šť3r** » 26 bře 2010 03:58

Napred omluva Rudymu za vstup

Log by se mel po scanu objevit automaticky, pokud ne, nebo byl uzavren, tak se najde v MBAM pod zalozkou "Záznamy".

Laaron · #5 Příspěvek od **Laaron** » 26 bře 2010 07:45

Jsem vůl

asi dík hříšné hodině jsem stáhnul místo MBAM Cyberdefender a testoval počítač jím, ráno moudřejší večera a už běží test správným programem log dám jakmile se vygeneruje

Laaron · #6 Příspěvek od **Laaron** » 26 bře 2010 14:00

Třikrát to ztuhlo, výsledek je zde

Malwarebytes' Anti-Malware 1.44
Verze databáze: 3915
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

26.3.2010 13:57:23
mbam-log-2010-03-26 (13-57-18).txt

Typ kontroly: Kompletní kontrola (C:\|E:\|)
Zkontrolované objekty: 215889
Uplynulý čas: 1 hour(s), 8 minute(s), 10 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 2
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 5

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\qip infium packverze: 9010 rc2 s irc protokolem (Adware.Adrotator) -> No action taken.

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\Program Files\QIP Infium\uninst.exe (Adware.Adrotator) -> No action taken.
C:\System Volume Information\_restore{258D5D01-95E2-4EB4-91A3-9FE37B5CA031}\RP506\A0100578.sys (Rootkit.Agent) -> No action taken.
C:\System Volume Information\_restore{258D5D01-95E2-4EB4-91A3-9FE37B5CA031}\RP506\A0100579.sys (Rootkit.Agent) -> No action taken.
E:\WINDOWS\SYSTEM\JGAW400.DLL (Trojan.Hiloti) -> No action taken.
C:\Documents and Settings\Zákazník\Data aplikací\avdrn.dat (Malware.Trace) -> No action taken.

#7 Příspěvek od **Rudy** » 26 bře 2010 18:03

Vše smažte.

Laaron · #8 Příspěvek od **Laaron** » 26 bře 2010 20:51

Vše jsem smazal, po restartu opět naběhne jako by nic a pak vesel zamrzne, už je to jen 8 minut. CPU přitom 0-5% paměť 532/2460 ; 32 - 35 běžících procesů
Spustil jsem MBAM ještě jednou a už to bylo bez infekce

#9 Příspěvek od **Rudy** » 26 bře 2010 21:48

Ještě udělejte sken ComboFix a dejte log:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

Laaron · #10 Příspěvek od **Laaron** » 26 bře 2010 22:22

Zde je log

ComboFix 10-03-26.02 - Zákazník 26.03.2010 22:09:34.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.520 [GMT 1:00]
Spuštěný z: c:\documents and settings\Zákazník\Plocha\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100326-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-02-26 do 2010-03-26 )))))))))))))))))))))))))))))))
.

2010-03-26 06:41 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-26 06:41 . 2010-03-26 06:41 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-26 06:41 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-25 21:22 . 2010-03-25 21:22 -------- d-----w- c:\program files\trend micro
2010-03-25 21:22 . 2010-03-25 21:22 -------- d-----w- C:\rsit
2010-03-25 21:12 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-03-25 21:12 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-03-22 22:27 . 2010-02-24 09:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-03-22 22:25 . 2010-03-22 22:26 -------- d-----w- c:\program files\Microsoft Security Essentials
2010-03-14 20:02 . 2009-10-23 15:28 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe
2010-02-26 15:49 . 2008-04-13 18:40 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-02-26 15:49 . 2008-04-13 18:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-02-26 15:49 . 2008-04-13 18:41 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-26 15:49 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-26 15:47 . 2008-04-13 18:40 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-26 15:47 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-22 22:48 . 2007-07-30 10:26 -------- d-----w- c:\program files\LYNX BLACK
2010-03-22 13:49 . 2008-09-25 19:01 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-01-05 09:58 . 2007-07-30 11:35 832512 ------w- c:\windows\system32\wininet.dll
2010-01-05 09:57 . 2007-07-30 11:35 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-01-05 09:57 . 2007-07-30 11:35 17408 ------w- c:\windows\system32\corpol.dll
2009-12-31 16:50 . 2007-07-30 11:35 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-03-07 17:21 . 2009-03-07 17:21 2249512 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot@2010-03-25_21.57.27 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-26 19:44 . 2010-03-26 19:44 16384 c:\windows\Temp\Perflib_Perfdata_b4.dat
+ 2010-03-26 19:43 . 2010-03-26 19:43 16384 c:\windows\Temp\Perflib_Perfdata_6cc.dat
+ 2007-06-18 07:19 . 2007-04-09 12:23 28552 c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
+ 2007-06-18 07:19 . 2007-04-09 12:23 46472 c:\windows\system32\spool\drivers\w32x86\mdiui.dll
+ 2007-06-18 07:19 . 2007-04-09 12:23 46472 c:\windows\system32\spool\drivers\w32x86\3\mdiui.dll
+ 2007-06-18 07:19 . 2007-04-09 12:23 28040 c:\windows\system32\mdimon.dll
+ 2007-03-22 18:17 . 2007-03-22 18:17 35440 c:\windows\system32\FM20ENU.DLL
+ 2007-06-18 07:19 . 2010-03-26 02:08 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-06-18 07:18 . 2007-06-18 07:18 64088 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\VBIDEPIA.DLL
+ 2003-07-15 05:00 . 2003-07-15 05:00 99904 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\TRANSMGR.DLL
+ 2003-07-15 04:53 . 2003-07-15 04:53 11848 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\SMARTTAGINSTALL.EXE
+ 2003-07-14 20:57 . 2003-07-14 20:57 58944 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\SEQCHK10.DLL
+ 2003-07-15 04:44 . 2003-07-15 04:44 66616 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\SENDTO.DLL
+ 2003-07-15 04:43 . 2003-07-15 04:43 74288 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\RM.DLL
+ 2003-07-15 04:57 . 2003-07-15 04:57 40512 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\REFIEBAR.DLL
+ 2003-05-09 03:54 . 2003-05-09 03:54 77824 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\REFEDIT.DLL
+ 2003-07-15 04:42 . 2003-07-15 04:42 37432 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\RECALL.DLL
+ 2003-07-15 04:40 . 2003-07-15 04:40 51256 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PUBTRAP.DLL
+ 2003-07-15 09:18 . 2003-07-15 09:18 93752 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PP7X32.DLL
+ 2003-07-15 04:43 . 2003-07-15 04:43 49208 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLWAB.DLL
+ 2003-07-15 04:43 . 2003-07-15 04:43 64056 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLRPC.DLL
+ 2003-07-15 04:44 . 2003-07-15 04:44 88128 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLMIME.DLL
+ 2003-07-15 04:41 . 2003-07-15 04:41 24640 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLACCT.DLL
+ 2003-07-15 09:14 . 2003-07-15 09:14 27192 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OISCTRL.DLL
+ 2003-07-15 04:56 . 2003-07-15 04:56 13888 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\NPOFFICE.DLL
+ 2003-07-15 04:57 . 2003-07-15 04:57 56888 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\NAME.DLL
+ 2003-07-15 04:52 . 2003-07-15 04:52 41528 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSSH.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 16384 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSPGIMME.DLL
+ 2003-07-15 04:45 . 2003-07-15 04:45 39488 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOXMLMF.DLL
+ 2003-07-15 04:45 . 2003-07-15 04:45 55360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOXMLED.EXE
+ 2003-07-15 04:46 . 2003-07-15 04:46 42040 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOXEV.DLL
+ 2003-07-15 04:53 . 2003-07-15 04:53 39488 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOSVFBR.DLL
+ 2003-07-15 04:52 . 2003-07-15 04:52 35896 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOSV.DLL
+ 2003-07-14 20:52 . 2003-07-14 20:52 28224 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOSTYLE.DLL
+ 2003-07-15 04:52 . 2003-07-15 04:52 55360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOHTMED.EXE
+ 2003-07-15 04:44 . 2003-07-15 04:44 25144 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOEURO.DLL
+ 2003-07-15 04:52 . 2003-07-15 04:52 27704 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSODCW.DLL
+ 2003-07-15 04:52 . 2003-07-15 04:52 17464 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSMH.DLL
+ 2003-07-15 04:51 . 2003-07-15 04:51 87104 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSENCODE.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 35328 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIUI.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 18944 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIPPR.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 17920 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIMON.DLL
+ 2003-07-15 04:45 . 2003-07-15 04:45 58944 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\INLAUNCH.DLL
+ 2003-07-14 20:57 . 2003-07-14 20:57 87096 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\IEAWSDC.DLL
+ 2003-07-15 04:41 . 2003-07-15 04:41 13368 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FINDER.EXE
+ 2003-07-15 04:57 . 2003-07-15 04:57 98360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\DSSM.EXE
+ 2003-07-15 04:56 . 2003-07-15 04:56 14904 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\DSITF.DLL
+ 2003-07-26 00:57 . 2003-07-26 00:57 75832 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\DLGSETP.DLL
+ 2003-07-15 09:18 . 2003-07-15 09:18 47160 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\DFUICOM.EXE
+ 2003-07-15 04:53 . 2003-07-15 04:53 94768 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\AW.DLL
+ 2003-07-15 04:57 . 2003-07-15 04:57 38968 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\AUTHZAX.DLL
+ 2003-07-15 04:43 . 2003-07-15 04:43 87616 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\ADDRPARS.DLL
+ 2010-03-26 02:04 . 2010-03-26 02:04 66936 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\11.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2010-03-26 02:05 . 2010-03-26 02:05 91488 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath.Xml\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.Xml.dll
+ 2007-06-18 07:19 . 2010-03-26 02:08 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-06-18 07:19 . 2007-04-09 12:24 758664 c:\windows\system32\spool\drivers\w32x86\mdigraph.dll
+ 2007-06-18 07:19 . 2007-04-09 12:24 758664 c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll
- 2007-07-30 11:45 . 2009-11-12 17:32 196960 c:\windows\system32\FNTCACHE.DAT
+ 2007-07-30 11:45 . 2010-03-26 02:24 196960 c:\windows\system32\FNTCACHE.DAT
+ 2007-06-18 07:19 . 2010-03-26 02:08 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-06-18 07:19 . 2007-06-18 07:19 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-06-18 07:19 . 2010-03-26 02:08 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2003-08-06 19:26 . 2003-08-06 19:26 445488 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\SOA.DLL
+ 2003-07-21 17:46 . 2003-07-21 17:46 390712 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\RTFHTML.DLL
+ 2003-07-15 04:50 . 2003-07-15 04:50 551480 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PUBCONV.DLL
+ 2003-07-15 04:51 . 2003-07-15 04:51 604728 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PTXT9.DLL
+ 2003-07-15 04:40 . 2003-07-15 04:40 130104 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PRTF9.DLL
+ 2003-07-15 09:18 . 2003-07-15 09:18 430136 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PP4X322.DLL
+ 2003-07-15 04:43 . 2003-07-15 04:43 139320 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLPH.DLL
+ 2003-07-15 04:45 . 2003-07-15 04:45 196152 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLOOK.EXE
+ 2003-07-08 17:48 . 2003-07-08 17:48 115288 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLFLTR.DLL
+ 2003-07-15 04:44 . 2003-07-15 04:44 102968 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLCTL.DLL
+ 2003-07-15 09:14 . 2003-07-15 09:14 242240 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OISGRAPH.DLL
+ 2003-07-15 09:14 . 2003-07-15 09:14 828472 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OISAPP.DLL
+ 2003-07-15 09:14 . 2003-07-15 09:14 283696 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OIS.EXE
+ 2007-06-18 07:18 . 2007-06-18 07:18 223800 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OFFICE.DLL
+ 2003-07-15 05:00 . 2003-07-15 05:00 145984 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSWEBCAP.DLL
+ 2003-07-24 04:40 . 2003-07-24 04:40 482872 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSTORES.DLL
+ 2003-07-15 04:56 . 2003-07-15 04:56 124984 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSTORE.EXE
+ 2003-07-15 05:02 . 2003-07-15 05:02 627256 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSTORDB.EXE
+ 2003-06-19 22:05 . 2003-06-19 22:05 364648 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSPVIEW.EXE
+ 2003-07-15 09:18 . 2003-07-15 09:18 376888 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSORUN.DLL
+ 2003-07-23 20:35 . 2003-07-23 20:35 127032 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOCFU.DLL
+ 2003-07-15 01:14 . 2003-07-15 01:14 106552 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOCF.DLL
+ 2003-07-14 20:57 . 2003-07-14 20:57 120888 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOAUTH.DLL
+ 2002-04-09 18:14 . 2002-04-09 18:14 187560 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSMDUN80.DLL
+ 2003-07-15 09:14 . 2003-07-15 09:14 139328 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSJSPP40.DLL
+ 2002-12-17 17:08 . 2002-12-17 17:08 359600 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSDMENG.DLL
+ 2003-07-14 20:58 . 2003-07-14 20:58 230968 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSCDM.DLL
+ 2003-07-15 09:13 . 2003-07-15 09:13 130112 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSAEXP30.DLL
+ 2003-07-15 04:46 . 2003-07-15 04:46 176696 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MIMEDIR.DLL
+ 2003-05-28 21:42 . 2003-05-28 21:42 342616 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\METCONV.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 443904 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIVWCTL.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 252928 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIINK.DLL
+ 2003-06-18 23:31 . 2003-06-18 23:31 758784 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MDIGRAPH.DLL
+ 2003-05-28 21:42 . 2003-05-28 21:42 514680 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\INTLNAME.DLL
+ 2003-07-24 04:32 . 2003-07-24 04:32 121400 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\IMPMAIL.DLL
+ 2003-07-15 04:53 . 2003-07-15 04:53 161336 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\IETAG.DLL
+ 2003-07-26 01:14 . 2003-07-26 01:14 799288 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FPWEC.DLL
+ 2003-07-15 04:40 . 2003-07-15 04:40 179768 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FPERSON.DLL
+ 2003-07-15 05:36 . 2003-07-15 05:36 186424 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FPDTC.DLL
+ 2003-07-31 21:19 . 2003-07-31 21:19 131648 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\ENVELOPE.DLL
+ 2003-07-15 01:14 . 2003-07-15 01:14 350264 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\CDLMSO.DLL
+ 2003-07-15 09:13 . 2003-07-15 09:13 166456 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\ACCWIZ.DLL
+ 2010-03-26 02:03 . 2010-03-26 02:03 226656 c:\windows\assembly\GAC\office\11.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2010-03-26 02:05 . 2010-03-26 02:05 103776 c:\windows\assembly\GAC\Microsoft.Office.Interop.InfoPath\11.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.InfoPath.dll
+ 2007-06-06 09:53 . 2007-06-06 09:53 1195888 c:\windows\system32\FM20.DLL
+ 2005-10-26 13:59 . 2005-10-26 13:59 2883072 c:\windows\Installer\10a8436.msp
+ 2010-02-04 17:11 . 2010-02-04 17:11 5526528 c:\windows\Installer\10a8420.msp
+ 2003-07-03 21:19 . 2003-07-03 21:19 2502656 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\VBE6.DLL
+ 2003-08-03 16:52 . 2003-08-03 16:52 2808376 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\STSLIST.DLL
+ 2003-07-31 21:21 . 2003-07-31 21:21 1782840 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\PPTVIEW.EXE
+ 2003-07-30 18:40 . 2003-07-30 18:40 6133312 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\POWERPNT.EXE
+ 2003-08-01 21:09 . 2003-08-01 21:09 8086072 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OWC11.DLL
+ 2003-08-04 19:19 . 2003-08-04 19:19 7330360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OWC10.DLL
+ 2003-08-10 05:06 . 2003-08-10 05:06 7522360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLLIB.DLL
+ 2003-07-07 19:36 . 2003-07-07 19:36 2058343 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OUTLFLTR.DAT
+ 2003-07-15 05:05 . 2003-07-15 05:05 1054264 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\OMFC.DLL
+ 2003-07-28 18:24 . 2003-07-28 18:24 5677112 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSPUB.EXE
+ 2003-06-18 23:31 . 2003-06-18 23:31 1033216 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSPCORE.DLL
+ 2003-07-11 08:15 . 2003-07-11 08:15 1292872 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSONSEXT.DLL
+ 2002-12-17 17:09 . 2002-12-17 17:09 2071752 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSOLAP80.DLL
+ 2002-12-17 17:08 . 2002-12-17 17:08 1383592 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSDMINE.DLL
+ 2003-08-15 06:54 . 2003-08-15 06:54 6627392 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSACCESS.EXE
+ 2003-08-01 21:07 . 2003-08-01 21:07 4815424 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\INFOPATH.EXE
+ 2003-07-15 05:11 . 2003-07-15 05:11 2139192 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\GRAPH.EXE
+ 2003-07-26 01:00 . 2003-07-26 01:00 1157696 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FPSRVUTL.DLL
+ 2003-07-24 05:01 . 2003-07-24 05:01 1949240 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FPCUTL.DLL
+ 2003-08-03 16:56 . 2003-08-03 16:56 1146184 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\FM20.DLL
+ 2003-08-06 19:24 . 2003-08-06 19:24 12037688 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\WINWORD.EXE
+ 2003-08-08 06:23 . 2003-08-08 06:23 12172336 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\MSO.DLL
+ 2003-08-13 08:34 . 2003-08-13 08:34 10073144 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\EXCEL.EXE
+ 2007-07-27 07:43 . 2007-07-27 07:43 109673984 c:\windows\Installer\10a8409.msp
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"nwiz"="nwiz.exe" [2006-10-22 1622016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 16125440]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-02-21 1093208]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Micronet Wireless Network Utility.lnk - c:\program files\Micronet Wireless Network Utility\RtWLan.exe [2007-6-27 675840]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0sprecovr \SystemRoot\sprecovr.txt

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [4.10.2009 16:14 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [4.10.2009 16:14 20560]
S3 RTLWUSB;Micronet SP907GK Wireless LAN USB Adapter;c:\windows\system32\drivers\RTL8187.sys [27.6.2007 15:17 172416]
S3 SjyPkt;SjyPkt;\??\c:\windows\System32\Drivers\SjyPkt.sys --> c:\windows\System32\Drivers\SjyPkt.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-26 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2009-12-09 17:02]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Zákazník\Data aplikací\Mozilla\Firefox\Profiles\wa2tpg9t.default\
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-26 22:15
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(3700)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-03-26 22:16:50
ComboFix-quarantined-files.txt 2010-03-26 21:16
ComboFix2.txt 2010-03-25 21:59

Před spuštěním: Volných bajtů: 144 712 364 032
Po spuštění: Volných bajtů: 144 671 068 160

- - End Of File - - 64E2910994C1B05C939587BB60CB9EC0

#11 Příspěvek od **Rudy** » 27 bře 2010 12:38

Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\System32\Drivers\SjyPkt.sys

Driver::
SjyPkt

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pustte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek

Laaron · #12 Příspěvek od **Laaron** » 05 dub 2010 14:41

Dobrý den, trošku jsem se opozdil neplánovanou návštěvou špitálu.

Zde je výsledek po aplikaci scriptu do ComboFixu.

ComboFix 10-04-04.01 - Zákazník 05.04.2010 15:23:52.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1023.455 [GMT 2:00]
Spuštěný z: c:\documents and settings\Zákazník\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Zákazník\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1368 [VPS 100405-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-03-05 do 2010-04-05 )))))))))))))))))))))))))))))))
.

2010-03-27 09:07 . 2010-03-27 09:07 -------- d-----w- C:\Oblíbené
2010-03-27 03:12 . 2010-03-27 03:13 -------- d-----w- c:\program files\NVIDIA Corporation
2010-03-27 03:11 . 2010-02-16 04:50 64000 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-03-27 03:11 . 2010-03-31 18:38 -------- d-----w- c:\windows\ie8updates
2010-03-27 03:10 . 2010-02-25 06:18 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-03-27 03:10 . 2010-02-25 06:18 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-03-27 03:07 . 2010-03-27 03:09 -------- dc-h--w- c:\windows\ie8
2010-03-26 21:25 . 2010-03-26 21:25 -------- d-----w- c:\program files\Microsoft CAPICOM 2.1.0.2
2010-03-26 21:15 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-03-26 06:41 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-03-26 06:41 . 2010-03-26 06:41 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-03-26 06:41 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-03-25 21:22 . 2010-03-25 21:22 -------- d-----w- c:\program files\trend micro
2010-03-25 21:22 . 2010-03-25 21:22 -------- d-----w- C:\rsit
2010-03-25 21:12 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-03-25 21:12 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-03-22 22:27 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-03-22 22:25 . 2010-03-22 22:26 -------- d-----w- c:\program files\Microsoft Security Essentials
2010-03-14 20:02 . 2009-10-23 15:28 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-28 05:53 . 2007-07-30 11:35 79062 ----a-w- c:\windows\system32\perfc005.dat
2010-03-28 05:53 . 2007-07-30 11:35 432004 ----a-w- c:\windows\system32\perfh005.dat
2010-03-22 22:48 . 2007-07-30 10:26 -------- d-----w- c:\program files\LYNX BLACK
2010-03-22 13:49 . 2008-09-25 19:01 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-02-25 06:18 . 2007-07-30 11:35 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-11 21:17 . 2010-01-11 21:17 278120 ----a-w- c:\windows\system32\nvmccs.dll
2010-01-11 21:17 . 2010-01-11 21:17 154216 ----a-w- c:\windows\system32\nvsvc32.exe
2010-01-11 21:17 . 2010-01-11 21:17 145000 ----a-w- c:\windows\system32\nvcolor.exe
2010-01-11 21:17 . 2010-01-11 21:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll
2010-01-11 21:17 . 2010-01-11 21:17 110696 ----a-w- c:\windows\system32\nvmctray.dll
2010-01-11 21:17 . 2010-01-11 21:17 81920 ----a-w- c:\windows\system32\nvwddi.dll
2009-03-07 17:21 . 2009-03-07 17:21 2249512 ----a-w- c:\program files\SkypeSetup.exe
.

((((((((((((((((((((((((((((( SnapShot_2010-03-26_21.14.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-04-05 12:57 . 2010-04-05 12:57 16384 c:\windows\Temp\Perflib_Perfdata_6e0.dat
+ 2010-04-05 12:57 . 2010-04-05 12:57 16384 c:\windows\Temp\Perflib_Perfdata_1d4.dat
+ 2007-07-30 11:46 . 2009-01-07 17:20 26144 c:\windows\system32\spupdsvc.exe
+ 2008-04-06 15:12 . 2009-01-07 17:20 17952 c:\windows\system32\spmsg.dll
+ 2010-03-27 03:04 . 2008-04-14 02:10 39680 c:\windows\system32\ReinstallBackups\0007\DriverFiles\i386\processr.sys
+ 2010-03-27 03:12 . 2006-10-22 10:22 81920 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvwddi.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 86016 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmctray.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 35840 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvcod.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 46592 c:\windows\system32\pngfilt.dll
+ 2007-07-30 11:35 . 2010-03-28 05:53 68156 c:\windows\system32\perfc009.dat
- 2007-07-30 11:35 . 2009-12-09 15:24 68156 c:\windows\system32\perfc009.dat
+ 2010-01-12 11:03 . 2010-01-12 11:03 61440 c:\windows\system32\OpenCL.dll
+ 2006-06-29 07:05 . 2009-01-07 17:20 23552 c:\windows\system32\normaliz.dll
- 2006-06-29 07:05 . 2006-06-29 07:05 23552 c:\windows\system32\normaliz.dll
+ 2006-06-28 16:59 . 2009-01-07 17:20 24576 c:\windows\system32\nlsdl.dll
- 2006-06-28 16:59 . 2006-06-28 16:59 24576 c:\windows\system32\nlsdl.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 48128 c:\windows\system32\mshtmler.dll
- 2007-07-30 11:35 . 2007-08-13 17:01 48128 c:\windows\system32\mshtmler.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 66560 c:\windows\system32\mshtmled.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 45568 c:\windows\system32\mshta.exe
- 2007-07-30 11:35 . 2007-08-13 17:32 45568 c:\windows\system32\mshta.exe
+ 2007-08-13 17:36 . 2009-03-08 03:31 13312 c:\windows\system32\msfeedssync.exe
+ 2007-08-13 17:54 . 2010-02-25 06:18 55296 c:\windows\system32\msfeedsbs.dll
+ 2007-12-18 15:57 . 2010-03-28 05:57 84507 c:\windows\system32\Macromed\Flash\uninstall_activeX.exe
+ 2007-07-30 11:35 . 2009-03-08 03:34 43008 c:\windows\system32\licmgr10.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 25600 c:\windows\system32\jsproxy.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 94720 c:\windows\system32\inseng.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 34816 c:\windows\system32\imgutil.dll
+ 2007-08-13 17:39 . 2009-03-08 03:32 36864 c:\windows\system32\ieudinit.exe
+ 2007-07-30 11:35 . 2009-03-08 03:32 71680 c:\windows\system32\iesetup.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 55808 c:\windows\system32\iernonce.dll
+ 2006-06-29 07:05 . 2009-01-07 17:20 26112 c:\windows\system32\idndl.dll
- 2006-06-29 07:05 . 2006-06-29 07:05 26112 c:\windows\system32\idndl.dll
+ 2007-08-13 17:36 . 2009-03-08 03:31 59904 c:\windows\system32\icardie.dll
+ 2007-04-16 20:46 . 2007-04-16 20:46 33792 c:\windows\system32\drivers\AmdPPM.sys
+ 2007-07-30 11:35 . 2009-03-08 03:31 46592 c:\windows\system32\dllcache\pngfilt.dll
- 2007-07-30 11:35 . 2007-08-13 17:01 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 48128 c:\windows\system32\dllcache\mshtmler.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 66560 c:\windows\system32\dllcache\mshtmled.dll
- 2007-07-30 11:35 . 2007-08-13 17:32 45568 c:\windows\system32\dllcache\mshta.exe
+ 2007-07-30 11:35 . 2009-03-08 03:31 45568 c:\windows\system32\dllcache\mshta.exe
+ 2008-01-11 20:19 . 2010-02-25 06:18 55296 c:\windows\system32\dllcache\msfeedsbs.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 43008 c:\windows\system32\dllcache\licmgr10.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 25600 c:\windows\system32\dllcache\jsproxy.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 94720 c:\windows\system32\dllcache\inseng.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 34816 c:\windows\system32\dllcache\imgutil.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 71680 c:\windows\system32\dllcache\iesetup.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 55808 c:\windows\system32\dllcache\iernonce.dll
+ 2008-01-11 20:19 . 2009-03-08 03:31 59904 c:\windows\system32\dllcache\icardie.dll
+ 2007-07-30 09:50 . 2009-03-08 03:24 68608 c:\windows\system32\dllcache\hmmapi.dll
+ 2009-06-29 15:59 . 2009-03-08 03:33 18944 c:\windows\system32\dllcache\corpol.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 72704 c:\windows\system32\dllcache\admparse.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 18944 c:\windows\system32\corpol.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 72704 c:\windows\system32\admparse.dll
- 2007-06-18 07:19 . 2010-03-26 02:08 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 23040 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 61440 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 27136 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 11264 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 86016 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 12288 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2007-03-22 18:07 . 2007-03-22 18:07 78168 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\RM.DLL
+ 2007-03-22 18:07 . 2007-03-22 18:07 41824 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\RECALL.DLL
+ 2007-03-22 18:05 . 2007-03-22 18:05 97632 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\PP7X32.DLL
+ 2007-04-19 12:53 . 2007-04-19 12:53 69984 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLRPC.DLL
+ 2007-03-22 18:07 . 2007-03-22 18:07 80224 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\DLGSETP.DLL
+ 2007-03-22 18:07 . 2007-03-22 18:07 91488 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\ADDRPARS.DLL
+ 2010-03-31 18:38 . 2009-12-21 19:08 12800 c:\windows\ie8updates\KB980182-IE8\xpshims.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 55296 c:\windows\ie8updates\KB980182-IE8\msfeedsbs.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 25600 c:\windows\ie8updates\KB980182-IE8\jsproxy.dll
+ 2010-03-27 03:11 . 2009-03-08 03:33 12288 c:\windows\ie8updates\KB978207-IE8\xpshims.dll
+ 2010-03-27 03:11 . 2009-03-08 03:31 55296 c:\windows\ie8updates\KB978207-IE8\msfeedsbs.dll
+ 2010-03-27 03:11 . 2009-03-08 03:33 25600 c:\windows\ie8updates\KB978207-IE8\jsproxy.dll
+ 2010-03-27 03:09 . 2009-03-08 15:57 58448 c:\windows\ie8\spuninst\iecustom.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 44544 c:\windows\ie8\pngfilt.dll
+ 2010-03-27 03:07 . 2007-08-13 17:01 48128 c:\windows\ie8\mshtmler.dll
+ 2010-03-27 03:07 . 2007-08-13 17:32 45568 c:\windows\ie8\mshta.exe
+ 2010-03-27 03:07 . 2007-08-13 17:36 12288 c:\windows\ie8\msfeedssync.exe
+ 2010-03-27 03:07 . 2010-01-05 09:58 52224 c:\windows\ie8\msfeedsbs.dll
+ 2010-03-27 03:07 . 2007-08-13 17:44 40960 c:\windows\ie8\licmgr10.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 27648 c:\windows\ie8\jsproxy.dll
+ 2010-03-27 03:07 . 2007-08-13 17:39 92672 c:\windows\ie8\inseng.dll
+ 2010-03-27 03:07 . 2007-08-13 17:36 36352 c:\windows\ie8\imgutil.dll
+ 2010-03-27 03:07 . 2007-08-13 17:39 55296 c:\windows\ie8\iesetup.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 44544 c:\windows\ie8\iernonce.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 78336 c:\windows\ie8\ieencode.dll
+ 2010-03-27 03:07 . 2009-12-31 15:32 70656 c:\windows\ie8\ie4uinit.exe
+ 2010-03-27 03:07 . 2010-01-05 09:57 63488 c:\windows\ie8\icardie.dll
+ 2010-03-27 03:07 . 2007-08-13 17:18 60416 c:\windows\ie8\hmmapi.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 17408 c:\windows\ie8\corpol.dll
+ 2010-03-27 03:07 . 2007-08-13 17:39 71680 c:\windows\ie8\admparse.dll
- 2007-06-18 07:19 . 2010-03-26 02:08 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 4096 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2010-03-27 03:11 . 2009-03-08 03:35 2048 c:\windows\ie8updates\KB980302-IE8\iecompat.dll
+ 2008-01-11 20:17 . 2009-01-07 17:21 121856 c:\windows\system32\xmllite.dll
- 2008-01-11 20:17 . 2008-04-14 03:22 121856 c:\windows\system32\xmllite.dll
+ 2007-08-13 17:45 . 2009-03-08 03:34 208384 c:\windows\system32\WinFXDocObj.exe
+ 2007-07-30 11:35 . 2009-03-08 03:34 236544 c:\windows\system32\webcheck.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 420352 c:\windows\system32\vbscript.dll
- 2007-07-30 11:35 . 2010-01-05 09:58 105984 c:\windows\system32\url.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 105984 c:\windows\system32\url.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 159810 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvsvc32.exe
+ 2010-03-27 03:12 . 2006-10-22 10:22 286720 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvnt4cpl.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 888832 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmobls.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 458752 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmccssr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 188416 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmccss.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 229376 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmccs.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 581632 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvhwvid.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 212992 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvapi.dll
- 2007-07-30 11:35 . 2009-12-09 15:24 435260 c:\windows\system32\perfh009.dat
+ 2007-07-30 11:35 . 2010-03-28 05:53 435260 c:\windows\system32\perfh009.dat
+ 2007-07-30 11:35 . 2010-02-25 06:18 206848 c:\windows\system32\occache.dll
+ 2007-05-11 05:33 . 2010-01-12 11:03 592488 c:\windows\system32\NVUNINST.EXE
+ 2007-05-11 05:35 . 2010-01-12 11:03 592488 c:\windows\system32\nvudisp.exe
+ 2006-10-22 10:22 . 2010-01-12 11:03 182888 c:\windows\system32\nvcodins.dll
+ 2006-10-22 10:22 . 2010-01-12 11:03 182888 c:\windows\system32\nvcod.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 611840 c:\windows\system32\mstime.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 193536 c:\windows\system32\msrating.dll
- 2007-07-30 11:35 . 2007-08-13 17:54 156160 c:\windows\system32\msls31.dll
+ 2007-07-30 11:35 . 2009-03-08 03:22 156160 c:\windows\system32\msls31.dll
+ 2007-08-13 17:54 . 2010-02-25 06:18 594432 c:\windows\system32\msfeeds.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 265720 c:\windows\system32\msdbg2.dll
+ 2010-01-27 00:58 . 2010-01-27 00:58 256280 c:\windows\system32\Macromed\Flash\FlashUtil10e.exe
+ 2007-07-30 11:35 . 2009-12-09 05:55 726528 c:\windows\system32\jscript.dll
+ 2007-08-13 17:54 . 2009-03-08 03:22 164352 c:\windows\system32\ieui.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 184320 c:\windows\system32\iepeers.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 387584 c:\windows\system32\iedkcs32.dll
+ 2007-07-11 11:27 . 2009-03-08 03:11 445952 c:\windows\system32\ieapfltr.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 163840 c:\windows\system32\ieakui.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 229376 c:\windows\system32\ieaksie.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 125952 c:\windows\system32\ieakeng.dll
+ 2007-07-30 11:35 . 2010-02-24 09:53 173056 c:\windows\system32\ie4uinit.exe
+ 2007-07-30 11:35 . 2009-03-08 03:31 216064 c:\windows\system32\dxtrans.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 348160 c:\windows\system32\dxtmsft.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 916480 c:\windows\system32\dllcache\wininet.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 236544 c:\windows\system32\dllcache\webcheck.dll
+ 2007-07-30 09:50 . 2009-03-08 03:33 759296 c:\windows\system32\dllcache\VGX.dll
+ 2008-05-09 10:56 . 2009-03-08 03:33 420352 c:\windows\system32\dllcache\vbscript.dll
- 2007-07-30 11:35 . 2010-01-05 09:58 105984 c:\windows\system32\dllcache\url.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 105984 c:\windows\system32\dllcache\url.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 134144 c:\windows\system32\dllcache\sqmapi.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 206848 c:\windows\system32\dllcache\occache.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 611840 c:\windows\system32\dllcache\mstime.dll
+ 2007-07-30 11:35 . 2009-03-08 03:34 193536 c:\windows\system32\dllcache\msrating.dll
+ 2007-07-30 11:35 . 2009-03-08 03:22 156160 c:\windows\system32\dllcache\msls31.dll
- 2007-07-30 11:35 . 2007-08-13 17:54 156160 c:\windows\system32\dllcache\msls31.dll
+ 2008-01-11 20:19 . 2010-02-25 06:18 594432 c:\windows\system32\dllcache\msfeeds.dll
+ 2008-05-09 10:56 . 2009-12-09 05:55 726528 c:\windows\system32\dllcache\jscript.dll
+ 2007-07-30 09:50 . 2009-03-08 13:09 638816 c:\windows\system32\dllcache\iexplore.exe
+ 2007-07-30 11:35 . 2010-02-25 06:18 184320 c:\windows\system32\dllcache\iepeers.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 387584 c:\windows\system32\dllcache\iedkcs32.dll
+ 2008-01-11 20:19 . 2009-03-08 03:11 445952 c:\windows\system32\dllcache\ieapfltr.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 163840 c:\windows\system32\dllcache\ieakui.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 229376 c:\windows\system32\dllcache\ieaksie.dll
+ 2007-07-30 11:35 . 2009-03-08 03:33 125952 c:\windows\system32\dllcache\ieakeng.dll
+ 2007-07-30 11:35 . 2010-02-24 09:53 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2007-07-30 11:35 . 2009-03-08 03:31 216064 c:\windows\system32\dllcache\dxtrans.dll
+ 2007-07-30 11:35 . 2009-03-08 03:31 348160 c:\windows\system32\dllcache\dxtmsft.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 128512 c:\windows\system32\dllcache\advpack.dll
+ 2007-07-30 11:35 . 2009-03-08 03:32 128512 c:\windows\system32\advpack.dll
+ 2009-09-03 10:07 . 2009-09-03 10:07 630784 c:\windows\Installer\5958cb.msp
+ 2010-03-26 21:25 . 2010-03-26 21:25 470528 c:\windows\Installer\59586d.msi
+ 2008-01-23 15:51 . 2008-01-23 15:51 816640 c:\windows\Installer\5957cb.msp
+ 2008-07-28 14:04 . 2008-07-28 14:04 162304 c:\windows\Installer\5957a0.msp
- 2007-06-18 07:19 . 2010-03-26 02:08 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 409600 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 286720 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 249856 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 794624 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 135168 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2007-06-18 07:19 . 2010-03-26 02:08 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-06-18 07:19 . 2010-03-26 21:27 593920 c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2007-03-22 18:22 . 2007-03-22 18:22 103264 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\TRANSMGR.DLL
+ 2007-05-10 12:34 . 2007-05-10 12:34 562528 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\PUBCONV.DLL
+ 2007-05-31 12:36 . 2007-05-31 12:36 612184 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\PTXT9.DLL
+ 2007-05-31 12:35 . 2007-05-31 12:35 133976 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\PRTF9.DLL
+ 2007-04-19 12:53 . 2007-04-19 12:53 149856 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLPH.DLL
+ 2007-05-31 12:42 . 2007-05-31 12:42 200032 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLOOK.EXE
+ 2007-04-19 12:53 . 2007-04-19 12:53 106336 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLMIME.DLL
+ 2007-04-19 12:53 . 2007-04-19 12:53 109408 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLCTL.DLL
+ 2007-05-10 13:35 . 2007-05-10 13:35 120160 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSCONV97.DLL
+ 2007-04-19 12:54 . 2007-04-19 12:54 183136 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MIMEDIR.DLL
+ 2007-04-19 12:53 . 2007-04-19 12:53 127328 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\IMPMAIL.DLL
+ 2007-04-19 13:09 . 2007-04-19 13:09 167256 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\IETAG.DLL
+ 2007-04-19 12:53 . 2007-04-19 12:53 137568 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\ENVELOPE.DLL
+ 2003-07-15 09:18 . 2003-07-15 09:18 141360 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.5614\ATP.DLL
+ 2010-03-27 03:11 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB980302-IE8\spuninst\updspapi.dll
+ 2010-03-27 03:11 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB980302-IE8\spuninst\spuninst.exe
+ 2010-03-31 18:38 . 2009-12-21 19:08 916480 c:\windows\ie8updates\KB980182-IE8\wininet.dll
+ 2010-03-31 18:38 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB980182-IE8\spuninst\updspapi.dll
+ 2010-03-31 18:38 . 2009-05-26 11:40 233848 c:\windows\ie8updates\KB980182-IE8\spuninst\spuninst.exe
+ 2010-03-31 18:38 . 2009-12-21 19:08 206848 c:\windows\ie8updates\KB980182-IE8\occache.dll
+ 2010-03-31 18:38 . 2009-03-08 03:32 611840 c:\windows\ie8updates\KB980182-IE8\mstime.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 594432 c:\windows\ie8updates\KB980182-IE8\msfeeds.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 246272 c:\windows\ie8updates\KB980182-IE8\ieproxy.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 184320 c:\windows\ie8updates\KB980182-IE8\iepeers.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 387584 c:\windows\ie8updates\KB980182-IE8\iedkcs32.dll
+ 2010-03-31 18:38 . 2009-12-21 13:18 173056 c:\windows\ie8updates\KB980182-IE8\ie4uinit.exe
+ 2010-03-27 03:11 . 2009-03-08 03:34 914944 c:\windows\ie8updates\KB978207-IE8\wininet.dll
+ 2010-03-27 03:11 . 2009-05-26 11:40 391032 c:\windows\ie8updates\KB978207-IE8\spuninst\updspapi.dll
+ 2010-03-27 03:11 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB978207-IE8\spuninst\spuninst.exe
+ 2010-03-27 03:11 . 2009-03-08 03:34 109568 c:\windows\ie8updates\KB978207-IE8\occache.dll
+ 2010-03-27 03:11 . 2009-03-08 03:32 594432 c:\windows\ie8updates\KB978207-IE8\msfeeds.dll
+ 2010-03-27 03:11 . 2009-03-08 03:33 246784 c:\windows\ie8updates\KB978207-IE8\ieproxy.dll
+ 2010-03-27 03:11 . 2009-03-08 03:31 183808 c:\windows\ie8updates\KB978207-IE8\iepeers.dll
+ 2010-03-27 03:11 . 2009-03-08 13:09 391536 c:\windows\ie8updates\KB978207-IE8\iedkcs32.dll
+ 2010-03-27 03:11 . 2009-03-08 03:32 173056 c:\windows\ie8updates\KB978207-IE8\ie4uinit.exe
+ 2010-03-27 17:14 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB976662-IE8\spuninst\updspapi.dll
+ 2010-03-27 17:14 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB976662-IE8\spuninst\spuninst.exe
+ 2010-03-27 17:14 . 2009-06-22 06:48 726528 c:\windows\ie8updates\KB976662-IE8\jscript.dll
+ 2010-03-27 17:14 . 2008-07-08 12:59 391032 c:\windows\ie8updates\KB971961-IE8\spuninst\updspapi.dll
+ 2010-03-27 17:14 . 2008-07-08 12:59 233848 c:\windows\ie8updates\KB971961-IE8\spuninst\spuninst.exe
+ 2010-03-27 17:14 . 2009-03-08 03:33 726528 c:\windows\ie8updates\KB971961-IE8\jscript.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 832512 c:\windows\ie8\wininet.dll
+ 2010-03-27 03:07 . 2007-08-13 17:45 206336 c:\windows\ie8\winfxdocobj.exe
+ 2010-03-27 03:07 . 2010-01-05 09:58 233472 c:\windows\ie8\webcheck.dll
+ 2010-03-27 03:07 . 2007-07-12 23:32 765952 c:\windows\ie8\vgx.dll
+ 2010-03-27 03:07 . 2008-05-09 10:56 430080 c:\windows\ie8\vbscript.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 105984 c:\windows\ie8\url.dll
+ 2010-03-27 03:09 . 2009-01-07 17:20 390688 c:\windows\ie8\spuninst\updspapi.dll
+ 2010-03-27 03:09 . 2009-01-07 17:20 234016 c:\windows\ie8\spuninst\spuninst.exe
+ 2010-03-27 03:07 . 2006-09-06 16:42 215776 c:\windows\ie8\spuninst.exe
+ 2010-03-27 03:07 . 2010-01-05 09:58 102912 c:\windows\ie8\occache.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 671232 c:\windows\ie8\mstime.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 193024 c:\windows\ie8\msrating.dll
+ 2010-03-27 03:07 . 2007-08-13 17:54 156160 c:\windows\ie8\msls31.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 477696 c:\windows\ie8\mshtmled.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 459264 c:\windows\ie8\msfeeds.dll
+ 2010-03-27 03:07 . 2009-08-13 15:24 512000 c:\windows\ie8\jscript.dll
+ 2010-03-27 03:07 . 2009-12-18 13:05 634648 c:\windows\ie8\iexplore.exe
+ 2010-03-27 03:07 . 2007-08-13 17:54 180736 c:\windows\ie8\ieui.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 268288 c:\windows\ie8\iertutil.dll
+ 2010-03-27 03:07 . 2007-08-13 17:54 287744 c:\windows\ie8\ieproxy.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 192512 c:\windows\ie8\iepeers.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 385024 c:\windows\ie8\iedkcs32.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 380928 c:\windows\ie8\ieapfltr.dll
+ 2010-03-27 03:07 . 2009-12-18 13:04 161792 c:\windows\ie8\ieakui.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 230400 c:\windows\ie8\ieaksie.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 153088 c:\windows\ie8\ieakeng.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 214528 c:\windows\ie8\dxtrans.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 347136 c:\windows\ie8\dxtmsft.dll
+ 2010-03-27 03:07 . 2010-01-05 09:57 124928 c:\windows\ie8\advpack.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 1209344 c:\windows\system32\urlmon.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 1732608 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvwssr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 1236992 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvwss.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 2973696 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvvitvsr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 2924544 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvvitvs.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 5644288 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvoglnt.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 2859008 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvmoblsr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 3203072 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvgamesr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 3047424 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvgames.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 5255168 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvdispsr.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 5619712 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvdisps.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 7700480 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nvcpl.dll
+ 2010-03-27 03:12 . 2006-10-22 10:22 3994624 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nv4_mini.sys
+ 2010-03-27 03:12 . 2006-10-22 10:22 4527488 c:\windows\system32\ReinstallBackups\0000\DriverFiles\nv4_disp.dll
+ 2010-01-12 11:03 . 2010-01-12 11:03 2283526 c:\windows\system32\nvdata.bin
+ 2010-01-12 11:03 . 2010-01-12 11:03 2259560 c:\windows\system32\nvcuvid.dll
+ 2010-01-12 11:03 . 2010-01-12 11:03 4077672 c:\windows\system32\nvcuvenc.dll
+ 2010-01-12 11:03 . 2010-01-12 11:03 4104192 c:\windows\system32\nvcuda.dll
+ 2006-10-22 10:22 . 2010-01-12 11:03 1081344 c:\windows\system32\nvapi.dll
+ 2006-10-22 10:22 . 2010-01-12 11:03 6359168 c:\windows\system32\nv4_disp.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 5944832 c:\windows\system32\mshtml.dll
+ 2007-03-15 16:19 . 2008-03-20 17:06 1480232 c:\windows\system32\LegitCheckControl.dll
+ 2007-08-13 17:34 . 2010-02-25 06:18 1985536 c:\windows\system32\iertutil.dll
+ 2007-02-12 15:10 . 2009-02-06 20:07 3698584 c:\windows\system32\ieapfltr.dat
+ 2009-08-04 18:52 . 2009-08-04 18:52 1193832 c:\windows\system32\FM20.DLL
+ 2007-07-30 11:35 . 2010-02-25 06:18 1209344 c:\windows\system32\dllcache\urlmon.dll
+ 2009-01-07 17:20 . 2009-01-07 17:20 1497600 c:\windows\system32\dllcache\shdocvw.dll
+ 2007-07-30 11:35 . 2010-02-25 06:18 5944832 c:\windows\system32\dllcache\mshtml.dll
+ 2008-01-11 20:19 . 2010-02-25 06:18 1985536 c:\windows\system32\dllcache\iertutil.dll
+ 2008-01-11 20:19 . 2009-02-06 20:07 3698584 c:\windows\system32\dllcache\ieapfltr.dat
+ 2009-01-07 17:20 . 2009-01-07 17:20 1022976 c:\windows\system32\dllcache\browseui.dll
+ 2009-08-21 09:14 . 2009-08-21 09:14 8363008 c:\windows\Installer\5958eb.msp
+ 2009-08-20 04:02 . 2009-08-20 04:02 5204992 c:\windows\Installer\5958b5.msp
+ 2009-07-01 12:21 . 2009-07-01 12:21 8891904 c:\windows\Installer\59589e.msp
+ 2008-04-01 13:33 . 2008-04-01 13:33 5479936 c:\windows\Installer\595885.msp
+ 2009-10-06 17:40 . 2009-10-06 17:40 7681024 c:\windows\Installer\595850.msp
+ 2010-01-27 16:53 . 2010-01-27 16:53 6820864 c:\windows\Installer\59583a.msp
+ 2008-01-14 15:53 . 2008-01-14 15:53 5213696 c:\windows\Installer\595824.msp
+ 2009-12-16 21:58 . 2009-12-16 21:58 5382144 c:\windows\Installer\59580f.msp
+ 2008-10-25 08:15 . 2008-10-25 08:15 6227456 c:\windows\Installer\5957f6.msp
+ 2009-09-29 08:08 . 2009-09-29 08:08 6747648 c:\windows\Installer\5957b6.msp
+ 2010-01-19 17:29 . 2010-01-19 17:29 5050368 c:\windows\Installer\59578b.msp
+ 2007-05-09 16:19 . 2007-05-09 16:19 2585936 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\VBE6.DLL
+ 2007-04-19 12:49 . 2007-04-19 12:49 1661280 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\PPTVIEW.EXE
+ 2007-05-31 12:35 . 2007-05-31 12:35 6420320 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\POWERPNT.EXE
+ 2007-05-10 12:45 . 2007-05-10 12:45 8069464 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OWC11.DLL
+ 2007-03-14 12:10 . 2007-03-14 12:10 7255384 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OWC10.DLL
+ 2007-05-31 12:43 . 2007-05-31 12:43 7613280 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\OUTLLIB.DLL
+ 2007-05-10 12:35 . 2007-05-10 12:35 6747480 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSPUB.EXE
+ 2007-06-06 09:53 . 2007-06-06 09:53 1195888 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\FM20.DLL
+ 2010-03-31 18:38 . 2009-12-21 19:08 1208832 c:\windows\ie8updates\KB980182-IE8\urlmon.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 5942784 c:\windows\ie8updates\KB980182-IE8\mshtml.dll
+ 2010-03-31 18:38 . 2009-12-21 19:08 1985536 c:\windows\ie8updates\KB980182-IE8\iertutil.dll
+ 2010-03-27 03:11 . 2009-03-08 03:34 1206784 c:\windows\ie8updates\KB978207-IE8\urlmon.dll
+ 2010-03-27 03:11 . 2009-03-08 03:41 5937152 c:\windows\ie8updates\KB978207-IE8\mshtml.dll
+ 2010-03-27 03:11 . 2009-03-08 03:32 1985024 c:\windows\ie8updates\KB978207-IE8\iertutil.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 1168384 c:\windows\ie8\urlmon.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 3599360 c:\windows\ie8\mshtml.dll
+ 2010-03-27 03:07 . 2010-01-05 09:58 6067200 c:\windows\ie8\ieframe.dll
+ 2010-03-27 03:07 . 2009-06-29 08:33 2452872 c:\windows\ie8\ieapfltr.dat
+ 2006-10-22 10:22 . 2010-01-12 11:03 14458880 c:\windows\system32\nvoglnt.dll
+ 2010-01-12 11:03 . 2010-01-12 11:03 11632640 c:\windows\system32\nvcompiler.dll
+ 2007-08-13 17:54 . 2010-02-25 09:48 11070976 c:\windows\system32\ieframe.dll
+ 2006-10-22 10:22 . 2010-01-12 11:03 10276768 c:\windows\system32\drivers\nv4_mini.sys
+ 2006-10-22 10:22 . 2010-01-12 11:03 10276768 c:\windows\system32\dllcache\nv4_mini.sys
+ 2008-01-11 20:19 . 2010-02-25 09:48 11070976 c:\windows\system32\dllcache\ieframe.dll
+ 2009-07-01 12:19 . 2009-07-01 12:19 10607104 c:\windows\Installer\59589f.msp
+ 2008-06-04 12:29 . 2008-06-04 12:29 16905728 c:\windows\Installer\595866.msp
+ 2008-01-14 14:24 . 2008-01-14 14:24 10721280 c:\windows\Installer\5957e0.msp
+ 2007-05-31 12:37 . 2007-05-31 12:37 12310368 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\WINWORD.EXE
+ 2007-06-18 16:16 . 2007-06-18 16:16 12259160 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\MSO.DLL
+ 2007-05-31 12:41 . 2007-05-31 12:41 10352472 c:\windows\Installer\$PatchCache$\Managed\5040110900063D11C8EF10054038389C\11.0.8173\EXCEL.EXE
+ 2010-03-31 18:38 . 2009-12-21 19:08 11070464 c:\windows\ie8updates\KB980182-IE8\ieframe.dll
+ 2010-03-27 03:11 . 2009-03-08 03:39 11063808 c:\windows\ie8updates\KB978207-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 16125440]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-02-21 1093208]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Micronet Wireless Network Utility.lnk - c:\program files\Micronet Wireless Network Utility\RtWLan.exe [2007-6-27 675840]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0lsdelete\0sprecovr \SystemRoot\sprecovr.txt

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SpybotSD TeaTimer"=c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\Ahead\\Nero Web\\SetupX.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP\\qip.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [4.10.2009 17:14 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [4.10.2009 17:14 20560]
S3 RTLWUSB;Micronet SP907GK Wireless LAN USB Adapter;c:\windows\system32\drivers\RTL8187.sys [27.6.2007 16:17 172416]
.
Obsah adresáře 'Naplánované úlohy'

2010-04-05 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Essentials\MpCmdRun.exe [2009-12-09 17:02]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Zákazník\Data aplikací\Mozilla\Firefox\Profiles\wa2tpg9t.default\
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-nwiz - nwiz.exe
AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-05 15:30
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(1068)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2010-04-05 15:32:20
ComboFix-quarantined-files.txt 2010-04-05 13:32
ComboFix2.txt 2010-03-26 21:16
ComboFix3.txt 2010-03-25 21:59

Před spuštěním: Volných bajtů: 143 668 961 280
Po spuštění: Volných bajtů: 143 664 156 672

- - End Of File - - 9BF1EF70BE67EEE1C86CEAE54027C7F2

#13 Příspěvek od **Rudy** » 05 dub 2010 16:17

Log již vypadá čistý. Nastala nějaká změna?

Laaron · #14 Příspěvek od **Laaron** » 05 dub 2010 17:02

Restartoval jsem to a stále to trvá cca 8 minut

#15 Příspěvek od **Rudy** » 05 dub 2010 18:13

Zkuste PC vyčistit CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .

VIRY.CZ

XP se spustí yamrynou cca 10 minut a pak je vše normální

XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální

Re: XP se spustí yamrynou cca 10 minut a pak je vše normální