
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Prosím o kontrolu logu děkuji
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- SorryToHereToKillYou
- Návštěvník
- Příspěvky: 88
- Registrován: 24 črc 2010 23:07
- Bydliště: Brno
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu děkuji
ted sem udelal uplny sken mbamem
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Verze databáze: 4649
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13
19.9.2010 0:45:09
mbam-log-2010-09-19 (00-45-09).txt
Typ skenu: Úplný sken (A:\|C:\|D:\|)
Skenované objekty: 175743
Uplynulý čas: 17 minuta(y), 0 sekunda(y)
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 3
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
C:\Documents and Settings\Jan Šebesta\Local Settings\Temp\ScreenShots.exe (Trojan.Agent) -> No action taken.
C:\nero-8\Keygen\keygen.exe (Trojan.Agent) -> No action taken.
C:\rest.cmd (Trojan.Agent) -> No action taken.
Nasel dalsi mrsku prosim o radu smazat ci nechat?
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Verze databáze: 4649
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13
19.9.2010 0:45:09
mbam-log-2010-09-19 (00-45-09).txt
Typ skenu: Úplný sken (A:\|C:\|D:\|)
Skenované objekty: 175743
Uplynulý čas: 17 minuta(y), 0 sekunda(y)
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 3
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
C:\Documents and Settings\Jan Šebesta\Local Settings\Temp\ScreenShots.exe (Trojan.Agent) -> No action taken.
C:\nero-8\Keygen\keygen.exe (Trojan.Agent) -> No action taken.
C:\rest.cmd (Trojan.Agent) -> No action taken.
Nasel dalsi mrsku prosim o radu smazat ci nechat?
Sem Laik není to ostuda jim býti ale nepřiznat si to
- Caroprd111
- VIP
- Příspěvky: 13492
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
- SorryToHereToKillYou
- Návštěvník
- Příspěvky: 88
- Registrován: 24 črc 2010 23:07
- Bydliště: Brno
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu děkuji
Moc děkuji sem tu jen na skok byl sem zvedavy
a jak se mi mohlo tolik agentu premnožit? abych nedopadl jak v metrixu 


Sem Laik není to ostuda jim býti ale nepřiznat si to
- Caroprd111
- VIP
- Příspěvky: 13492
- Registrován: 22 bře 2009 20:48
- Bydliště: Třebíč
- Kontaktovat uživatele:
- SorryToHereToKillYou
- Návštěvník
- Příspěvky: 88
- Registrován: 24 črc 2010 23:07
- Bydliště: Brno
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu děkuji
Zdravím prosím o kontrolu logu pc se chova divne dekuji
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan Šebesta at 2010-09-24 21:47:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 293 GB (96%) free of 305 GB
Total RAM: 1015 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:47:48, on 24.9.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\VisualTaskTips\VisualTaskTips.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\extra\ViOrb\ViOrb.exe
C:\Program Files\extra\True Transparency\TrueTransparency.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Documents and Settings\Jan Šebesta\Plocha\Programy\RSIT.exe
C:\Program Files\trend micro\Jan Šebesta.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5627.1104\swg.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O3 - Toolbar: QT Breadcrumbs Address Bar - {af83e43c-dd2b-4787-826b-31b17dee52ed} - mscoree.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VisualTaskTips] C:\Program Files\VisualTaskTips\VisualTaskTips.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ViOrb] C:\Program Files\extra\ViOrb\ViOrb.exe
O4 - HKLM\..\Run: [True transparacy] C:\Program Files\extra\True Transparency\TrueTransparency.exe
O4 - HKLM\..\Run: [TransBar] C:\Program Files\extra\TransBar\TransBar.exe /S
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [TrueTransparency] "C:\Program Files\extra\True Transparency\TrueTransparency.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2D06158FAC79A790.dll/cmsidewiki.html
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
--
End of file - 10073 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2008-05-20 736360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-09-18 292528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5627.1104\swg.dll [2010-09-18 842296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-05-19 1117976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{af83e43c-dd2b-4787-826b-31b17dee52ed} - QT Breadcrumbs Address Bar - C:\WINDOWS\system32\mscoree.dll [2007-10-23 282112]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-09-18 292528]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"VisualTaskTips"=C:\Program Files\VisualTaskTips\VisualTaskTips.exe [2008-08-15 65536]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"ViOrb"=C:\Program Files\extra\ViOrb\ViOrb.exe [2008-06-15 167936]
"True transparacy"=C:\Program Files\extra\True Transparency\TrueTransparency.exe [2008-06-24 372224]
"TransBar"=C:\Program Files\extra\TransBar\TransBar.exe [2005-06-01 93696]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2007-08-24 33648]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-02-28 570664]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-08-15 40960]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-09-18 39408]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2010-05-19 462104]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]
"TrueTransparency"=C:\Program Files\extra\True Transparency\TrueTransparency.exe [2008-06-24 372224]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-07-28 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
======List of files/folders created in the last 1 months======
2010-09-24 17:46:14 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\gtk-2.0
2010-09-24 00:54:06 ----D---- C:\Program Files\Free Screen Recorder
2010-09-23 22:20:41 ----D---- C:\Program Files\GIMP-2.0
2010-09-23 22:15:52 ----D---- C:\Shoty
2010-09-23 21:56:01 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-23 21:02:28 ----D---- C:\Program Files\DsNET Corp
2010-09-19 11:51:15 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-19 00:07:59 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Malwarebytes
2010-09-19 00:07:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-09-19 00:07:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-18 23:22:52 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Thunderbird
2010-09-18 23:08:03 ----D---- C:\Program Files\ICQ6Toolbar
2010-09-18 23:08:01 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-18 23:08:01 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Mozilla
2010-09-18 23:08:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-09-18 23:07:48 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\ICQ
2010-09-18 23:07:43 ----D---- C:\Program Files\ICQ7.2
2010-09-18 22:56:47 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\skypePM
2010-09-18 22:52:36 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Skype
2010-09-18 22:52:04 ----D---- C:\Program Files\Common Files\Skype
2010-09-18 22:52:01 ----RD---- C:\Program Files\Skype
2010-09-18 22:51:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-09-18 22:34:57 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Macromedia
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-09-18 22:09:30 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-09-18 22:09:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-09-18 22:05:33 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-18 22:03:57 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-18 22:03:56 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-18 22:03:55 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-09-18 22:03:54 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-18 22:03:53 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-09-18 22:03:52 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-09-18 22:03:51 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-09-18 22:03:50 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-18 22:03:49 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-18 22:03:48 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-18 22:03:47 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-18 22:03:44 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-18 22:03:29 ----D---- C:\WINDOWS\system32\RTCOM
2010-09-18 22:03:28 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-18 22:03:28 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-18 22:03:27 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-18 22:03:04 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-18 22:02:25 ----D---- C:\WINDOWS\system32\x64
2010-09-18 22:02:24 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-09-18 22:02:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-18 22:02:20 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-09-18 22:02:07 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-18 22:00:16 ----SHD---- C:\WINDOWS\Installer
2010-09-18 22:00:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-18 22:00:15 ----D---- C:\Program Files\Common Files\ODBC
2010-09-18 22:00:15 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-18 22:00:12 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-18 22:00:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-18 22:00:11 ----D---- C:\Program Files\Common Files
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-18 21:59:54 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-18 21:59:53 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-18 21:59:53 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-18 21:59:53 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-18 21:59:53 ----A---- C:\WINDOWS\notepad.exe
2010-09-18 21:59:51 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-18 21:59:45 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-09-18 21:58:03 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-18 21:58:00 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-18 21:57:59 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-18 21:57:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-18 21:57:54 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-18 21:57:49 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-09-18 21:55:37 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2010-09-18 21:55:30 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-09-18 21:55:30 ----A---- C:\WINDOWS\SkyTel.exe
2010-09-18 21:55:30 ----A---- C:\WINDOWS\RtlUpd.exe
2010-09-18 21:55:30 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-09-18 21:55:29 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-09-18 21:55:29 ----A---- C:\WINDOWS\MicCal.exe
2010-09-18 21:55:28 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-09-18 21:55:28 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-09-18 21:54:34 ----A---- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2010-09-18 21:53:21 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys
2010-09-18 21:53:19 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-09-18 21:53:04 ----A---- C:\WINDOWS\system32\igxprd32.dll
2010-09-18 21:53:04 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igfxCoIn_v4906.dll
2010-09-18 21:52:58 ----A---- C:\WINDOWS\system32\iglicd32.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igldev32.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-09-18 21:52:56 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-09-18 21:52:54 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-09-18 21:50:08 ----D---- C:\Documents and Settings
2010-09-18 21:50:07 ----SHD---- C:\System Volume Information
2010-09-18 21:49:19 ----SH---- C:\boot.ini
2010-09-18 21:47:08 ----D---- C:\Program Files\CCleaner
2010-09-18 21:44:24 ----D---- C:\nero-8
2010-09-18 21:39:16 ----D---- C:\Program Files\Seznam.cz
2010-09-18 21:36:11 ----RD---- C:\Program Files
2010-09-18 21:36:11 ----D---- C:\Program Files\extra
2010-09-18 21:32:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-18 21:32:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-18 21:32:23 ----RSD---- C:\WINDOWS\Fonts
2010-09-18 21:32:23 ----RD---- C:\WINDOWS\Web
2010-09-18 21:32:23 ----HD---- C:\WINDOWS\inf
2010-09-18 21:32:23 ----D---- C:\WINDOWS\WinSxS
2010-09-18 21:32:23 ----D---- C:\WINDOWS\WBEM
2010-09-18 21:32:23 ----D---- C:\WINDOWS\twain_32
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Temp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\wins
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\wbem
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\usmt
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\spool
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\Setup
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ras
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\oobe
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\npp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\mui
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\IME
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\icsxml
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ias
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\export
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\dhcp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\cs-cz
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\cs
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\config
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\3076
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\2052
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1054
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1042
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1041
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1037
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1033
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1031
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1029
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1028
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1025
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system
2010-09-18 21:32:23 ----D---- C:\WINDOWS\security
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Resources
2010-09-18 21:32:23 ----D---- C:\WINDOWS\repair
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Provisioning
2010-09-18 21:32:23 ----D---- C:\WINDOWS\pchealth
2010-09-18 21:32:23 ----D---- C:\WINDOWS\PeerNet
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Offline Web Pages
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Network Diagnostic
2010-09-18 21:32:23 ----D---- C:\WINDOWS\mui
2010-09-18 21:32:23 ----D---- C:\WINDOWS\msapps
2010-09-18 21:32:23 ----D---- C:\WINDOWS\msagent
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Media
2010-09-18 21:32:23 ----D---- C:\WINDOWS\L2Schemas
2010-09-18 21:32:23 ----D---- C:\WINDOWS\java
2010-09-18 21:32:23 ----D---- C:\WINDOWS\ime
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Help
2010-09-18 21:32:23 ----D---- C:\WINDOWS\ehome
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Driver Cache
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Debug
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Cursors
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Connection Wizard
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Config
2010-09-18 21:32:23 ----D---- C:\WINDOWS\AppPatch
2010-09-18 21:32:23 ----D---- C:\WINDOWS\addins
2010-09-18 21:32:23 ----D---- C:\WINDOWS
2010-09-18 21:32:23 ----ASH---- C:\pagefile.sys
2010-09-18 21:26:33 ----ASH---- C:\hiberfil.sys
2010-09-18 21:23:36 ----D---- C:\WINDOWS\CSC
2010-09-18 21:21:40 ----SHD---- C:\RECYCLER
2010-09-18 21:15:45 ----D---- C:\Program Files\Alwil Software
2010-09-18 21:15:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-09-18 21:10:26 ----D---- C:\rsit
2010-09-18 21:10:26 ----D---- C:\Program Files\trend micro
2010-09-18 21:02:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-09-18 20:57:08 ----D---- C:\Program Files\ScreenShots
2010-09-18 20:57:03 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\MiniDm
2010-09-18 20:51:02 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Google
2010-09-18 20:50:09 ----D---- C:\Program Files\Google
2010-09-18 20:50:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-09-18 20:33:49 ----D---- C:\Program Files\NeroInstall.bak
2010-09-18 20:33:26 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Nero
2010-09-18 20:32:55 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2010-09-18 20:31:28 ----D---- C:\Program Files\Nero
2010-09-18 20:31:28 ----D---- C:\Program Files\Common Files\Nero
2010-09-18 20:31:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-09-18 20:31:02 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-09-18 20:31:01 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-09-18 20:25:13 ----D---- C:\Downloads
2010-09-18 20:19:44 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Adobe
2010-09-18 20:18:46 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\IEPro
2010-09-18 20:16:57 ----D---- C:\WINDOWS\system32\Lang
2010-09-18 20:16:46 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-18 20:15:31 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\ESET
2010-09-18 20:13:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-09-18 20:07:27 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-09-18 20:05:22 ----D---- C:\Program Files\Microsoft Works
2010-09-18 20:05:02 ----D---- C:\Program Files\Microsoft Visual Studio
2010-09-18 20:05:02 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-18 20:04:36 ----D---- C:\Program Files\Microsoft.NET
2010-09-18 20:02:57 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-09-18 20:02:25 ----D---- C:\WINDOWS\SHELLNEW
2010-09-18 20:02:06 ----D---- C:\Program Files\Microsoft Office
2010-09-18 20:02:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-18 20:01:51 ----RHD---- C:\MSOCache
2010-09-18 20:01:31 ----D---- C:\Program Files\Windows Defender
2010-09-18 20:01:21 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-09-18 20:00:20 ----D---- C:\Program Files\MSBuild
2010-09-18 20:00:18 ----D---- C:\WINDOWS\system32\XPSViewer
2010-09-18 20:00:15 ----D---- C:\WINDOWS\system32\en-us
2010-09-18 20:00:15 ----D---- C:\Program Files\Reference Assemblies
2010-09-18 20:00:00 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-09-18 19:59:38 ----RSD---- C:\WINDOWS\assembly
2010-09-18 19:59:25 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-18 19:57:32 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-09-18 19:57:24 ----ASH---- C:\Documents and Settings\Jan Šebesta\Data aplikací\desktop.ini
2010-09-18 19:57:23 ----SD---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Microsoft
2010-09-18 19:57:23 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Real
2010-09-18 19:57:23 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Notepad++
2010-09-18 19:53:52 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-18 19:53:43 ----D---- C:\WINDOWS\Prefetch
2010-09-18 19:53:42 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-18 19:53:42 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-09-18 19:49:23 ----D---- C:\WINDOWS\system32\xircom
2010-09-18 19:49:23 ----D---- C:\Program Files\xerox
2010-09-18 19:49:23 ----D---- C:\Program Files\microsoft frontpage
2010-09-18 19:49:05 ----D---- C:\totalcmd
2010-09-18 19:49:05 ----A---- C:\WINDOWS\wincmd.ini
2010-09-18 19:49:03 ----D---- C:\Program Files\Mozilla Thunderbird
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\unrar.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\avisplitter.ini
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\divx.dll
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-09-18 19:48:42 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-18 19:48:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-09-18 19:48:42 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\WgaTray.exe
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\opuc.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2010-09-18 19:48:24 ----D---- C:\Program Files\WinRAR
2010-09-18 19:48:22 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-18 19:48:18 ----D---- C:\Program Files\Notepad++
2010-09-18 19:48:15 ----D---- C:\Program Files\IEPro
2010-09-18 19:48:12 ----D---- C:\Program Files\Mozilla Firefox
2010-09-18 19:47:59 ----D---- C:\Program Files\7-Zip
2010-09-18 19:47:55 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-18 19:47:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-09-18 19:47:45 ----D---- C:\Program Files\Alky for Applications
2010-09-18 19:47:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-09-18 19:47:19 ----D---- C:\Program Files\Common Files\Adobe
2010-09-18 19:47:19 ----D---- C:\Program Files\Adobe
2010-09-18 19:46:29 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-18 19:46:27 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-18 19:46:12 ----RASH---- C:\MSDOS.SYS
2010-09-18 19:46:12 ----RASH---- C:\IO.SYS
2010-09-18 19:46:12 ----A---- C:\WINDOWS\control.ini
2010-09-18 19:46:12 ----A---- C:\CONFIG.SYS
2010-09-18 19:46:12 ----A---- C:\AUTOEXEC.BAT
2010-09-18 19:45:57 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-18 19:45:07 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-18 19:45:05 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-18 19:45:00 ----HD---- C:\Program Files\WindowsUpdate
2010-09-18 19:44:56 ----D---- C:\Program Files\Online Services
2010-09-18 19:44:42 ----D---- C:\WINDOWS\system32\DirectX
2010-09-18 19:44:34 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-18 19:44:32 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-18 19:44:32 ----A---- C:\WINDOWS\desktop.ini
2010-09-18 19:44:25 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-18 19:44:24 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-18 19:44:23 ----D---- C:\Program Files\Common Files\Services
2010-09-18 19:44:21 ----SD---- C:\WINDOWS\Tasks
2010-09-18 19:44:21 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-18 19:44:20 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-18 19:44:16 ----D---- C:\WINDOWS\srchasst
2010-09-18 19:44:15 ----D---- C:\WINDOWS\system32\Macromed
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-18 19:44:11 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-18 19:44:11 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-18 19:44:08 ----D---- C:\Program Files\Movie Maker
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-18 19:43:45 ----D---- C:\WINDOWS\system32\Restore
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-18 19:43:40 ----D---- C:\Program Files\NetMeeting
2010-09-18 19:43:40 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-18 19:43:40 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-18 19:43:38 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-18 19:43:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-18 19:43:36 ----D---- C:\Program Files\Outlook Express
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-18 19:43:29 ----D---- C:\Program Files\Common Files\System
2010-09-18 19:43:28 ----D---- C:\Program Files\Internet Explorer
2010-09-18 19:42:53 ----D---- C:\Program Files\ComPlus Applications
2010-09-18 19:42:51 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-18 19:42:51 ----A---- C:\WINDOWS\vb.ini
2010-09-18 19:42:47 ----D---- C:\WINDOWS\Registration
2010-09-18 19:41:30 ----D---- C:\Program Files\VistaExperience.org
2010-09-18 19:40:09 ----D---- C:\Program Files\Windows Sidebar
2010-09-18 19:40:09 ----D---- C:\Program Files\VisualTaskTips
2010-09-18 19:40:06 ----D---- C:\Program Files\Windows Media Connect 2
2010-09-18 19:40:05 ----D---- C:\Program Files\Windows Media Player
2010-09-18 19:40:03 ----D---- C:\Program Files\Messenger
2010-09-18 19:40:00 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-18 19:40:00 ----A---- C:\WINDOWS\system32\write.exe
2010-09-18 19:39:52 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-18 19:39:45 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-18 19:39:36 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-18 19:39:34 ----D---- C:\Program Files\Windows NT
2010-09-18 19:39:34 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-18 19:39:34 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-18 19:39:33 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-18 19:39:33 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-18 19:39:29 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-18 19:39:27 ----D---- C:\WINDOWS\system32\Com
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-18 19:39:20 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-18 19:39:11 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-09-18 19:39:11 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
======List of files/folders modified in the last 1 months======
2010-09-23 17:55:45 ----A---- C:\WINDOWS\win.ini
2010-09-23 17:55:45 ----A---- C:\WINDOWS\system.ini
2010-09-18 19:45:45 ----ASH---- C:\WINDOWS\fonts\desktop.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-07-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-07-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-18 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-23 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-23 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-18 182768]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2007-08-24 68464]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
-----------------EOF-----------------
a prosim o radu po aktualizaci se mi zblaznil mbam
po každem skontrolovanem spuboru vyskoci chyba dekuji
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan Šebesta at 2010-09-24 21:47:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 293 GB (96%) free of 305 GB
Total RAM: 1015 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:47:48, on 24.9.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\VisualTaskTips\VisualTaskTips.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\extra\ViOrb\ViOrb.exe
C:\Program Files\extra\True Transparency\TrueTransparency.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Documents and Settings\Jan Šebesta\Plocha\Programy\RSIT.exe
C:\Program Files\trend micro\Jan Šebesta.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5627.1104\swg.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\core.2.dll
O3 - Toolbar: QT Breadcrumbs Address Bar - {af83e43c-dd2b-4787-826b-31b17dee52ed} - mscoree.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [VisualTaskTips] C:\Program Files\VisualTaskTips\VisualTaskTips.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [ViOrb] C:\Program Files\extra\ViOrb\ViOrb.exe
O4 - HKLM\..\Run: [True transparacy] C:\Program Files\extra\True Transparency\TrueTransparency.exe
O4 - HKLM\..\Run: [TransBar] C:\Program Files\extra\TransBar\TransBar.exe /S
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [TrueTransparency] "C:\Program Files\extra\True Transparency\TrueTransparency.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2D06158FAC79A790.dll/cmsidewiki.html
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
--
End of file - 10073 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2008-05-20 736360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-09-18 292528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5627.1104\swg.dll [2010-09-18 842296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Ukazatel S-Rank - C:\Program Files\Seznam.cz\core.2.dll [2010-05-19 1117976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{af83e43c-dd2b-4787-826b-31b17dee52ed} - QT Breadcrumbs Address Bar - C:\WINDOWS\system32\mscoree.dll [2007-10-23 282112]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-09-18 292528]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-04-10 16861184]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"VisualTaskTips"=C:\Program Files\VisualTaskTips\VisualTaskTips.exe [2008-08-15 65536]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"ViOrb"=C:\Program Files\extra\ViOrb\ViOrb.exe [2008-06-15 167936]
"True transparacy"=C:\Program Files\extra\True Transparency\TrueTransparency.exe [2008-06-24 372224]
"TransBar"=C:\Program Files\extra\TransBar\TransBar.exe [2005-06-01 93696]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2007-08-24 33648]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-02-28 570664]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-08-15 40960]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-09-18 39408]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2010-05-19 462104]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]
"TrueTransparency"=C:\Program Files\extra\True Transparency\TrueTransparency.exe [2008-06-24 372224]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-07-28 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
======List of files/folders created in the last 1 months======
2010-09-24 17:46:14 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\gtk-2.0
2010-09-24 00:54:06 ----D---- C:\Program Files\Free Screen Recorder
2010-09-23 22:20:41 ----D---- C:\Program Files\GIMP-2.0
2010-09-23 22:15:52 ----D---- C:\Shoty
2010-09-23 21:56:01 ----A---- C:\WINDOWS\NeroDigital.ini
2010-09-23 21:02:28 ----D---- C:\Program Files\DsNET Corp
2010-09-19 11:51:15 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2010-09-19 00:07:59 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Malwarebytes
2010-09-19 00:07:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-09-19 00:07:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-18 23:22:52 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Thunderbird
2010-09-18 23:08:03 ----D---- C:\Program Files\ICQ6Toolbar
2010-09-18 23:08:01 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-18 23:08:01 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Mozilla
2010-09-18 23:08:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2010-09-18 23:07:48 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\ICQ
2010-09-18 23:07:43 ----D---- C:\Program Files\ICQ7.2
2010-09-18 22:56:47 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\skypePM
2010-09-18 22:52:36 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Skype
2010-09-18 22:52:04 ----D---- C:\Program Files\Common Files\Skype
2010-09-18 22:52:01 ----RD---- C:\Program Files\Skype
2010-09-18 22:51:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-09-18 22:34:57 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Macromedia
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-09-18 22:09:31 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-09-18 22:09:30 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-09-18 22:09:29 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-09-18 22:09:20 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-09-18 22:05:33 ----A---- C:\WINDOWS\system32\h323log.txt
2010-09-18 22:03:57 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2010-09-18 22:03:56 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2010-09-18 22:03:55 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2010-09-18 22:03:54 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2010-09-18 22:03:53 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010-09-18 22:03:52 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010-09-18 22:03:51 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2010-09-18 22:03:50 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2010-09-18 22:03:49 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2010-09-18 22:03:48 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2010-09-18 22:03:47 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2010-09-18 22:03:44 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2010-09-18 22:03:29 ----D---- C:\WINDOWS\system32\RTCOM
2010-09-18 22:03:28 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-09-18 22:03:28 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2010-09-18 22:03:27 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2010-09-18 22:03:04 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2010-09-18 22:02:25 ----D---- C:\WINDOWS\system32\x64
2010-09-18 22:02:24 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-09-18 22:02:20 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-18 22:02:20 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-09-18 22:02:07 ----A---- C:\WINDOWS\system32\usbui.dll
2010-09-18 22:00:16 ----SHD---- C:\WINDOWS\Installer
2010-09-18 22:00:16 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-09-18 22:00:15 ----D---- C:\Program Files\Common Files\ODBC
2010-09-18 22:00:15 ----A---- C:\WINDOWS\ODBCINST.INI
2010-09-18 22:00:12 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-18 22:00:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-18 22:00:11 ----D---- C:\Program Files\Common Files
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-09-18 22:00:08 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-09-18 22:00:07 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-09-18 22:00:06 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-09-18 22:00:05 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-09-18 22:00:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-09-18 21:59:58 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\irclass.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-09-18 21:59:56 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-09-18 21:59:54 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-09-18 21:59:53 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-09-18 21:59:53 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2010-09-18 21:59:53 ----A---- C:\WINDOWS\system32\batt.dll
2010-09-18 21:59:53 ----A---- C:\WINDOWS\notepad.exe
2010-09-18 21:59:51 ----A---- C:\WINDOWS\system32\storprop.dll
2010-09-18 21:59:45 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-09-18 21:58:03 ----RA---- C:\WINDOWS\SET8.tmp
2010-09-18 21:58:00 ----RA---- C:\WINDOWS\SET4.tmp
2010-09-18 21:57:59 ----RA---- C:\WINDOWS\SET3.tmp
2010-09-18 21:57:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-18 21:57:54 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-18 21:57:49 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-09-18 21:55:37 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2010-09-18 21:55:30 ----A---- C:\WINDOWS\SOUNDMAN.EXE
2010-09-18 21:55:30 ----A---- C:\WINDOWS\SkyTel.exe
2010-09-18 21:55:30 ----A---- C:\WINDOWS\RtlUpd.exe
2010-09-18 21:55:30 ----A---- C:\WINDOWS\RTLCPL.EXE
2010-09-18 21:55:29 ----A---- C:\WINDOWS\RTHDCPL.EXE
2010-09-18 21:55:29 ----A---- C:\WINDOWS\MicCal.exe
2010-09-18 21:55:28 ----A---- C:\WINDOWS\ALCWZRD.EXE
2010-09-18 21:55:28 ----A---- C:\WINDOWS\ALCMTR.EXE
2010-09-18 21:54:34 ----A---- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2010-09-18 21:53:21 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys
2010-09-18 21:53:19 ----A---- C:\WINDOWS\system32\igfxzoom.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxtray.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxpers.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxext.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\igfxcfg.exe
2010-09-18 21:53:18 ----A---- C:\WINDOWS\system32\hkcmd.exe
2010-09-18 21:53:04 ----A---- C:\WINDOWS\system32\igxprd32.dll
2010-09-18 21:53:04 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2010-09-18 21:53:03 ----A---- C:\WINDOWS\system32\igfxCoIn_v4906.dll
2010-09-18 21:52:58 ----A---- C:\WINDOWS\system32\iglicd32.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igldev32.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxress.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxpph.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxexps.dll
2010-09-18 21:52:57 ----A---- C:\WINDOWS\system32\igfxdo.dll
2010-09-18 21:52:56 ----A---- C:\WINDOWS\system32\igfxdev.dll
2010-09-18 21:52:54 ----A---- C:\WINDOWS\system32\hccutils.dll
2010-09-18 21:50:08 ----D---- C:\Documents and Settings
2010-09-18 21:50:07 ----SHD---- C:\System Volume Information
2010-09-18 21:49:19 ----SH---- C:\boot.ini
2010-09-18 21:47:08 ----D---- C:\Program Files\CCleaner
2010-09-18 21:44:24 ----D---- C:\nero-8
2010-09-18 21:39:16 ----D---- C:\Program Files\Seznam.cz
2010-09-18 21:36:11 ----RD---- C:\Program Files
2010-09-18 21:36:11 ----D---- C:\Program Files\extra
2010-09-18 21:32:23 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-09-18 21:32:23 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-18 21:32:23 ----RSD---- C:\WINDOWS\Fonts
2010-09-18 21:32:23 ----RD---- C:\WINDOWS\Web
2010-09-18 21:32:23 ----HD---- C:\WINDOWS\inf
2010-09-18 21:32:23 ----D---- C:\WINDOWS\WinSxS
2010-09-18 21:32:23 ----D---- C:\WINDOWS\WBEM
2010-09-18 21:32:23 ----D---- C:\WINDOWS\twain_32
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Temp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\wins
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\wbem
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\usmt
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\spool
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ShellExt
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\Setup
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ras
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\oobe
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\npp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\mui
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\inetsrv
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\IME
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\icsxml
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\ias
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\export
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\UMDF
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers\disdn
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\drivers
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\dhcp
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\cs-cz
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\cs
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\config
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\3com_dmi
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\3076
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\2052
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1054
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1042
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1041
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1037
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1033
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1031
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1029
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1028
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32\1025
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system32
2010-09-18 21:32:23 ----D---- C:\WINDOWS\system
2010-09-18 21:32:23 ----D---- C:\WINDOWS\security
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Resources
2010-09-18 21:32:23 ----D---- C:\WINDOWS\repair
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Provisioning
2010-09-18 21:32:23 ----D---- C:\WINDOWS\pchealth
2010-09-18 21:32:23 ----D---- C:\WINDOWS\PeerNet
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Offline Web Pages
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Network Diagnostic
2010-09-18 21:32:23 ----D---- C:\WINDOWS\mui
2010-09-18 21:32:23 ----D---- C:\WINDOWS\msapps
2010-09-18 21:32:23 ----D---- C:\WINDOWS\msagent
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Media
2010-09-18 21:32:23 ----D---- C:\WINDOWS\L2Schemas
2010-09-18 21:32:23 ----D---- C:\WINDOWS\java
2010-09-18 21:32:23 ----D---- C:\WINDOWS\ime
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Help
2010-09-18 21:32:23 ----D---- C:\WINDOWS\ehome
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Driver Cache
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Debug
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Cursors
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Connection Wizard
2010-09-18 21:32:23 ----D---- C:\WINDOWS\Config
2010-09-18 21:32:23 ----D---- C:\WINDOWS\AppPatch
2010-09-18 21:32:23 ----D---- C:\WINDOWS\addins
2010-09-18 21:32:23 ----D---- C:\WINDOWS
2010-09-18 21:32:23 ----ASH---- C:\pagefile.sys
2010-09-18 21:26:33 ----ASH---- C:\hiberfil.sys
2010-09-18 21:23:36 ----D---- C:\WINDOWS\CSC
2010-09-18 21:21:40 ----SHD---- C:\RECYCLER
2010-09-18 21:15:45 ----D---- C:\Program Files\Alwil Software
2010-09-18 21:15:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-09-18 21:10:26 ----D---- C:\rsit
2010-09-18 21:10:26 ----D---- C:\Program Files\trend micro
2010-09-18 21:02:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-09-18 20:57:08 ----D---- C:\Program Files\ScreenShots
2010-09-18 20:57:03 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\MiniDm
2010-09-18 20:51:02 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Google
2010-09-18 20:50:09 ----D---- C:\Program Files\Google
2010-09-18 20:50:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-09-18 20:33:49 ----D---- C:\Program Files\NeroInstall.bak
2010-09-18 20:33:26 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Nero
2010-09-18 20:32:55 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2010-09-18 20:31:28 ----D---- C:\Program Files\Nero
2010-09-18 20:31:28 ----D---- C:\Program Files\Common Files\Nero
2010-09-18 20:31:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-09-18 20:31:02 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-09-18 20:31:01 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-09-18 20:25:13 ----D---- C:\Downloads
2010-09-18 20:19:44 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Adobe
2010-09-18 20:18:46 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\IEPro
2010-09-18 20:16:57 ----D---- C:\WINDOWS\system32\Lang
2010-09-18 20:16:46 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-09-18 20:15:31 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\ESET
2010-09-18 20:13:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-09-18 20:07:27 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-09-18 20:05:22 ----D---- C:\Program Files\Microsoft Works
2010-09-18 20:05:02 ----D---- C:\Program Files\Microsoft Visual Studio
2010-09-18 20:05:02 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-18 20:04:36 ----D---- C:\Program Files\Microsoft.NET
2010-09-18 20:02:57 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-09-18 20:02:25 ----D---- C:\WINDOWS\SHELLNEW
2010-09-18 20:02:06 ----D---- C:\Program Files\Microsoft Office
2010-09-18 20:02:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-09-18 20:01:51 ----RHD---- C:\MSOCache
2010-09-18 20:01:31 ----D---- C:\Program Files\Windows Defender
2010-09-18 20:01:21 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-09-18 20:00:20 ----D---- C:\Program Files\MSBuild
2010-09-18 20:00:18 ----D---- C:\WINDOWS\system32\XPSViewer
2010-09-18 20:00:15 ----D---- C:\WINDOWS\system32\en-us
2010-09-18 20:00:15 ----D---- C:\Program Files\Reference Assemblies
2010-09-18 20:00:00 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-09-18 19:59:38 ----RSD---- C:\WINDOWS\assembly
2010-09-18 19:59:25 ----D---- C:\WINDOWS\Microsoft.NET
2010-09-18 19:57:32 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-09-18 19:57:24 ----ASH---- C:\Documents and Settings\Jan Šebesta\Data aplikací\desktop.ini
2010-09-18 19:57:23 ----SD---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Microsoft
2010-09-18 19:57:23 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Real
2010-09-18 19:57:23 ----D---- C:\Documents and Settings\Jan Šebesta\Data aplikací\Notepad++
2010-09-18 19:53:52 ----D---- C:\WINDOWS\SoftwareDistribution
2010-09-18 19:53:43 ----D---- C:\WINDOWS\Prefetch
2010-09-18 19:53:42 ----SD---- C:\WINDOWS\system32\Microsoft
2010-09-18 19:53:42 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-09-18 19:49:23 ----D---- C:\WINDOWS\system32\xircom
2010-09-18 19:49:23 ----D---- C:\Program Files\xerox
2010-09-18 19:49:23 ----D---- C:\Program Files\microsoft frontpage
2010-09-18 19:49:05 ----D---- C:\totalcmd
2010-09-18 19:49:05 ----A---- C:\WINDOWS\wincmd.ini
2010-09-18 19:49:03 ----D---- C:\Program Files\Mozilla Thunderbird
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\unrar.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-09-18 19:48:46 ----A---- C:\WINDOWS\avisplitter.ini
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-09-18 19:48:44 ----A---- C:\WINDOWS\system32\divx.dll
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-09-18 19:48:43 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-09-18 19:48:42 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-18 19:48:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Real
2010-09-18 19:48:42 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\WgaTray.exe
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\opuc.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\OGACheckControl.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\MicrosoftUpdateCatalogWebControl.dll
2010-09-18 19:48:26 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2010-09-18 19:48:24 ----D---- C:\Program Files\WinRAR
2010-09-18 19:48:22 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-18 19:48:18 ----D---- C:\Program Files\Notepad++
2010-09-18 19:48:15 ----D---- C:\Program Files\IEPro
2010-09-18 19:48:12 ----D---- C:\Program Files\Mozilla Firefox
2010-09-18 19:47:59 ----D---- C:\Program Files\7-Zip
2010-09-18 19:47:55 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-09-18 19:47:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-09-18 19:47:45 ----D---- C:\Program Files\Alky for Applications
2010-09-18 19:47:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-09-18 19:47:19 ----D---- C:\Program Files\Common Files\Adobe
2010-09-18 19:47:19 ----D---- C:\Program Files\Adobe
2010-09-18 19:46:29 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-09-18 19:46:27 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-18 19:46:12 ----RASH---- C:\MSDOS.SYS
2010-09-18 19:46:12 ----RASH---- C:\IO.SYS
2010-09-18 19:46:12 ----A---- C:\WINDOWS\control.ini
2010-09-18 19:46:12 ----A---- C:\CONFIG.SYS
2010-09-18 19:46:12 ----A---- C:\AUTOEXEC.BAT
2010-09-18 19:45:57 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-09-18 19:45:07 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-09-18 19:45:05 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-09-18 19:45:00 ----HD---- C:\Program Files\WindowsUpdate
2010-09-18 19:44:56 ----D---- C:\Program Files\Online Services
2010-09-18 19:44:42 ----D---- C:\WINDOWS\system32\DirectX
2010-09-18 19:44:34 ----A---- C:\WINDOWS\system32\atrace.dll
2010-09-18 19:44:32 ----A---- C:\WINDOWS\system32\desktop.ini
2010-09-18 19:44:32 ----A---- C:\WINDOWS\desktop.ini
2010-09-18 19:44:25 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-09-18 19:44:24 ----A---- C:\WINDOWS\system32\acctres.dll
2010-09-18 19:44:23 ----D---- C:\Program Files\Common Files\Services
2010-09-18 19:44:21 ----SD---- C:\WINDOWS\Tasks
2010-09-18 19:44:21 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-09-18 19:44:20 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-18 19:44:16 ----D---- C:\WINDOWS\srchasst
2010-09-18 19:44:15 ----D---- C:\WINDOWS\system32\Macromed
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-09-18 19:44:13 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wups.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-09-18 19:44:12 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-09-18 19:44:11 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-09-18 19:44:11 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-09-18 19:44:08 ----D---- C:\Program Files\Movie Maker
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-09-18 19:43:49 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-09-18 19:43:45 ----D---- C:\WINDOWS\system32\Restore
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-09-18 19:43:45 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\srclient.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\ils.dll
2010-09-18 19:43:44 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\msconf.dll
2010-09-18 19:43:43 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-09-18 19:43:40 ----D---- C:\Program Files\NetMeeting
2010-09-18 19:43:40 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-09-18 19:43:40 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-09-18 19:43:38 ----A---- C:\WINDOWS\system32\inetres.dll
2010-09-18 19:43:38 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-09-18 19:43:36 ----D---- C:\Program Files\Outlook Express
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-09-18 19:43:36 ----A---- C:\WINDOWS\system32\mstask.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\isign32.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-09-18 19:43:35 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-09-18 19:43:29 ----D---- C:\Program Files\Common Files\System
2010-09-18 19:43:28 ----D---- C:\Program Files\Internet Explorer
2010-09-18 19:42:53 ----D---- C:\Program Files\ComPlus Applications
2010-09-18 19:42:51 ----A---- C:\WINDOWS\vbaddin.ini
2010-09-18 19:42:51 ----A---- C:\WINDOWS\vb.ini
2010-09-18 19:42:47 ----D---- C:\WINDOWS\Registration
2010-09-18 19:41:30 ----D---- C:\Program Files\VistaExperience.org
2010-09-18 19:40:09 ----D---- C:\Program Files\Windows Sidebar
2010-09-18 19:40:09 ----D---- C:\Program Files\VisualTaskTips
2010-09-18 19:40:06 ----D---- C:\Program Files\Windows Media Connect 2
2010-09-18 19:40:05 ----D---- C:\Program Files\Windows Media Player
2010-09-18 19:40:03 ----D---- C:\Program Files\Messenger
2010-09-18 19:40:00 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-18 19:40:00 ----A---- C:\WINDOWS\system32\write.exe
2010-09-18 19:39:52 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\winchat.exe
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\hticons.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avwav.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-09-18 19:39:51 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-09-18 19:39:45 ----A---- C:\WINDOWS\system32\getuname.dll
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\sol.exe
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\charmap.exe
2010-09-18 19:39:44 ----A---- C:\WINDOWS\system32\calc.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\winmine.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\reset.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-09-18 19:39:43 ----A---- C:\WINDOWS\system32\freecell.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tskill.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\tscon.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\shadow.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\regini.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-09-18 19:39:42 ----A---- C:\WINDOWS\system32\msg.exe
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\logoff.exe
2010-09-18 19:39:41 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-09-18 19:39:36 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-09-18 19:39:35 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-09-18 19:39:34 ----D---- C:\Program Files\Windows NT
2010-09-18 19:39:34 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-09-18 19:39:34 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-09-18 19:39:33 ----A---- C:\WINDOWS\system32\spider.exe
2010-09-18 19:39:33 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2010-09-18 19:39:32 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-09-18 19:39:31 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-09-18 19:39:30 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-09-18 19:39:29 ----D---- C:\WINDOWS\system32\MsDtc
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-09-18 19:39:29 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-09-18 19:39:28 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-09-18 19:39:27 ----D---- C:\WINDOWS\system32\Com
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\stclient.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-09-18 19:39:27 ----A---- C:\WINDOWS\system32\colbact.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-09-18 19:39:26 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\comuid.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-09-18 19:39:25 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-09-18 19:39:20 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-09-18 19:39:19 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-09-18 19:39:11 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2010-09-18 19:39:11 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
======List of files/folders modified in the last 1 months======
2010-09-23 17:55:45 ----A---- C:\WINDOWS\win.ini
2010-09-23 17:55:45 ----A---- C:\WINDOWS\system.ini
2010-09-18 19:45:45 ----ASH---- C:\WINDOWS\fonts\desktop.ini
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-04-17 4707328]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-21 104320]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-07-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-07-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-18 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-23 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-23 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-09-18 182768]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2007-08-24 68464]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
-----------------EOF-----------------
a prosim o radu po aktualizaci se mi zblaznil mbam

Sem Laik není to ostuda jim býti ale nepřiznat si to
- SorryToHereToKillYou
- Návštěvník
- Příspěvky: 88
- Registrován: 24 črc 2010 23:07
- Bydliště: Brno
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu děkuji
Preinstaloval sem mbam a zatim je vse ok ale prosim o kontrolu logu dekuji
Sem Laik není to ostuda jim býti ale nepřiznat si to
Re: Prosím o kontrolu logu děkuji
Dobrý večer, záskok za kolegu
Mbam něco našel?

Mbam něco našel?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
- SorryToHereToKillYou
- Návštěvník
- Příspěvky: 88
- Registrován: 24 črc 2010 23:07
- Bydliště: Brno
- Kontaktovat uživatele:
Re: Prosím o kontrolu logu děkuji
Bohužel nenašel nic ale neda se spustit po vzpusteni skenu se začne vyskakovat okno když stahnu znovu mbam jede ok ale až se nainstaluje tak po 2 souborech vyskoci okno bohužel už moc nevim co vnem stalo už je to celkem dlouho
mbam sem radsi nezapinal musim potom restartovat pc takže ho asi jen odinstaluju

Sem Laik není to ostuda jim býti ale nepřiznat si to
Re: Prosím o kontrolu logu děkuji
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data

Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
-
- Návštěvník
- Příspěvky: 13
- Registrován: 06 dub 2010 10:31
Re: Prosím o kontrolu logu děkuji
Já bych se možná ještě tazatele zeptal, jestli používá originální Windows XP a nebo nějaké stáhnuté. Pokud totiž používá nějaké stáhnuté z internetu, je zde velmi vysoké riziko, že si v sobě Windows nesou infiltraci už v instalačním CD a celý systém je pak mnohem náchylnější k infikaci malwarem.
V závislosti na možnostech bych tazateli doporučil stáhnout a nainstalovat zkušební verzi Windows 7 na úplně zformátovaný pevný disk ( pokud má v PC i více pevných disků, doporučuji je během instalace systému a ochranných programů odpojit a mít připojený pouze ten, který se bude formátovat a budou na něj instalovány W 7 ) a zkusit chování PC potom, případně ještě použít vestavěné diagnostické nástroje Windows 7 na zjištění chyb hardwarového původu (testy RAM, sledování stability...).
V závislosti na možnostech bych tazateli doporučil stáhnout a nainstalovat zkušební verzi Windows 7 na úplně zformátovaný pevný disk ( pokud má v PC i více pevných disků, doporučuji je během instalace systému a ochranných programů odpojit a mít připojený pouze ten, který se bude formátovat a budou na něj instalovány W 7 ) a zkusit chování PC potom, případně ještě použít vestavěné diagnostické nástroje Windows 7 na zjištění chyb hardwarového původu (testy RAM, sledování stability...).