Kontrola logu Sanko Vyřešeno

[Sanko]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:23:36, on 10.7.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\PCNetSoftware\RAC Server\RACs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GIGABYTE\GEST\gest.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\GIGABYTE\GEST\GSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\ATI\Support\9-6_xp32_dd_ccc_wdm_enu\Driver\Setup.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\IObit\Advanced SystemCare 3\Awc.exe
C:\Program Files\IObit\IObit Security 360\IObit Security 360.exe
C:\Program Files\IObit\IObit Security 360\IS360tray.exe
C:\Program Files\IObit\IObit Security 360\IS360srv.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customi ... ch/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=cache.vbs.cz:3128
O1 - Hosts: 216.107.250.194 nprotect.lineage2.com
O1 - Hosts: 90.182.221.59 l2authd.lineage2.com
O1 - Hosts: 90.182.221.59 l2testauthd.lineage2.com
O1 - Hosts: 88.86.107.55 L2authd.lineage2.com
O1 - Hosts: 88.86.107.55 L2testauthd.lineage2.com
O1 - Hosts: 88.86.107.55 nprotect.lineage2.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [GEST] C:\Program Files\GIGABYTE\GEST\RUN.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.4.2.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7902203593
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2891570234
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: RACServerLogon - C:\WINDOWS\SYSTEM32\RACServerLogon2.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IS360service - Unknown owner - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PCNetSoftware RAC Server - Miloslav Novotny N+P - C:\Program Files\PCNetSoftware\RAC Server\RACs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 9292 bytes


Je fakt, že poslední dobou se mi o dost zpomalil počítač :(

[Reklama]

[Damned]

Spusť HJT, vypni prohlížeče, odpoj se od internetu a fixni (zatrhnout políčko před hodnotou, zmáčknout
"Fix checked"):

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/v ... .2.4.2.cab
****************************************************************************************************************************************
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[Sanko]

Malwarebytes' Anti-Malware 1.38
Verze databáze: 2404
Windows 5.1.2600 Service Pack 3

10.7.2009 21:57:52
mbam-log-2009-07-10 (21-57-52).txt

Typ skenu: Rychlý sken
Objektu skenováno: 97180
Uplynulý cas: 4 minute(s), 21 second(s)

Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)

Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)

Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované složky:
(Žádné zákerné položky nebyly zjišteny)

Infikované soubory:
(Žádné zákerné položky nebyly zjišteny)

[Damned]

Vypni rezidentní štít antiviru (pokud máš tak i antispyware).
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[Sanko]

ComboFix 09-07-09.08 - Stanik 10.07.2009 22:40.2.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.2046.1407 [GMT 2:00]
Spuštěný z: c:\documents and settings\Stanik\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Předchozí spuštění -------
.
c:\windows\Installer\12b771.msi
c:\windows\Installer\189f9e.msi
c:\windows\Installer\94d9f.msp
c:\windows\Installer\9a581.msi
c:\windows\regedit.com
c:\windows\system32\ATIODCLI.exe
c:\windows\system32\ATIODE.exe
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-06-10 do 2009-07-10 )))))))))))))))))))))))))))))))
.

2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\documents and settings\Stanik\Application Data\Malwarebytes
2009-07-10 19:52 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-10 19:52 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-10 17:07 . 2009-07-10 17:07 -------- d-----w- c:\documents and settings\All Users\Application Data\IObit
2009-07-10 16:58 . 2009-07-10 17:07 -------- d-----w- c:\program files\IObit
2009-07-10 16:39 . 2009-07-10 16:39 -------- d---a-w- c:\windows\system32\runouce.exe
2009-07-10 16:38 . 2009-07-10 16:38 626688 ----a-w- c:\windows\system32\msvcr80.dll
2009-07-10 16:38 . 2009-07-10 16:38 548864 ----a-w- c:\windows\system32\msvcp80.dll
2009-07-10 16:38 . 2009-07-10 16:38 28672 ----a-w- c:\windows\system32\eEmpty.exe
2009-07-10 16:38 . 2008-04-14 00:12 135680 ----a-w- c:\windows\system32\T.COM
2009-07-10 16:38 . 2008-04-14 00:12 146432 ----a-w- c:\windows\R.COM
2009-07-10 16:38 . 2009-07-10 16:38 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-07-10 16:38 . 2009-07-10 16:38 -------- d-----w- c:\documents and settings\All Users\Application Data\MicroWorld
2009-07-10 15:07 . 2009-07-10 15:07 -------- d-----w- C:\ATI
2009-07-10 13:35 . 2009-07-10 13:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI
2009-07-10 13:10 . 2009-07-10 13:10 -------- d-----w- c:\windows\system32\wbem\Repository
2009-07-10 13:09 . 2009-07-10 13:09 -------- d-----w- c:\program files\Common Files\ATI Technologies
2009-07-10 13:09 . 2009-07-10 13:29 -------- d-----w- c:\program files\ATI Technologies
2009-07-10 13:00 . 2009-07-10 13:00 -------- d-----w- c:\program files\Borland
2009-07-10 11:48 . 2008-05-15 01:37 3107788 ----a-r- c:\windows\system32\ativvaxx.dat
2009-07-10 11:43 . 2009-05-16 02:54 887724 ----a-w- c:\windows\system32\ativva6x.dat
2009-07-10 11:43 . 2009-05-16 02:54 3 ----a-w- c:\windows\system32\ativva5x.dat
2009-07-10 11:43 . 2009-04-23 19:04 189051 ----a-w- c:\windows\system32\atiicdxx.dat
2009-07-09 20:54 . 2009-07-09 20:54 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-07-09 18:54 . 2009-07-10 12:50 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI(3)
2009-07-09 15:47 . 2009-07-10 12:52 -------- d-----w- c:\program files\GameSpy Arcade(2)
2009-07-09 13:58 . 2009-07-10 13:07 -------- d-----w- c:\program files\ATI Technologies(2)
2009-07-09 12:49 . 2009-07-09 12:49 -------- d-----w- c:\documents and settings\Stanik\Local Settings\Application Data\Gearbox Software
2009-07-09 12:49 . 2009-07-09 15:47 593 ----a-w- c:\windows\eReg.dat
2009-07-09 11:44 . 2009-07-10 13:06 -------- d-----w- c:\windows\LastGood(2)
2009-07-09 11:43 . 2009-07-10 13:06 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI(2)
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(6).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(5).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(4).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(3).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(2).dll
2009-07-09 10:12 . 2009-07-09 10:15 28706 ----a-w- c:\windows\DIIUnin.dat
2009-07-07 15:57 . 2009-07-07 15:57 10134 ----a-r- c:\documents and settings\Stanik\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-07-07 15:57 . 2009-07-07 15:57 -------- d-----w- c:\program files\Microsoft WSE
2009-07-06 15:37 . 2004-08-18 02:34 442368 ----a-r- c:\windows\system32\vp6vfw.dll
2009-07-04 09:06 . 2009-07-04 09:05 2054424 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcorex.dll
2009-07-04 09:06 . 2009-06-26 09:42 327688 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgldx86.sys
2009-07-04 09:06 . 2009-06-26 09:42 3402008 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgui.exe
2009-07-04 09:06 . 2009-06-26 09:42 1204504 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgabout.dll
2009-07-04 09:06 . 2009-07-04 09:05 2167576 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgresf.dll
2009-07-04 09:06 . 2009-06-26 09:42 3298072 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\setup.exe
2009-07-04 09:06 . 2009-06-26 09:42 337176 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avglogx.dll
2009-07-04 09:06 . 2009-06-26 09:42 829208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcfgx.dll
2009-07-04 09:04 . 2009-06-26 09:41 1454360 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.dll
2009-07-04 09:04 . 2009-06-26 09:41 1085208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.exe
2009-06-28 14:54 . 2009-06-28 14:54 -------- d-----w- c:\documents and settings\Stanik\Application Data\Ventrilo
2009-06-28 14:53 . 2009-06-28 14:53 -------- d-----w- c:\program files\Ventrilo
2009-06-28 14:51 . 2009-06-28 14:51 -------- d-----w- c:\documents and settings\Stanik\Application Data\Windows Search
2009-06-26 09:57 . 2009-06-26 09:57 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-06-11 20:09 . 2009-06-11 20:09 -------- d-----w- c:\windows\Sun
2009-06-11 18:50 . 2009-04-30 21:22 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-11 18:50 . 2009-04-30 21:22 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-10 20:44 . 2008-08-04 12:14 16608 ----a-w- c:\windows\gdrv.sys
2009-07-10 16:43 . 2008-08-20 17:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-10 13:10 . 2008-08-18 23:37 -------- d-----w- c:\documents and settings\Stanik\Application Data\uTorrent
2009-07-10 12:50 . 2008-08-06 02:07 -------- d-----w- c:\program files\CCleaner
2009-07-10 12:50 . 2008-08-06 06:40 -------- d-----w- c:\documents and settings\Stanik\Application Data\Hamachi
2009-07-07 15:51 . 2008-08-04 12:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-04 09:05 . 2009-05-25 18:04 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-03 14:53 . 2009-04-06 16:59 -------- d-----w- c:\documents and settings\All Users\Application Data\TrackMania
2009-07-03 14:40 . 2009-03-02 10:55 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-07-03 14:40 . 2009-03-02 10:55 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-06-28 14:53 . 2009-05-06 13:54 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-06-27 09:42 . 2009-06-27 09:41 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-06-27 09:39 . 2008-10-29 13:59 -------- d-----w- c:\program files\DivX
2009-06-26 09:42 . 2009-05-25 18:04 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-06-26 09:42 . 2009-05-25 18:04 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-25 18:47 . 2009-02-14 18:09 -------- d-----w- c:\documents and settings\Stanik\Application Data\tor
2009-06-25 18:47 . 2009-02-14 18:08 -------- d-----w- c:\documents and settings\Stanik\Application Data\Vidalia
2009-06-14 20:53 . 2008-08-05 03:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-06-13 13:37 . 2008-08-19 04:26 -------- d-----w- c:\documents and settings\Stanik\Application Data\CyberLink
2009-06-11 20:49 . 2008-10-02 13:56 -------- d-----w- c:\program files\Windows Desktop Search
2009-06-08 14:02 . 2008-08-20 12:28 -------- d-----w- c:\program files\QIP Infium
2009-06-08 13:57 . 2009-06-08 13:57 -------- d-----w- c:\documents and settings\Stanik\Application Data\280192793
2009-06-05 19:16 . 2009-06-05 19:16 -------- d-----w- c:\documents and settings\Stanik\Application Data\InstallShield
2009-06-02 16:11 . 2009-06-27 09:41 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-05-30 16:40 . 2008-10-29 16:23 -------- d-----w- c:\documents and settings\Stanik\Application Data\DivX
2009-05-30 15:33 . 2009-05-25 18:04 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-05-30 15:29 . 2009-05-30 15:29 -------- d-----w- c:\documents and settings\Stanik\Application Data\ATI
2009-05-30 15:23 . 2009-05-30 15:23 2 ----a-w- C:\installedupdates.dat
2009-05-30 15:21 . 2009-01-28 13:09 -------- d-----w- c:\documents and settings\Guest\Application Data\CyberLink
2009-05-30 15:21 . 2008-08-20 07:26 -------- d-----w- c:\documents and settings\Guest\Application Data\IEPro
2009-05-30 15:21 . 2008-08-26 20:31 -------- d-----w- c:\documents and settings\Stanik\Application Data\FreeCall
2009-05-30 15:21 . 2008-08-06 02:06 -------- d-----w- c:\documents and settings\Stanik\Application Data\IEPro
2009-05-30 15:21 . 2008-12-12 18:44 -------- d-----w- c:\documents and settings\Stanik\Application Data\Skype
2009-05-30 15:21 . 2008-08-22 11:05 -------- d-----w- c:\documents and settings\Stanik\Application Data\My Battle for Middle-earth(tm) II Files
2009-05-30 15:21 . 2009-04-10 14:16 -------- d-----w- c:\program files\Paint.NET
2009-05-30 15:21 . 2008-08-05 03:49 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-05-30 15:21 . 2008-08-04 12:17 -------- d-----w- c:\program files\Realtek
2009-05-30 15:19 . 2008-10-24 20:38 -------- d-----w- c:\documents and settings\Stanik\Application Data\HLSW
2009-05-30 15:16 . 2009-05-30 15:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2009-05-29 21:37 . 2009-06-27 09:41 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-05-29 21:31 . 2009-06-27 09:41 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-05-29 18:19 . 2008-12-12 18:46 -------- d-----w- c:\documents and settings\Stanik\Application Data\skypePM
2009-05-25 18:04 . 2009-05-25 18:04 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-05-25 18:04 . 2009-05-25 18:04 -------- d-----w- c:\program files\AVG
2009-05-24 22:24 . 2008-05-26 20:18 350208 ------w- c:\windows\system32\mssph.dll
2009-05-23 11:20 . 2009-02-08 21:29 -------- d-----w- c:\program files\ICQ6.5
2009-05-16 03:58 . 2008-05-15 02:48 4069888 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2009-05-16 03:39 . 2008-08-04 12:28 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-05-16 03:38 . 2008-05-15 02:11 335872 ----a-w- c:\windows\system32\ati2dvag.dll
2009-05-16 03:18 . 2008-05-15 02:02 204800 ----a-w- c:\windows\system32\atipdlxx.dll
2009-05-16 03:17 . 2008-05-15 02:02 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2009-05-16 03:17 . 2008-05-15 02:01 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2009-05-16 03:17 . 2008-05-15 02:01 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2009-05-16 03:17 . 2008-05-15 02:01 155648 ----a-w- c:\windows\system32\ati2evxx.dll
2009-05-16 03:15 . 2008-05-15 02:00 602112 ----a-w- c:\windows\system32\ati2evxx.exe
2009-05-16 03:14 . 2008-05-15 01:58 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2009-05-16 03:07 . 2008-05-15 01:49 2987136 ----a-w- c:\windows\system32\ati3duag.dll
2009-05-16 02:55 . 2009-05-16 02:55 11423744 ----a-w- c:\windows\system32\atioglxx.dll
2009-05-16 02:54 . 2008-05-15 01:38 2122624 ----a-w- c:\windows\system32\ativvaxx.dll
2009-05-16 02:51 . 2008-08-04 12:28 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2009-05-16 02:38 . 2009-05-16 02:38 49664 ----a-w- c:\windows\system32\atimpc32.dll
2009-05-16 02:38 . 2008-05-15 01:24 49664 ----a-w- c:\windows\system32\amdpcom32.dll
2009-05-16 02:33 . 2008-05-15 01:20 479232 ----a-w- c:\windows\system32\atikvmag.dll
2009-05-16 02:31 . 2008-05-15 01:19 139264 ----a-w- c:\windows\system32\atiadlxx.dll
2009-05-16 02:31 . 2008-05-15 01:18 17408 ----a-w- c:\windows\system32\atitvo32.dll
2009-05-16 02:30 . 2008-05-15 01:18 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2009-05-16 02:26 . 2008-05-15 01:16 376832 ----a-w- c:\windows\system32\atiok3x2.dll
2009-05-16 02:24 . 2008-05-15 01:12 651264 ----a-w- c:\windows\system32\ati2cqag.dll
2009-05-16 01:35 . 2009-05-16 01:35 45056 ----a-w- c:\windows\system32\aticalrt.dll
2009-05-16 01:34 . 2009-05-16 01:34 45056 ----a-w- c:\windows\system32\aticalcl.dll
2009-05-16 01:33 . 2009-05-16 01:33 3158016 ----a-w- c:\windows\system32\aticaldd.dll
2009-05-13 05:15 . 2006-02-28 03:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-12 13:12 . 2008-08-04 12:17 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2009-05-07 15:32 . 2008-08-05 02:23 345600 ----a-w- c:\windows\system32\localspl.dll
2009-05-06 13:53 . 2009-05-06 13:53 418480 ----a-w- c:\windows\system32\wrap_oal.dll
2009-05-06 13:53 . 2009-05-06 13:53 115432 ----a-w- c:\windows\system32\OpenAL32.dll
2009-05-05 19:33 . 2009-05-05 19:33 118784 ----a-w- c:\windows\system32\atibtmon.exe
2009-05-01 21:02 . 2008-11-21 21:45 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2009-06-27 09:41 685056 ----a-w- c:\windows\system32\divx.dll
2009-04-27 18:20 . 2008-09-06 14:02 165232 ---ha-w- c:\documents and settings\Stanik\Application Data\Microsoft\Virtual PC\VPCKeyboard.dll
2009-04-17 12:26 . 2008-08-05 02:23 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:51 . 2006-02-28 03:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

------- Sigcheck -------

[7] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 11:51 361600 CBEEBEB899E31EF52B962CB31FC8CA5C c:\windows\system32\drivers\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2009-06-30 2329224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GEST"="c:\program files\GIGABYTE\GEST\RUN.exe" [2008-08-05 236040]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-26 1948440]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-06-16 817424]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-09-19 16844800]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-03-08 128512]

c:\documents and settings\Guest\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-26 09:42 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\RACServerLogon]
2008-12-16 21:24 62736 ----a-w- c:\windows\system32\RACServerLogon2.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\GIGABYTE\\GEST\\run.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Games\\cs\\hl.exe"=
"c:\\Games\\Valve\\hl.exe"=
"c:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Games\\Diablo\\Game.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Games\\HLSW\\hlsw.exe"=
"c:\\Games\\COD-2\\CoD2MP_s.exe"=
"c:\\Games\\Stronghold Crusader\\Stronghold Crusader.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Games\\TmNationsForever\\TmForever.exe"=
"c:\\Games\\BFME\\game.dat"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"4444:TCP"= 4444:TCP:Advanced Net Monitor for Classroom
"8600:TCP"= 8600:TCP:Remote Administrator Control Server, TCP port 8600
"8080:TCP"= 8080:TCP:Remote Administrator Control Server, TCP port 8080

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [25.5.2009 20:04 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [25.5.2009 20:04 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [25.5.2009 20:04 298776]
R2 PCNetSoftware RAC Server;PCNetSoftware RAC Server;c:\program files\PCNetSoftware\RAC Server\RACs.exe [20.12.2008 17:34 3601680]
R2 RACDriver;RAC driver;c:\program files\PCNetSoftware\RAC Server\RACDriver.sys [20.12.2008 17:34 8208]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [4.8.2008 14:29 93696]
R3 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\GEST\gsvr.exe [4.8.2008 14:15 55816]
R3 IS360service;IS360service;c:\program files\IObit\IObit Security 360\IS360srv.exe [10.7.2009 19:07 224528]
R3 racmirror;racmirror;c:\windows\system32\drivers\racmirror.sys [20.12.2008 17:34 32784]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2.8.2005 23:10 32512]
S3 npkycryp;npkycryp;\??\c:\games\Lineage II\system\npkycryp.sys --> c:\games\Lineage II\system\npkycryp.sys [?]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-06-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 11:34]

2009-07-10 c:\windows\Tasks\Crysis Wars(R) Updates.job
- c:\windows\Installer\Crysis Wars(R) Updates for All Users.lnk [2008-10-24 19:09]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Settings,ProxyServer = ftp=cache.vbs.cz:3128
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customi ... .yahoo.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Stanik\Application Data\Mozilla\Firefox\Profiles\hwbw1jpa.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-10 22:44
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-220523388-1580436667-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:ac,7f,a4,32,92,76,0f,2d,b8,38,58,64,cd,44,14,32,2b,16,d7,24,4a,9d,80,
1e,ad,63,93,b0,02,4a,ae,36,dd,3f,92,68,83,04,56,78,06,4a,51,38,ab,98,54,77,\
"??"=hex:bc,84,ce,3e,79,d5,8a,3f,12,75,a9,27,d0,1b,57,7c

[HKEY_USERS\S-1-5-21-220523388-1580436667-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:39,3e,97,73,90,fd,20,ec,c5,56,d3,93,a6,86,b9,62,dd,4b,6a,83,f1,
bd,60,3c,f2,46,08,e4,35,7d,8f,f8,20,cc,f6,7c,fd,76,f6,05,b3,cf,1c,79,0d,5e,\
"rkeysecu"=hex:ff,ad,43,cd,bf,ef,3b,ef,7c,8e,1d,50,83,31,41,f8
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1184)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\RACServerLogon2.dll

- - - - - - - > 'explorer.exe'(2792)
c:\windows\system32\WININET.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2009-07-10 22:45
ComboFix-quarantined-files.txt 2009-07-10 20:45

Před spuštěním: 228 889 452 544 bytes free
Po spuštění: Volných bajtů: 228 873 908 224

333 --- E O F --- 2009-06-14 20:54

[Damned]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok).
Zkopíruj do něj následující celý text označený zeleně:

File::
c:\windows\system32\runouce.exe
c:\windows\system32\eEmpty.exe
c:\windows\system32\d3d9caps.dat
C:\installedupdates.dat
c:\games\Lineage II\system\npkycryp.sys

Folder::
c:\windows\system32\runouce.exe
c:\windows\system32\eEmpty.exe

DirLook::
c:\documents and settings\Stanik\Application Data\280192793

Driver::
npkycryp;npkycryp
npkycryp





Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.


Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe
a když se oba soubory překryjí, skript upusť.


- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT a popiš chování počítače

[Sanko]

LOG z ComboFix
Je to na dvě části, protože se to nevejde do jednoho příspěvku

ComboFix 09-07-09.08 - Stanik 10.07.2009 23:52.4.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.2046.1489 [GMT 2:00]
Spuštěný z: c:\documents and settings\Stanik\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Stanik\Desktop\CFScript.txt
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

FILE ::
"c:\games\Lineage II\system\npkycryp.sys"
"C:\installedupdates.dat"
"c:\windows\system32\d3d9caps.dat"
"c:\windows\system32\eEmpty.exe"
"c:\windows\system32\runouce.exe"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\installedupdates.dat
c:\windows\system32\d3d9caps.dat
c:\windows\system32\eEmpty.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_npkycryp


((((((((((((((((((((((((( Soubory vytvořené od 2009-06-10 do 2009-07-10 )))))))))))))))))))))))))))))))
.

2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\documents and settings\Stanik\Application Data\Malwarebytes
2009-07-10 19:52 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-07-10 19:52 . 2009-07-10 19:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-07-10 19:52 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-10 17:07 . 2009-07-10 17:07 -------- d-----w- c:\documents and settings\All Users\Application Data\IObit
2009-07-10 16:58 . 2009-07-10 17:07 -------- d-----w- c:\program files\IObit
2009-07-10 16:38 . 2009-07-10 16:38 626688 ----a-w- c:\windows\system32\msvcr80.dll
2009-07-10 16:38 . 2009-07-10 16:38 548864 ----a-w- c:\windows\system32\msvcp80.dll
2009-07-10 16:38 . 2008-04-14 00:12 135680 ----a-w- c:\windows\system32\T.COM
2009-07-10 16:38 . 2008-04-14 00:12 146432 ----a-w- c:\windows\R.COM
2009-07-10 16:38 . 2009-07-10 16:38 -------- d-----w- c:\program files\Common Files\MicroWorld
2009-07-10 16:38 . 2009-07-10 16:38 -------- d-----w- c:\documents and settings\All Users\Application Data\MicroWorld
2009-07-10 15:07 . 2009-07-10 15:07 -------- d-----w- C:\ATI
2009-07-10 13:35 . 2009-07-10 13:35 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI
2009-07-10 13:10 . 2009-07-10 13:10 -------- d-----w- c:\windows\system32\wbem\Repository
2009-07-10 13:09 . 2009-07-10 13:09 -------- d-----w- c:\program files\Common Files\ATI Technologies
2009-07-10 13:09 . 2009-07-10 13:29 -------- d-----w- c:\program files\ATI Technologies
2009-07-10 13:00 . 2009-07-10 13:00 -------- d-----w- c:\program files\Borland
2009-07-10 11:48 . 2008-05-15 01:37 3107788 ----a-r- c:\windows\system32\ativvaxx.dat
2009-07-10 11:43 . 2009-05-16 02:54 887724 ----a-w- c:\windows\system32\ativva6x.dat
2009-07-10 11:43 . 2009-05-16 02:54 3 ----a-w- c:\windows\system32\ativva5x.dat
2009-07-10 11:43 . 2009-04-23 19:04 189051 ----a-w- c:\windows\system32\atiicdxx.dat
2009-07-09 18:54 . 2009-07-10 12:50 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI(3)
2009-07-09 15:47 . 2009-07-10 12:52 -------- d-----w- c:\program files\GameSpy Arcade(2)
2009-07-09 13:58 . 2009-07-10 13:07 -------- d-----w- c:\program files\ATI Technologies(2)
2009-07-09 12:49 . 2009-07-09 12:49 -------- d-----w- c:\documents and settings\Stanik\Local Settings\Application Data\Gearbox Software
2009-07-09 12:49 . 2009-07-09 15:47 593 ----a-w- c:\windows\eReg.dat
2009-07-09 11:44 . 2009-07-10 13:06 -------- d-----w- c:\windows\LastGood(2)
2009-07-09 11:43 . 2009-07-10 13:06 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI(2)
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(6).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(5).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(4).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(3).dll
2009-07-09 11:21 . 2008-05-15 02:12 413696 ----a-w- c:\windows\system32\ATIDEMGX(2).dll
2009-07-09 10:12 . 2009-07-09 10:15 28706 ----a-w- c:\windows\DIIUnin.dat
2009-07-07 15:57 . 2009-07-07 15:57 10134 ----a-r- c:\documents and settings\Stanik\Application Data\Microsoft\Installer\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}\ARPPRODUCTICON.exe
2009-07-07 15:57 . 2009-07-07 15:57 -------- d-----w- c:\program files\Microsoft WSE
2009-07-06 15:37 . 2004-08-18 02:34 442368 ----a-r- c:\windows\system32\vp6vfw.dll
2009-07-04 09:06 . 2009-07-04 09:05 2054424 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcorex.dll
2009-07-04 09:06 . 2009-06-26 09:42 327688 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgldx86.sys
2009-07-04 09:06 . 2009-06-26 09:42 3402008 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgui.exe
2009-07-04 09:06 . 2009-06-26 09:42 1204504 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgabout.dll
2009-07-04 09:06 . 2009-07-04 09:05 2167576 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgresf.dll
2009-07-04 09:06 . 2009-06-26 09:42 3298072 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\setup.exe
2009-07-04 09:06 . 2009-06-26 09:42 337176 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avglogx.dll
2009-07-04 09:06 . 2009-06-26 09:42 829208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgcfgx.dll
2009-07-04 09:04 . 2009-06-26 09:41 1454360 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.dll
2009-07-04 09:04 . 2009-06-26 09:41 1085208 ----a-w- c:\documents and settings\All Users\Application Data\avg8\update\backup\avgupd.exe
2009-06-28 14:54 . 2009-06-28 14:54 -------- d-----w- c:\documents and settings\Stanik\Application Data\Ventrilo
2009-06-28 14:53 . 2009-06-28 14:53 -------- d-----w- c:\program files\Ventrilo
2009-06-28 14:51 . 2009-06-28 14:51 -------- d-----w- c:\documents and settings\Stanik\Application Data\Windows Search
2009-06-26 09:57 . 2009-06-26 09:57 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-06-11 20:09 . 2009-06-11 20:09 -------- d-----w- c:\windows\Sun
2009-06-11 18:50 . 2009-04-30 21:22 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-11 18:50 . 2009-04-30 21:22 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-10 21:56 . 2008-08-04 12:14 16608 ----a-w- c:\windows\gdrv.sys
2009-07-10 16:43 . 2008-08-20 17:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-07-10 13:10 . 2008-08-18 23:37 -------- d-----w- c:\documents and settings\Stanik\Application Data\uTorrent
2009-07-10 12:50 . 2008-08-06 02:07 -------- d-----w- c:\program files\CCleaner
2009-07-10 12:50 . 2008-08-06 06:40 -------- d-----w- c:\documents and settings\Stanik\Application Data\Hamachi
2009-07-07 15:51 . 2008-08-04 12:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-07-04 09:05 . 2009-05-25 18:04 335752 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-07-03 14:53 . 2009-04-06 16:59 -------- d-----w- c:\documents and settings\All Users\Application Data\TrackMania
2009-07-03 14:40 . 2009-03-02 10:55 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2009-07-03 14:40 . 2009-03-02 10:55 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
2009-06-28 14:53 . 2009-05-06 13:54 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-06-27 09:42 . 2009-06-27 09:41 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-06-27 09:39 . 2008-10-29 13:59 -------- d-----w- c:\program files\DivX
2009-06-26 09:42 . 2009-05-25 18:04 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-06-26 09:42 . 2009-05-25 18:04 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-06-25 18:47 . 2009-02-14 18:09 -------- d-----w- c:\documents and settings\Stanik\Application Data\tor
2009-06-25 18:47 . 2009-02-14 18:08 -------- d-----w- c:\documents and settings\Stanik\Application Data\Vidalia
2009-06-14 20:53 . 2008-08-05 03:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-06-13 13:37 . 2008-08-19 04:26 -------- d-----w- c:\documents and settings\Stanik\Application Data\CyberLink
2009-06-11 20:49 . 2008-10-02 13:56 -------- d-----w- c:\program files\Windows Desktop Search
2009-06-08 14:02 . 2008-08-20 12:28 -------- d-----w- c:\program files\QIP Infium
2009-06-08 13:57 . 2009-06-08 13:57 -------- d-----w- c:\documents and settings\Stanik\Application Data\280192793
2009-06-05 19:16 . 2009-06-05 19:16 -------- d-----w- c:\documents and settings\Stanik\Application Data\InstallShield
2009-06-02 16:11 . 2009-06-27 09:41 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-05-30 16:40 . 2008-10-29 16:23 -------- d-----w- c:\documents and settings\Stanik\Application Data\DivX
2009-05-30 15:33 . 2009-05-25 18:04 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-05-30 15:29 . 2009-05-30 15:29 -------- d-----w- c:\documents and settings\Stanik\Application Data\ATI
2009-05-30 15:21 . 2009-01-28 13:09 -------- d-----w- c:\documents and settings\Guest\Application Data\CyberLink
2009-05-30 15:21 . 2008-08-20 07:26 -------- d-----w- c:\documents and settings\Guest\Application Data\IEPro
2009-05-30 15:21 . 2008-08-26 20:31 -------- d-----w- c:\documents and settings\Stanik\Application Data\FreeCall
2009-05-30 15:21 . 2008-08-06 02:06 -------- d-----w- c:\documents and settings\Stanik\Application Data\IEPro
2009-05-30 15:21 . 2008-12-12 18:44 -------- d-----w- c:\documents and settings\Stanik\Application Data\Skype
2009-05-30 15:21 . 2008-08-22 11:05 -------- d-----w- c:\documents and settings\Stanik\Application Data\My Battle for Middle-earth(tm) II Files
2009-05-30 15:21 . 2009-04-10 14:16 -------- d-----w- c:\program files\Paint.NET
2009-05-30 15:21 . 2008-08-05 03:49 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-05-30 15:21 . 2008-08-04 12:17 -------- d-----w- c:\program files\Realtek
2009-05-30 15:19 . 2008-10-24 20:38 -------- d-----w- c:\documents and settings\Stanik\Application Data\HLSW
2009-05-30 15:16 . 2009-05-30 15:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2009-05-29 21:37 . 2009-06-27 09:41 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-05-29 21:31 . 2009-06-27 09:41 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-05-29 18:19 . 2008-12-12 18:46 -------- d-----w- c:\documents and settings\Stanik\Application Data\skypePM
2009-05-25 18:04 . 2009-05-25 18:04 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-05-25 18:04 . 2009-05-25 18:04 -------- d-----w- c:\program files\AVG
2009-05-24 22:24 . 2008-05-26 20:18 350208 ------w- c:\windows\system32\mssph.dll
2009-05-23 11:20 . 2009-02-08 21:29 -------- d-----w- c:\program files\ICQ6.5
2009-05-16 03:58 . 2008-05-15 02:48 4069888 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2009-05-16 03:39 . 2008-08-04 12:28 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2009-05-16 03:38 . 2008-05-15 02:11 335872 ----a-w- c:\windows\system32\ati2dvag.dll
2009-05-16 03:18 . 2008-05-15 02:02 204800 ----a-w- c:\windows\system32\atipdlxx.dll
2009-05-16 03:17 . 2008-05-15 02:02 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2009-05-16 03:17 . 2008-05-15 02:01 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2009-05-16 03:17 . 2008-05-15 02:01 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2009-05-16 03:17 . 2008-05-15 02:01 155648 ----a-w- c:\windows\system32\ati2evxx.dll
2009-05-16 03:15 . 2008-05-15 02:00 602112 ----a-w- c:\windows\system32\ati2evxx.exe
2009-05-16 03:14 . 2008-05-15 01:58 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2009-05-16 03:07 . 2008-05-15 01:49 2987136 ----a-w- c:\windows\system32\ati3duag.dll
2009-05-16 02:55 . 2009-05-16 02:55 11423744 ----a-w- c:\windows\system32\atioglxx.dll
2009-05-16 02:54 . 2008-05-15 01:38 2122624 ----a-w- c:\windows\system32\ativvaxx.dll
2009-05-16 02:51 . 2008-08-04 12:28 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2009-05-16 02:38 . 2009-05-16 02:38 49664 ----a-w- c:\windows\system32\atimpc32.dll
2009-05-16 02:38 . 2008-05-15 01:24 49664 ----a-w- c:\windows\system32\amdpcom32.dll
2009-05-16 02:33 . 2008-05-15 01:20 479232 ----a-w- c:\windows\system32\atikvmag.dll
2009-05-16 02:31 . 2008-05-15 01:19 139264 ----a-w- c:\windows\system32\atiadlxx.dll
2009-05-16 02:31 . 2008-05-15 01:18 17408 ----a-w- c:\windows\system32\atitvo32.dll
2009-05-16 02:30 . 2008-05-15 01:18 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2009-05-16 02:26 . 2008-05-15 01:16 376832 ----a-w- c:\windows\system32\atiok3x2.dll
2009-05-16 02:24 . 2008-05-15 01:12 651264 ----a-w- c:\windows\system32\ati2cqag.dll
2009-05-16 01:35 . 2009-05-16 01:35 45056 ----a-w- c:\windows\system32\aticalrt.dll
2009-05-16 01:34 . 2009-05-16 01:34 45056 ----a-w- c:\windows\system32\aticalcl.dll
2009-05-16 01:33 . 2009-05-16 01:33 3158016 ----a-w- c:\windows\system32\aticaldd.dll
2009-05-13 05:15 . 2006-02-28 03:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-12 13:12 . 2008-08-04 12:17 26144 ----a-w- c:\windows\system32\spupdsvc.exe
2009-05-07 15:32 . 2008-08-05 02:23 345600 ----a-w- c:\windows\system32\localspl.dll
2009-05-06 13:53 . 2009-05-06 13:53 418480 ----a-w- c:\windows\system32\wrap_oal.dll
2009-05-06 13:53 . 2009-05-06 13:53 115432 ----a-w- c:\windows\system32\OpenAL32.dll
2009-05-05 19:33 . 2009-05-05 19:33 118784 ----a-w- c:\windows\system32\atibtmon.exe
2009-05-01 21:02 . 2008-11-21 21:45 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-05-01 21:02 . 2009-06-27 09:41 685056 ----a-w- c:\windows\system32\divx.dll
2009-04-27 18:20 . 2008-09-06 14:02 165232 ---ha-w- c:\documents and settings\Stanik\Application Data\Microsoft\Virtual PC\VPCKeyboard.dll
2009-04-17 12:26 . 2008-08-05 02:23 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:51 . 2006-02-28 03:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
---- Directory of c:\documents and settings\Stanik\Application Data\280192793 ----

2009-06-08 13:57 . 2009-05-01 13:00 11172 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2009_05.cmb
2009-06-08 13:57 . 2009-04-01 14:18 10972 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2009_04.cmb
2009-06-08 13:57 . 2009-03-01 16:10 10956 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2009_03.cmb
2009-06-08 13:57 . 2009-02-01 18:12 10784 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2009_02.cmb
2009-06-08 13:57 . 2009-01-01 14:35 10444 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2009_01.cmb
2009-06-08 13:57 . 2008-12-01 13:21 10020 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2008_12.cmb
2009-06-08 13:57 . 2008-11-01 12:32 9712 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2008_11.cmb
2009-06-08 13:57 . 2008-10-01 12:01 9716 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2008_10.cmb
2009-06-08 13:57 . 2008-09-01 07:37 9508 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2008_09.cmb
2009-06-08 13:57 . 2008-08-20 12:08 9356 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\BackupCL\ICQ_280192793_2008_08.cmb

[Sanko]

2009-06-08 13:57 . 2009-04-27 14:32 300001 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\Archive\InfICQ_284920821_1.ahf
2009-06-08 13:57 . 2009-05-29 20:23 134703 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\_qip_svc.qhf
2009-06-08 13:57 . 2009-04-19 19:37 12534 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\jabberqip_736460214@qip.ru.qhf
2009-06-08 13:57 . 2008-12-03 18:50 270 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\jabberqip_194553046@qip.ru.qhf
2009-06-08 13:57 . 2009-04-06 15:46 2117 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\jabberqip_386733097@qip.ru.qhf
2009-06-08 13:57 . 2009-05-23 15:01 110 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_490171649.qhf
2009-06-08 13:57 . 2009-03-29 20:08 16301 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_484324674.qhf
2009-06-08 13:57 . 2008-11-30 15:29 175 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_477483852.qhf
2009-06-08 13:57 . 2009-04-02 18:49 852 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_476071391.qhf
2009-06-08 13:57 . 2009-04-02 18:48 633 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_460322553.qhf
2009-06-08 13:57 . 2009-04-12 13:22 498 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_468652628.qhf
2009-06-08 13:57 . 2008-12-06 13:47 698 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_471237061.qhf
2009-06-08 13:57 . 2009-05-22 19:35 10045 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_442151809.qhf
2009-06-08 13:57 . 2008-12-24 14:03 373 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_432281753.qhf
2009-06-08 13:57 . 2008-12-27 22:10 3144 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_428874457.qhf
2009-06-08 13:57 . 2008-12-23 15:58 318 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_424486446.qhf
2009-06-08 13:57 . 2008-12-04 16:07 155 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_421840416.qhf
2009-06-08 13:57 . 2009-05-22 21:11 4603 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_415865717.qhf
2009-06-08 13:57 . 2008-12-03 16:39 217 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_404303321.qhf
2009-06-08 13:57 . 2009-01-27 15:12 279 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_396878640.qhf
2009-06-08 13:57 . 2009-05-21 14:20 87620 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_400844593.qhf
2009-06-08 13:57 . 2009-05-22 15:06 2748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_392823608.qhf
2009-06-08 13:57 . 2009-05-25 18:12 119 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_393891446.qhf
2009-06-08 13:57 . 2009-04-05 20:33 8593 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_386733097.qhf
2009-06-08 13:57 . 2009-01-14 16:50 167 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_363178980.qhf
2009-06-08 13:57 . 2009-01-16 23:41 223 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_379230107.qhf
2009-06-08 13:57 . 2009-04-25 09:32 2176 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_362791968.qhf
2009-06-08 13:57 . 2009-05-17 19:34 5779 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_362083435.qhf
2009-06-08 13:57 . 2009-04-03 13:00 2405 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_361847286.qhf
2009-06-08 13:57 . 2009-04-05 20:33 421 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_358771376.qhf
2009-06-08 13:57 . 2009-05-28 20:23 574 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_359800536.qhf
2009-06-08 13:57 . 2009-04-17 19:30 9035 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_356289181.qhf
2009-06-08 13:57 . 2009-05-22 14:58 1047 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_353100527.qhf
2009-06-08 13:57 . 2009-05-29 20:25 9302 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_352525093.qhf
2009-06-08 13:57 . 2009-04-06 16:43 4828 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_348338286.qhf
2009-06-08 13:57 . 2009-04-06 15:09 413 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_344773810.qhf
2009-06-08 13:57 . 2009-02-05 19:54 438 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_348166702.qhf
2009-06-08 13:57 . 2008-12-24 14:21 15780 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_336967121.qhf
2009-06-08 13:57 . 2009-05-06 17:35 19206 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_332940191.qhf
2009-06-08 13:57 . 2008-11-28 13:16 516 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_331443540.qhf
2009-06-08 13:57 . 2008-12-24 14:20 248 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_331494050.qhf
2009-06-08 13:57 . 2009-05-28 18:53 104868 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_327600411.qhf
2009-06-08 13:57 . 2008-12-24 14:21 242 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_312672964.qhf
2009-06-08 13:57 . 2008-12-24 13:54 317 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_319353745.qhf
2009-06-08 13:57 . 2009-05-25 11:58 2773 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_323072487.qhf
2009-06-08 13:57 . 2008-12-10 20:03 363 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_309715090.qhf
2009-06-08 13:57 . 2009-03-15 15:26 63318 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_312211215.qhf
2009-06-08 13:57 . 2008-12-24 14:20 643 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_307242412.qhf
2009-06-08 13:57 . 2009-05-28 13:35 797 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_305308739.qhf
2009-06-08 13:57 . 2009-02-02 22:05 1393 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_296364494.qhf
2009-06-08 13:57 . 2009-05-29 14:11 31326 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_284920821.qhf
2009-06-08 13:57 . 2009-01-27 18:14 477 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_275233425.qhf
2009-06-08 13:57 . 2009-05-06 17:35 832 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_280192793.qhf
2009-06-08 13:57 . 2009-05-20 13:20 426 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_274854531.qhf
2009-06-08 13:57 . 2008-12-24 13:55 377 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_270035269.qhf
2009-06-08 13:57 . 2009-01-31 15:31 5092 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_266254718.qhf
2009-06-08 13:57 . 2009-01-11 20:51 2216 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_260425300.qhf
2009-06-08 13:57 . 2009-03-27 21:17 653 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_259540359.qhf
2009-06-08 13:57 . 2009-05-22 10:50 8982 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_259682914.qhf
2009-06-08 13:57 . 2009-05-04 20:14 3407 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_259019115.qhf
2009-06-08 13:57 . 2008-12-24 14:06 177 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_252746118.qhf
2009-06-08 13:57 . 2009-05-27 12:13 4292 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_252538133.qhf
2009-06-08 13:57 . 2009-04-16 18:49 458 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_251084216.qhf
2009-06-08 13:57 . 2009-05-29 14:51 1074 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_242453625.qhf
2009-06-08 13:57 . 2009-05-22 21:05 221 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_231869775.qhf
2009-06-08 13:57 . 2009-05-07 17:37 26128 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_235339848.qhf
2009-06-08 13:57 . 2008-12-10 20:50 172 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_231668976.qhf
2009-06-08 13:57 . 2009-03-09 15:42 151 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_220303490.qhf
2009-06-08 13:57 . 2009-05-23 10:26 8506 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_215384062.qhf
2009-06-08 13:57 . 2009-01-03 20:43 169 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_203242408.qhf
2009-06-08 13:57 . 2009-05-20 19:07 20825 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_198131499.qhf
2009-06-08 13:57 . 2008-12-03 18:42 1532 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_194553046.qhf
2009-06-08 13:57 . 2009-04-14 13:10 2159 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\History\InfICQ_192371156.qhf
2009-06-08 13:57 . 2009-04-12 22:12 47 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\ICQ\Traf\traf_.ini
2009-06-08 13:57 . 2009-05-29 21:41 69 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\ICQ\Traf\traf_280192793.ini
2009-06-08 13:57 . 2009-04-12 22:12 2 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\ICQ\eye_.icq
2009-06-08 13:57 . 2009-05-29 21:41 4446 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\ICQ\eye_280192793.icq
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\XIMSS2.log
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\XIMSS3.log
2009-06-08 13:57 . 2009-05-29 20:08 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\ximssqip.log
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\XIMSS1.log
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\XIMSS.log
2009-06-08 13:57 . 2009-05-29 20:08 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\jabberqip.log
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\Jabber2.log
2009-06-08 13:57 . 2009-03-03 08:27 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\Jabber.log
2009-06-08 13:57 . 2009-03-03 08:28 0 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\Logs\Jabber1.log
2009-06-08 13:57 . 2008-08-21 18:17 4761 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\FF178FABE122FBD513E1305E3CDE8CB1.jpg
2009-06-08 13:57 . 2009-03-12 18:13 4136 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\FC7E1327CDCDC842EBA18A88020115B2.jpg
2009-06-08 13:57 . 2009-01-10 17:45 2071 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\FA24EDFA23644AD1F47EAAAA5EF9347C.jpg
2009-06-08 13:57 . 2008-11-19 20:25 5115 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F6808356E0930E78ABD295A20EC4137F.jpg
2009-06-08 13:57 . 2008-08-21 15:04 1674 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F5BA0F1FE20117ED663BE70807F29D0B.jpg
2009-06-08 13:57 . 2009-01-28 13:44 4767 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F528C7E34865222B6B21B1958415095C.jpg
2009-06-08 13:57 . 2008-08-20 12:08 6327 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F4213852C7FC7BC7F4ADFBEA8C3BAC75.jpg
2009-06-08 13:57 . 2009-05-06 18:11 6432 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F3640AF489FBAC82D214E33E2AA8BF98.jpg
2009-06-08 13:57 . 2009-02-20 13:35 5453 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F3121B9A86D5D7AB153C76CDC7A4C7B6.jpg
2009-06-08 13:57 . 2009-03-11 13:57 5258 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F27E43B384A17624E4A23354217BABF5.jpg
2009-06-08 13:57 . 2008-11-04 14:03 4446 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\F0D2F034A22615A0378901C4438251D9.jpg
2009-06-08 13:57 . 2009-05-07 17:37 6036 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\EFC13D003B0D34C43EB1698B0967CE75.jpg
2009-06-08 13:57 . 2008-12-13 14:55 1748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\EE9D43E401A69F38C369FFF044AFB710.jpg
2009-06-08 13:57 . 2009-01-30 19:43 1683 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\EF607687589732B78B2975A1817C224F.jpg
2009-06-08 13:57 . 2008-09-09 18:29 4042 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\EE775D43994F800B0898A31696C2AAD4.jpg
2009-06-08 13:57 . 2009-02-04 18:54 4377 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\EAACB6EA8ACD5C344E30F4948E592AA6.jpg
2009-06-08 13:57 . 2008-08-20 19:13 5240 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E8B5FE21240502519EB4EF5278DA657F.jpg
2009-06-08 13:57 . 2008-10-26 14:18 4285 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E75551FF446EEBD9EC70E9E6BDD28247.jpg
2009-06-08 13:57 . 2008-12-21 22:56 4993 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E70F0D29B059C839AB66992CE726E85D.jpg
2009-06-08 13:57 . 2008-08-22 10:55 5300 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E6E58F10A41B89ADDFAF35C227131C17.jpg
2009-06-08 13:57 . 2008-11-03 15:00 3998 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E61B64F86B63FF448AD26C1C31D2C111.jpg
2009-06-08 13:57 . 2008-11-21 18:07 4040 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\E2FA92E318BB84AD2B485916E8A0214F.jpg
2009-06-08 13:57 . 2008-09-29 14:58 5360 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DFFE11DC097388FAC4FDE7A7290E49ED.jpg
2009-06-08 13:57 . 2008-12-17 21:07 1748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DFC52E530F4AFF87E64BC9331AC86A50.jpg
2009-06-08 13:57 . 2008-08-20 15:30 4336 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DF52FB5D432CDDAE9FF20D2068ACD2CE.jpg
2009-06-08 13:57 . 2008-08-29 21:37 4739 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DE13B20EAFC763CC5D860EC3560368BA.jpg
2009-06-08 13:57 . 2009-04-22 18:42 6296 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DDA67097BB2A5C3B58378A9C8C2DEFB6.jpg
2009-06-08 13:57 . 2009-04-24 20:16 5337 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DDA53DA758131AFCC3456D61FF607221.jpg
2009-06-08 13:57 . 2009-04-15 15:35 3417 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DCC232D78BE0F2161F444E4DC734134D.jpg
2009-06-08 13:57 . 2009-04-06 15:01 1426 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DC8BA004CC9E7B66C73A39B869DF4EE9.jpg
2009-06-08 13:57 . 2008-12-20 16:03 5581 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DA5FB9343903F987CD651033E3C61E1E.jpg
2009-06-08 13:57 . 2008-08-20 15:30 5331 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\DA4646D2215D1C12F7CED62688F120E7.jpg
2009-06-08 13:57 . 2008-10-12 17:15 4494 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\D5F972E1FA263ACC2DD946A93D5A25C2.jpg
2009-06-08 13:57 . 2008-08-22 12:28 5035 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\D5B7757371ADFB9791DDACEAFAD7AE17.jpg
2009-06-08 13:57 . 2009-05-20 19:48 5506 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\D0FF898655B836F5CC15CDBD9ABC3C09.jpg
2009-06-08 13:57 . 2009-04-03 19:15 1524 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CDEB497728F49D525D1F5013EA40A982.jpg
2009-06-08 13:57 . 2008-09-11 18:45 5058 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CDCED92AF9904CF7EB7C41D39C1A8115.jpg
2009-06-08 13:57 . 2008-08-25 17:07 5327 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CD20E38CF7C614C395D5A2152CCD298E.jpg
2009-06-08 13:57 . 2008-11-03 19:49 6754 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CC6040337881DD0AE810EC40AF04A571.jpg
2009-06-08 13:57 . 2008-11-03 19:48 3929 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CBE6E74E2D99C63161102E8CFF018AE9.jpg
2009-06-08 13:57 . 2009-04-20 13:38 1816 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\CAD24C7432E7B48DD7E8E886EBEDE7B2.jpg
2009-06-08 13:57 . 2009-02-16 17:09 5254 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C9442213A1E41DFA62FDC4364DB9E0C2.jpg
2009-06-08 13:57 . 2009-05-16 16:05 1845 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C8BBF276563B530ED002DE3B1F3F063B.jpg
2009-06-08 13:57 . 2008-08-26 16:15 3866 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C6B35586D2219F31D0F47DC186DF89D8.jpg
2009-06-08 13:57 . 2008-12-31 13:13 6122 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C5BB32AE2EE51C0FF0D822DA6C6E9AB2.jpg
2009-06-08 13:57 . 2008-08-29 19:28 5644 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C59BCD91CABEEA3F7F8EE8A601436FFE.jpg
2009-06-08 13:57 . 2009-05-04 13:39 1913 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C5248B0AEFC3B6042B23FA1BBA17E716.jpg
2009-06-08 13:57 . 2008-08-20 18:03 4196 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C3E3A7AEB48FE70B8FB181590E882A8E.jpg
2009-06-08 13:57 . 2008-08-20 18:58 4291 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C448892713D4DCF7E95B401223DE9842.jpg
2009-06-08 13:57 . 2009-02-19 18:25 1678 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C28AF1D0E4D3530A5461DBBE58EB4E44.jpg
2009-06-08 13:57 . 2009-02-10 21:02 1730 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\C09DE0C2FC6B48A10B07A1FC8596DF20.jpg
2009-06-08 13:57 . 2009-02-04 18:54 4816 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BEE37AE52C076551D66C085B8EE1FDE2.jpg
2009-06-08 13:57 . 2009-03-09 15:45 2875 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BDF02796E8455FEC3EE5AB7226461E3A.gif
2009-06-08 13:57 . 2008-12-12 20:44 2255 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BD7B04EF520ECC3B5DCE2C4AF8CA51E0.jpg
2009-06-08 13:57 . 2009-02-04 18:54 5222 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BD1A65DB3142275C9C3345941CCF187D.jpg
2009-06-08 13:57 . 2008-10-21 19:15 6701 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BBEF099419DC5BF55F92005E5C290327.jpg
2009-06-08 13:57 . 2008-10-19 14:55 5308 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BBB2FDBB2F601A5A73FE7DAC2410570C.jpg
2009-06-08 13:57 . 2008-12-14 13:49 1286 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BB57E733C1591F695895E3053C2936A2.jpg
2009-06-08 13:57 . 2008-08-21 20:28 4714 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\BAF7D42E526CB290367DE0C6C44D72D8.jpg
2009-06-08 13:57 . 2008-11-01 19:58 2054 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B9B02B0F0697DD36F9C6A450011F652C.jpg
2009-06-08 13:57 . 2009-03-05 14:36 5128 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B979D5C888F6ED1BC373D0F89355338D.jpg
2009-06-08 13:57 . 2008-10-15 19:34 4095 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B971A3C95CD7EA0C69894932C836A44F.jpg
2009-06-08 13:57 . 2009-05-26 17:38 3981 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B929AB42261EB8A28D459AF820AFCEED.jpg
2009-06-08 13:57 . 2009-05-12 13:50 1652 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B8704E405781A5016DF4F22CDD125463.jpg
2009-06-08 13:57 . 2008-08-29 11:36 5301 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B78F9BD945B53A83A8A04735EC3D6A1F.jpg
2009-06-08 13:57 . 2009-05-03 15:33 4881 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B6BDBD45C4C8E27F076C10C63E31693A.jpg
2009-06-08 13:57 . 2008-11-15 19:43 6198 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B67A5F56513A53952A87FE9D51CE0213.jpg
2009-06-08 13:57 . 2008-10-21 19:03 4214 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B4E08A89A1BDBAB6DA49B80EA9BD6904.jpg
2009-06-08 13:57 . 2008-09-08 18:12 4852 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B44CBA932FA17534044C6752440A8422.jpg
2009-06-08 13:57 . 2008-11-04 19:19 5114 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B3DBC05931E2AE7A5E32F35BAFD9E46E.jpg
2009-06-08 13:57 . 2008-08-21 18:24 6172 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B33D1D1D9A02E03C46EFBD04AA3FF81E.jpg
2009-06-08 13:57 . 2008-08-30 12:51 4664 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B2C7927DB165ED75D0A569C6497A9BDF.jpg
2009-06-08 13:57 . 2008-08-31 18:09 5735 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B16D30E05CFFF00827248E10D69B027A.jpg
2009-06-08 13:57 . 2009-05-08 18:27 4249 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B26856DE08731BEAA5634DE194B37410.jpg
2009-06-08 13:57 . 2009-04-20 18:29 5039 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B05DD8794206B1CC6296CF88489BF6CF.jpg
2009-06-08 13:57 . 2009-02-12 12:21 2376 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\B15D134134A706C91687CCDB6E55D5CC.jpg
2009-06-08 13:57 . 2009-04-17 19:21 4302 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\AE8F9D20F1DE4CA77FDCE88854B9F960.jpg
2009-06-08 13:57 . 2008-08-24 16:55 4871 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\AE2EE9193BE7D38F5813083C2CC88888.jpg
2009-06-08 13:57 . 2008-12-26 00:16 5659 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\ACB8F98EE97539386AB7A179578F6737.jpg
2009-06-08 13:57 . 2009-02-14 20:07 2572 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\AA433CE47ABE12DADF7EF05034D4F3D6.gif
2009-06-08 13:57 . 2009-05-08 12:57 1652 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A9BE1A78EA19AD0C88F564DAB9789104.jpg
2009-06-08 13:57 . 2009-02-19 18:26 1833 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A902E2F76F26C0045C28B53E67768D2C.jpg
2009-06-08 13:57 . 2008-08-21 12:26 4980 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A5FC0713A7FD08C538B5E1FB5DCF8998.jpg
2009-06-08 13:57 . 2009-01-12 15:49 5386 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A43FE01C72F377F7CBFE33958E9F7E9E.jpg
2009-06-08 13:57 . 2009-04-06 16:32 1540 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A410B7C750BF6C8680B99226411A887F.jpg
2009-06-08 13:57 . 2008-08-25 14:23 4592 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A3E028308E1EB11B3CE8AECB9F24189F.jpg
2009-06-08 13:57 . 2009-05-06 16:48 5989 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A25F84229C569B8AA40FCE1325B8A206.jpg
2009-06-08 13:57 . 2009-05-23 22:02 1840 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A1875E7EB2C8D4161499A0F2EB64B7C5.jpg
2009-06-08 13:57 . 2008-09-04 19:00 4710 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\A18057D85FF4BFD0C772B86CB96796EF.jpg
2009-06-08 13:57 . 2008-11-03 18:05 5071 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\9E3846B5C9130A24DC870C648C0B5AED.jpg
2009-06-08 13:57 . 2009-01-10 20:40 5968 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\9C7E8B05B616F1CB0B57BDAA42B28B3C.jpg
2009-06-08 13:57 . 2009-02-14 20:07 4737 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\99FE099B08E7085DC283027FDAAFDFCF.jpg
2009-06-08 13:57 . 2008-09-05 16:17 5795 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\970B4C7009F58F6495288AF6992EB379.jpg
2009-06-08 13:57 . 2008-08-20 13:13 6008 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\9478777D74CFA6FA4ECFB578E785BEBE.jpg
2009-06-08 13:57 . 2009-02-15 16:59 4350 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\93DF2A0BF0994ED367EEF6266BC4D9B7.jpg
2009-06-08 13:57 . 2009-04-02 19:41 1235 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\926791F096F46D9B8ED147235CF34A04.jpg
2009-06-08 13:57 . 2009-03-29 15:06 1938 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\938F15707D4FF2494574770BE2C8EF7E.jpg
2009-06-08 13:57 . 2008-12-24 14:20 1279 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\91A2BF5F28A7547253A42EBCF8AD1880.jpg
2009-06-08 13:57 . 2008-08-25 22:27 2204 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\8EB1EF360497967F27DC35BC7F5C0CE2.gif
2009-06-08 13:57 . 2008-08-20 19:32 4915 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\8D0878424A2D9C6A54CBF10D8FF6496E.jpg
2009-06-08 13:57 . 2008-10-29 17:47 2875 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\897C51C57FDF24D58F3A79A2AC8F0F7C.gif
2009-06-08 13:57 . 2008-11-01 13:53 2327 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\884A2A09DC25E2A9D1D05C15655CF11B.jpg
2009-06-08 13:57 . 2009-04-29 20:45 3799 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\87187B0B86F91A62EC0DA53053859ED3.jpg
2009-06-08 13:57 . 2008-12-23 21:23 5680 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\84A7F80A32716214440BAEBED472679A.jpg
2009-06-08 13:57 . 2009-05-23 10:15 4909 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\843791DFACD35B59410E375A2C7388B2.jpg
2009-06-08 13:57 . 2009-05-04 20:14 4147 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\840F3B6A08A7A5B04F29D8AE8B50F26A.jpg
2009-06-08 13:57 . 2009-01-03 21:59 1717 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\827C5075820D3D91C86B72F5DDA756FD.jpg
2009-06-08 13:57 . 2008-08-24 17:55 4234 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\81BC790D2FCFCF19486B296703A27D26.jpg
2009-06-08 13:57 . 2008-10-10 17:29 2312 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\81A3C1ABA1EAC2EB90A61D589E579EA6.jpg
2009-06-08 13:57 . 2009-04-06 15:01 5944 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\8027BB3B107102C8CA37F87579470262.jpg
2009-06-08 13:57 . 2009-05-29 14:51 5465 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\7D370EF41DEF9AE4BF4F9A129F94DD17.jpg
2009-06-08 13:57 . 2008-10-25 20:18 4533 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\7DCAC8FF8F16F83A5A6D90EEA332BC25.jpg
2009-06-08 13:57 . 2008-08-21 19:01 5225 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\7B2744CF92CBF345CCE09BDB76C9BA2F.jpg
2009-06-08 13:57 . 2009-05-20 17:06 6129 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\78CBDF28060D61CC787CF4D3D998B8ED.jpg
2009-06-08 13:57 . 2008-10-28 21:34 3630 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\783104B24BC46C4A7FCA4996165CD8D4.jpg
2009-06-08 13:57 . 2009-02-05 19:37 691 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\77D4FAAA0358634D6758A4FAC1C38A82.jpg
2009-06-08 13:57 . 2009-03-22 21:08 1828 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\776F52FDEBF58A2B6AE0FBF76D869228.jpg
2009-06-08 13:57 . 2008-11-12 16:20 4576 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\74EF0ED04A80D107AF9531B13FE4989D.jpg
2009-06-08 13:57 . 2009-03-03 08:52 4840 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\746298443239426AF792002122185E2B.jpg
2009-06-08 13:57 . 2008-12-11 20:24 3933 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\73A2B2158E4B096B3659D70FFE0C9213.jpg
2009-06-08 13:57 . 2008-09-29 17:18 4981 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\7364FFAB576989AA61FBBFC5808C9AD4.jpg
2009-06-08 13:57 . 2008-12-07 10:40 4400 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\73565AC2EA8D4BA791088CDFA0A4F4E7.jpg
2009-06-08 13:57 . 2009-04-02 18:48 1814 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\7284C913432EFC4E9B765E2F04C1D1B0.jpg
2009-06-08 13:57 . 2008-10-14 18:13 6024 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\725D54891C381BDD8988BFB2DA67C384.jpg
2009-06-08 13:57 . 2008-10-21 18:50 3904 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\71892F2B9407ECF2BB71CBA81E10C902.jpg
2009-06-08 13:57 . 2009-05-20 13:04 5468 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\6FD0CD03B2B8C8BF6E281318B6EC9EFC.jpg
2009-06-08 13:57 . 2008-09-05 19:37 4912 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\6CA1B91AC89946CB817A0880E95EA744.jpg
2009-06-08 13:57 . 2009-01-29 22:10 4410 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\69ABDE0FC4CF13F028BEC2E1F8580187.jpg
2009-06-08 13:57 . 2008-12-14 13:49 5668 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\67BBE19369B6A1840E5FFAB85418D032.jpg
2009-06-08 13:57 . 2008-12-26 00:16 1748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\679D67CECE216F2D87A2950713D18EDB.jpg
2009-06-08 13:57 . 2009-05-06 17:27 1664 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\6528E29853D596C1C5D3DA8FD8B66ED2.jpg
2009-06-08 13:57 . 2009-02-09 19:20 4646 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\65034AACBFC7F2755170D140DD5A3EE9.jpg
2009-06-08 13:57 . 2008-09-01 07:37 1817 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\62CC99D0C91283F7097A3F589949A2F4.jpg
2009-06-08 13:57 . 2009-05-06 13:08 6432 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\614D86635E89B80BB3D159824E085847.jpg
2009-06-08 13:57 . 2009-04-17 18:00 5486 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5F0AB72969704F32B2B15F0FC0CE9DA6.jpg
2009-06-08 13:57 . 2008-12-11 20:35 3348 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5EB93A6311E0726FC8B8D7F2DBEB9B86.jpg
2009-06-08 13:57 . 2008-10-29 11:34 1441 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5CA2DC3EF08ED6F7C050F68DB64056F6.jpg
2009-06-08 13:57 . 2009-05-23 08:43 1608 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5BBCDFA6E710479337B34368EEE2BE6B.jpg
2009-06-08 13:57 . 2008-11-10 16:43 5903 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5A50C41130B0D2F6871CFD83BFB0F9C9.jpg
2009-06-08 13:57 . 2008-12-09 16:00 4634 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\5A3E29791957BD1E2D0D202078173D51.jpg
2009-06-08 13:57 . 2008-12-11 18:32 6732 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\559EBBB2B78821DEA0C14698DD538D60.jpg
2009-06-08 13:57 . 2008-08-20 19:44 3391 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\53508C7CE690303C6ED6021A41C3875F.jpg
2009-06-08 13:57 . 2009-05-16 16:05 1177 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\52AB0AC7FB8AFF634DE4C4F20051DAC6.jpg
2009-06-08 13:57 . 2009-02-14 16:33 1393 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\51EEE6B170432BAB2DC33A0BAF361F43.jpg
2009-06-08 13:57 . 2008-09-06 19:14 5481 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\4F5A24C5EC352E197A9DF289438E76AC.jpg
2009-06-08 13:57 . 2009-01-30 19:45 1766 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\4EC439B360FA416BA673F1BBC82190F3.jpg
2009-06-08 13:57 . 2009-03-27 20:31 2042 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\4DC86FBEA41E5E518ACC5A41F789EE25.jpg
2009-06-08 13:57 . 2008-10-31 18:34 5087 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\4C9C7F3E5B7F28D7745FEDB22259E0D9.jpg
2009-06-08 13:57 . 2008-09-27 19:46 4918 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\4AAF577C7FAE06BEC2647B8A162FDFCD.jpg
2009-06-08 13:57 . 2008-11-28 15:22 1196 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\49B0A0802D58634E938780CCD6EF84D9.jpg
2009-06-08 13:57 . 2008-12-13 09:55 4169 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\474B870BC53894213D17AF8CAC4F5CE2.jpg
2009-06-08 13:57 . 2008-12-14 13:50 1350 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\449DF4FFB106AB102C1B7B05A14A2C15.jpg
2009-06-08 13:57 . 2008-08-20 12:29 4339 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\401B6D321433F8A2D9075DAFA561F7ED.jpg
2009-06-08 13:57 . 2009-01-21 19:08 3746 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\3ACF31D81AF2FAB84D4BB2854E9806D8.jpg
2009-06-08 13:57 . 2008-08-23 18:55 5543 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\3A7FA658FA2A738317797A83148313EF.jpg
2009-06-08 13:57 . 2009-03-27 21:15 1475 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\37C177789D56F2145AEC173567649001.jpg
2009-06-08 13:57 . 2008-08-20 12:38 3778 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\35A171AEEE07F8DBB7F21AAC76985237.jpg
2009-06-08 13:57 . 2009-01-30 19:37 1951 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\331687DA675AF71FAF9378162A729ECD.jpg
2009-06-08 13:57 . 2009-05-20 13:20 2048 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\30411209033F510F10B31CE02D19A0BA.jpg
2009-06-08 13:57 . 2008-11-02 12:22 6559 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\3032E66495EAE42AB921C5B0B4E7FA5F.jpg
2009-06-08 13:57 . 2008-12-31 13:13 3650 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\2B145FBCFB106134660904FA0FBEE072.jpg
2009-06-08 13:57 . 2009-05-25 18:55 5867 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\298920C48997194D63346B85CDCAF786.jpg
2009-06-08 13:57 . 2008-12-21 22:56 5309 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\2958178AEDA8A6F2458B6430B46C1EF0.jpg
2009-06-08 13:57 . 2009-04-05 20:33 4584 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\2946EB2A27C1051A394328F17B4DDD36.jpg
2009-06-08 13:57 . 2008-09-24 18:37 5445 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\29431F5009B799B906C063CF3DB2D5D7.jpg
2009-06-08 13:57 . 2009-01-22 18:43 5334 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\28E078DF322017830F660680EC7252A4.jpg
2009-06-08 13:57 . 2009-05-23 22:01 1963 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\284F66B14A6D03727A65C6CA585D6234.jpg
2009-06-08 13:57 . 2008-12-15 21:10 1748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\27968F721BC378F7AA3E67D90DE1BAD8.jpg
2009-06-08 13:57 . 2008-10-01 19:37 4594 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\26B78EA1543A54D769D4AFEE06EE8E13.jpg
2009-06-08 13:57 . 2009-02-05 21:34 1723 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\26693EE46BD62346978C203E7A78F70A.jpg
2009-06-08 13:57 . 2009-05-16 16:05 1852 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\235EB0355915482B0872111404898D6F.jpg
2009-06-08 13:57 . 2008-12-26 22:31 1423 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\1D50AFF9AC4DDC85BF94424FE7707922.jpg
2009-06-08 13:57 . 2008-10-16 17:59 4917 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\1CB465B7309ECA2BE824584935C89363.jpg
2009-06-08 13:57 . 2008-12-19 09:57 5644 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\19F878B2063DC913EE456147AEF0FA34.jpg
2009-06-08 13:57 . 2008-09-22 18:55 4354 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\1821F0DBDC91DCD326BF9E1D8BB87129.jpg
2009-06-08 13:57 . 2009-02-14 20:06 1192 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\15FE872288983A0BE696DDCFE9B9F94D.jpg
2009-06-08 13:57 . 2009-04-19 18:14 5533 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\14C6698F496698DF8DEE85D384246F5F.jpg
2009-06-08 13:57 . 2008-09-30 18:01 4431 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\0EF6F3A97C5E8D49DCD3B20BD221DBF2.jpg
2009-06-08 13:57 . 2008-09-01 10:50 6221 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\0CC72DB42C590BC7632EC914B3C1C4EC.jpg
2009-06-08 13:57 . 2009-03-18 17:46 5694 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\0BCA621C7C995BD60741D0811764E018.jpg
2009-06-08 13:57 . 2009-02-18 18:52 361 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\0BE24BF6940C1ED76D3CD4244989B539.jpg
2009-06-08 13:57 . 2008-08-26 11:10 4365 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\09E2F0DC5C41FA768A3445CE9E957079.jpg
2009-06-08 13:57 . 2008-12-21 22:56 1748 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\08351DC78DB2D3F47B30976E602DFFD8.jpg
2009-06-08 13:57 . 2008-10-24 19:38 4159 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\077C39B45362DA2AAD4BAC48CFD96C83.jpg
2009-06-08 13:57 . 2008-12-20 16:03 4376 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\06421F3C6F61D8763B2B4D123A2F8587.jpg
2009-06-08 13:57 . 2008-12-20 16:03 4143 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\06E80B720738A589FB9224C5739EAA8A.jpg
2009-06-08 13:57 . 2009-01-19 19:59 4463 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\05C70BD40168CB7E2E6F631D689D7CBB.jpg
2009-06-08 13:57 . 2009-05-25 19:49 4971 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\049C7F2DCBD0DFCB669B453AF9228C3A.jpg
2009-06-08 13:57 . 2008-09-16 18:37 5243 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\PicHashes\047C42D177C13D8140C267BCF34DA463.jpg
2009-06-08 13:57 . 2009-05-03 15:38 4608 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Brajen_327600411\Thumbs.db
2009-06-08 13:57 . 2008-12-09 17:42 212941 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Brajen_327600411\sejmout.jpg
2009-06-08 13:57 . 2008-10-10 19:58 8078 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Huňďa_275233425\100526329-550.txt
2009-06-08 13:57 . 2009-03-22 17:42 283316 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Lada Kolinsky_259682914\Shot00013.jpg
2009-06-08 13:57 . 2009-05-03 15:38 7168 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Lada Kolinsky_259682914\Thumbs.db
2009-06-08 13:57 . 2009-05-03 15:44 10694207 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\TvT .wmv
2009-06-08 13:57 . 2009-05-22 16:17 22016 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\Thumbs.db
2009-06-08 13:57 . 2009-05-20 18:56 263612 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\Shot00114.jpg
2009-06-08 13:57 . 2009-05-20 18:53 330070 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\Shot00046.jpg
2009-06-08 13:57 . 2009-05-20 18:59 293414 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\powa.jpg
2009-06-08 13:57 . 2009-05-20 19:01 106366 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\914614c44d5827e0111362c5778a503b.jpg
2009-06-08 13:57 . 2009-05-03 15:37 10262192 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Loki_442151809\100ka Tvt.wmv
2009-06-08 13:57 . 2009-04-27 19:11 977376 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Mára_215384062\hudba-frestonfire\02.rar
2009-06-08 13:57 . 2008-12-07 10:41 92276 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\O_-)ŠáRyNkAO_-)_336967121\hockej.jpg
2009-06-08 13:57 . 2009-05-22 16:19 8192 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\O_-)ŠáRyNkAO_-)_336967121\Thumbs.db
2009-06-08 13:57 . 2009-01-13 14:35 53351 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\TIMO_284920821\standa.JPG
2009-06-08 13:57 . 2009-05-08 16:45 5632 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\TIMO_284920821\Thumbs.db
2009-06-08 13:57 . 2008-10-11 18:49 78064 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\TIMO_284920821\IMG_2310.JPG
2009-06-08 13:57 . 2009-01-10 17:28 5003392 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\TIMO_284920821\Plna taska huleni.mp3
2009-06-08 13:57 . 2008-12-08 15:53 67953 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\TIMO_284920821\hello.JPG
2009-06-08 13:57 . 2009-05-22 16:20 99328 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\Thumbs.db
2009-06-08 13:57 . 2009-05-22 15:00 76487 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\mishulka.jpg
2009-06-08 13:57 . 2009-05-22 15:00 56439 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_4v4ZE.jpg
2009-06-08 13:57 . 2009-05-22 15:00 79433 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_4qavy.jpg
2009-06-08 13:57 . 2009-05-22 15:00 73872 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_4E1wf.jpg
2009-06-08 13:57 . 2009-05-22 15:00 80696 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_4d251.jpg
2009-06-08 13:57 . 2009-05-22 15:00 91671 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_4a45i.jpg
2009-06-08 13:57 . 2009-05-22 15:00 71149 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_47Wei.jpg
2009-06-08 13:57 . 2009-05-22 15:00 62721 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_429OU.jpg
2009-06-08 13:57 . 2009-05-22 15:00 82076 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3Zu30.jpg
2009-06-08 13:57 . 2009-05-22 15:00 77677 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3ZtDT.jpg
2009-06-08 13:57 . 2009-05-22 15:00 99031 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3ZLcT.jpg
2009-06-08 13:57 . 2009-05-22 15:00 71478 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3ZLc1.jpg
2009-06-08 13:57 . 2009-05-22 15:00 127280 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3XyrK.jpg
2009-06-08 13:57 . 2009-05-22 15:00 137798 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3Xyl6.jpg
2009-06-08 13:57 . 2009-05-22 15:00 166457 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3XyBV.jpg
2009-06-08 13:57 . 2009-05-22 15:00 122513 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3XxYS.jpg
2009-06-08 13:57 . 2009-05-22 15:00 127416 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3Xxxy.jpg
2009-06-08 13:57 . 2009-05-22 14:59 82814 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3SCcB.jpg
2009-06-08 13:57 . 2009-05-22 14:59 89961 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3RjJp.jpg
2009-06-08 13:57 . 2009-05-22 14:59 109110 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3M2DY.jpg
2009-06-08 13:57 . 2009-05-22 14:59 139950 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3LhGU.jpg
2009-06-08 13:57 . 2009-05-22 14:59 130893 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\Zmrzlinka_392823608\Nová složka (7)\gZTZ_3LhEt.jpg
2009-06-08 13:57 . 2009-05-03 15:38 5120 --sha-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\_Mik-e_53-__312211215\Thumbs.db
2009-06-08 13:57 . 2009-05-29 21:41 141 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\voip.ini
2009-06-08 13:57 . 2008-10-03 17:39 29942838 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\RcvdFiles\_Mik-e_53-__312211215\misiik.bmp
2009-06-08 13:57 . 2009-05-29 21:41 78305 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\280192793.qip
2009-06-08 13:57 . 2009-05-29 15:02 78305 ----a-w- c:\documents and settings\Stanik\Application Data\280192793\280192793.bip


------- Sigcheck -------

[7] 2008-04-13 19:20 361344 93EA8D04EC73A85DB02EB8805988F733 c:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 11:51 361600 CBEEBEB899E31EF52B962CB31FC8CA5C c:\windows\system32\drivers\tcpip.sys
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2009-06-30 2329224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GEST"="c:\program files\GIGABYTE\GEST\RUN.exe" [2008-08-05 236040]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-06-26 1948440]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"IObit Security 360"="c:\program files\IObit\IObit Security 360\IS360tray.exe" [2009-06-16 817424]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2007-09-19 16844800]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-03-08 128512]

c:\documents and settings\Guest\Start Menu\Programs\Startup\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-06-26 09:42 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\RACServerLogon]
2008-12-16 21:24 62736 ----a-w- c:\windows\system32\RACServerLogon2.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\GIGABYTE\\GEST\\run.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Games\\cs\\hl.exe"=
"c:\\Games\\Valve\\hl.exe"=
"c:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Games\\Diablo\\Game.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Program Files\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Games\\HLSW\\hlsw.exe"=
"c:\\Games\\COD-2\\CoD2MP_s.exe"=
"c:\\Games\\Stronghold Crusader\\Stronghold Crusader.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Games\\TmNationsForever\\TmForever.exe"=
"c:\\Games\\BFME\\game.dat"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"4444:TCP"= 4444:TCP:Advanced Net Monitor for Classroom
"8600:TCP"= 8600:TCP:Remote Administrator Control Server, TCP port 8600
"8080:TCP"= 8080:TCP:Remote Administrator Control Server, TCP port 8080

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [25.5.2009 20:04 335752]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [25.5.2009 20:04 108552]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [25.5.2009 20:04 298776]
R2 PCNetSoftware RAC Server;PCNetSoftware RAC Server;c:\program files\PCNetSoftware\RAC Server\RACs.exe [20.12.2008 17:34 3601680]
R2 RACDriver;RAC driver;c:\program files\PCNetSoftware\RAC Server\RACDriver.sys [20.12.2008 17:34 8208]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [4.8.2008 14:29 93696]
R3 GEST Service;GEST Service for program management.;c:\program files\GIGABYTE\GEST\gsvr.exe [4.8.2008 14:15 55816]
R3 IS360service;IS360service;c:\program files\IObit\IObit Security 360\IS360srv.exe [10.7.2009 19:07 224528]
R3 racmirror;racmirror;c:\windows\system32\drivers\racmirror.sys [20.12.2008 17:34 32784]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2.8.2005 23:10 32512]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'

2009-06-06 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 11:34]

2009-07-10 c:\windows\Tasks\Crysis Wars(R) Updates.job
- c:\windows\Installer\Crysis Wars(R) Updates for All Users.lnk [2008-10-24 19:09]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
uInternet Settings,ProxyServer = ftp=cache.vbs.cz:3128
uInternet Settings,ProxyOverride = <local>
uSearchURL,(Default) = hxxp://red.clientapps.yahoo.com/customi ... .yahoo.com
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Stanik\Application Data\Mozilla\Firefox\Profiles\hwbw1jpa.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll

---- NASTAVENÍ FIREFOXU ----
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - fales
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.urlbar.autofill - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.notify.backoffcount - 5
FF - user.js: content.notify.interval - 750000
FF - user.js: content.notify.ontimer - true
FF - user.js: content.switch.threshold - 750000
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: network.http.pipelining - true
FF - user.js: network.http.pipelining.firstrequest - true
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.proxy.pipelining - true
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: nglayout.initialpaint.delay - 0
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-10 23:56
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-220523388-1580436667-839522115-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:ac,7f,a4,32,92,76,0f,2d,b8,38,58,64,cd,44,14,32,2b,16,d7,24,4a,9d,80,
1e,ad,63,93,b0,02,4a,ae,36,dd,3f,92,68,83,04,56,78,06,4a,51,38,ab,98,54,77,\
"??"=hex:bc,84,ce,3e,79,d5,8a,3f,12,75,a9,27,d0,1b,57,7c

[HKEY_USERS\S-1-5-21-220523388-1580436667-839522115-1003\Software\SecuROM\License information*]
"datasecu"=hex:39,3e,97,73,90,fd,20,ec,c5,56,d3,93,a6,86,b9,62,dd,4b,6a,83,f1,
bd,60,3c,f2,46,08,e4,35,7d,8f,f8,20,cc,f6,7c,fd,76,f6,05,b3,cf,1c,79,0d,5e,\
"rkeysecu"=hex:ff,ad,43,cd,bf,ef,3b,ef,7c,8e,1d,50,83,31,41,f8
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1184)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\RACServerLogon2.dll
.
Celkový čas: 2009-07-10 23:57
ComboFix-quarantined-files.txt 2009-07-10 21:57
ComboFix2.txt 2009-07-10 20:45

Před spuštěním: 228 872 486 912 bytes free
Po spuštění: Volných bajtů: 228 845 502 464

659 --- E O F --- 2009-06-14 20:54

[Sanko]

LOG z HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0:05:38, on 11.7.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\PCNetSoftware\RAC Server\RACs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IObit\IObit Security 360\IS360srv.exe
C:\Program Files\GIGABYTE\GEST\GSvr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ftp=cache.vbs.cz:3128
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [GEST] C:\Program Files\GIGABYTE\GEST\RUN.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [IObit Security 360] C:\Program Files\IObit\IObit Security 360\IS360tray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab3.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 7902203593
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2891570234
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: RACServerLogon - C:\WINDOWS\SYSTEM32\RACServerLogon2.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IS360service - Unknown owner - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PCNetSoftware RAC Server - Miloslav Novotny N+P - C:\Program Files\PCNetSoftware\RAC Server\RACs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 7532 bytes

[Damned]

Myslím, že PC je teď rychlejší.
Vir ani jiná potvora tam už není.

Odinstaluj ComboFix.
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš->spustíš

(pozn.Pokud máš AVG, před stažením T-Cleaneru a po dobu čištění deaktivuj AVG, následně T-Cleaner smaž
a zapni si AVG.)


Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni select all found, pak klik empty selected.
Pokud chceš zachovat svoje uložená hesla, klikni na No.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache,
cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer,
Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Označ topic za vyřešený (zelená fajfka) a měj se.

[Sanko]

Ok, díky, tak myslím že vyřešeno

[Damned]

Tak se měj a kdyby něco, tak se zastav. Označ topic za vyřešený (zelená fajfka) a měj se.