Re: nekdo vidi veskerou mou cinnost na PC??
Re: nekdo vidi veskerou mou cinnost na PC??
Je možné, že ten dotyčný zná tvé heslo na mail a vždy ti změněné heslo na FB resetuje. Změň si heslo jak na FB, tak na mailu.
Re: nekdo vidi veskerou mou cinnost na PC??
OTL logfile created on: 13.8.2011 17:26:14 - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
511,53 Mb Total Physical Memory | 146,61 Mb Available Physical Memory | 28,66% Memory free
1,22 Gb Paging File | 0,85 Gb Available in Paging File | 69,38% Paging File free
Paging file location(s): C:\pagefile.sys 766 766G:\pagefile.sys 766 766 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71,55 Gb Total Space | 58,38 Gb Free Space | 81,59% Space Free | Partition Type: NTFS
Computer Name: TERRY | User Name: Terrynka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.08.13 17:08:40 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory\OTL.exe
PRC - [2011.07.08 09:29:02 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.06.15 15:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011.04.27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.08.13 17:08:40 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory\OTL.exe
MOD - [2011.03.04 08:36:57 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\vbscript.dll
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\fastprox.dll
MOD - [2008.10.24 21:15:54 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
MOD - [2008.10.24 21:15:54 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
MOD - [2008.04.14 08:52:06 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemcomn.dll
MOD - [2008.04.14 08:52:06 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemdisp.dll
MOD - [2008.04.14 08:52:06 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiutils.dll
MOD - [2008.04.14 08:52:06 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemsvc.dll
MOD - [2008.04.14 08:52:06 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemprox.dll
MOD - [2008.04.14 08:52:04 | 000,713,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\sxs.dll
MOD - [2008.04.14 08:51:38 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cabinet.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.04.27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | System | Running] -- -- (MpKsl3e43105e)
DRV - [2011.08.13 14:19:30 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{62EBE921-743D-40E9-A725-C977EBD96F48}\MpKslea7adba0.sys -- (MpKslea7adba0)
DRV - [2011.07.30 19:33:56 | 000,004,096 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\siside.sys -- (SiSide)
DRV - [2011.07.30 19:25:06 | 000,035,712 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SISAGPX.sys -- (sisagp)
DRV - [2011.07.30 03:20:46 | 000,049,024 | ---- | M] (Windows (R) 2000 DDK provider) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\sisidex.sys -- (sisidex)
DRV - [2011.07.30 03:20:46 | 000,009,472 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sisperf.sys -- (sisperf)
DRV - [2011.07.30 02:02:59 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisnicxp.sys -- (SISNICXP)
DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004.08.04 00:31:36 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.08.11 01:10:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2011.08.11 01:11:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla\Extensions
[2011.08.12 16:23:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla\Firefox\Profiles\mwinf4at.default\extensions
[2011.08.11 01:10:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) --
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\TERRYNKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\MWINF4AT.DEFAULT\EXTENSIONS\PASSHASH@MOZILLA.WIJJO.COM.XPI
[2011.07.08 09:29:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.08.13 01:48:21 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Reg Error: Value error. File not found
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004..\Run: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.07.29 23:22:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.08.13 01:50:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011.08.13 01:43:11 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011.08.13 01:40:57 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011.08.13 01:40:57 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011.08.13 01:40:57 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011.08.13 01:40:57 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011.08.13 01:40:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011.08.13 01:39:46 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.08.13 01:39:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Terrynka\Nabídka Start\Programy\Nástroje pro správu
[2011.08.13 00:41:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Plocha\8.11
[2011.08.12 19:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Nabídka Start\Programy\HiJackThis
[2011.08.12 19:26:55 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011.08.11 23:48:33 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys
[2011.08.11 01:31:50 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.08.11 01:20:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011.08.11 01:18:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\PackageAware
[2011.08.11 01:17:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory
[2011.08.11 01:11:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Mozilla
[2011.08.11 01:11:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla
[2011.08.11 01:10:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011.08.11 01:10:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Terrynka\Recent
[2011.08.10 21:39:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2011.08.10 20:31:06 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.08.09 19:09:04 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011.08.09 19:08:26 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011.08.08 22:43:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Plocha\Nová složka
[2011.08.08 04:07:10 | 000,266,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TweakUI.exe
[2011.08.08 04:07:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Powertoys for Windows XP
[2011.08.08 03:55:02 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Terrynka\PrivacIE
[2011.08.08 03:54:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Terrynka\IECompatCache
[2011.08.08 03:52:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2011.08.08 03:52:04 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.08.08 03:52:02 | 000,000,000 | ---D | C] -- C:\Program Files\ToniArts
[2011.08.08 03:51:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\EasyCleaner
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.08.13 14:11:52 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011.08.13 14:06:48 | 000,186,097 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011.08.13 14:06:46 | 000,000,270 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011.08.13 14:06:40 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.08.13 14:06:34 | 536,449,024 | -HS- | M] () -- C:\hiberfil.sys
[2011.08.13 01:48:21 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011.08.13 01:43:15 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011.08.12 20:35:49 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Terrynka\Plocha\HiJackThis.lnk
[2011.08.12 02:53:15 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.08.11 01:35:11 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.08.11 01:20:42 | 000,001,680 | ---- | M] () -- C:\Documents and Settings\Terrynka\Plocha\Uniblue RegistryBooster.lnk
[2011.08.11 01:11:30 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2011.08.11 01:10:49 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2011.08.09 19:50:12 | 000,445,540 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.08.09 19:50:12 | 000,443,254 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011.08.09 19:50:12 | 000,083,184 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011.08.09 19:50:12 | 000,070,514 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.08.08 03:57:37 | 000,025,502 | ---- | M] () -- C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
[2011.08.07 04:35:54 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\Terrynka\Dokumenty\Default.rdp
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy
511,53 Mb Total Physical Memory | 146,61 Mb Available Physical Memory | 28,66% Memory free
1,22 Gb Paging File | 0,85 Gb Available in Paging File | 69,38% Paging File free
Paging file location(s): C:\pagefile.sys 766 766G:\pagefile.sys 766 766 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 71,55 Gb Total Space | 58,38 Gb Free Space | 81,59% Space Free | Partition Type: NTFS
Computer Name: TERRY | User Name: Terrynka | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - [2011.08.13 17:08:40 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory\OTL.exe
PRC - [2011.07.08 09:29:02 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.06.15 15:16:48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2011.04.27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
========== Modules (SafeList) ==========
MOD - [2011.08.13 17:08:40 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory\OTL.exe
MOD - [2011.03.04 08:36:57 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\vbscript.dll
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009.02.09 12:56:05 | 000,473,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\fastprox.dll
MOD - [2008.10.24 21:15:54 | 000,626,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
MOD - [2008.10.24 21:15:54 | 000,096,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll
MOD - [2008.04.14 08:52:06 | 000,214,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemcomn.dll
MOD - [2008.04.14 08:52:06 | 000,178,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemdisp.dll
MOD - [2008.04.14 08:52:06 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wmiutils.dll
MOD - [2008.04.14 08:52:06 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemsvc.dll
MOD - [2008.04.14 08:52:06 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\wbem\wbemprox.dll
MOD - [2008.04.14 08:52:04 | 000,713,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\sxs.dll
MOD - [2008.04.14 08:51:38 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\cabinet.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.04.27 15:39:26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | System | Running] -- -- (MpKsl3e43105e)
DRV - [2011.08.13 14:19:30 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{62EBE921-743D-40E9-A725-C977EBD96F48}\MpKslea7adba0.sys -- (MpKslea7adba0)
DRV - [2011.07.30 19:33:56 | 000,004,096 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\siside.sys -- (SiSide)
DRV - [2011.07.30 19:25:06 | 000,035,712 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SISAGPX.sys -- (sisagp)
DRV - [2011.07.30 03:20:46 | 000,049,024 | ---- | M] (Windows (R) 2000 DDK provider) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\sisidex.sys -- (sisidex)
DRV - [2011.07.30 03:20:46 | 000,009,472 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\sisperf.sys -- (sisperf)
DRV - [2011.07.30 02:02:59 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisnicxp.sys -- (SISNICXP)
DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2004.08.04 00:31:36 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.08.11 01:10:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2011.08.11 01:11:49 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla\Extensions
[2011.08.12 16:23:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla\Firefox\Profiles\mwinf4at.default\extensions
[2011.08.11 01:10:46 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) --
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\TERRYNKA\DATA APLIKACĂ\MOZILLA\FIREFOX\PROFILES\MWINF4AT.DEFAULT\EXTENSIONS\PASSHASH@MOZILLA.WIJJO.COM.XPI
[2011.07.08 09:29:03 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.01.01 10:00:00 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2010.01.01 10:00:00 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2010.01.01 10:00:00 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2010.01.01 10:00:00 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2010.01.01 10:00:00 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml
O1 HOSTS File: ([2011.08.13 01:48:21 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - Reg Error: Value error. File not found
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004..\Run: [PowerSuite] C:\Program Files\Uniblue\PowerSuite\launcher.exe (Uniblue Systems Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1214440339-1220945662-682003330-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.07.29 23:22:04 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.08.13 01:50:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2011.08.13 01:43:11 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011.08.13 01:40:57 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011.08.13 01:40:57 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011.08.13 01:40:57 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011.08.13 01:40:57 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011.08.13 01:40:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011.08.13 01:39:46 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011.08.13 01:39:33 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Terrynka\Nabídka Start\Programy\Nástroje pro správu
[2011.08.13 00:41:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Plocha\8.11
[2011.08.12 19:26:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Nabídka Start\Programy\HiJackThis
[2011.08.12 19:26:55 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2011.08.11 23:48:33 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys
[2011.08.11 01:31:50 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.08.11 01:20:31 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
[2011.08.11 01:18:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\PackageAware
[2011.08.11 01:17:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Dokumenty\Stažené soubory
[2011.08.11 01:11:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Local Settings\Data aplikací\Mozilla
[2011.08.11 01:11:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Data aplikací\Mozilla
[2011.08.11 01:10:45 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2011.08.11 01:10:15 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Terrynka\Recent
[2011.08.10 21:39:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2011.08.10 20:31:06 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.08.09 19:09:04 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011.08.09 19:08:26 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011.08.08 22:43:01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Terrynka\Plocha\Nová složka
[2011.08.08 04:07:10 | 000,266,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\TweakUI.exe
[2011.08.08 04:07:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Powertoys for Windows XP
[2011.08.08 03:55:02 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Terrynka\PrivacIE
[2011.08.08 03:54:59 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Terrynka\IECompatCache
[2011.08.08 03:52:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
[2011.08.08 03:52:04 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2011.08.08 03:52:02 | 000,000,000 | ---D | C] -- C:\Program Files\ToniArts
[2011.08.08 03:51:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\EasyCleaner
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.08.13 14:11:52 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011.08.13 14:06:48 | 000,186,097 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011.08.13 14:06:46 | 000,000,270 | ---- | M] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011.08.13 14:06:40 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.08.13 14:06:34 | 536,449,024 | -HS- | M] () -- C:\hiberfil.sys
[2011.08.13 01:48:21 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011.08.13 01:43:15 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011.08.12 20:35:49 | 000,002,447 | ---- | M] () -- C:\Documents and Settings\Terrynka\Plocha\HiJackThis.lnk
[2011.08.12 02:53:15 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.08.11 01:35:11 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.08.11 01:20:42 | 000,001,680 | ---- | M] () -- C:\Documents and Settings\Terrynka\Plocha\Uniblue RegistryBooster.lnk
[2011.08.11 01:11:30 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2011.08.11 01:10:49 | 000,000,724 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2011.08.09 19:50:12 | 000,445,540 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.08.09 19:50:12 | 000,443,254 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2011.08.09 19:50:12 | 000,083,184 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2011.08.09 19:50:12 | 000,070,514 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.08.08 03:57:37 | 000,025,502 | ---- | M] () -- C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
[2011.08.07 04:35:54 | 000,000,000 | -H-- | M] () -- C:\Documents and Settings\Terrynka\Dokumenty\Default.rdp
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
Re: nekdo vidi veskerou mou cinnost na PC??
========== Files Created - No Company Name ==========
[2011.08.13 01:43:15 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011.08.13 01:43:12 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2011.08.13 01:40:57 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011.08.13 01:40:57 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011.08.13 01:40:57 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011.08.13 01:40:57 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011.08.13 01:40:57 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011.08.12 19:26:57 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Terrynka\Plocha\HiJackThis.lnk
[2011.08.11 01:21:03 | 000,000,270 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011.08.11 01:20:42 | 000,001,680 | ---- | C] () -- C:\Documents and Settings\Terrynka\Plocha\Uniblue RegistryBooster.lnk
[2011.08.11 01:11:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.08.11 01:10:49 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
[2011.08.11 01:10:49 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2011.08.08 04:07:10 | 000,160,217 | ---- | C] () -- C:\WINDOWS\System32\PowerToysLicense.rtf
[2011.08.08 03:57:37 | 000,025,502 | ---- | C] () -- C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
[2011.08.07 04:35:54 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\Terrynka\Dokumenty\Default.rdp
[2011.07.30 02:24:11 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\Dualunis.exe
[2011.07.30 02:10:24 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\IDEproperty.dll
[2011.07.30 00:14:20 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.07.30 00:13:13 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.07.29 23:24:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.07.29 23:19:13 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.05.16 14:01:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008.05.16 14:01:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008.05.16 14:01:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008.05.16 14:01:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008.05.16 14:01:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008.05.16 14:01:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008.05.16 14:01:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008.05.16 14:01:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008.05.16 14:01:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.10.14 11:56:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe
[2004.08.18 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004.08.18 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004.08.18 14:00:00 | 000,445,540 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.18 14:00:00 | 000,443,254 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2004.08.18 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004.08.18 14:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2004.08.18 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004.08.18 14:00:00 | 000,083,184 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2004.08.18 14:00:00 | 000,070,514 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.18 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004.08.18 14:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2004.08.18 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004.08.18 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.08.18 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004.08.18 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.18 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"PowerSuite" = "C:\Program Files\Uniblue\PowerSuite\launcher.exe" delay 20000 -m -- [2011.01.27 08:57:52 | 000,067,448 | ---- | M] (Uniblue Systems Limited)
< c:\windows\*.* /U >
[3 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]
< MD5 for: AGP440.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.18 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\explorer.exe
[2004.08.18 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: HAL.DLL >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\hal.dll
[2008.04.14 00:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.18 14:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
< MD5 for: LSASS.EXE >
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
< MD5 for: NETLOGON.DLL >
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2004.08.18 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.18 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\smss.exe
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2004.08.18 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< End of report >
[2011.08.13 01:43:15 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011.08.13 01:43:12 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2011.08.13 01:40:57 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011.08.13 01:40:57 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011.08.13 01:40:57 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011.08.13 01:40:57 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011.08.13 01:40:57 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011.08.12 19:26:57 | 000,002,447 | ---- | C] () -- C:\Documents and Settings\Terrynka\Plocha\HiJackThis.lnk
[2011.08.11 01:21:03 | 000,000,270 | ---- | C] () -- C:\WINDOWS\tasks\RegistryBooster.job
[2011.08.11 01:20:42 | 000,001,680 | ---- | C] () -- C:\Documents and Settings\Terrynka\Plocha\Uniblue RegistryBooster.lnk
[2011.08.11 01:11:30 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2011.08.11 01:10:49 | 000,000,730 | ---- | C] () -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Mozilla Firefox.lnk
[2011.08.11 01:10:49 | 000,000,724 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2011.08.08 04:07:10 | 000,160,217 | ---- | C] () -- C:\WINDOWS\System32\PowerToysLicense.rtf
[2011.08.08 03:57:37 | 000,025,502 | ---- | C] () -- C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
[2011.08.07 04:35:54 | 000,000,000 | -H-- | C] () -- C:\Documents and Settings\Terrynka\Dokumenty\Default.rdp
[2011.07.30 02:24:11 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\Dualunis.exe
[2011.07.30 02:10:24 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\IDEproperty.dll
[2011.07.30 00:14:20 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2011.07.30 00:13:13 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.07.29 23:24:30 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2011.07.29 23:19:13 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.05.16 14:01:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008.05.16 14:01:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008.05.16 14:01:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008.05.16 14:01:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008.05.16 14:01:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008.05.16 14:01:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008.05.16 14:01:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008.05.16 14:01:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008.05.16 14:01:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2005.10.14 11:56:50 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2005.10.14 11:56:50 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\VorbisEnc.dll
[2005.10.14 11:56:50 | 000,778,240 | ---- | C] () -- C:\WINDOWS\System32\DivXsm.exe
[2005.10.14 11:56:50 | 000,761,856 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2005.10.14 11:56:50 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\xvid.dll
[2005.10.14 11:56:50 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2005.10.14 11:56:50 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2005.10.14 11:56:50 | 000,155,136 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2005.10.14 11:56:50 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2005.10.14 11:56:48 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\MMSwitch.dll
[2005.10.14 11:56:48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\MMAVILNG.exe
[2004.08.18 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004.08.18 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004.08.18 14:00:00 | 000,445,540 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.18 14:00:00 | 000,443,254 | ---- | C] () -- C:\WINDOWS\System32\perfh005.dat
[2004.08.18 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004.08.18 14:00:00 | 000,269,162 | ---- | C] () -- C:\WINDOWS\System32\perfi005.dat
[2004.08.18 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004.08.18 14:00:00 | 000,083,184 | ---- | C] () -- C:\WINDOWS\System32\perfc005.dat
[2004.08.18 14:00:00 | 000,070,514 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.18 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004.08.18 14:00:00 | 000,032,072 | ---- | C] () -- C:\WINDOWS\System32\perfd005.dat
[2004.08.18 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004.08.18 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.08.18 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004.08.18 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.18 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== Custom Scans ==========
< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"PowerSuite" = "C:\Program Files\Uniblue\PowerSuite\launcher.exe" delay 20000 -m -- [2011.01.27 08:57:52 | 000,067,448 | ---- | M] (Uniblue Systems Limited)
< c:\windows\*.* /U >
[3 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]
< MD5 for: AGP440.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\agp440.sys
[2008.04.14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
< MD5 for: ATAPI.SYS >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\atapi.sys
[2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.18 14:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\eventlog.dll
[2008.04.14 08:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.18 14:00:00 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 08:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\explorer.exe
[2004.08.18 14:00:00 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: HAL.DLL >
[2004.08.18 14:00:00 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 09:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.14 00:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\hal.dll
[2008.04.14 00:01:30 | 000,131,840 | ---- | M] (Microsoft Corporation) MD5=6F61D3287A6A15A08A9433222C09D17F -- C:\WINDOWS\system32\HAL.DLL
[2004.08.18 14:00:00 | 000,131,968 | ---- | M] (Microsoft Corporation) MD5=F9A0F579FC18036FFDD9E26E0D268CCD -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll
< MD5 for: LSASS.EXE >
[2004.08.18 14:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\lsass.exe
[2008.04.14 08:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe
< MD5 for: NDIS.SYS >
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ndis.sys
[2008.04.14 00:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.18 14:00:00 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys
< MD5 for: NETLOGON.DLL >
[2004.08.18 14:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\netlogon.dll
[2008.04.14 08:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2004.08.18 14:00:00 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\scecli.dll
[2008.04.14 08:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: SMSS.EXE >
[2004.08.18 14:00:00 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\smss.exe
[2008.04.14 08:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe
< MD5 for: SVCHOST.EXE >
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\svchost.exe
[2008.04.14 08:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.18 14:00:00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
< MD5 for: USERINIT.EXE >
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\userinit.exe
[2008.04.14 08:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.18 14:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2004.08.18 14:00:00 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\winlogon.exe
[2008.04.14 08:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2_32.DLL >
[2004.08.18 14:00:00 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\SoftwareDistribution\Download\44c8256673ca0542cb198384f8131b68\ws2_32.dll
[2008.04.14 08:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON
< End of report >
Re: nekdo vidi veskerou mou cinnost na PC??
Tento soubor znáš?
C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
Otestuj na www.virustotal.com
C:\WINDOWS\System32\Dualunis.exe
U gmeru udělej ještě druhý sken.
Já tedy nejsem odborník na sítě, ale teoreticky si myslím, že je možné, že je někdo připojen na Tvou síť a pokud nemáš zakázáno sdílení, tak Ti do pc vidí. Když klikneš na Tento počítač - místa v síti - vidíš tam další připojené pc? Tedy ve chvíli, kdy máš zapojený router.
C:\Documents and Settings\Terrynka\Dokumenty\gggg.htm
Otestuj na www.virustotal.com
C:\WINDOWS\System32\Dualunis.exe
U gmeru udělej ještě druhý sken.
Já tedy nejsem odborník na sítě, ale teoreticky si myslím, že je možné, že je někdo připojen na Tvou síť a pokud nemáš zakázáno sdílení, tak Ti do pc vidí. Když klikneš na Tento počítač - místa v síti - vidíš tam další připojené pc? Tedy ve chvíli, kdy máš zapojený router.
Re: Re: nekdo vidi veskerou mou cinnost na PC??
TEN SOUBOR NEZNAM????
Re: Re: nekdo vidi veskerou mou cinnost na PC??
MAM HO SMAZAT?
Re: nekdo vidi veskerou mou cinnost na PC??
Ne, dej ho do raru a přilož zde jako přílohu.
Re: Re: nekdo vidi veskerou mou cinnost na PC??
EHM JAK HO DAM DO RARU A MUZU TI HO ZKOPIROVAT JE TO PLNY HOT KEYS A NEVIM CEHO
Re: nekdo vidi veskerou mou cinnost na PC??
C:\WINDOWS\System32\Dualunis.exeGMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-08-14 00:51:21
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD800BB-00CJA1 rev.17.07W17
Running: gmer.exe; Driver: C:\DOCUME~1\Terrynka\LOCALS~1\Temp\fxtdipob.sys
---- Kernel code sections - GMER 1.0.15 ----
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF7CB6360, 0x37388D, 0xE8000020]
? c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{970FCA75-E500-4184-9C44-F0156F124E88}\MpKsl3e43105e.sys Systém nemůže nalézt uvedený soubor. !
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs sisidex.sys (SISIDEX Driver/Windows (R) 2000 DDK provider)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat sisidex.sys (SISIDEX Driver/Windows (R) 2000 DDK provider)
---- Threads - GMER 1.0.15 ----
Thread System [4:140] F4C3E1F0
---- EOF - GMER 1.0.15 ----
Rootkit scan 2011-08-14 00:51:21
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD800BB-00CJA1 rev.17.07W17
Running: gmer.exe; Driver: C:\DOCUME~1\Terrynka\LOCALS~1\Temp\fxtdipob.sys
---- Kernel code sections - GMER 1.0.15 ----
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF7CB6360, 0x37388D, 0xE8000020]
? c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{970FCA75-E500-4184-9C44-F0156F124E88}\MpKsl3e43105e.sys Systém nemůže nalézt uvedený soubor. !
---- Devices - GMER 1.0.15 ----
AttachedDevice \FileSystem\Ntfs \Ntfs sisidex.sys (SISIDEX Driver/Windows (R) 2000 DDK provider)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat sisidex.sys (SISIDEX Driver/Windows (R) 2000 DDK provider)
---- Threads - GMER 1.0.15 ----
Thread System [4:140] F4C3E1F0
---- EOF - GMER 1.0.15 ----
Re: nekdo vidi veskerou mou cinnost na PC??
Kořen Klíč Upraveno Hodnota Soubor/Cesta
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\A6A9D82760228E13F9563CAEEBCF5FE3\SourceList\Net 31.7.2011 1:40:19 1 c:\06dd9c284e035381bb5dfdd4995eb0\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\1A81C2A72A2D7713281FF59ECC80CE0B\SourceList\Net 31.7.2011 1:59:15 1 c:\6d6c9e101b37d8be3fe341c2bb68\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\93BE2EC28C544D23A89955923CF8B199\SourceList\Net 31.7.2011 1:13:10 1 c:\87937aa58e0545b469877bd4024aaf95\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\92A97705E43863E4BBBE7BACCB768A52\SourceList\Net 29.7.2011 22:46:20 1 c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\92A97705E43863E4BBBE7BACCB768A52\InstallProperties 29.7.2011 22:46:20 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{50779A29-834E-4E36-BBEB-B7CABC67A825} 29.7.2011 22:46:20 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\1D23AC71DB3709948B6F63D9D8430BD5\SourceList\Net 29.7.2011 22:46:50 1 c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D23AC71DB3709948B6F63D9D8430BD5\InstallProperties 29.7.2011 22:46:49 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{17CA32D1-73BD-4990-B8F6-369D8D34B05D} 29.7.2011 22:46:49 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\000021599B0090400000000000F01FEC\SourceList\Net 29.7.2011 22:46:11 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\060BFB5022F401740B2A82101A6B605C\SourceList\Net 29.7.2011 22:46:36 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D7CD6B45B5C8BFD4CB510C013A23B6B2\SourceList\Net 29.7.2011 22:46:17 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400000000000F01FEC\InstallProperties 29.7.2011 22:46:11 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\060BFB5022F401740B2A82101A6B605C\InstallProperties 29.7.2011 22:46:35 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7CD6B45B5C8BFD4CB510C013A23B6B2\InstallProperties 29.7.2011 22:46:17 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{05BFB060-4F22-4710-B0A2-2801A1B606C5} 29.7.2011 22:46:35 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B} 29.7.2011 22:46:17 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{95120000-00B9-0409-0000-0000000FF1CE} 29.7.2011 22:46:11 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\94F889DF8C1E48C3693840846BBBE802\SourceList\Net 31.7.2011 1:56:46 1 c:\a92c1c77d37768475a8d\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D} 8.8.2011 1:52:22 InstallSource C:\DOCUME~1\Terrynka\LOCALS~1\Temp\bye3D9.tmp\Disk1\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\13D9F21E52046CB41B2BBA62C255080B\SourceList\Net 30.7.2011 15:36:41 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\279EDDBAB5531FA4988AAD057B5B0C54\SourceList\Net 30.7.2011 15:30:12 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\43CB5CF110302D04492350AB2220778B\SourceList\Net 30.7.2011 15:36:57 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\5146150A16DEA91489D13995D67A1456\SourceList\Net 30.7.2011 15:30:04 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\5E95CE01ECB94884BBA12E6872222023\SourceList\Net 30.7.2011 15:30:14 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\6D6C63B08D5FFAE4FB4934672A03DAB5\SourceList\Net 30.7.2011 15:35:23 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\8724B492B7FC9B04681AD2F30F2C5C42\SourceList\Net 30.7.2011 15:29:57 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.UserAgent 30.7.2011 15:53:26 InstallINFFile C:\DOCUME~1\Terrynka\LOCALS~1\Temp\RGI1.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo 30.7.2011 15:53:26 InstallINFFile C:\DOCUME~1\Terrynka\LOCALS~1\Temp\RGI2.tmp
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\5C1093C35543A0E32A41B090A305076A\SourceList\Net 30.7.2011 1:38:18 1 C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\FCDAC0A0AD874C333A05DC1548B97920\SourceList\Net 30.7.2011 1:39:30 1 C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5C1093C35543A0E32A41B090A305076A\InstallProperties 31.7.2011 1:56:46 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FCDAC0A0AD874C333A05DC1548B97920\InstallProperties 31.7.2011 1:59:14 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0A0CADCF-78DA-33C4-A350-CD51849B9702} 31.7.2011 1:59:14 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{3C3901C5-3455-3E0A-A214-0B093A5070A6} 31.7.2011 1:56:46 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History 30.7.2011 15:49:50 Directory C:\WINDOWS\History
HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls 31.7.2011 1:11:00 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 30.7.2011 15:49:49 Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit 29.7.2011 22:41:56 TemplateUsed C:\WINDOWS\SEC12E6.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_a51be467 31.7.2011 2:07:17 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_a51be467\Codebases\U_KB2296011 31.7.2011 2:07:17 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 31.7.2011 2:07:16 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\Codebases\U_KB2296011 31.7.2011 2:07:16 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c 29.7.2011 22:38:54 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\Codebases\U_Service Pack 3 29.7.2011 22:38:54 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023 31.7.2011 1:33:04 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\Codebases\U_KB2412687 31.7.2011 1:33:04 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_d5a26683 31.7.2011 1:33:04 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_d5a26683\Codebases\U_KB2412687 31.7.2011 1:33:04 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63 29.7.2011 22:38:57 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\Codebases\U_Service Pack 3 29.7.2011 22:38:57 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b 29.7.2011 22:38:57 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b\Codebases\U_Service Pack 3 29.7.2011 22:38:57 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_cs_d92a54f9 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_cs_d92a54f9\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus 29.7.2011 21:26:58 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{1F7C40C7-AF58-4BD5-92F9-C700746D2A5A}.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU 29.7.2011 21:27:02 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{CD0FF3B9-4785-460A-BBEA-8BDBFD250A73}.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Internet Explorer\Main 30.7.2011 15:50:03 Local Page C:\WINDOWS\system32\blank.htm
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS 30.7.2011 16:04:31 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVD 31.7.2011 1:28:50 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVR-MS 31.7.2011 1:28:50 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 29.7.2011 21:20:47 SystemDB C:\WINDOWS\system32\system.mdw
HKEY_LOCAL_MACHINE Software\Microsoft\MpSigStub 29.7.2011 22:50:41 DropLocation C:\WINDOWS\Temp\682DA37E-5492-40EA-AED8-78F9341051BD-Sigs
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\A6A9D82760228E13F9563CAEEBCF5FE3\SourceList\Net 31.7.2011 1:40:19 1 c:\06dd9c284e035381bb5dfdd4995eb0\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\1A81C2A72A2D7713281FF59ECC80CE0B\SourceList\Net 31.7.2011 1:59:15 1 c:\6d6c9e101b37d8be3fe341c2bb68\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\93BE2EC28C544D23A89955923CF8B199\SourceList\Net 31.7.2011 1:13:10 1 c:\87937aa58e0545b469877bd4024aaf95\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\92A97705E43863E4BBBE7BACCB768A52\SourceList\Net 29.7.2011 22:46:20 1 c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\92A97705E43863E4BBBE7BACCB768A52\InstallProperties 29.7.2011 22:46:20 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{50779A29-834E-4E36-BBEB-B7CABC67A825} 29.7.2011 22:46:20 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\cs-cz\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\1D23AC71DB3709948B6F63D9D8430BD5\SourceList\Net 29.7.2011 22:46:50 1 c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D23AC71DB3709948B6F63D9D8430BD5\InstallProperties 29.7.2011 22:46:49 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{17CA32D1-73BD-4990-B8F6-369D8D34B05D} 29.7.2011 22:46:49 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\CS-CZ\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\000021599B0090400000000000F01FEC\SourceList\Net 29.7.2011 22:46:11 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\060BFB5022F401740B2A82101A6B605C\SourceList\Net 29.7.2011 22:46:36 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D7CD6B45B5C8BFD4CB510C013A23B6B2\SourceList\Net 29.7.2011 22:46:17 1 c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400000000000F01FEC\InstallProperties 29.7.2011 22:46:11 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\060BFB5022F401740B2A82101A6B605C\InstallProperties 29.7.2011 22:46:35 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7CD6B45B5C8BFD4CB510C013A23B6B2\InstallProperties 29.7.2011 22:46:17 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{05BFB060-4F22-4710-B0A2-2801A1B606C5} 29.7.2011 22:46:35 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B} 29.7.2011 22:46:17 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{95120000-00B9-0409-0000-0000000FF1CE} 29.7.2011 22:46:11 InstallSource c:\87d389cb8a75cea4593b8128d1dbf519\x86\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\94F889DF8C1E48C3693840846BBBE802\SourceList\Net 31.7.2011 1:56:46 1 c:\a92c1c77d37768475a8d\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D} 8.8.2011 1:52:22 InstallSource C:\DOCUME~1\Terrynka\LOCALS~1\Temp\bye3D9.tmp\Disk1\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\13D9F21E52046CB41B2BBA62C255080B\SourceList\Net 30.7.2011 15:36:41 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\279EDDBAB5531FA4988AAD057B5B0C54\SourceList\Net 30.7.2011 15:30:12 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\43CB5CF110302D04492350AB2220778B\SourceList\Net 30.7.2011 15:36:57 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\5146150A16DEA91489D13995D67A1456\SourceList\Net 30.7.2011 15:30:04 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\5E95CE01ECB94884BBA12E6872222023\SourceList\Net 30.7.2011 15:30:14 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\6D6C63B08D5FFAE4FB4934672A03DAB5\SourceList\Net 30.7.2011 15:35:23 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\8724B492B7FC9B04681AD2F30F2C5C42\SourceList\Net 30.7.2011 15:29:57 1 C:\DOCUME~1\Terrynka\LOCALS~1\Temp\OWP1A8.tmp\
HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.UserAgent 30.7.2011 15:53:26 InstallINFFile C:\DOCUME~1\Terrynka\LOCALS~1\Temp\RGI1.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo 30.7.2011 15:53:26 InstallINFFile C:\DOCUME~1\Terrynka\LOCALS~1\Temp\RGI2.tmp
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\5C1093C35543A0E32A41B090A305076A\SourceList\Net 30.7.2011 1:38:18 1 C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\FCDAC0A0AD874C333A05DC1548B97920\SourceList\Net 30.7.2011 1:39:30 1 C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5C1093C35543A0E32A41B090A305076A\InstallProperties 31.7.2011 1:56:46 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FCDAC0A0AD874C333A05DC1548B97920\InstallProperties 31.7.2011 1:59:14 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0A0CADCF-78DA-33C4-A350-CD51849B9702} 31.7.2011 1:59:14 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{3C3901C5-3455-3E0A-A214-0B093A5070A6} 31.7.2011 1:56:46 InstallSource C:\eb033246f25475c9ed9308f4\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History 30.7.2011 15:49:50 Directory C:\WINDOWS\History
HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\MiniDumpAuxiliaryDlls 31.7.2011 1:11:00 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 30.7.2011 15:49:49 Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit 29.7.2011 22:41:56 TemplateUsed C:\WINDOWS\SEC12E6.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_790a60e8\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_a51be467 31.7.2011 2:07:17 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_a51be467\Codebases\U_KB2296011 31.7.2011 2:07:17 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202 31.7.2011 2:07:16 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\Codebases\U_KB2296011 31.7.2011 2:07:16 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c 29.7.2011 22:38:54 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\Codebases\U_Service Pack 3 29.7.2011 22:38:54 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023 31.7.2011 1:33:04 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\Codebases\U_KB2412687 31.7.2011 1:33:04 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_ed7ce46c\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_d5a26683 31.7.2011 1:33:04 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6002.22509_x-ww_d5a26683\Codebases\U_KB2412687 31.7.2011 1:33:04 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63 29.7.2011 22:38:57 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\Codebases\U_Service Pack 3 29.7.2011 22:38:57 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b 29.7.2011 22:38:57 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_5cd6c02b\Codebases\U_Service Pack 3 29.7.2011 22:38:57 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_cs_d92a54f9 29.7.2011 22:38:55 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_cs_d92a54f9\Codebases\U_Service Pack 3 29.7.2011 22:38:55 URL C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f 29.7.2011 22:38:56 Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f\Codebases\U_Service Pack 3 29.7.2011 22:38:56 URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus 29.7.2011 21:26:58 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{1F7C40C7-AF58-4BD5-92F9-C700746D2A5A}.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU 29.7.2011 21:27:02 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{CD0FF3B9-4785-460A-BBEA-8BDBFD250A73}.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Internet Explorer\Main 30.7.2011 15:50:03 Local Page C:\WINDOWS\system32\blank.htm
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS 30.7.2011 16:04:31 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVD 31.7.2011 1:28:50 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVR-MS 31.7.2011 1:28:50 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 29.7.2011 21:20:47 SystemDB C:\WINDOWS\system32\system.mdw
HKEY_LOCAL_MACHINE Software\Microsoft\MpSigStub 29.7.2011 22:50:41 DropLocation C:\WINDOWS\Temp\682DA37E-5492-40EA-AED8-78F9341051BD-Sigs
Re: nekdo vidi veskerou mou cinnost na PC??
Ještě spust ten OTL. Dívala jsi se na ty počítače v síti?
Jestli jsem Tě dobře pochopila, tak pokud je připojený router, tak Ti do pc vidí, pokud router není a pc máš na Vaší síti jen TY, tak nevidí?
Jestli jsem Tě dobře pochopila, tak pokud je připojený router, tak Ti do pc vidí, pokud router není a pc máš na Vaší síti jen TY, tak nevidí?
Kdo je online
Uživatelé prohlížející si toto fórum: Minapark a 101 hostů