Pomalé nabíhání PC

Zpráva

RichardB · #1 Příspěvek od **RichardB** » 28 pro 2009 22:51

Prosím o kontrolu - PC po zadání hesla dlouho nabíhá, dlouho trvá, než se objeví ikony na ploše. Ve správci úloh se mi jeví "aktivní" procesy: nSvcIp.exe a GoogleCrashHandler.exe, ovšem podle informací z netu jsou zřejmě neškodné.

Logfile of random's system information tool 1.06 (written by random/random)
Run by qqqq at 2009-12-28 22:36:38
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 9 GB (27%) free of 32 GB
Total RAM: 1535 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:36:42, on 28.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Google\Update\1.2.183.13\GoogleCrashHandler.exe
C:\WINDOWS\system32\svchost.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\SmartClock\SmartClock.exe
C:\Program Files\Palm\Hotsync.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe
C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Plocha\Stáhnuto\RSIT.exe
C:\Program Files\trend micro\Richard Buček.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [gemstrmw] C:\WINDOWS\system32\gemstrmw.exe /r
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [HotSync] "C:\Program Files\PalmSource\Desktop\HotSync.exe" -AllUsers
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [SmartClock] C:\Program Files\SmartClock\SmartClock.exe /boot
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [Software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: xxx.lnk = C:\Moje\xxx.ahk
O4 - Global Startup: HotSync Manager.lnk = C:\Program Files\Palm\Hotsync.exe
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra 'Tools' menuitem: Nastavení aplikace &Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} (ICASign Class) - https://ib24.csob.cz/Comp/IcaSignerCZ.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: EXSJVYBHZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Desktop Manager 5.9.906.4286 (GoogleDesktopManager-060409-093314) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LNQVJZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 9020 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-73586283-839522115-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1993962763-73586283-839522115-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-08-10 1218560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53}]
Google Gears Helper - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.33.0\gears.dll [2009-10-16 2101248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2009-08-10 1218560]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-06-18 67584]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-06-28 344064]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2005-06-29 32768]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-12 30192]
"gemstrmw"=C:\WINDOWS\system32\gemstrmw.exe [2003-08-29 24576]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-02-15 981384]
"CloneCDTray"=C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-29 57344]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"HotSync"=C:\Program Files\PalmSource\Desktop\HotSync.exe -AllUsers []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-12-03 429392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"=C:\Program Files\SmartClock\SmartClock.exe [2003-04-26 880128]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-08-17 3055616]
"Software Informer"=C:\Program Files\Software Informer\softinfo.exe [2009-11-25 2011205]
"fsm"= []
"Google Update"=C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-12-15 135664]

C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění
HotSync Manager.lnk - C:\Program Files\Palm\Hotsync.exe

xxx.lnk - C:\Moje\xxx.ahk

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-06-29 46080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Disabled:Crawler Spyware Terminator"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{43e226d4-aff7-11de-a691-0013d46559af}]
shell\AutoRun\command - G:\preinst.exe

======List of files/folders created in the last 1 months======

2009-12-19 21:50:34 ----A---- C:\podpis.txt
2009-12-19 21:49:53 ----D---- C:\Nová složka
2009-12-15 13:05:05 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\TeamViewer
2009-12-15 13:04:57 ----D---- C:\Program Files\TeamViewer
2009-12-11 16:45:36 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Software Informer
2009-12-11 16:45:35 ----D---- C:\Program Files\Software Informer
2009-12-10 09:20:01 ----D---- C:\Program Files\MSXML 4.0
2009-12-09 18:57:57 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Arcsoft
2009-12-09 18:55:03 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\HotSync
2009-12-09 18:55:01 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\HotSync
2009-12-09 11:31:20 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 11:31:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 11:31:01 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-09 11:30:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 11:30:42 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 11:30:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-02 16:56:06 ----A---- C:\WINDOWS\movexe.exe
2009-12-02 16:56:03 ----D---- C:\Program Files\SokoMind

======List of files/folders modified in the last 1 months======

2009-12-28 22:36:43 ----A---- C:\WINDOWS\system32\mappings.txt
2009-12-28 22:36:42 ----D---- C:\WINDOWS\Prefetch
2009-12-28 22:36:40 ----D---- C:\Program Files\trend micro
2009-12-28 22:30:20 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-28 22:12:45 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-28 22:12:42 ----D---- C:\WINDOWS\system32\drivers
2009-12-28 22:07:34 ----D---- C:\WINDOWS\Internet Logs
2009-12-28 21:54:58 ----D---- C:\Program Files\Mozilla Firefox
2009-12-28 21:52:22 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spyware Terminator
2009-12-28 21:52:08 ----AD---- C:\WINDOWS
2009-12-28 21:52:05 ----A---- C:\WINDOWS\hpbafd.ini
2009-12-28 21:51:49 ----SHD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\MPK
2009-12-28 21:51:10 ----D---- C:\WINDOWS\Temp
2009-12-28 18:48:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-12-28 10:53:17 ----D---- C:\Program Files\Mozilla Thunderbird
2009-12-27 15:14:02 ----D---- C:\WINDOWS\system32
2009-12-24 21:53:45 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-23 14:01:48 ----D---- C:\Program Files\Palm
2009-12-23 12:41:34 ----A---- C:\WINDOWS\win.ini
2009-12-16 14:50:28 ----SHD---- C:\WINDOWS\Installer
2009-12-16 14:50:21 ----D---- C:\Program Files\Google
2009-12-16 14:50:09 ----SD---- C:\WINDOWS\Tasks
2009-12-16 14:17:09 ----SHD---- C:\System Volume Information
2009-12-16 13:56:38 ----HD---- C:\WINDOWS\inf
2009-12-16 13:56:38 ----D---- C:\WINDOWS\system32\ShellExt
2009-12-15 15:30:28 ----D---- C:\Documents and Settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla
2009-12-15 13:04:57 ----RD---- C:\Program Files
2009-12-10 09:20:09 ----D---- C:\WINDOWS\WinSxS
2009-12-09 13:21:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 11:31:22 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-09 11:31:16 ----A---- C:\WINDOWS\imsins.BAK
2009-12-09 11:30:48 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-01 21:06:19 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-02-15 353672]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-06-21 626204]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-06-29 1241088]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-07-28 33024]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-07-28 12928]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 AVMUNET;AVM FRITZ!Box; C:\WINDOWS\system32\DRIVERS\avmunet.sys [2005-02-22 15104]
S3 catchme;catchme; \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\catchme.sys []
S3 GTwinUSB;GTwinUSB; C:\WINDOWS\System32\Drivers\GTwinUSB.sys [2002-10-04 61776]
S3 PalmUSBD;PalmUSBD; C:\WINDOWS\system32\drivers\PalmUSBD.sys [2007-12-04 16640]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-06-29 376832]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 ForcewareWebInterface;Forceware Web Interface; C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2004-08-18 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 nSvcIp;ForceWare IP service; C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe [2004-08-19 110658]
R2 nSvcLog;ForceWare user log service; C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe [2004-08-19 53318]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-08-17 487424]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-02-15 2402184]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2005-06-28 516096]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-16 135664]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S3 EXSJVYBHZ;EXSJVYBHZ; C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe [2009-08-28 469888]
S3 GoogleDesktopManager-060409-093314;Google Desktop Manager 5.9.906.4286; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-07-12 30192]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 LNQVJZ;LNQVJZ; C:\DOCUME~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe [2009-08-28 461696]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

meteorolog · #2 Příspěvek od **meteorolog** » 29 pro 2009 07:15

Dobrý den

odinstalujte NVIDIA NetworkAccessManager a pošlete ještě log z Combofix:

Stáhneme na plochu, ukončíme všechna aktivní okna a spustíme ComboFix - http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Po spuštění potvrdíme podmínky užití
- Dále postupujeme dle pokynů, během aplikování ComboFixu neklikejte do zobrazujících se oken
- Po dokončení skenování, trvajícího maximálně 10 minut, by měl program vytvořit log - C:\ComboFix.txt
- ComboFix je třeba spustit pod účtem s právy administrátora

RichardB · #3 Příspěvek od **RichardB** » 30 pro 2009 15:45

ComboFix 09-12-29.05 - Richard Buček 30.12.2009 15:29:20.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.1044 [GMT 1:00]
Spuštěný z: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\Stáhnuto\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 091230-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\LOG.TXT
c:\windows\system32\ieuinit.inf

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-11-28 do 2009-12-30 )))))))))))))))))))))))))))))))
.

2009-12-28 23:40 . 2009-12-28 23:40 -------- d-----w- C:\vypinac
2009-12-28 23:18 . 2009-12-28 23:18 392320 ----a-w- c:\windows\system32\drivers\timntr.sys
2009-12-28 23:18 . 2009-12-28 23:18 32768 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2009-12-28 23:18 . 2009-12-28 23:18 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Common Files\Acronis
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Acronis
2009-12-24 17:45 . 2009-12-24 17:45 -------- d-s---w- c:\documents and settings\Admin\UserData
2009-12-19 20:49 . 2009-12-19 20:49 -------- d-----w- C:\Nová složka
2009-12-17 10:12 . 2009-12-27 14:14 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-15 12:04 . 2009-12-15 12:04 -------- d-----w- c:\program files\TeamViewer
2009-12-11 15:45 . 2009-12-11 15:45 -------- d-----w- c:\program files\Software Informer
2009-12-10 08:20 . 2009-12-10 08:20 -------- d-----w- c:\program files\MSXML 4.0
2009-12-09 18:08 . 2007-12-04 16:10 16640 ----a-r- c:\windows\system32\drivers\PalmUSBD.sys
2009-12-02 15:56 . 2009-12-02 15:56 6688 ----a-w- c:\windows\movexe.exe
2009-12-02 15:56 . 2009-12-02 16:05 -------- d-----w- c:\program files\SokoMind

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-30 12:08 . 2009-07-10 21:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-30 10:19 . 2009-07-10 22:23 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-28 21:36 . 2009-07-22 02:54 -------- d-----w- c:\program files\trend micro
2009-12-28 21:12 . 2009-07-21 19:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-28 09:17 . 2009-09-06 09:31 10220292 ----a-w- c:\windows\Internet Logs\tvDebug.Zip
2009-12-23 13:01 . 2009-08-29 10:36 -------- d-----w- c:\program files\Palm
2009-12-16 13:50 . 2009-07-12 08:59 -------- d-----w- c:\program files\Google
2009-12-09 12:21 . 2004-08-18 10:00 61958 ----a-w- c:\windows\system32\perfc005.dat
2009-12-09 12:21 . 2004-08-18 10:00 379294 ----a-w- c:\windows\system32\perfh005.dat
2009-12-03 15:14 . 2009-07-22 02:50 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-07-22 02:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-26 19:05 . 2009-11-26 19:05 -------- d-----w- c:\program files\QuickTime
2009-11-24 23:54 . 2009-07-10 21:28 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2009-07-10 21:28 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:50 . 2009-07-10 21:28 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-11-24 23:50 . 2009-07-10 21:28 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2009-07-10 21:28 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2009-07-10 21:28 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2009-07-10 21:28 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2009-07-10 21:28 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2009-07-10 21:28 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-20 01:45 . 2009-11-20 08:34 1674240 ----a-w- c:\windows\Internet Logs\xDB3.tmp
2009-11-17 14:29 . 2009-11-17 14:15 -------- d-----w- c:\program files\Room Arranger
2009-11-17 14:21 . 2009-11-17 14:21 -------- d-----w- c:\program files\Nábytek 1.1 Demo
2009-11-17 14:18 . 2009-11-17 14:18 -------- d-----w- c:\program files\Common Files\ParallelGraphics
2009-11-09 10:42 . 2009-11-09 10:41 1024 ----a-w- c:\windows\system32\WTCY9853.dat
2009-11-04 07:30 . 2009-07-13 08:15 -------- d-----w- c:\program files\Java
2009-10-29 05:26 . 2006-03-04 03:35 668160 ----a-w- c:\windows\system32\wininet.dll
2009-10-21 05:40 . 2004-08-18 10:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-18 10:00 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-18 10:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 21:28 . 2008-02-22 09:21 437920 ----a-w- c:\windows\system32\ICASigner.dll
2009-10-13 10:34 . 2004-08-18 10:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:40 . 2004-08-18 10:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:40 . 2004-08-18 10:00 150016 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2009-07-13 20:54 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-02 17:27 . 2009-10-02 17:27 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2009-07-12 08:59 . 2009-07-12 08:59 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-08-17_21.33.12 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-28 22:42 . 2009-06-28 22:42 91656 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.1.0_x-ww_2a41bceb\msxml4r.dll
+ 2009-12-09 17:55 . 2009-12-09 17:55 82432 c:\windows\WinSxS\x86_Microsoft.MSXML2R_6bd6b9abf345378f_4.1.0.0_x-ww_29c3ad6a\msxml4r.dll
+ 2009-12-30 09:27 . 2009-12-30 09:27 16384 c:\windows\Temp\Perflib_Perfdata_708.dat
+ 2009-12-30 09:27 . 2009-12-30 09:27 16384 c:\windows\Temp\Perflib_Perfdata_200.dat
+ 2009-08-20 05:05 . 2009-02-15 22:10 97672 c:\windows\system32\ZoneLabs\zlquarantine.dll
+ 2009-08-20 05:05 . 2008-11-17 00:24 51688 c:\windows\system32\ZoneLabs\srescan.sys
+ 2009-08-20 05:05 . 2009-02-15 22:10 94088 c:\windows\system32\ZoneLabs\lib\zvpn.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 20360 c:\windows\system32\ZoneLabs\lib\zsys.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 59272 c:\windows\system32\ZoneLabs\lib\zpdp.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 14216 c:\windows\system32\ZoneLabs\lib\zmenu.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 24968 c:\windows\system32\ZoneLabs\lib\zic.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 84872 c:\windows\system32\ZoneLabs\lib\ZAlert.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 34696 c:\windows\system32\ZoneLabs\lib\UpdateUI.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 17800 c:\windows\system32\ZoneLabs\lib\oem_1466.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 10120 c:\windows\system32\ZoneLabs\lib\oem_1454.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 10632 c:\windows\system32\ZoneLabs\lib\oem_1445.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 13704 c:\windows\system32\ZoneLabs\lib\oem_1440.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 11656 c:\windows\system32\ZoneLabs\lib\oem_1413.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 11144 c:\windows\system32\ZoneLabs\lib\oem_1010.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 29576 c:\windows\system32\ZoneLabs\lib\NavBar.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 12168 c:\windows\system32\ZoneLabs\lib\MainLoop.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 35720 c:\windows\system32\ZoneLabs\lib\Alert.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 38280 c:\windows\system32\ZoneLabs\featuremap.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 98184 c:\windows\system32\ZoneLabs\fbl.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 74632 c:\windows\system32\ZoneLabs\camupd.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 69000 c:\windows\system32\zlcomm.dll
+ 2008-10-16 12:09 . 2009-08-06 17:24 44768 c:\windows\system32\wups2.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 35552 c:\windows\system32\wups.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 55808 c:\windows\system32\WudfSvc.dll
+ 2006-09-28 18:13 . 2006-09-28 18:13 95344 c:\windows\system32\WUDFCoinstaller.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 53472 c:\windows\system32\wuauclt.exe
+ 2006-11-02 09:51 . 2006-11-02 09:51 39936 c:\windows\system32\wpdshextres.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 17408 c:\windows\system32\wpdshextautoplay.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 63488 c:\windows\system32\wpdmtpus.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 35840 c:\windows\system32\wpdconns.dll
+ 2004-08-18 10:00 . 2007-01-05 18:57 99840 c:\windows\system32\wmpshell.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 37376 c:\windows\system32\wmdmps.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 33792 c:\windows\system32\wmdmlog.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 54272 c:\windows\system32\wdigest.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 35208 c:\windows\system32\vswmi.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 58248 c:\windows\system32\vsregexp.dll
+ 2008-01-03 17:19 . 2008-01-03 17:19 53248 c:\windows\system32\USBPort.dll
+ 2009-07-11 08:33 . 2009-10-28 15:07 46080 c:\windows\system32\tzchange.exe
- 2009-07-10 17:45 . 2008-07-08 12:59 18296 c:\windows\system32\spmsg.dll
+ 2009-09-03 19:05 . 2009-05-26 11:40 18296 c:\windows\system32\spmsg.dll
+ 2009-10-21 08:36 . 2009-08-06 17:24 44768 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.4.7600.226\wups2.dll
+ 2009-10-21 08:36 . 2009-08-06 17:24 35552 c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.4.7600.226\wups.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 56832 c:\windows\system32\secur32.dll
- 2004-08-18 10:00 . 2009-02-03 19:58 56832 c:\windows\system32\secur32.dll
+ 2007-02-16 17:50 . 2007-02-16 17:50 14368 c:\windows\system32\relog_ap.dll
+ 2009-09-11 18:05 . 2001-06-26 05:15 38912 c:\windows\system32\picn20.dll
- 2004-08-18 10:00 . 2009-07-11 22:52 52764 c:\windows\system32\perfc009.dat
+ 2004-08-18 10:00 . 2009-12-09 12:21 52764 c:\windows\system32\perfc009.dat
+ 2007-12-04 16:53 . 2007-12-04 16:53 53248 c:\windows\system32\PalmDevC.dll
+ 2002-06-17 08:54 . 2002-06-17 08:54 40960 c:\windows\system32\mweclass.dll
+ 2003-04-18 15:29 . 2003-04-18 15:29 82432 c:\windows\system32\msxml4r.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 27136 c:\windows\system32\mspmsnsv.dll
+ 2004-08-18 10:00 . 2009-09-04 21:05 58880 c:\windows\system32\msasn1.dll
+ 2009-07-12 09:16 . 2009-12-17 13:57 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
- 2009-07-12 09:16 . 2009-07-12 09:16 84661 c:\windows\system32\Macromed\Flash\uninstall_plugin.exe
+ 2004-08-18 10:00 . 2006-10-18 19:47 11264 c:\windows\system32\LAPRXY.dll
+ 2009-10-02 17:27 . 2009-10-02 17:27 11973 c:\windows\system32\Lang\Thai.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13267 c:\windows\system32\Lang\SWEDISH.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15093 c:\windows\system32\Lang\Spanish.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15176 c:\windows\system32\Lang\Russian.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14329 c:\windows\system32\Lang\Portuguese.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11682 c:\windows\system32\Lang\Korean.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13055 c:\windows\system32\Lang\Japanese.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15410 c:\windows\system32\Lang\Italian.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14413 c:\windows\system32\Lang\German.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 15434 c:\windows\system32\Lang\French.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11743 c:\windows\system32\Lang\English.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 14173 c:\windows\system32\Lang\Dutch.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 13536 c:\windows\system32\Lang\Danish.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 11548 c:\windows\system32\Lang\Arabic.bin
- 2004-08-18 10:00 . 2009-06-26 16:51 81920 c:\windows\system32\ieencode.dll
+ 2004-08-18 10:00 . 2009-09-25 05:37 81920 c:\windows\system32\ieencode.dll
+ 2009-02-17 13:33 . 2009-02-17 13:33 89256 c:\windows\system32\ElbyCDIO.dll
+ 2009-08-30 10:29 . 2007-03-08 14:18 18432 c:\windows\system32\DRVSTORE\grmnusb_09F3E629557EBE4D2BA1A9469BDAE635AC0807AE\I386\grmngen.sys
+ 2006-09-28 17:00 . 2006-09-28 17:00 82944 c:\windows\system32\drivers\WudfRd.sys
+ 2006-09-28 16:55 . 2006-09-28 16:55 77568 c:\windows\system32\drivers\WudfPf.sys
+ 2006-10-18 18:00 . 2006-10-18 18:00 38528 c:\windows\system32\drivers\wpdusb.sys
+ 2004-08-18 10:00 . 2009-06-24 11:18 92928 c:\windows\system32\drivers\ksecdd.sys
+ 2009-02-17 17:11 . 2009-02-17 17:11 24232 c:\windows\system32\drivers\ElbyCDIO.sys
+ 2007-02-16 00:57 . 2007-02-16 00:57 34760 c:\windows\system32\drivers\ElbyCDFL.sys
+ 2005-02-22 13:33 . 2005-02-22 13:33 15104 c:\windows\system32\drivers\avmunet.sys
+ 2009-07-10 17:43 . 2009-08-06 17:24 35552 c:\windows\system32\dllcache\wups.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 53472 c:\windows\system32\dllcache\wuauclt.exe
+ 2004-08-18 10:00 . 2007-01-05 18:57 99840 c:\windows\system32\dllcache\wmpshell.dll
+ 2009-07-10 17:03 . 2007-01-05 18:56 64000 c:\windows\system32\dllcache\wmplayer.exe
+ 2009-07-10 17:03 . 2007-01-05 18:56 96256 c:\windows\system32\dllcache\wmpband.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 37376 c:\windows\system32\dllcache\wmdmps.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 33792 c:\windows\system32\dllcache\wmdmlog.dll
+ 2009-10-05 14:20 . 2009-06-25 08:27 54272 c:\windows\system32\dllcache\wdigest.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 75776 c:\windows\system32\dllcache\strmfilt.dll
+ 2009-02-03 19:58 . 2009-06-25 08:27 56832 c:\windows\system32\dllcache\secur32.dll
- 2009-02-03 19:58 . 2009-02-03 19:58 56832 c:\windows\system32\dllcache\secur32.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 79872 c:\windows\system32\dllcache\raschap.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 27136 c:\windows\system32\dllcache\mspmsnsv.dll
+ 2009-09-04 21:05 . 2009-09-04 21:05 58880 c:\windows\system32\dllcache\msasn1.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 11264 c:\windows\system32\dllcache\LAPRXY.dll
+ 2009-10-05 14:20 . 2009-06-24 11:18 92928 c:\windows\system32\dllcache\ksecdd.sys
- 2009-04-29 04:35 . 2009-06-26 16:51 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-04-29 04:35 . 2009-09-25 05:37 81920 c:\windows\system32\dllcache\ieencode.dll
+ 2009-10-21 05:40 . 2009-10-21 05:40 25088 c:\windows\system32\dllcache\httpapi.dll
+ 2004-08-18 10:00 . 2009-08-06 17:24 96480 c:\windows\system32\dllcache\cdm.dll
+ 2009-08-17 21:22 . 2008-10-16 12:09 51224 c:\windows\system32\dllcache\cache\wuauclt.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 13824 c:\windows\system32\dllcache\cache\wscntfy.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 82432 c:\windows\system32\dllcache\cache\ws2_32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 26112 c:\windows\system32\dllcache\cache\userinit.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 14336 c:\windows\system32\dllcache\cache\svchost.exe
+ 2009-08-17 21:22 . 2008-04-14 06:52 57856 c:\windows\system32\dllcache\cache\spoolsv.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 88576 c:\windows\system32\dllcache\cache\rasauto.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 17408 c:\windows\system32\dllcache\cache\powrprof.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 33792 c:\windows\system32\dllcache\cache\msgsvc.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 13312 c:\windows\system32\dllcache\cache\lsass.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 22016 c:\windows\system32\dllcache\cache\lpk.dll
+ 2009-08-17 21:22 . 2008-04-14 05:59 24576 c:\windows\system32\dllcache\cache\kbdclass.sys
+ 2009-08-17 21:22 . 2008-04-13 22:23 36608 c:\windows\system32\dllcache\cache\ip6fw.sys
+ 2009-08-17 21:22 . 2008-04-14 06:52 15360 c:\windows\system32\dllcache\cache\ctfmon.exe
+ 2009-08-17 21:22 . 2008-04-13 22:27 14336 c:\windows\system32\dllcache\cache\asyncmac.sys
+ 2009-08-17 21:22 . 2004-08-18 10:00 11776 c:\windows\system32\dllcache\cache\acpiec.sys
+ 2004-08-18 10:00 . 2009-08-06 17:24 96480 c:\windows\system32\cdm.dll
+ 2004-04-17 14:05 . 2004-04-17 14:05 36864 c:\windows\system32\ametrans.dll
+ 2007-02-14 18:14 . 2007-02-14 18:14 17440 c:\windows\system32\acrotls.dll
+ 2009-06-24 17:56 . 2009-06-24 17:56 73728 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe
- 2007-04-13 18:58 . 2007-04-13 18:58 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2008-05-27 23:30 . 2008-05-27 23:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
+ 2009-12-16 13:50 . 2009-12-16 13:50 47104 c:\windows\Installer\67e8d0.msi
+ 2009-12-16 13:50 . 2009-12-16 13:50 22528 c:\windows\Installer\67e8c9.msi
+ 2009-08-29 12:55 . 2009-08-29 12:55 62464 c:\windows\Installer\17e5692.msi
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut6_45BA714564B04B5DBDC240E20FCDC6DC.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut2_CEE9A021A79C462F7256725618452FF1.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 77824 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut2.041BC1C4_61CF_4566_B322_09A7A1F3FCD3.exe
+ 2009-12-09 17:56 . 2009-12-09 17:56 40960 c:\windows\Installer\{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}\NewShortcut1_45BA714564B04B5DBDC240E20FCDC6DC.exe
+ 2009-12-10 08:20 . 2009-12-10 08:20 32768 c:\windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}\icon.exe
+ 2009-11-17 14:18 . 2009-11-17 14:18 86358 c:\windows\Installer\{C06CE867-0019-4BDD-88C3-CD96F79FCDC7}\controlPanelIcon.exe
+ 2009-12-10 08:20 . 2009-12-10 08:20 32768 c:\windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}\icon.exe
+ 2009-10-14 05:30 . 2009-10-14 05:30 27136 c:\windows\Installer\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}\AppleSoftwareUpdateIco.exe
+ 2009-08-29 11:17 . 2002-12-06 07:10 24576 c:\windows\DvzCommon\DvzMsgr.exe
+ 2009-08-29 11:17 . 2002-12-06 07:10 40960 c:\windows\DvzCommon\DvzMsgr.dll
+ 2009-08-29 11:17 . 2002-12-06 07:10 94208 c:\windows\DvzCommon\DsMgr.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_880dc467\System.Drawing.Design.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_c3bdecb1\CustomMarshalers.dll
+ 2009-09-03 19:01 . 2006-09-28 17:01 58368 c:\windows\$NtUninstallWudf01000$\spuninst\WudfCustom.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 73728 c:\windows\$NtUninstallwmp11$\wmplayer.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 98304 c:\windows\$NtUninstallwmp11$\wmpband.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 23552 c:\windows\$NtUninstallWMFDist11$\wmdmps.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 27136 c:\windows\$NtUninstallWMFDist11$\wmdmlog.dll
+ 2009-09-03 19:02 . 2006-11-02 09:46 13312 c:\windows\$NtUninstallWMFDist11$\spuninst\wpdinstallutil.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 52224 c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
+ 2009-11-25 06:30 . 2009-07-14 11:03 46080 c:\windows\$NtUninstallKB976098-v2$\tzchange.exe
+ 2009-11-25 06:30 . 2009-10-29 02:05 16896 c:\windows\$NtUninstallKB976098-v2$\spuninst\tzchange.dll
+ 2009-10-17 05:15 . 2008-04-14 06:51 57344 c:\windows\$NtUninstallKB974571$\msasn1.dll
+ 2009-10-17 05:18 . 2009-06-26 16:51 81920 c:\windows\$NtUninstallKB974455$\ieencode.dll
+ 2009-08-26 21:14 . 2008-10-23 10:06 62976 c:\windows\$NtUninstallKB970653-v3$\tzchange.exe
+ 2009-08-26 21:14 . 2009-07-16 04:18 14336 c:\windows\$NtUninstallKB970653-v3$\spuninst\tzchange.dll
+ 2009-10-05 14:37 . 2008-04-14 06:52 49152 c:\windows\$NtUninstallKB968389$\wdigest.dll
+ 2009-10-05 14:37 . 2009-02-03 19:58 56832 c:\windows\$NtUninstallKB968389$\secur32.dll
+ 2009-10-05 14:37 . 2008-04-13 22:01 92288 c:\windows\$NtUninstallKB968389$\ksecdd.sys
+ 2009-11-04 21:56 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB976749\update\spcustom.dll
+ 2009-11-04 21:56 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB976749\spmsg.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB975467\update\spcustom.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB975467\spmsg.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB975025\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB975025\spmsg.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974571\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974571\spmsg.dll
+ 2009-09-04 21:01 . 2009-09-04 21:01 58880 c:\windows\$hf_mig$\KB974571\SP3QFE\msasn1.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974455\update\spcustom.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974455\spmsg.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 81920 c:\windows\$hf_mig$\KB974455\SP3QFE\ieencode.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB974112\update\spcustom.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB974112\spmsg.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB973687\update\spcustom.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB973687\spmsg.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB973525\update\spcustom.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB973525\spmsg.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971961\update\spcustom.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971961\spmsg.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 26488 c:\windows\$hf_mig$\KB971486\update\spcustom.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 18296 c:\windows\$hf_mig$\KB971486\spmsg.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969947\update\spcustom.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969947\spmsg.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB969059\update\spcustom.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB969059\spmsg.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB968389\update\spcustom.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB968389\spmsg.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 54272 c:\windows\$hf_mig$\KB968389\SP3QFE\wdigest.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 56832 c:\windows\$hf_mig$\KB968389\SP3QFE\secur32.dll
+ 2009-10-05 14:20 . 2009-06-24 10:28 92928 c:\windows\$hf_mig$\KB968389\SP3QFE\ksecdd.sys
+ 2009-09-10 04:00 . 2008-07-08 12:59 26488 c:\windows\$hf_mig$\KB956844\update\spcustom.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 18296 c:\windows\$hf_mig$\KB956844\spmsg.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 9608 c:\windows\system32\ZoneLabs\lib\oem_1460.zip.dll
- 2009-07-10 22:11 . 2009-07-10 22:11 4212 c:\windows\system32\zllictbl.dat
+ 2009-07-10 22:11 . 2009-08-20 05:05 4212 c:\windows\system32\zllictbl.dat
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmvdmod.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVE.DLL
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\WMVADVD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\wmsdmod.dll
+ 2006-10-18 19:58 . 2006-10-18 19:58 8704 c:\windows\system32\wdfmgr.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 4096 c:\windows\system32\wdfapi.dll
+ 2006-10-18 19:58 . 2006-10-18 19:58 8704 c:\windows\system32\uwdf.exe
+ 2009-08-27 18:55 . 2001-10-24 10:25 5632 c:\windows\system32\ptpusb.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MPG4DMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP4SDMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\MP43DMOD.dll
+ 2009-10-02 17:27 . 2009-10-02 17:27 9909 c:\windows\system32\Lang\TradChin.bin
+ 2009-10-02 17:27 . 2009-10-02 17:27 9695 c:\windows\system32\Lang\SimChin.bin
+ 2009-08-30 10:29 . 2007-03-08 14:18 8320 c:\windows\system32\DRVSTORE\grmnusb_09F3E629557EBE4D2BA1A9469BDAE635AC0807AE\I386\grmnusb.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmvdmod.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmoe2.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\wmsdmod.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MPG4DMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP4SDMOD.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 4096 c:\windows\system32\dllcache\MP43DMOD.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 5120 c:\windows\system32\dllcache\cache\sfc.dll
+ 2009-08-17 21:22 . 2004-08-18 10:00 2944 c:\windows\system32\dllcache\cache\null.sys
+ 2009-08-17 21:22 . 2004-08-18 10:00 4224 c:\windows\system32\dllcache\cache\beep.sys
+ 2004-08-18 10:00 . 2007-01-05 18:50 6656 c:\windows\system32\dllcache\asferror.dll
+ 2004-08-18 10:00 . 2007-01-05 18:50 6656 c:\windows\system32\asferror.dll
+ 2009-09-03 19:04 . 2008-04-14 05:39 7680 c:\windows\$NtUninstallwmp11$\asferror.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 6656 c:\windows\$NtUninstallWMFDist11$\laprxy.dll
+ 2009-07-12 00:12 . 2009-07-12 00:12 632656 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
+ 2009-07-12 00:09 . 2009-07-12 00:09 554832 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
+ 2009-07-12 00:08 . 2009-07-12 00:08 479232 c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
+ 2009-11-17 14:20 . 1998-02-06 21:37 299520 c:\windows\uninst.exe
+ 2009-08-20 05:05 . 2009-02-15 22:10 108424 c:\windows\system32\ZoneLabs\zlupdate.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 302472 c:\windows\system32\ZoneLabs\zlsre.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 178568 c:\windows\system32\ZoneLabs\zlparser.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 172936 c:\windows\system32\ZoneLabs\vsvault.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 108424 c:\windows\system32\ZoneLabs\vsdb.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 176520 c:\windows\system32\ZoneLabs\updclient.exe
+ 2009-08-20 05:05 . 2007-10-11 14:51 832984 c:\windows\system32\ZoneLabs\updating.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 431496 c:\windows\system32\ZoneLabs\ssleay32.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 134536 c:\windows\system32\ZoneLabs\scheduler.dll
+ 2009-08-20 05:05 . 2008-11-17 00:23 796128 c:\windows\system32\ZoneLabs\qrsrecl.dll
+ 2009-08-20 05:05 . 2008-11-17 00:23 722400 c:\windows\system32\ZoneLabs\qrbase.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 118664 c:\windows\system32\ZoneLabs\lib\zui.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 151944 c:\windows\system32\ZoneLabs\lib\ztv.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 188808 c:\windows\system32\ZoneLabs\lib\Overview.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 344968 c:\windows\system32\ZoneLabs\lib\LicenseUI.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 136584 c:\windows\system32\ZoneLabs\lib\DashBoard.zip.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 344456 c:\windows\system32\ZoneLabs\lib\ConfigWizard.zip.dll
+ 2009-08-20 05:04 . 2009-02-04 16:27 548128 c:\windows\system32\ZoneLabs\icslta.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 159112 c:\windows\system32\ZoneLabs\httpblocker.dll
+ 2009-08-20 05:05 . 2008-03-17 14:52 813568 c:\windows\system32\ZoneLabs\dbghelp.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 103816 c:\windows\system32\zlcommdb.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 209632 c:\windows\system32\wuweb.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 316416 c:\windows\system32\WUDFx.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 165376 c:\windows\system32\WudfPlatform.dll
+ 2006-09-28 16:56 . 2006-09-28 16:56 146432 c:\windows\system32\WudfHost.exe
+ 2009-07-10 17:43 . 2009-08-06 17:24 327896 c:\windows\system32\wucltui.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 575704 c:\windows\system32\wuapi.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 356352 c:\windows\system32\wpdsp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 133632 c:\windows\system32\WPDShServiceObj.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 154624 c:\windows\system32\wpdmtp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 629760 c:\windows\system32\wpd_ci.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 656896 c:\windows\system32\WMVXENCD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 767488 c:\windows\system32\WMVSENCD.dll
+ 2004-08-18 10:00 . 2009-04-01 21:02 604160 c:\windows\system32\wmspdmod.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 204288 c:\windows\system32\wmpsrcwp.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 130048 c:\windows\system32\wmpps.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 613376 c:\windows\system32\wmpmde.dll
+ 2006-10-18 19:47 . 2008-06-24 16:12 295936 c:\windows\system32\wmpeffects.dll
+ 2004-08-18 10:00 . 2009-07-13 21:43 286208 c:\windows\system32\wmpdxm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 242688 c:\windows\system32\wmpasf.dll
+ 2004-08-18 10:00 . 2008-06-18 03:03 938496 c:\windows\system32\WMNetmgr.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 157184 c:\windows\system32\wmidx.dll
+ 2004-08-18 10:00 . 2007-01-05 18:55 238592 c:\windows\system32\wmerror.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 535040 c:\windows\system32\wmdrmsdk.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 348672 c:\windows\system32\wmdrmnet.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 429056 c:\windows\system32\wmdrmdev.dll
+ 2004-08-18 10:00 . 2007-10-25 07:28 222720 c:\windows\system32\wmasf.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 757248 c:\windows\system32\WMADMOD.dll
+ 2004-08-18 10:00 . 2009-08-25 09:19 354816 c:\windows\system32\winhttp.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 109960 c:\windows\system32\vsxml.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 482184 c:\windows\system32\vsutil.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 309128 c:\windows\system32\vspubapi.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 107912 c:\windows\system32\vsmonapi.dll
+ 2009-08-20 05:04 . 2009-02-15 22:10 229256 c:\windows\system32\vsinit.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 353672 c:\windows\system32\vsdatant.sys
+ 2009-08-20 05:04 . 2009-02-15 22:10 110472 c:\windows\system32\vsdata.dll
+ 2006-03-18 11:11 . 2009-10-29 05:26 627200 c:\windows\system32\urlmon.dll
+ 2009-09-11 18:05 . 2004-07-09 06:43 364544 c:\windows\system32\TwnLib4.dll
+ 2009-09-11 18:05 . 2000-06-26 08:45 106496 c:\windows\system32\TwnLib20.dll
- 2004-08-18 10:00 . 2008-10-03 10:04 247326 c:\windows\system32\strmdll.dll
+ 2004-08-18 10:00 . 2009-08-26 08:02 247326 c:\windows\system32\strmdll.dll
+ 2007-02-14 18:01 . 2007-02-14 18:01 206368 c:\windows\system32\snapapi.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 147456 c:\windows\system32\schannel.dll
+ 2001-11-03 13:39 . 2001-11-03 13:39 278528 c:\windows\system32\ShellExt\Cryptext.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 211456 c:\windows\system32\qasf.dll
+ 2009-08-27 18:55 . 2008-04-14 06:51 159232 c:\windows\system32\ptpusd.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 199168 c:\windows\system32\PortableDeviceWMDRM.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 132096 c:\windows\system32\PortableDeviceWiaCompat.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 166912 c:\windows\system32\PortableDeviceTypes.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 101888 c:\windows\system32\PortableDeviceClassExtension.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 284160 c:\windows\system32\PortableDeviceApi.dll
+ 2004-08-18 10:00 . 2009-12-09 12:21 380350 c:\windows\system32\perfh009.dat
- 2004-08-18 10:00 . 2009-07-11 22:52 380350 c:\windows\system32\perfh009.dat
+ 2009-09-11 18:05 . 2001-07-09 08:50 155648 c:\windows\system32\NeroCheck.exe
+ 2003-12-15 11:24 . 2003-12-15 11:24 196608 c:\windows\system32\NCTWMAFile2.dll
+ 2003-12-08 11:19 . 2003-12-08 11:19 335872 c:\windows\system32\NCTAudioVisualization2.dll
+ 2004-03-02 11:14 . 2004-03-02 11:14 425984 c:\windows\system32\NCTAudioTransform2.dll
+ 2004-03-02 11:14 . 2004-03-02 11:14 307200 c:\windows\system32\NCTAudioRecord2.dll
+ 2004-03-02 11:07 . 2004-03-02 11:07 315392 c:\windows\system32\NCTAudioPlayer2.dll
+ 2003-12-08 11:16 . 2003-12-08 11:16 327680 c:\windows\system32\NCTAudioGrabber2.dll
+ 2004-03-02 11:24 . 2004-03-02 11:24 724992 c:\windows\system32\NCTAudioEditor2.dll
+ 2004-11-04 11:31 . 2004-11-04 11:31 835584 c:\windows\system32\NCTAudioCDGrabber2.dll
+ 2002-06-17 09:06 . 2002-06-17 09:06 122880 c:\windows\system32\mwecmdlg.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 321536 c:\windows\system32\mswmdm.dll
+ 2004-08-18 10:00 . 2009-09-11 14:19 136192 c:\windows\system32\msv1_0.dll
+ 2000-07-14 23:00 . 2000-07-14 23:00 118784 c:\windows\system32\Msstdfmt.dll
+ 2004-08-18 10:00 . 2006-12-04 14:21 414720 c:\windows\system32\msscp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 175616 c:\windows\system32\mspmsp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 179712 c:\windows\system32\msnetobj.dll
+ 2006-10-02 13:28 . 2006-10-02 13:28 312128 c:\windows\system32\msdelta.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MPG4DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 317440 c:\windows\system32\MP4SDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 259072 c:\windows\system32\MP43DECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 212992 c:\windows\system32\MFPLAT.dll
+ 2009-10-28 03:40 . 2009-10-28 03:40 257440 c:\windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe
+ 2004-08-18 10:00 . 2009-06-25 08:27 729088 c:\windows\system32\lsasrv.dll
+ 2004-08-18 10:00 . 2008-06-17 23:09 100864 c:\windows\system32\logagent.exe
+ 2003-08-07 13:01 . 2003-08-07 13:01 237568 c:\windows\system32\lame_enc.dll
+ 2004-08-18 10:00 . 2009-06-25 08:27 301568 c:\windows\system32\kerberos.dll
- 2004-08-18 10:00 . 2008-05-09 10:56 512000 c:\windows\system32\jscript.dll
+ 2004-08-18 10:00 . 2009-08-13 15:24 512000 c:\windows\system32\jscript.dll
+ 2009-11-04 07:30 . 2009-10-11 03:17 149280 c:\windows\system32\javaws.exe
+ 2009-11-04 07:30 . 2009-10-11 03:17 145184 c:\windows\system32\javaw.exe
+ 2009-11-04 07:30 . 2009-10-11 03:17 145184 c:\windows\system32\java.exe
+ 2009-09-11 18:05 . 2004-07-20 14:24 471040 c:\windows\system32\ImagXRA7.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 262144 c:\windows\system32\ImagXR7.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 476320 c:\windows\system32\ImagXpr7.dll
+ 2009-07-10 19:36 . 2009-11-11 14:53 164320 c:\windows\system32\FNTCACHE.DAT
+ 2009-08-29 11:17 . 2002-12-06 07:11 151552 c:\windows\system32\DVZAddin.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 991744 c:\windows\system32\drmv2clt.dll
+ 2006-10-18 18:00 . 2006-10-18 18:00 249856 c:\windows\system32\drmupgds.exe
+ 2006-10-18 19:47 . 2006-10-18 19:47 671232 c:\windows\system32\drivers\UMDF\wpdmtpdr.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 209632 c:\windows\system32\dllcache\wuweb.dll
+ 2009-07-10 17:43 . 2009-08-06 17:24 327896 c:\windows\system32\dllcache\wucltui.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 575704 c:\windows\system32\dllcache\wuapi.dll
+ 2004-08-18 10:00 . 2009-04-01 21:02 604160 c:\windows\system32\dllcache\wmspdmod.dll
+ 2004-08-18 10:00 . 2009-07-13 21:43 286208 c:\windows\system32\dllcache\wmpdxm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 242688 c:\windows\system32\dllcache\wmpasf.dll
+ 2004-08-18 10:00 . 2008-06-18 03:03 938496 c:\windows\system32\dllcache\WMNetmgr.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 157184 c:\windows\system32\dllcache\wmidx.dll
+ 2004-08-18 10:00 . 2007-01-05 18:55 238592 c:\windows\system32\dllcache\wmerror.dll
+ 2004-08-18 10:00 . 2007-10-25 07:28 222720 c:\windows\system32\dllcache\wmasf.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 757248 c:\windows\system32\dllcache\WMADMOD.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 668160 c:\windows\system32\dllcache\wininet.dll
+ 2008-12-16 12:32 . 2009-08-25 09:19 354816 c:\windows\system32\dllcache\winhttp.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 627200 c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-18 10:00 . 2007-06-27 13:31 317952 c:\windows\system32\dllcache\unregmp2.exe
+ 2009-09-09 03:47 . 2009-06-21 21:48 153088 c:\windows\system32\dllcache\triedit.dll
- 2004-08-18 10:00 . 2008-10-03 10:04 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2004-08-18 10:00 . 2009-08-26 08:02 247326 c:\windows\system32\dllcache\strmdll.dll
+ 2008-12-05 06:57 . 2009-06-25 08:27 147456 c:\windows\system32\dllcache\schannel.dll
+ 2009-10-12 13:40 . 2009-10-12 13:40 150016 c:\windows\system32\dllcache\rastls.dll
+ 2009-10-13 10:34 . 2009-10-13 10:34 271360 c:\windows\system32\dllcache\oakley.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 321536 c:\windows\system32\dllcache\mswmdm.dll
+ 2009-10-05 14:20 . 2009-09-11 14:19 136192 c:\windows\system32\dllcache\msv1_0.dll
+ 2004-08-18 10:00 . 2006-12-04 14:21 414720 c:\windows\system32\dllcache\msscp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 175616 c:\windows\system32\dllcache\mspmsp.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 179712 c:\windows\system32\dllcache\msnetobj.dll
+ 2009-07-10 17:03 . 2007-01-05 18:51 244224 c:\windows\system32\dllcache\mpvis.dll
+ 2009-07-10 22:16 . 2009-06-25 08:27 729088 c:\windows\system32\dllcache\lsasrv.dll
+ 2004-08-18 10:00 . 2008-06-17 23:09 100864 c:\windows\system32\dllcache\logagent.exe
+ 2009-10-05 14:20 . 2009-06-25 08:27 301568 c:\windows\system32\dllcache\kerberos.dll
+ 2008-05-09 10:56 . 2009-08-13 15:24 512000 c:\windows\system32\dllcache\jscript.dll
- 2008-05-09 10:56 . 2008-05-09 10:56 512000 c:\windows\system32\dllcache\jscript.dll
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\system32\dllcache\http.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 991744 c:\windows\system32\dllcache\drmv2clt.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 229376 c:\windows\system32\dllcache\cewmdm.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 507904 c:\windows\system32\dllcache\cache\winlogon.exe
+ 2009-08-17 21:22 . 2009-06-26 16:51 667648 c:\windows\system32\dllcache\cache\wininet.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 578560 c:\windows\system32\dllcache\cache\user32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 295936 c:\windows\system32\dllcache\cache\termsrv.dll
+ 2009-08-17 21:22 . 2008-06-20 11:51 361600 c:\windows\system32\dllcache\cache\tcpip.sys
+ 2009-08-17 21:22 . 2008-04-14 06:52 171008 c:\windows\system32\dllcache\cache\srsvc.dll
+ 2009-08-17 21:22 . 2009-02-09 11:25 111104 c:\windows\system32\dllcache\cache\services.exe
+ 2009-08-17 21:22 . 2008-04-14 06:51 185856 c:\windows\system32\dllcache\cache\scecli.dll
+ 2009-08-17 21:22 . 2009-02-09 10:56 401408 c:\windows\system32\dllcache\cache\rpcss.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 409088 c:\windows\system32\dllcache\cache\qmgr.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 435712 c:\windows\system32\dllcache\cache\ntmssvc.dll
+ 2009-08-17 21:22 . 2008-04-13 22:45 574976 c:\windows\system32\dllcache\cache\ntfs.sys
+ 2009-08-17 21:22 . 2008-04-14 06:51 407040 c:\windows\system32\dllcache\cache\netlogon.dll
+ 2009-08-17 21:22 . 2008-04-13 22:50 182656 c:\windows\system32\dllcache\cache\ndis.sys
+ 2009-08-17 21:22 . 2008-04-14 06:51 927504 c:\windows\system32\dllcache\cache\mfc40u.dll
+ 2009-08-17 21:22 . 2009-03-21 14:09 988160 c:\windows\system32\dllcache\cache\kernel32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 110080 c:\windows\system32\dllcache\cache\imm32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 806912 c:\windows\system32\dllcache\cache\comres.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 617472 c:\windows\system32\dllcache\cache\comctl32.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 171008 c:\windows\system32\dllcache\cache\appmgmts.dll
+ 2009-08-17 21:22 . 2008-04-13 20:09 142592 c:\windows\system32\dllcache\cache\aec.sys
+ 2004-08-18 10:00 . 2006-10-18 19:47 542720 c:\windows\system32\dllcache\blackbox.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 229376 c:\windows\system32\cewmdm.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 542720 c:\windows\system32\blackbox.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 276992 c:\windows\system32\audiodev.dll
+ 2002-08-27 09:11 . 2002-08-27 09:11 212480 c:\windows\Pcdlib32.dll
- 2007-04-13 18:58 . 2007-04-13 18:58 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:49 . 2008-05-27 22:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
- 2007-04-13 18:56 . 2007-04-13 18:56 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll
+ 2008-05-27 23:30 . 2008-05-27 23:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
- 2007-04-13 19:30 . 2007-04-13 19:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll

RichardB · #4 Příspěvek od **RichardB** » 30 pro 2009 15:46

+ 2009-11-17 14:18 . 2009-11-17 14:18 642048 c:\windows\Installer\4a2b2df.msi
+ 2009-12-10 08:20 . 2009-12-10 08:20 432640 c:\windows\Installer\4567a4.msi
+ 2009-12-10 08:20 . 2009-12-10 08:20 429568 c:\windows\Installer\45679b.msi
+ 2009-11-26 19:05 . 2009-11-26 19:05 796672 c:\windows\Installer\26654a0.msi
+ 2009-08-29 12:54 . 2009-08-29 12:54 717312 c:\windows\Installer\17e5689.msi
+ 2009-08-29 12:52 . 2009-08-29 12:52 676352 c:\windows\Installer\17e567f.msi
+ 2009-08-30 10:29 . 2009-08-30 10:29 699904 c:\windows\Installer\10e22c6.msi
+ 2009-12-15 14:30 . 2009-12-15 14:30 301568 c:\windows\Installer\10911cf.msi
+ 2004-08-18 10:00 . 2007-06-27 13:31 317952 c:\windows\inf\unregmp2.exe
+ 2009-10-20 16:20 . 2009-10-20 16:20 265728 c:\windows\Driver Cache\i386\http.sys
+ 2009-10-17 05:15 . 2009-10-17 05:15 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_4f017162\System.Drawing.dll
+ 2009-09-03 19:01 . 2006-09-15 23:05 379184 c:\windows\$NtUninstallWudf01000$\spuninst\updspapi.dll
+ 2009-09-03 19:01 . 2006-09-15 23:05 221488 c:\windows\$NtUninstallWudf01000$\spuninst\spuninst.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 102400 c:\windows\$NtUninstallwmp11$\wmpshell.dll
+ 2009-09-03 19:04 . 2009-07-12 10:21 233472 c:\windows\$NtUninstallwmp11$\wmpdxm.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 114688 c:\windows\$NtUninstallwmp11$\wmpasf.dll
+ 2009-09-03 19:04 . 2008-04-14 05:49 173056 c:\windows\$NtUninstallwmp11$\wmerror.dll
+ 2009-09-03 19:04 . 2008-04-14 06:52 208896 c:\windows\$NtUninstallwmp11$\unregmp2.exe
+ 2009-09-03 19:04 . 2006-08-03 15:00 394464 c:\windows\$NtUninstallwmp11$\spuninst\updspapi.dll
+ 2009-09-03 19:04 . 2006-05-16 16:11 213216 c:\windows\$NtUninstallwmp11$\spuninst\spuninst.exe
+ 2009-09-03 19:04 . 2008-04-14 06:52 774144 c:\windows\$NtUninstallwmp11$\setup_wm.exe
+ 2009-09-03 19:04 . 2008-04-14 06:51 368640 c:\windows\$NtUninstallwmp11$\mpvis.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 809984 c:\windows\$NtUninstallWMFDist11$\wmvdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 897024 c:\windows\$NtUninstallWMFDist11$\wmspdmoe.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 485376 c:\windows\$NtUninstallWMFDist11$\wmspdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 759296 c:\windows\$NtUninstallWMFDist11$\wmsdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 151552 c:\windows\$NtUninstallWMFDist11$\wmidx.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 230912 c:\windows\$NtUninstallWMFDist11$\wmasf.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 670720 c:\windows\$NtUninstallWMFDist11$\wmadmoe.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 408064 c:\windows\$NtUninstallWMFDist11$\wmadmod.dll
+ 2009-09-03 19:02 . 2006-05-16 16:11 371424 c:\windows\$NtUninstallWMFDist11$\spuninst\updspapi.dll
+ 2009-09-03 19:02 . 2006-05-16 16:11 213216 c:\windows\$NtUninstallWMFDist11$\spuninst\spuninst.exe
+ 2009-09-03 19:02 . 2008-04-14 06:51 237568 c:\windows\$NtUninstallWMFDist11$\qasf.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 245760 c:\windows\$NtUninstallWMFDist11$\mswmdm.dll
+ 2009-09-03 19:02 . 2008-04-14 06:53 356352 c:\windows\$NtUninstallWMFDist11$\msscp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 201728 c:\windows\$NtUninstallWMFDist11$\mspmsp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:53 259072 c:\windows\$NtUninstallWMFDist11$\msnetobj.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 240640 c:\windows\$NtUninstallWMFDist11$\mpg4dmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 384512 c:\windows\$NtUninstallWMFDist11$\mp4sdmod.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 310272 c:\windows\$NtUninstallWMFDist11$\mp43dmod.dll
+ 2009-09-03 19:02 . 2008-06-10 01:11 103936 c:\windows\$NtUninstallWMFDist11$\logagent.exe
+ 2009-09-03 19:02 . 2008-04-14 06:53 695808 c:\windows\$NtUninstallWMFDist11$\drmv2clt.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 159232 c:\windows\$NtUninstallWMFDist11$\cewmdm.dll
+ 2009-09-03 19:02 . 2008-04-14 06:51 286720 c:\windows\$NtUninstallWMFDist11$\blackbox.dll
+ 2009-09-03 19:05 . 2006-09-25 15:58 379184 c:\windows\$NtUninstallMSCompPackV1$\spuninst\updspapi.dll
+ 2009-09-03 19:05 . 2006-09-25 15:58 221488 c:\windows\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe
+ 2009-11-04 21:56 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976749$\spuninst\updspapi.dll
+ 2009-11-04 21:56 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB976749$\spuninst\spuninst.exe
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB976098-v2$\spuninst\updspapi.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB976098-v2$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975467$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB975467$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-06-25 08:27 136192 c:\windows\$NtUninstallKB975467$\msv1_0.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB975025$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB975025$\spuninst\spuninst.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974571$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974571$\spuninst\spuninst.exe
+ 2009-10-17 05:18 . 2009-06-26 16:51 667648 c:\windows\$NtUninstallKB974455$\wininet.dll
+ 2009-10-17 05:18 . 2009-06-26 16:51 619520 c:\windows\$NtUninstallKB974455$\urlmon.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974455$\spuninst\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974455$\spuninst\spuninst.exe
+ 2009-10-17 05:15 . 2008-10-03 10:04 247326 c:\windows\$NtUninstallKB974112$\strmdll.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB974112$\spuninst\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB974112$\spuninst\spuninst.exe
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973687$\spuninst\updspapi.dll
+ 2009-11-25 06:30 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB973687$\spuninst\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB973525$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB973525$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971961$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971961$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2008-05-09 10:56 512000 c:\windows\$NtUninstallKB971961$\jscript.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB971486$\spuninst\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB971486$\spuninst\spuninst.exe
+ 2009-08-26 21:14 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB970653-v3$\spuninst\updspapi.dll
+ 2009-08-26 21:14 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB970653-v3$\spuninst\spuninst.exe
+ 2009-11-10 22:13 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969947$\spuninst\updspapi.dll
+ 2009-11-10 22:13 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969947$\spuninst\spuninst.exe
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB969059$\spuninst\updspapi.dll
+ 2009-10-17 05:16 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB969059$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB968816_WM9$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB968389$\spuninst\updspapi.dll
+ 2009-10-05 14:37 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB968389$\spuninst\spuninst.exe
+ 2009-10-05 14:37 . 2008-12-05 06:57 144896 c:\windows\$NtUninstallKB968389$\schannel.dll
+ 2009-10-05 14:37 . 2008-04-14 06:51 132608 c:\windows\$NtUninstallKB968389$\msv1_0.dll
+ 2009-10-05 14:37 . 2009-02-09 10:56 728064 c:\windows\$NtUninstallKB968389$\lsasrv.dll
+ 2009-10-05 14:37 . 2008-04-14 06:51 299520 c:\windows\$NtUninstallKB968389$\kerberos.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$NtUninstallKB958869$\spuninst\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$NtUninstallKB958869$\spuninst\spuninst.exe
+ 2009-09-10 04:00 . 2008-04-14 06:52 153088 c:\windows\$NtUninstallKB956844$\triedit.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 391032 c:\windows\$NtUninstallKB956844$\spuninst\updspapi.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 233848 c:\windows\$NtUninstallKB956844$\spuninst\spuninst.exe
+ 2009-10-17 05:16 . 2006-10-18 19:47 603648 c:\windows\$NtUninstallKB954155_WM9$\wmspdmod.dll
+ 2009-10-17 05:16 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954155_WM9$\spuninst\updspapi.dll
+ 2009-10-17 05:16 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2006-10-18 19:47 295936 c:\windows\$NtUninstallKB954154_WM11$\wmpeffects.dll
+ 2009-09-04 01:00 . 2007-07-27 08:41 382840 c:\windows\$NtUninstallKB954154_WM11$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2007-07-27 06:17 233848 c:\windows\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe
+ 2009-09-04 01:01 . 2006-10-18 19:47 222208 c:\windows\$NtUninstallKB941569$\wmasf.dll
+ 2009-09-04 01:01 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB941569$\spuninst\updspapi.dll
+ 2009-09-04 01:01 . 2005-06-28 08:23 215776 c:\windows\$NtUninstallKB941569$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2007-01-05 18:55 316416 c:\windows\$NtUninstallKB939683$\unregmp2.exe
+ 2009-09-04 01:00 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB939683$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2005-06-28 08:23 215776 c:\windows\$NtUninstallKB939683$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2005-06-28 08:23 371424 c:\windows\$NtUninstallKB929399$\spuninst\updspapi.dll
+ 2009-09-04 01:00 . 2005-06-28 08:23 213216 c:\windows\$NtUninstallKB929399$\spuninst\spuninst.exe
+ 2009-09-04 01:00 . 2006-10-18 19:47 414208 c:\windows\$NtUninstallKB929399$\msscp.dll
+ 2009-11-04 21:56 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB976749\update\updspapi.dll
+ 2009-11-04 21:56 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB976749\update\update.exe
+ 2009-11-04 21:56 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB976749\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975467\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975467\update\update.exe
+ 2009-10-17 05:14 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB975467\spuninst.exe
+ 2009-09-11 14:15 . 2009-09-11 14:15 136704 c:\windows\$hf_mig$\KB975467\SP3QFE\msv1_0.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB975025\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB975025\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB975025\spuninst.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974571\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974571\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974571\spuninst.exe
+ 2009-10-17 05:18 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974455\update\updspapi.dll
+ 2009-10-17 05:18 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974455\update\update.exe
+ 2009-10-17 05:18 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974455\spuninst.exe
+ 2009-09-25 05:33 . 2009-09-25 05:33 669696 c:\windows\$hf_mig$\KB974455\SP3QFE\wininet.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 628224 c:\windows\$hf_mig$\KB974455\SP3QFE\urlmon.dll
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB974112\update\updspapi.dll
+ 2009-10-17 05:15 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB974112\update\update.exe
+ 2009-10-17 05:15 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB974112\spuninst.exe
+ 2009-08-26 08:03 . 2009-08-26 08:03 247326 c:\windows\$hf_mig$\KB974112\SP3QFE\strmdll.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973687\update\updspapi.dll
+ 2009-11-25 06:30 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973687\update\update.exe
+ 2009-11-25 06:30 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB973687\spuninst.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB973525\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB973525\update\update.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB973525\spuninst.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971961\update\updspapi.dll
+ 2009-09-10 04:00 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971961\update\update.exe
+ 2009-09-10 04:00 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971961\spuninst.exe
+ 2009-09-09 03:46 . 2009-08-13 15:04 512000 c:\windows\$hf_mig$\KB971961\SP3QFE\jscript.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB971486\update\updspapi.dll
+ 2009-10-17 05:14 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB971486\update\update.exe
+ 2009-10-17 05:14 . 2009-05-26 11:40 233848 c:\windows\$hf_mig$\KB971486\spuninst.exe
+ 2009-11-10 22:13 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969947\update\updspapi.dll
+ 2009-11-10 22:13 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969947\update\update.exe
+ 2009-11-10 22:13 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969947\spuninst.exe
+ 2009-10-17 05:16 . 2009-05-26 11:40 391032 c:\windows\$hf_mig$\KB969059\update\updspapi.dll
+ 2009-10-17 05:16 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB969059\update\update.exe
+ 2009-10-17 05:16 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB969059\spuninst.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB968389\update\updspapi.dll
+ 2009-10-05 14:37 . 2009-05-26 11:40 759160 c:\windows\$hf_mig$\KB968389\update\update.exe
+ 2009-10-05 14:37 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB968389\spuninst.exe
+ 2009-10-05 14:20 . 2009-06-25 08:42 147456 c:\windows\$hf_mig$\KB968389\SP3QFE\schannel.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 136704 c:\windows\$hf_mig$\KB968389\SP3QFE\msv1_0.dll
+ 2009-06-26 13:12 . 2009-06-26 13:12 729088 c:\windows\$hf_mig$\KB968389\SP3QFE\lsasrv.dll
+ 2009-10-05 14:20 . 2009-06-25 08:42 301568 c:\windows\$hf_mig$\KB968389\SP3QFE\kerberos.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 391032 c:\windows\$hf_mig$\KB956844\update\updspapi.dll
+ 2009-09-10 04:00 . 2008-07-08 12:59 759160 c:\windows\$hf_mig$\KB956844\update\update.exe
+ 2009-09-10 04:00 . 2008-07-08 12:59 233848 c:\windows\$hf_mig$\KB956844\spuninst.exe
+ 2009-09-09 03:47 . 2009-06-21 21:50 153088 c:\windows\$hf_mig$\KB956844\SP3QFE\triedit.dll
+ 2009-10-16 10:05 . 2009-08-13 13:56 1748992 c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlus.dll
+ 2009-07-20 23:03 . 2009-07-20 23:03 1348432 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9876.0_x-ww_a621d1d5\msxml4.dll
+ 2008-09-30 15:42 . 2008-09-30 15:42 1286152 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9870.0_x-ww_a32d74cf\msxml4.dll
+ 2009-12-09 17:55 . 2009-12-09 17:55 1233920 c:\windows\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1221512 c:\windows\system32\zpeng25.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1648520 c:\windows\system32\ZoneLabs\vsruledb.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 2402184 c:\windows\system32\ZoneLabs\vsmon.exe
+ 2009-08-20 05:05 . 2008-11-17 00:23 1512928 c:\windows\system32\ZoneLabs\srescan.dll
+ 2009-08-20 05:05 . 2009-02-15 22:10 1536392 c:\windows\system32\ZoneLabs\lib\zpy.zip.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 1929952 c:\windows\system32\wuaueng.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 2603008 c:\windows\system32\WpdShext.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1382912 c:\windows\system32\WMVSDECD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1574912 c:\windows\system32\WMVENCOD.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1543680 c:\windows\system32\WMVDECOD.dll
+ 2004-08-18 10:00 . 2009-05-20 02:56 2458112 c:\windows\system32\WMVCore.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1329152 c:\windows\system32\WMSPDMOE.dll
+ 2004-08-18 10:00 . 2007-01-05 19:33 8257536 c:\windows\system32\wmploc.dll
+ 2006-10-18 19:47 . 2006-10-18 19:47 1661440 c:\windows\system32\wmpencen.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1117696 c:\windows\system32\WMADMOE.dll
+ 2004-08-18 10:00 . 2009-08-14 15:15 1850624 c:\windows\system32\win32k.sys
+ 2006-03-30 09:28 . 2009-10-29 05:26 1510400 c:\windows\system32\shdocvw.dll
- 2006-03-30 09:28 . 2009-07-18 16:05 1510400 c:\windows\system32\shdocvw.dll
- 2004-08-18 10:00 . 2008-04-14 06:51 1437696 c:\windows\system32\query.dll
+ 2004-08-18 10:00 . 2009-07-17 16:17 1437696 c:\windows\system32\query.dll
+ 2005-03-30 17:37 . 2009-08-04 20:59 2191360 c:\windows\system32\ntoskrnl.exe
+ 2005-03-30 17:37 . 2009-08-04 17:29 2068224 c:\windows\system32\ntkrnlpa.exe
- 2005-03-30 17:37 . 2009-02-10 17:09 2068224 c:\windows\system32\ntkrnlpa.exe
+ 2004-03-02 11:10 . 2004-03-02 11:10 1036288 c:\windows\system32\NCTAudioInformation2.dll
+ 2004-03-02 11:05 . 2004-03-02 11:05 1839104 c:\windows\system32\NCTAudioFile2.dll
+ 2009-07-11 08:33 . 2009-07-31 09:05 1372672 c:\windows\system32\msxml6.dll
+ 2009-07-20 23:05 . 2009-07-20 23:05 1348432 c:\windows\system32\msxml4.dll
+ 2004-08-18 10:00 . 2009-07-31 04:35 1172480 c:\windows\system32\msxml3.dll
+ 2006-03-23 17:31 . 2009-10-29 18:56 3091968 c:\windows\system32\mshtml.dll
+ 2009-10-28 03:40 . 2009-10-28 03:40 3885984 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2009-09-11 18:05 . 2004-07-20 14:24 1568768 c:\windows\system32\ImagX7.dll
+ 2009-07-10 17:43 . 2009-08-06 17:23 1929952 c:\windows\system32\dllcache\wuaueng.dll
+ 2004-08-18 10:00 . 2009-05-20 02:56 2458112 c:\windows\system32\dllcache\WMVCore.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1329152 c:\windows\system32\dllcache\WMSPDMOE.dll
+ 2004-08-18 10:00 . 2007-01-05 19:33 8257536 c:\windows\system32\dllcache\wmploc.dll
+ 2004-08-18 10:00 . 2006-10-18 19:47 1117696 c:\windows\system32\dllcache\WMADMOE.dll
+ 2009-07-11 01:07 . 2009-08-14 15:15 1850624 c:\windows\system32\dllcache\win32k.sys
- 2009-04-29 04:35 . 2009-07-18 16:05 1510400 c:\windows\system32\dllcache\shdocvw.dll
+ 2009-04-29 04:35 . 2009-10-29 05:26 1510400 c:\windows\system32\dllcache\shdocvw.dll
+ 2009-07-10 17:03 . 2007-01-05 19:22 1674752 c:\windows\system32\dllcache\setup_wm.exe
+ 2009-07-17 16:17 . 2009-07-17 16:17 1437696 c:\windows\system32\dllcache\query.dll
+ 2009-07-10 22:16 . 2009-08-04 20:59 2191360 c:\windows\system32\dllcache\ntoskrnl.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2025984 c:\windows\system32\dllcache\ntkrpamp.exe
- 2009-02-10 17:09 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2009-02-10 17:09 . 2009-08-04 17:29 2068224 c:\windows\system32\dllcache\ntkrnlpa.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2147328 c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2009-07-11 08:33 . 2009-07-31 09:05 1372672 c:\windows\system32\dllcache\msxml6.dll
+ 2009-07-11 01:08 . 2009-07-31 04:35 1172480 c:\windows\system32\dllcache\msxml3.dll
+ 2009-04-29 04:35 . 2009-10-29 18:56 3091968 c:\windows\system32\dllcache\mshtml.dll
+ 2009-08-17 21:22 . 2008-04-14 06:51 1571840 c:\windows\system32\dllcache\cache\sfcfiles.dll
+ 2009-08-17 21:22 . 2009-02-09 11:26 2191232 c:\windows\system32\dllcache\cache\ntoskrnl.exe
+ 2009-08-17 21:22 . 2009-02-10 17:09 2068224 c:\windows\system32\dllcache\cache\ntkrnlpa.exe
+ 2009-08-17 21:22 . 2009-07-18 16:05 3090432 c:\windows\system32\dllcache\cache\mshtml.dll
+ 2009-08-17 21:22 . 2008-04-14 06:52 1034240 c:\windows\system32\dllcache\cache\explorer.exe
+ 2008-05-27 23:35 . 2008-05-27 23:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll
- 2007-04-13 19:35 . 2007-04-13 19:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
+ 2008-05-27 23:35 . 2008-05-27 23:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll
- 2007-04-13 18:57 . 2007-04-13 18:57 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 22:48 . 2008-05-27 22:48 2523136 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
+ 2008-05-27 22:43 . 2008-05-27 22:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
- 2007-04-13 18:50 . 2007-04-13 18:50 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll
+ 2009-08-29 11:23 . 2009-08-29 11:23 3103744 c:\windows\Installer\fde4e0.msi
+ 2009-08-29 11:21 . 2009-08-29 11:21 3143168 c:\windows\Installer\fde4c9.msi
+ 2009-10-22 16:41 . 2009-10-22 16:41 3940352 c:\windows\Installer\7907021.msi
+ 2009-10-14 05:30 . 2009-10-14 05:30 1549312 c:\windows\Installer\3c834b.msi
+ 2009-11-26 19:05 . 2009-11-26 19:05 9473024 c:\windows\Installer\266548d.msi
+ 2009-08-30 10:29 . 2009-08-30 10:29 1091584 c:\windows\Installer\10e22bf.msi
+ 2009-08-29 11:17 . 2002-04-04 11:00 1597440 c:\windows\DvzCommon\xerces-c_1_6_0.dll
+ 2009-07-10 22:16 . 2009-08-04 20:59 2191360 c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2025984 c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2009-02-10 17:09 . 2009-02-10 17:09 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-02-10 17:09 . 2009-08-04 17:29 2068224 c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2009-07-10 22:16 . 2009-08-04 17:29 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2009-07-10 22:16 . 2009-02-09 11:26 2147328 c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2009-10-17 05:15 . 2009-10-17 05:15 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_576b30dc\System.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_0c4601bc\System.Xml.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_c7cb4d4a\System.Windows.Forms.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1470464 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_bfdff889\System.Design.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_3acac8f8\mscorlib.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-07-12 21:14 . 2009-07-12 21:14 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll
- 2009-07-12 21:14 . 2009-07-12 21:14 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-10-17 05:15 . 2009-10-17 05:15 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-09-03 19:04 . 2008-04-14 05:55 2957312 c:\windows\$NtUninstallwmp11$\wmploc.dll
+ 2009-09-03 19:04 . 2009-07-12 10:21 4874240 c:\windows\$NtUninstallwmp11$\wmp.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 1001472 c:\windows\$NtUninstallWMFDist11$\wmvdmoe2.dll
+ 2009-09-03 19:02 . 2008-11-07 14:45 2174976 c:\windows\$NtUninstallWMFDist11$\wmvcore.dll
+ 2009-09-03 19:02 . 2008-04-14 06:52 1119744 c:\windows\$NtUninstallWMFDist11$\wmsdmoe2.dll
+ 2009-09-03 19:02 . 2008-06-10 04:11 1053696 c:\windows\$NtUninstallWMFDist11$\wmnetmgr.dll
+ 2009-11-04 21:56 . 2009-09-25 05:37 3091968 c:\windows\$NtUninstallKB976749$\mshtml.dll
+ 2009-10-17 05:18 . 2009-07-18 16:05 1510400 c:\windows\$NtUninstallKB974455$\shdocvw.dll
+ 2009-10-17 05:18 . 2009-07-18 16:05 3090432 c:\windows\$NtUninstallKB974455$\mshtml.dll
+ 2009-11-25 06:30 . 2008-09-10 01:16 1307648 c:\windows\$NtUninstallKB973687$\msxml6.dll
+ 2009-11-25 06:30 . 2008-09-04 17:17 1106944 c:\windows\$NtUninstallKB973687$\msxml3.dll
+ 2009-10-17 05:14 . 2009-02-09 11:26 2191232 c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
+ 2009-10-17 05:14 . 2009-02-09 11:26 2025984 c:\windows\$NtUninstallKB971486$\ntkrpamp.exe
+ 2009-10-17 05:14 . 2009-02-10 17:09 2068224 c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
+ 2009-10-17 05:14 . 2009-02-09 11:26 2147328 c:\windows\$NtUninstallKB971486$\ntkrnlmp.exe
+ 2009-11-10 22:13 . 2009-04-19 19:52 1847168 c:\windows\$NtUninstallKB969947$\win32k.sys
+ 2009-10-17 05:16 . 2008-04-14 06:51 1437696 c:\windows\$NtUninstallKB969059$\query.dll
+ 2009-09-10 04:00 . 2008-06-18 03:03 2458112 c:\windows\$NtUninstallKB968816_WM9$\wmvcore.dll
+ 2009-10-19 23:50 . 2009-10-19 23:50 3093504 c:\windows\$hf_mig$\KB976749\SP3QFE\mshtml.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 1510400 c:\windows\$hf_mig$\KB974455\SP3QFE\shdocvw.dll
+ 2009-09-25 05:33 . 2009-09-25 05:33 3093504 c:\windows\$hf_mig$\KB974455\SP3QFE\mshtml.dll
+ 2009-11-25 05:41 . 2009-07-31 04:30 1447424 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml6.dll
+ 2009-11-25 05:41 . 2009-07-31 04:30 1172480 c:\windows\$hf_mig$\KB973687\SP3QFE\msxml3.dll
+ 2009-10-16 10:03 . 2009-08-04 17:23 2191488 c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
+ 2009-10-16 10:03 . 2009-08-04 17:23 2025984 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrpamp.exe
+ 2009-08-04 20:53 . 2009-08-04 20:53 2068352 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
+ 2009-10-16 10:03 . 2009-08-04 17:23 2147328 c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlmp.exe
+ 2009-08-14 16:00 . 2009-08-14 16:00 1859712 c:\windows\$hf_mig$\KB969947\SP3QFE\win32k.sys
+ 2009-07-17 16:02 . 2009-07-17 16:02 1437696 c:\windows\$hf_mig$\KB969059\SP3QFE\query.dll
+ 2009-08-20 05:05 . 2008-12-14 23:11 10465257 c:\windows\system32\ZoneLabs\zlasdbup.dat
+ 2009-08-20 05:05 . 2008-12-14 23:11 10465257 c:\windows\system32\ZoneLabs\spyware.dat
+ 2004-08-18 10:00 . 2009-07-13 21:43 10841088 c:\windows\system32\wmp.dll
+ 2009-07-16 20:12 . 2009-12-01 20:06 25966024 c:\windows\system32\MRT.exe
+ 2004-08-18 10:00 . 2009-07-13 21:43 10841088 c:\windows\system32\dllcache\wmp.dll
+ 2009-08-10 19:08 . 2009-08-10 19:08 11315712 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp
+ 2009-12-28 23:18 . 2009-12-28 23:18 10166784 c:\windows\Installer\8a26a6.msi
+ 2009-12-09 17:56 . 2009-12-09 17:56 32330240 c:\windows\Installer\4f4251.msi
+ 2009-08-10 12:09 . 2009-08-10 12:09 17254912 c:\windows\Installer\226cf.msp
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"="c:\program files\SmartClock\SmartClock.exe" [2003-04-26 880128]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-08-17 3055616]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2009-11-25 2011205]
"Google Update"="c:\documents and settings\Richard Buček.RICHARD-87F6F60\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" [2009-12-15 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-06-18 67584]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-06-28 32768]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2009-07-12 30192]
"gemstrmw"="c:\windows\system32\gemstrmw.exe" [2003-08-29 24576]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"CloneCDTray"="c:\program files\SlySoft\CloneCD\CloneCDTray.exe" [2009-01-29 57344]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2007-02-19 1188456]
"AcronisTimounterMonitor"="c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe" [2007-02-19 1962896]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-16 149024]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

xxx.lnk - c:\moje\xxx.ahk [2009-7-30 171]

c:\documents and settings\All Users.WINDOWS\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2008-1-3 1392640]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [10.7.2009 22:28 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [17.8.2009 21:32 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [10.7.2009 22:28 20560]
S2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [16.12.2009 14:49 135664]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [22.2.2005 14:33 15104]
S3 EXSJVYBHZ;EXSJVYBHZ;c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe --> c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe [?]
S3 GoogleDesktopManager-060409-093314;Google Desktop Manager 5.9.906.4286;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [12.7.2009 9:59 30192]
S3 GTwinUSB;GTwinUSB;c:\windows\system32\drivers\GTwinUSB.sys [15.7.2009 16:17 61776]
S3 LNQVJZ;LNQVJZ;c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe --> c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe [?]
.
Obsah adresáře 'Naplánované úlohy'

2009-12-24 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-16 13:49]

2009-12-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-16 13:49]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: Crawler Search - tbr:iemenu
Trusted Zone: csob.cz\bb24
Trusted Zone: csob.cz\ib24
Trusted Zone: ica.cz\b
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} - hxxps://ib24.csob.cz/Comp/IcaSignerCZ.cab
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig
FF - component: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff35\gears.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Palm\PACKAG~1\NPInstal.dll
FF - plugin: c:\program files\Common Files\ParallelGraphics\Cortona\npCortona.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npCortona.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-fsm - (no file)
HKLM-Run-HotSync - c:\program files\PalmSource\Desktop\HotSync.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-30 15:35
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(776)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(832)
c:\windows\system32\relog_ap.dll
.
Celkový čas: 2009-12-30 15:38:01
ComboFix-quarantined-files.txt 2009-12-30 14:37
ComboFix2.txt 2009-08-17 21:34

Před spuštěním: Volných bajtů: 10 164 621 312
Po spuštění: Volných bajtů: 11 175 133 184

- - End Of File - - 5C136C8A33DF1C0A2303638F18E0C5DE

meteorolog · #5 Příspěvek od **meteorolog** » 30 pro 2009 19:58

tento soubor znáte? - c:\moje\xxx.ahk

přesuňte Combofix na C:\

otevřte poznámkový blok (Notepad) a zkopírujte do něj následující text:

KillAll::
Driver::
gupdate
GoogleDesktopManager-060409-093314
EXSJVYBHZ
LNQVJZ

File::
c:\windows\Internet Logs\tvDebug.Zip
c:\windows\Internet Logs\xDB3.tmp
c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe
c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe
c:\windows\Tasks\AppleSoftwareUpdate.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Desktop Search"=-
"CloneCDTray"=-
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"QuickTime Task"=-

Extra::
Firefox::
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\

Soubor uložte na C:\ jako CFScript.txt a podle obrázku přetáhněte nad ComboFix

Obrázek

spustí se ComboFix a vykoná příkaz ze skriptu - potom pošlete nový log

RichardB · #6 Příspěvek od **RichardB** » 31 pro 2009 00:22

Combofix jsem spustil, a přestože verze byla pár hodin stará, stáhl si novou verzi, restartoval počítač, obrazovka často zhasínala, celá akce trvala poměrně dlouho. Dá se nějak ověřit, že už je vše v pořádku? Co jsem to v počítači vlastně měl?

Přikládám log...

Soubor xxx.ahk znám, je to moje makro pro program AutoHotKey.

ComboFix 09-12-29.06 - Richard Buček 30.12.2009 22:25:11.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1535.963 [GMT 1:00]
Spuštěný z: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Plocha\CFScript.txt.txt
AV: avast! antivirus 4.8.1368 [VPS 091230-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}

FILE ::
"c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\EXSJVYBHZ.exe"
"c:\docume~1\RICHAR~1.RIC\LOCALS~1\Temp\LNQVJZ.exe"
"c:\windows\Internet Logs\tvDebug.Zip"
"c:\windows\Internet Logs\xDB3.tmp"
"c:\windows\Tasks\AppleSoftwareUpdate.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Internet Logs\tvDebug.Zip
c:\windows\Internet Logs\xDB3.tmp
c:\windows\Tasks\AppleSoftwareUpdate.job
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_EXSJVYBHZ
-------\Legacy_GOOGLEDESKTOPMANAGER-060409-093314
-------\Legacy_GUPDATE
-------\Legacy_LNQVJZ
-------\Service_EXSJVYBHZ
-------\Service_GoogleDesktopManager-060409-093314
-------\Service_gupdate
-------\Service_LNQVJZ

((((((((((((((((((((((((( Soubory vytvořené od 2009-11-28 do 2009-12-30 )))))))))))))))))))))))))))))))
.

2009-12-28 23:40 . 2009-12-28 23:40 -------- d-----w- C:\vypinac
2009-12-28 23:18 . 2009-12-28 23:18 392320 ----a-w- c:\windows\system32\drivers\timntr.sys
2009-12-28 23:18 . 2009-12-28 23:18 32768 ----a-w- c:\windows\system32\drivers\tifsfilt.sys
2009-12-28 23:18 . 2009-12-28 23:18 114048 ----a-w- c:\windows\system32\drivers\snapman.sys
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Common Files\Acronis
2009-12-28 23:18 . 2009-12-28 23:18 -------- d-----w- c:\program files\Acronis
2009-12-24 17:45 . 2009-12-24 17:45 -------- d-s---w- c:\documents and settings\Admin\UserData
2009-12-19 20:49 . 2009-12-19 20:49 -------- d-----w- C:\Nová složka
2009-12-17 10:12 . 2009-12-30 18:57 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-15 12:04 . 2009-12-15 12:04 -------- d-----w- c:\program files\TeamViewer
2009-12-11 15:45 . 2009-12-11 15:45 -------- d-----w- c:\program files\Software Informer
2009-12-10 08:20 . 2009-12-10 08:20 -------- d-----w- c:\program files\MSXML 4.0
2009-12-09 18:08 . 2007-12-04 16:10 16640 ----a-r- c:\windows\system32\drivers\PalmUSBD.sys
2009-12-02 15:56 . 2009-12-02 15:56 6688 ----a-w- c:\windows\movexe.exe
2009-12-02 15:56 . 2009-12-02 16:05 -------- d-----w- c:\program files\SokoMind

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-12-30 12:08 . 2009-07-10 21:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-30 10:19 . 2009-07-10 22:23 -------- d-----w- c:\program files\Mozilla Thunderbird
2009-12-28 21:36 . 2009-07-22 02:54 -------- d-----w- c:\program files\trend micro
2009-12-28 21:12 . 2009-07-21 19:44 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-12-23 13:01 . 2009-08-29 10:36 -------- d-----w- c:\program files\Palm
2009-12-16 13:50 . 2009-07-12 08:59 -------- d-----w- c:\program files\Google
2009-12-09 12:21 . 2004-08-18 10:00 61958 ----a-w- c:\windows\system32\perfc005.dat
2009-12-09 12:21 . 2004-08-18 10:00 379294 ----a-w- c:\windows\system32\perfh005.dat
2009-12-03 15:14 . 2009-07-22 02:50 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-12-03 15:13 . 2009-07-22 02:50 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-26 19:05 . 2009-11-26 19:05 -------- d-----w- c:\program files\QuickTime
2009-11-24 23:54 . 2009-07-10 21:28 1280480 ----a-w- c:\windows\system32\aswBoot.exe
2009-11-24 23:51 . 2009-07-10 21:28 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-11-24 23:50 . 2009-07-10 21:28 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-11-24 23:50 . 2009-07-10 21:28 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-11-24 23:50 . 2009-07-10 21:28 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-11-24 23:49 . 2009-07-10 21:28 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-11-24 23:48 . 2009-07-10 21:28 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-11-24 23:47 . 2009-07-10 21:28 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-11-24 23:47 . 2009-07-10 21:28 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-11-17 14:29 . 2009-11-17 14:15 -------- d-----w- c:\program files\Room Arranger
2009-11-17 14:21 . 2009-11-17 14:21 -------- d-----w- c:\program files\Nábytek 1.1 Demo
2009-11-17 14:18 . 2009-11-17 14:18 -------- d-----w- c:\program files\Common Files\ParallelGraphics
2009-11-09 10:42 . 2009-11-09 10:41 1024 ----a-w- c:\windows\system32\WTCY9853.dat
2009-11-04 07:30 . 2009-07-13 08:15 -------- d-----w- c:\program files\Java
2009-10-29 05:26 . 2006-03-04 03:35 668160 ------w- c:\windows\system32\wininet.dll
2009-10-21 05:40 . 2004-08-18 10:00 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-18 10:00 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-18 10:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-13 21:28 . 2008-02-22 09:21 437920 ----a-w- c:\windows\system32\ICASigner.dll
2009-10-13 10:34 . 2004-08-18 10:00 271360 ----a-w- c:\windows\system32\oakley.dll
2009-10-12 13:40 . 2004-08-18 10:00 79872 ----a-w- c:\windows\system32\raschap.dll
2009-10-12 13:40 . 2004-08-18 10:00 150016 ----a-w- c:\windows\system32\rastls.dll
2009-10-11 03:17 . 2009-07-13 20:54 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-02 17:27 . 2009-10-02 17:27 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2009-07-12 08:59 . 2009-07-12 08:59 122880 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.

((((((((((((((((((((((((((((( SnapShot_2009-12-30_14.35.36 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-12-30 21:30 . 2009-12-30 21:30 16384 c:\windows\Temp\Perflib_Perfdata_72c.dat
+ 2009-12-30 21:30 . 2009-12-30 21:30 16384 c:\windows\Temp\Perflib_Perfdata_1f0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartClock"="c:\program files\SmartClock\SmartClock.exe" [2003-04-26 880128]
"SpywareTerminatorUpdate"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2009-08-17 3055616]
"Software Informer"="c:\program files\Software Informer\softinfo.exe" [2009-11-25 2011205]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2004-06-18 67584]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-06-28 32768]
"gemstrmw"="c:\windows\system32\gemstrmw.exe" [2003-08-29 24576]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-02-15 981384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"TrueImageMonitor.exe"="c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe" [2007-02-19 1188456]
"AcronisTimounterMonitor"="c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe" [2007-02-19 1962896]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe" [2007-02-16 149024]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Richard Buźek.RICHARD-87F6F60\Nabˇdka Start\Programy\Po spuçtŘnˇ\
xxx.lnk - c:\moje\xxx.ahk [2009-7-30 171]

c:\documents and settings\All Users.WINDOWS\Nabˇdka Start\Programy\Po spuçtŘnˇ\
HotSync Manager.lnk - c:\program files\Palm\Hotsync.exe [2008-1-3 1392640]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Richard Buček.RICHARD-87F6F60\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [10.7.2009 22:28 114768]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [17.8.2009 21:32 142592]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [10.7.2009 22:28 20560]
S3 AVMUNET;AVM FRITZ!Box;c:\windows\system32\drivers\avmunet.sys [22.2.2005 14:33 15104]
S3 GTwinUSB;GTwinUSB;c:\windows\system32\drivers\GTwinUSB.sys [15.7.2009 16:17 61776]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: Crawler Search - tbr:iemenu
Trusted Zone: csob.cz\bb24
Trusted Zone: csob.cz\ib24
Trusted Zone: ica.cz\b
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
DPF: {1AE23F24-D3E4-4C57-8468-6618B9B8B70F} - hxxps://ib24.csob.cz/Comp/IcaSignerCZ.cab
FF - ProfilePath - c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig
FF - component: c:\documents and settings\Richard Buček.RICHARD-87F6F60\Data aplikací\Mozilla\Firefox\Profiles\6n7c2bw6.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\Google\Google Gears\Firefox\lib\ff35\gears.dll
FF - component: c:\program files\Mozilla Firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\progra~1\Palm\PACKAG~1\NPInstal.dll
FF - plugin: c:\program files\Common Files\ParallelGraphics\Cortona\npCortona.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npCortona.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-30 22:32
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(800)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'lsass.exe'(856)
c:\windows\system32\relog_ap.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\System32\SCardSvr.exe
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
.
**************************************************************************
.
Celkový čas: 2009-12-30 22:34:16 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-12-30 21:34
ComboFix2.txt 2009-12-30 14:38
ComboFix3.txt 2009-08-17 21:34

Před spuštěním: Volných bajtů: 11 202 007 040
Po spuštění: Volných bajtů: 11 201 638 400

- - End Of File - - 266CA4417486D53A6946547D5E456D41

meteorolog · #7 Příspěvek od **meteorolog** » 31 pro 2009 07:21

RichardB píše:Combofix jsem spustil, a přestože verze byla pár hodin stará, stáhl si novou verzi, restartoval počítač, obrazovka často zhasínala, celá akce trvala poměrně dlouho. Dá se nějak ověřit, že už je vše v pořádku? Co jsem to v počítači vlastně měl?

no měl jste tam předvším 2 firewally (kromě ZoneAlarmu ten hardwareový od NVIDIA) a potom nějaké zbytečně spuštěné služby - většinou hlídače aktualizací pro google a apple)

ještě použijte http://sweb.cz/Marinus/T-Cleaner.exe - pro potvrzení stiskněte vždy klávesu A nebo Enter
(utilita může být označena antivirem jako vir - po použití ji smažte)

potom CCleaner - položky Čistič a Registry - čištění opakujte do odstranění všech problémů

a nakonec ATF Cleaner - http://www.atribune.org/ccount/click.php?id=1:

po spuštění staženého souboru se objeví okno:

Obrázek

zatrhněte Select All, klikněte na Empty Selected a Exit

stejným způsobem vymažte případně cache Firefoxu a Opery

restartujte PC

RichardB · #8 Příspěvek od **RichardB** » 04 led 2010 16:07

Děkuji za pomoc, ale počítač nabíhá stále pomalu. Zkusím ještě kontrolu disku.

meteorolog · #9 Příspěvek od **meteorolog** » 04 led 2010 17:21

Jak dlouho ten náběh PC asi trvá? Zkuste před zapnutím PC odpojit od netu, jestli poznáte nějakou změnu.

RichardB · #10 Příspěvek od **RichardB** » 05 led 2010 11:43

Ano, po odpojení síťového kablu nabíhá okamžitě....

meteorolog · #11 Příspěvek od **meteorolog** » 05 led 2010 12:38

tak ho zase zapojte, vypněte u Avastu možnost "Spustit při startu PC", restartujte a opět napiše, jestli se to nějak projevilo

RichardB · #12 Příspěvek od **RichardB** » 05 led 2010 13:00

Přímo taková volba tam není

RichardB · #13 Příspěvek od **RichardB** » 05 led 2010 13:02

Myslíte volbu:

Spouštět služby programu avast! až po ostatních systémových službách. ???

meteorolog · #14 Příspěvek od **meteorolog** » 05 led 2010 13:08

spíš mu tedy zakázat, aby si hned po startu nestahoval aktualizace

RichardB · #15 Příspěvek od **RichardB** » 05 led 2010 13:15

Takže takhle?

VIRY.CZ

Pomalé nabíhání PC

Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC

Re: Pomalé nabíhání PC