PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Automatické vypnutí PC po startu Windows XP (service.exe)

https://pc-help.cnews.cz/viewtopic.php?f=70&t=20340

Stránka 1 z 1

Automatické vypnutí PC po startu Windows XP (service.exe)

Napsal: 11 lis 2007 14:35
od Snoopy21
Dobrý den,

prosím o radu jak odstranit problém se souborem services.exe, který mi po každém spuštění Windows spustí automatické restartování. Jak sem se již dočetl tak pomůže výpis toho souboru logfile, což je :




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:59:03, on 11.11.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\LADA- NEMAZAT !!!!!!!!!!!!!!!\QIP\qip.exe
C:\Program Files\Opera\Opera.exe
C:\LADA- NEMAZAT !!!!!!!!!!!!!!!\Hijack\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: BearShareMediaBar BHO - {E49CE891-CD83-4841-8CC9-6E284D7978D0} - C:\Program Files\BearShare Applications\MediaBar\2.bin\BEARSMBR.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: BearShare Media Bar - {E49CE899-CD83-4841-8CC9-6E284D7978D0} - C:\Program Files\BearShare Applications\MediaBar\2.bin\BEARSMBR.DLL
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-725345543-1637723038-2147196821-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FABD71EB-16FD-410B-8A58-E541B572DD62}: NameServer = 213.250.192.1,213.250.194.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: toolx264.dll e1.dll pmspwups.dll sisbduse.dll onksd.dll statex.dll oservmz101.dll
O20 - Winlogon Notify: kbdidpla - C:\WINDOWS\system32\kbdidpla.dll
O20 - Winlogon Notify: ksdmgr - C:\WINDOWS\SYSTEM32\ksdmgr32.dll
O20 - Winlogon Notify: vbscsysi - C:\WINDOWS\system32\vbscsysi.dll
O20 - Winlogon Notify: winnatkc - C:\WINDOWS\system32\winnatkc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

--
End of file - 5366 bytes


Předem moc děkuji.

Napsal: 11 lis 2007 15:42
od Snoopy21
Dpčetl jsem se v jine diskuzi, že mam aplikovat program SDFix. Pustil jsem jej podle návodu a vypsal následující :




SDFix: Version 1.114

Run by Administrator on ne 11.11.2007 at 15:23

Microsoft Windows XP [Verze 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\system32\e1.dll - Deleted
C:\WINDOWS\system32\winsys.exe - Deleted



Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-11 15:28:11
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s0"=dword:be2df6d2
"s1"=dword:755d77fe
"s2"=dword:6927fc7b
"h0"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:a4,28,74,c7,ee,8b,06,69,f3,3b,c4,da,8d,e6,bf,d6,68,15,fa,44,cc,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,34,09,69,dc,65,2c,d9,7c,44,e9,bd,31,48,b9,1f,12,da,..
"khjeh"=hex:72,7b,79,da,db,69,b1,41,14,b7,4c,67,67,fb,75,63,e5,12,a3,2c,93,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:22,ba,58,dd,fa,c6,66,2d,e9,3e,c7,71,08,14,f1,e8,42,86,58,59,ae,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"h0"=dword:00000000
"khjeh"=hex:a4,28,74,c7,ee,8b,06,69,f3,3b,c4,da,8d,e6,bf,d6,68,15,fa,44,cc,..
"p0"="C:\Program Files\DAEMON Tools\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,34,09,69,dc,65,2c,d9,7c,44,e9,bd,31,48,b9,1f,12,da,..
"khjeh"=hex:72,7b,79,da,db,69,b1,41,14,b7,4c,67,67,fb,75,63,e5,12,a3,2c,93,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:22,ba,58,dd,fa,c6,66,2d,e9,3e,c7,71,08,14,f1,e8,42,86,58,59,ae,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes]
"\f\1e?r?n?\xe9? ?u?k?a?z?a?t?e?l?e? ?"="C:\WINDOWS\cursors\arrow_r.cur,C:\WINDOWS\cursors\help_r.cur,C:\WINDOWS\cursors\wait_r.cur,C:\WINDOWS\cursors\busy_r.cur,C:\WINDOWS\cursors\cross_r.cur,C:\WINDOWS\cursors\beam_r.cur,C:\WINDOWS\cursors\pen_r.cur,C:\WINDOWS\cursors\no_r.cur,C:\WINDOWS\cursors\size4_r.cur,C:\WINDOWS\cursors\size3_r.cur,C:\WINDOWS\cursors\size2_r.cur,C:\WINDOWS\cursors\size1_r.cur,C:\WINDOWS\cursors\move_r.cur,C:\WINDOWS\cursors\up_r.cur"
"\f\1e?r?n?\xe9? ?u?k?a?z?a?t?e?l?e? ?(?v?e?l?k?\xe9?)?"="C:\WINDOWS\cursors\arrow_rm.cur,C:\WINDOWS\cursors\help_rm.cur,C:\WINDOWS\cursors\wait_rm.cur,C:\WINDOWS\cursors\busy_rm.cur,C:\WINDOWS\cursors\cross_rm.cur,C:\WINDOWS\cursors\beam_rm.cur,C:\WINDOWS\cursors\pen_rm.cur,C:\WINDOWS\cursors\no_rm.cur,C:\WINDOWS\cursors\size4_rm.cur,C:\WINDOWS\cursors\size3_rm.cur,C:\WINDOWS\cursors\size2_rm.cur,C:\WINDOWS\cursors\size1_rm.cur,C:\WINDOWS\cursors\move_rm.cur,C:\WINDOWS\cursors\up_rm.cur"
"\f\1e?r?n?\xe9? ?u?k?a?z?a?t?e?l?e? ?(?n?e?j?v?\e\1t?a\1\xed?)?"="C:\WINDOWS\cursors\arrow_rl.cur,C:\WINDOWS\cursors\help_rl.cur,C:\WINDOWS\cursors\wait_rl.cur,C:\WINDOWS\cursors\busy_rl.cur,C:\WINDOWS\cursors\cross_rl.cur,C:\WINDOWS\cursors\beam_rl.cur,C:\WINDOWS\cursors\pen_rl.cur,C:\WINDOWS\cursors\no_rl.cur,C:\WINDOWS\cursors\size4_rl.cur,C:\WINDOWS\cursors\size3_rl.cur,C:\WINDOWS\cursors\size2_rl.cur,C:\WINDOWS\cursors\size1_rl.cur,C:\WINDOWS\cursors\move_rl.cur,C:\WINDOWS\cursors\up_rl.cur"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Nero 7 Ultra Edition\`\1t]
"Order"=hex:08,00,00,00,02,00,00,00,9a,00,00,00,01,00,00,00,01,00,00,00,8e,..
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{5CF275DA-00A5-9EEA-AFF9-7A8E36FC581A}]
"oajdcephaomgjhlcagdbkckgedhpjo"=hex:63,61,6a,66,6f,6a,00,7c
"oafckidloflbgogeneapbcifgadpoh"=hex:6a,61,6f,65,66,69,61,65,69,67,6f,6f,61,70,62,6a,70,6a,65,67,00,..
"nadcmgmgefjnangnggkiimafamip"=hex:6b,61,69,66,6a,69,61,63,63,69,67,6f,63,63,64,69,69,65,6f,61,70,..

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\DJ Johny\\Hry\\Call 2\\Call of Duty 2\\CoD2MP_s.exe"="C:\\DJ Johny\\Hry\\Call 2\\Call of Duty 2\\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\\DJ Johny\\Hry\\Battle 1\\game.dat"="C:\\DJ Johny\\Hry\\Battle 1\\game.dat:*:Enabled:Battle for Middle-earth"
"C:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\FarCry.exe"="C:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\FarCry.exe:*:Enabled:Far Cry"
"C:\\DJ Johny\\Hry\\age of empires 2\\age2_x1\\age2_x1.exe"="C:\\DJ Johny\\Hry\\age of empires 2\\age2_x1\\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\\DJ Johny\\Hry\\Call 1\\CoDMP.exe"="C:\\DJ Johny\\Hry\\Call 1\\CoDMP.exe:*:Enabled:CoDMP"
"C:\\DJ Johny\\Hry\\Counter-Strike 1\\SteamApps\\tomy706\\counter-strike\\hl.exe"="C:\\DJ Johny\\Hry\\Counter-Strike 1\\SteamApps\\tomy706\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\DJ Johny\\Hry\\Counter-Strike 1\\SteamApps\\tomy706\\condition zero\\hl.exe"="C:\\DJ Johny\\Hry\\Counter-Strike 1\\SteamApps\\tomy706\\condition zero\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"="C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe:*:Enabled:TmNationsESWC"
"C:\\Program Files\\THQ\\Dawn of War - Dark Crusade Demo\\DarkCrusade.exe"="C:\\Program Files\\THQ\\Dawn of War - Dark Crusade Demo\\DarkCrusade.exe:*:Enabled:DarkCrusade"
"C:\\DJ Johny\\Hry\\Batl 2\\BF2.exe"="C:\\DJ Johny\\Hry\\Batl 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"="C:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe:*:Enabled:BearShare"
"C:\\Program Files\\BearFlix\\bearflix.exe"="C:\\Program Files\\BearFlix\\bearflix.exe:*:Enabled:BearFlix"
"C:\\Program Files\\ICQLite\\ICQLite.exe"="C:\\Program Files\\ICQLite\\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\America's Army\\System\\ArmyOps.exe"="C:\\Program Files\\America's Army\\System\\ArmyOps.exe:*:Enabled:ArmyOps"
"C:\\McSkypi@\\Medal\\mohpa.exe"="C:\\McSkypi@\\Medal\\mohpa.exe:*:Enabled:Medal of Honor Pacific Assault(tm)"
"C:\\McSkypi@\\Battlefield 2\\BF2.exe"="C:\\McSkypi@\\Battlefield 2\\BF2.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe"="C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe"="C:\\Program Files\\THQ\\S.T.A.L.K.E.R. - Shadow of Chernobyl\\bin\\dedicated\\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"D:\\Sierra\\HALF-LIFE\\hl.exe"="D:\\Sierra\\HALF-LIFE\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\McSkypi@\\Sierra\\HALF-LIFE\\hl.exe"="C:\\McSkypi@\\Sierra\\HALF-LIFE\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Empire Interactive\\Strangelite\\Starship Troopers\\STGame.exe"="C:\\Program Files\\Empire Interactive\\Strangelite\\Starship Troopers\\STGame.exe:*:Enabled:Starship Troopers"
"C:\\McSkypi@\\call 2\\CoD2MP_s.exe"="C:\\McSkypi@\\call 2\\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\\LADA- NEMAZAT !!!!!!!!!!!!!!!\\QIP\\qip.exe"="C:\\LADA- NEMAZAT !!!!!!!!!!!!!!!\\QIP\\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\\Program Files\\Warcraft III\\Warcraft III.exe"="C:\\Program Files\\Warcraft III\\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\\McSkypi@\\Medal of Honor\\MOHAA\\MOHAA.exe"="C:\\McSkypi@\\Medal of Honor\\MOHAA\\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault(tm)"
"C:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat"="C:\\Program Files\\Electronic Arts\\The Battle for Middle-earth (tm) II\\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\\McSkypi@\\fifa 06\\fifa06.exe"="C:\\McSkypi@\\fifa 06\\fifa06.exe:*:Enabled:fifa06"
"C:\\McSkypi@\\boulingpoint\\Boiling Point - Cesta do pekel\\XENUS.EXE"="C:\\McSkypi@\\boulingpoint\\Boiling Point - Cesta do pekel\\XENUS.EXE:*:Disabled:XENUS"
"C:\\Program Files\\Sierra\\FEAR\\FEAR.exe"="C:\\Program Files\\Sierra\\FEAR\\FEAR.exe:*:Enabled:FEAR"
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"="C:\\Program Files\\GameSpy Arcade\\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\\Games\\Paintball2\\paintball2.exe"="C:\\Games\\Paintball2\\paintball2.exe:*:Enabled:paintball2"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files:
---------------

File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes:

Fri 7 Jan 2000 120,320 A..H. --- "C:\Program Files\3DO\GameUp.exe"
Wed 14 May 2003 1,833,984 ...HR --- "C:\Program Files\AvRack\classic.dll"
Wed 8 Sep 2004 3,645,952 ...HR --- "C:\Program Files\AvRack\rtlrack.exe"
Thu 28 Dec 2006 3,338,240 A..H. --- "C:\Program Files\BearFlix\bearflix.exe"
Tue 26 Dec 2006 57,344 A..H. --- "C:\Program Files\BearFlix\bfpreview.dll"
Wed 19 Jul 2006 3,584 A..H. --- "C:\Program Files\BearFlix\BSidle.dll"
Fri 26 Jul 2002 153,088 A..H. --- "C:\Program Files\BearFlix\UNWISE.EXE"
Sun 9 Jul 2006 52,179 A..H. --- "C:\Program Files\Bitter Creek Skirmish\Uninstal.exe"
Mon 12 Jun 2006 92,728 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bass.dll"
Wed 7 Jun 2006 7,224 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bassenc.dll"
Tue 22 Aug 2006 23,616 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bassflac.dll"
Sun 26 Nov 2006 17,464 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bassmidi.dll"
Wed 20 Sep 2006 10,312 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bassmix.dll"
Mon 12 Jun 2006 14,392 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\basswma.dll"
Wed 7 Jun 2006 27,224 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bass_fx.dll"
Sun 21 May 2006 28,088 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\bass_wv.dll"
Thu 29 Jul 2004 202,240 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\lame.exe"
Mon 5 Feb 2007 1,886,208 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\MIDItoMP3.exe"
Sat 22 Nov 2003 155,136 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\oggenc.exe"
Sat 17 Mar 2007 673,553 A..H. --- "C:\Program Files\Direct MIDI to MP3 Converter\unins000.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\ConverterUninstall.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\DivXBundleUninstall.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\DivXCodecUninstall.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\DivXContentUploaderUninstall.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\DivXPlayerUninstall.exe"
Fri 8 Sep 2006 1,488,091 A..H. --- "C:\Program Files\DivX\DivXWebPlayerUninstall.exe"
Sun 8 Aug 2004 245,760 A..H. --- "C:\Program Files\DivX Player Pro\DivX-Player.exe"
Sun 9 Jan 2005 2,030,080 A..H. --- "C:\Program Files\DivX Player Pro\ffdshow-20041012.exe"
Fri 8 Sep 2006 47,680 A..H. --- "C:\Program Files\DivX Player Pro\uninstall.exe"
Mon 21 Mar 2005 772,608 A..H. --- "C:\Program Files\DVD Decrypter\DVDDecrypter.exe"
Fri 8 Sep 2006 64,054 A..H. --- "C:\Program Files\DVD Decrypter\uninstall.exe"
Mon 21 Aug 2006 86,016 A..H. --- "C:\Program Files\ESET\dmon.dll"
Mon 21 Aug 2006 425,984 A..H. --- "C:\Program Files\ESET\nod32.exe"
Mon 21 Aug 2006 184,320 A..H. --- "C:\Program Files\ESET\nod32api.dll"
Mon 21 Aug 2006 16,384 A..H. --- "C:\Program Files\ESET\nod32ari.dll"
Mon 21 Aug 2006 45,056 A..H. --- "C:\Program Files\ESET\nod32aui.dll"
Mon 21 Aug 2006 372,736 A..H. --- "C:\Program Files\ESET\nod32krn.exe"
Mon 21 Aug 2006 45,056 A..H. --- "C:\Program Files\ESET\nod32krr.dll"
Mon 21 Aug 2006 847,872 A..H. --- "C:\Program Files\ESET\nod32kui.exe"
Mon 21 Aug 2006 65,536 A..H. --- "C:\Program Files\ESET\nod32r.dll"
Mon 21 Aug 2006 81,920 A..H. --- "C:\Program Files\ESET\nod32rui.dll"
Mon 21 Aug 2006 57,344 A..H. --- "C:\Program Files\ESET\nodshex.dll"
Mon 21 Aug 2006 28,672 A..H. --- "C:\Program Files\ESET\pr_amon.dll"
Mon 21 Aug 2006 16,384 A..H. --- "C:\Program Files\ESET\pr_dmon.dll"
Mon 21 Aug 2006 40,960 A..H. --- "C:\Program Files\ESET\pr_imon.dll"
Mon 21 Aug 2006 36,864 A..H. --- "C:\Program Files\ESET\pr_nms.dll"
Mon 21 Aug 2006 20,480 A..H. --- "C:\Program Files\ESET\pr_nod32.dll"
Mon 21 Aug 2006 45,056 A..H. --- "C:\Program Files\ESET\pr_upd.dll"
Mon 21 Aug 2006 172,032 A..H. --- "C:\Program Files\ESET\ps_amon.dll"
Mon 21 Aug 2006 131,072 A..H. --- "C:\Program Files\ESET\ps_dmon.dll"
Mon 21 Aug 2006 176,128 A..H. --- "C:\Program Files\ESET\ps_nms.dll"
Mon 21 Aug 2006 151,552 A..H. --- "C:\Program Files\ESET\ps_nod32.dll"
Mon 21 Aug 2006 303,104 A..H. --- "C:\Program Files\ESET\ps_upd.dll"
Mon 21 Aug 2006 122,880 A..H. --- "C:\Program Files\ESET\pu_amon.dll"
Mon 21 Aug 2006 151,552 A..H. --- "C:\Program Files\ESET\pu_dmon.dll"
Mon 21 Aug 2006 176,128 A..H. --- "C:\Program Files\ESET\pu_imon.dll"
Mon 21 Aug 2006 77,824 A..H. --- "C:\Program Files\ESET\pu_nms.dll"
Mon 21 Aug 2006 90,112 A..H. --- "C:\Program Files\ESET\pu_nod32.dll"
Mon 21 Aug 2006 172,032 A..H. --- "C:\Program Files\ESET\pu_upd.dll"
Mon 21 Aug 2006 8,464 A..H. --- "C:\Program Files\ESET\sporder.dll"
Tue 12 Oct 2004 34,816 A..H. --- "C:\Program Files\ffdshow\ff_liba52.dll"
Tue 12 Oct 2004 122,880 A..H. --- "C:\Program Files\ffdshow\ff_libmad.dll"
Tue 12 Oct 2004 151,552 A..H. --- "C:\Program Files\ffdshow\ff_libdts.dll"
Tue 12 Oct 2004 249,856 A..H. --- "C:\Program Files\ffdshow\ff_libfaad2.dll"
Sun 3 Oct 2004 129,024 A..H. --- "C:\Program Files\ffdshow\ff_mpeg2enc.dll"
Tue 12 Oct 2004 122,880 A..H. --- "C:\Program Files\ffdshow\ff_samplerate.dll"
Tue 12 Oct 2004 110,592 A..H. --- "C:\Program Files\ffdshow\ff_theora.dll"
Tue 12 Oct 2004 47,616 A..H. --- "C:\Program Files\ffdshow\ff_tremor.dll"
Tue 12 Oct 2004 45,568 A..H. --- "C:\Program Files\ffdshow\ff_unrar.dll"
Tue 12 Oct 2004 28,160 A..H. --- "C:\Program Files\ffdshow\ff_wmv9.dll"
Sun 3 Oct 2004 228,352 A..H. --- "C:\Program Files\ffdshow\ff_x264.dll"
Tue 12 Oct 2004 2,255,360 A..H. --- "C:\Program Files\ffdshow\libavcodec.dll"
Sun 3 Oct 2004 112,640 A..H. --- "C:\Program Files\ffdshow\libmpeg2_ff.dll"
Tue 5 Oct 2004 395,776 A..H. --- "C:\Program Files\ffdshow\libmplayer.dll"
Tue 12 Oct 2004 262,144 A..H. --- "C:\Program Files\ffdshow\TomsMoComp_ff.dll"
Fri 8 Sep 2006 37,288 A..H. --- "C:\Program Files\ffdshow\uninstall.exe"
Wed 16 Oct 2002 327,680 A..H. --- "C:\Program Files\GameSpy Arcade\ArcadeRes.dll"
Wed 16 Oct 2002 106,496 A..H. --- "C:\Program Files\GameSpy Arcade\rwnet.dll"
Wed 16 Oct 2002 163,840 A..H. --- "C:\Program Files\GameSpy Arcade\rwvoice.dll"
Thu 27 Jul 2006 430,080 A..H. --- "C:\Program Files\ICQLite\dBenderC14.dll"
Thu 27 Jul 2006 424,572 A..H. --- "C:\Program Files\ICQLite\EmoExtractAsset.dll"
Thu 27 Jul 2006 57,451 A..H. --- "C:\Program Files\ICQLite\ICQLiteShell.dll"
Thu 21 Sep 2006 52,867 A..H. --- "C:\Program Files\ICQLite\ICQLiteUninstall.exe"
Thu 27 Jul 2006 259,197 A..H. --- "C:\Program Files\ICQLite\ICQLiteDBConverter.exe"
Thu 27 Jul 2006 18,513 A..H. --- "C:\Program Files\ICQLite\ICQLRun.exe"
Thu 19 Oct 2006 102,487 A..H. --- "C:\Program Files\ICQLite\ICQLSRP.DLL"
Wed 11 Oct 2006 352,256 A..H. --- "C:\Program Files\ICQLite\ICQPhone.dll"
Thu 27 Jul 2006 32,855 A..H. --- "C:\Program Files\ICQLite\ICQRT.dll"
Thu 27 Jul 2006 399,993 A..H. --- "C:\Program Files\ICQLite\ICQRtcControl.dll"
Thu 27 Jul 2006 471,040 A..H. --- "C:\Program Files\ICQLite\iprs_icq.dll"
Wed 25 Oct 2006 860,266 A..H. --- "C:\Program Files\ICQLite\LiteRes.dll"
Thu 27 Jul 2006 63,595 A..H. --- "C:\Program Files\ICQLite\LiteSkinUtils.dll"
Thu 27 Jul 2006 1,785,439 A..H. --- "C:\Program Files\ICQLite\LiteUtil.dll"
Wed 11 Oct 2006 208,896 A..H. --- "C:\Program Files\ICQLite\MIBFlashCtrl.dll"
Thu 27 Jul 2006 368,211 A..H. --- "C:\Program Files\ICQLite\MISB.dll"
Wed 25 Feb 2004 348,160 A..H. --- "C:\Program Files\ICQLite\msvcr71.dll"
Fri 17 Feb 2006 2,437,120 A..H. --- "C:\Program Files\ICQLite\sipXtapi.dll"
Fri 25 Jun 1999 152,576 A..H. --- "C:\Program Files\ICQLite\Unwise32.exe"
Thu 27 Jul 2006 10,752 A..H. --- "C:\Program Files\ICQLite\XPFwResolve.dll"
Tue 10 Oct 2006 701,952 A..H. --- "C:\Program Files\ICQToolbar\toolbaru.dll"
Tue 17 Aug 2004 38,912 A..H. --- "C:\Program Files\Internet Explorer\HMMAPI.DLL"
Wed 18 Apr 2007 18,432 A..H. --- "C:\Program Files\Internet Explorer\iedw.exe"
Tue 17 Aug 2004 93,184 A..H. --- "C:\Program Files\Internet Explorer\IEXPLORE.EXE"
Tue 17 Aug 2004 28,672 A..H. --- "C:\Program Files\Messenger\custsat.dll"
Tue 17 Aug 2004 82,944 A..H. --- "C:\Program Files\Messenger\msgsc.dll"
Tue 17 Aug 2004 180,224 A..H. --- "C:\Program Files\Messenger\msgslang.dll"
Tue 17 Aug 2004 3,555,328 A..H. --- "C:\Program Files\Movie Maker\moviemk.exe"
Tue 17 Aug 2004 167,936 A..H. --- "C:\Program Files\Movie Maker\WMM2AE.dll"
Tue 17 Aug 2004 4,096 A..H. --- "C:\Program Files\Movie Maker\WMM2ERES.dll"
Tue 17 Aug 2004 7,680 A..H. --- "C:\Program Files\Movie Maker\WMM2EXT.dll"
Tue 17 Aug 2004 402,432 A..H. --- "C:\Program Files\Movie Maker\WMM2FILT.dll"
Tue 17 Aug 2004 502,272 A..H. --- "C:\Program Files\Movie Maker\WMM2FXA.dll"
Tue 17 Aug 2004 325,632 A..H. --- "C:\Program Files\Movie Maker\WMM2FXB.dll"
Tue 17 Aug 2004 4,263,936 A..H. --- "C:\Program Files\Movie Maker\WMM2RES.dll"
Tue 17 Aug 2004 5,632 A..H. --- "C:\Program Files\Movie Maker\WMM2RES2.dll"
Tue 17 Aug 2004 385,024 A..H. --- "C:\Program Files\NetMeeting\callcont.dll"
Thu 25 Oct 2001 12,288 A..H. --- "C:\Program Files\NetMeeting\cb32.exe"
Tue 17 Aug 2004 1,032,192 A..H. --- "C:\Program Files\NetMeeting\conf.exe"
Tue 17 Aug 2004 45,056 A..H. --- "C:\Program Files\NetMeeting\confmrsl.dll"
Tue 17 Aug 2004 40,960 A..H. --- "C:\Program Files\NetMeeting\dcap32.dll"
Tue 17 Aug 2004 57,344 A..H. --- "C:\Program Files\NetMeeting\h323cc.dll"
Tue 17 Aug 2004 274,432 A..H. --- "C:\Program Files\NetMeeting\MST120.DLL"
Tue 17 Aug 2004 57,344 A..H. --- "C:\Program Files\NetMeeting\MST123.DLL"
Tue 17 Aug 2004 221,184 A..H. --- "C:\Program Files\NetMeeting\nac.dll"
Tue 17 Aug 2004 229,376 A..H. --- "C:\Program Files\NetMeeting\nmas.dll"
Tue 17 Aug 2004 28,672 A..H. --- "C:\Program Files\NetMeeting\nmasnt.dll"
Tue 17 Aug 2004 81,920 A..H. --- "C:\Program Files\NetMeeting\nmchat.dll"
Tue 17 Aug 2004 77,824 A..H. --- "C:\Program Files\NetMeeting\nmcom.dll"
Tue 17 Aug 2004 151,552 A..H. --- "C:\Program Files\NetMeeting\nmft.dll"
Tue 17 Aug 2004 167,936 A..H. --- "C:\Program Files\NetMeeting\nmoldwb.dll"
Tue 17 Aug 2004 188,416 A..H. --- "C:\Program Files\NetMeeting\nmwb.dll"
Tue 17 Aug 2004 61,440 A..H. --- "C:\Program Files\NetMeeting\rrcm.dll"
Thu 25 Oct 2001 12,288 A..H. --- "C:\Program Files\NetMeeting\wb32.exe"
Tue 17 Aug 2004 60,416 A..H. --- "C:\Program Files\Outlook Express\msimn.exe"
Wed 16 May 2007 1,314,816 A..H. --- "C:\Program Files\Outlook Express\msoe.dll"
Tue 17 Aug 2004 2,482,176 A..H. --- "C:\Program Files\Outlook Express\msoeres.dll"
Tue 17 Aug 2004 104,448 A..H. --- "C:\Program Files\Outlook Express\oeimport.dll"
Tue 17 Aug 2004 60,416 A..H. --- "C:\Program Files\Outlook Express\oemig50.exe"
Tue 17 Aug 2004 35,328 A..H. --- "C:\Program Files\Outlook Express\oemiglib.dll"
Tue 17 Aug 2004 73,728 A..H. --- "C:\Program Files\Outlook Express\setup50.exe"
Tue 17 Aug 2004 46,080 A..H. --- "C:\Program Files\Outlook Express\wab.exe"
Tue 17 Aug 2004 32,768 A..H. --- "C:\Program Files\Outlook Express\wabfind.dll"
Wed 16 May 2007 85,504 A..H. --- "C:\Program Files\Outlook Express\wabimp.dll"
Tue 17 Aug 2004 30,208 A..H. --- "C:\Program Files\Outlook Express\wabmig.exe"
Fri 24 Nov 2006 995,410 A..H. --- "C:\Program Files\PartyGaming\MFC42LU.DLL"
Fri 24 Nov 2006 393,216 A..H. --- "C:\Program Files\PartyGaming\MSLUP60.dll"
Fri 24 Nov 2006 237,568 A..H. --- "C:\Program Files\PartyGaming\MSLURT.dll"
Fri 24 Nov 2006 258,352 A..H. --- "C:\Program Files\PartyGaming\UNICOWS.DLL"
Fri 19 Aug 2005 2,939,392 ...HR --- "C:\Program Files\Realtek AC97\alcwdm64.sys"
Fri 19 Aug 2005 3,644,800 ...HR --- "C:\Program Files\Realtek AC97\alcxwdm.sys"
Fri 18 Feb 2005 111,616 ...HR --- "C:\Program Files\Realtek AC97\CPLUtl64.exe"
Tue 7 Sep 2004 156,672 ...HR --- "C:\Program Files\Realtek AC97\RtlCPAPI.dll"
Wed 17 Aug 2005 10,458,112 ...HR --- "C:\Program Files\Realtek AC97\RTLCPL.EXE"
Wed 17 Aug 2005 90,112 ...HR --- "C:\Program Files\Realtek AC97\SoundMan.exe"
Mon 4 Feb 2002 53,248 ...H. --- "C:\Program Files\REGSHAVE\REGSHAVE.EXE"
Mon 30 Jul 2001 224,768 A..H. --- "C:\Program Files\Roger Wilco\fpupdate.exe"
Wed 16 Oct 2002 53,248 A..H. --- "C:\Program Files\Roger Wilco\network.dll"
Wed 16 Oct 2002 98,304 A..H. --- "C:\Program Files\Roger Wilco\Roger.dll"
Wed 16 Oct 2002 225,280 A..H. --- "C:\Program Files\Roger Wilco\roger.exe"
Wed 30 Mar 2005 2,787,140 A..H. --- "C:\Program Files\Stones\Stones 5.3.exe"
Sun 2 Jul 2006 49,882 A..H. --- "C:\Program Files\Stones\Uninstal.exe"
Tue 17 Aug 2004 543,232 A..H. --- "C:\Program Files\Windows NT\dialer.exe"
Thu 25 Oct 2001 13,312 A..H. --- "C:\Program Files\Windows NT\htrn_jis.dll"
Thu 25 Oct 2001 28,160 A..H. --- "C:\Program Files\Windows NT\hypertrm.exe"
Wed 11 Aug 2004 28,672 A..H. --- "C:\Program Files\Windows Media Player\custsat.dll"
Tue 27 Jun 2006 410,928 ...H. --- "C:\Program Files\Windows Media Player\LegitLibM.dll"
Wed 11 Aug 2004 991,232 A..H. --- "C:\Program Files\Windows Media Player\migrate.exe"
Tue 17 Aug 2004 4,639 A..H. --- "C:\Program Files\Windows Media Player\mplayer2.exe"
Fri 5 Jan 2007 244,224 A..H. --- "C:\Program Files\Windows Media Player\mpvis.dll"
Wed 11 Aug 2004 47,616 A..H. --- "C:\Program Files\Windows Media Player\msoobci.dll"
Tue 17 Aug 2004 226,816 A..H. --- "C:\Program Files\Windows Media Player\npdrmv2.dll"
Thu 25 Oct 2001 403 A..H. --- "C:\Program Files\Windows Media Player\npdrmv2.zip"
Thu 25 Oct 2001 22,060 A..H. --- "C:\Program Files\Windows Media Player\npds.zip"
Tue 29 Nov 2005 364,544 A..H. --- "C:\Program Files\Windows Media Player\npdsplay.dll"
Tue 17 Aug 2004 10,240 A..H. --- "C:\Program Files\Windows Media Player\npwmsdrm.dll"
Fri 5 Jan 2007 1,674,752 A..H. --- "C:\Program Files\Windows Media Player\setup_wm.exe"
Wed 18 Oct 2006 493,568 ...H. --- "C:\Program Files\Windows Media Player\wmdbexport.exe"
Wed 18 Oct 2006 241,664 A..H. --- "C:\Program Files\Windows Media Player\wmlaunch.exe"
Fri 5 Jan 2007 96,256 A..H. --- "C:\Program Files\Windows Media Player\wmpband.dll"
Wed 18 Oct 2006 25,600 A..H. --- "C:\Program Files\Windows Media Player\wmpenc.exe"
Fri 5 Jan 2007 64,000 A..H. --- "C:\Program Files\Windows Media Player\wmplayer.exe"
Fri 5 Jan 2007 913,920 ...H. --- "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Tue 17 Aug 2004 221,184 A..H. --- "C:\Program Files\Windows Media Player\wmpns.dll"
Fri 5 Jan 2007 204,288 ...H. --- "C:\Program Files\Windows Media Player\wmpnscfg.exe"
Fri 5 Jan 2007 198,144 ...H. --- "C:\Program Files\Windows Media Player\wmpnssci.dll"
Wed 18 Oct 2006 36,864 ...H. --- "C:\Program Files\Windows Media Player\wmpshare.exe"
Wed 1 Nov 2006 1,669,120 A..H. --- "C:\Program Files\Windows Media Player\wmsetsdk.exe"
Wed 18 Oct 2006 8,704 ...H. --- "C:\Program Files\Windows Media Connect 2\wmccds.exe"
Wed 18 Oct 2006 8,704 ...H. --- "C:\Program Files\Windows Media Connect 2\WMCCFG.exe"
Wed 18 Oct 2006 4,096 ...H. --- "C:\Program Files\Windows Media Connect 2\WMCCPL.dll"
Wed 18 Oct 2006 4,096 ...H. --- "C:\Program Files\Windows Media Connect 2\wmcsci.dll"
Sun 3 Dec 2006 49,869 A..H. --- "C:\Program Files\Xraye\Uninstal.exe"
Wed 16 Mar 2005 943,675 A..H. --- "C:\Program Files\Xraye\xraye.exe"
Fri 9 Nov 2007 462,848 A..H. --- "C:\WINDOWS\system32\ksdmgr32.dll"
Fri 9 Nov 2007 69,632 A..H. --- "C:\WINDOWS\system32\onksd.dll"
Fri 9 Nov 2007 45,056 A..H. --- "C:\WINDOWS\system32\perfex.exe"
Fri 9 Nov 2007 53,248 A..H. --- "C:\WINDOWS\system32\prfex32.dll"
Fri 9 Nov 2007 217,088 A..H. --- "C:\WINDOWS\system32\statex.dll"
Wed 9 Aug 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Thu 2 Mar 2000 36,864 A..H. --- "C:\Program Files\3DO\Support\Support.exe"
Tue 18 Dec 2001 135,168 A..H. --- "C:\Program Files\3DO\Support\SysInfo.exe"
Tue 11 Oct 2005 2,633,813 ...H. --- "C:\Program Files\Ahead\CoverDesigner\CoverDes.exe"
Mon 23 Jan 2006 4,862,039 ...H. --- "C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe"
Wed 16 Jul 2003 286,720 A..H. --- "C:\Program Files\Ahead\WMPBurn\NeroBurnPlugin.dll"
Wed 16 Jul 2003 1,482,752 A..H. --- "C:\Program Files\Ahead\WMPBurn\WMPBurn.exe"
Sat 23 Jun 2007 900,096 A..H. --- "C:\Program Files\BearFlix\db\library.db.lastgoodload.bak"
Sat 23 Jun 2007 900,096 A..H. --- "C:\Program Files\BearFlix\db\library.2.db.lastgoodload.bak"
Mon 8 Jan 2007 3,448,136 A..H. --- "C:\Program Files\BearFlix\Installer\BFINSTALL.exe"
Wed 17 Jan 2007 14,810 A..H. --- "C:\Program Files\BearFlix\Temp\TMP50 cent, Lloyd Banks - My Buddy (video).dat.bak"
Thu 17 Aug 2006 6,583,992 A..H. --- "C:\Program Files\BearShare Applications\BearShare\BearShare.exe"
Mon 1 May 2006 446,464 A..H. --- "C:\Program Files\BearShare Applications\BearShare\C4dll.dll"
Thu 17 Aug 2006 99,000 A..H. --- "C:\Program Files\BearShare Applications\BearShare\DiscoveryHelper.dll"
Mon 1 May 2006 135,168 A..H. --- "C:\Program Files\BearShare Applications\BearShare\expat.dll"
Thu 17 Aug 2006 99,512 A..H. --- "C:\Program Files\BearShare Applications\BearShare\IMWebControl.dll"
Mon 1 May 2006 237,568 A..H. --- "C:\Program Files\BearShare Applications\BearShare\lame_enc.dll"
Thu 17 Aug 2006 86,016 A..H. --- "C:\Program Files\BearShare Applications\BearShare\Launcher.exe"
Mon 1 May 2006 1,568,768 A..H. --- "C:\Program Files\BearShare Applications\BearShare\mninet20.dll"
Mon 1 May 2006 397,312 A..H. --- "C:\Program Files\BearShare Applications\BearShare\MNWMRM.dll"
Mon 1 May 2006 1,843,200 A..H. --- "C:\Program Files\BearShare Applications\BearShare\NCTAudioFile2.dll"
Mon 1 May 2006 651,264 A..H. --- "C:\Program Files\BearShare Applications\BearShare\NCTAudioCDWriter2.dll"
Mon 1 May 2006 659,456 A..H. --- "C:\Program Files\BearShare Applications\BearShare\NCTDataCDWriter2.dll"
Sun 6 Aug 2006 483,328 A..H. --- "C:\Program Files\BearShare Applications\BearShare\NCTWMAFile2.dll"
Thu 17 Aug 2006 255,672 A..H. --- "C:\Program Files\BearShare Applications\BearShare\PortableMediaDeviceWrapper.dll"
Thu 17 Aug 2006 239,288 A..H. --- "C:\Program Files\BearShare Applications\BearShare\ResourcesLOC.dll"
Mon 1 May 2006 121,504 A..H. --- "C:\Program Files\BearShare Applications\BearShare\Shw32.dll"
Fri 26 Jul 2002 153,088 A..H. --- "C:\Program Files\BearShare Applications\BearShare\UNWISE.EXE"
Thu 17 Aug 2006 28,160 A..H. --- "C:\Program Files\BearShare Applications\BearShare\UpdateInst.exe"
Mon 1 May 2006 122,880 A..H. --- "C:\Program Files\BearShare Applications\BearShare\wmMetaData.dll"
Sun 9 Aug 1998 86,016 A..H. --- "C:\Program Files\Common Files\Designer\MSADDNDR.DLL"
Wed 16 May 2007 86,528 A..H. --- "C:\Program Files\Common Files\System\directdb.dll"
Wed 16 May 2007 510,976 A..H. --- "C:\Program Files\Common Files\System\wab32.dll"
Tue 17 Aug 2004 249,856 A..H. --- "C:\Program Files\Common Files\System\wab32res.dll"
Fri 11 Aug 2006 69,632 A..H. --- "C:\Program Files\DivX\DivX Codec\config.exe"
Fri 11 Aug 2006 341,504 A..H. --- "C:\Program Files\DivX\DivX Codec\DivX EKG.exe"
Fri 11 Aug 2006 270,336 A..H. --- "C:\Program Files\DivX\DivX Codec\DivXDRA1031.dll"
Fri 11 Aug 2006 262,144 A..H. --- "C:\Program Files\DivX\DivX Codec\DivXDRA1033.dll"
Fri 11 Aug 2006 270,336 A..H. --- "C:\Program Files\DivX\DivX Codec\DivXDRA1036.dll"
Fri 11 Aug 2006 237,568 A..H. --- "C:\Program Files\DivX\DivX Codec\DivXDRA1041.dll"
Fri 25 Aug 2006 2,322,432 A..H. --- "C:\Program Files\DivX\DivX Converter\Converter.exe"
Fri 25 Aug 2006 1,081,344 A..H. --- "C:\Program Files\DivX\DivX Converter\DSConverter1041.dll"
Fri 25 Aug 2006 1,085,440 A..H. --- "C:\Program Files\DivX\DivX Converter\DSConverter1036.dll"
Fri 25 Aug 2006 929,792 A..H. --- "C:\Program Files\DivX\DivX Converter\DSConverter1033.dll"
Fri 25 Aug 2006 1,085,440 A..H. --- "C:\Program Files\DivX\DivX Converter\DSConverter1031.dll"
Thu 24 Aug 2006 77,824 A..H. --- "C:\Program Files\DivX\DivX Converter\dvd2divxsub.dll"
Fri 11 Aug 2006 845,824 A..H. --- "C:\Program Files\DivX\DivX Converter\libxml2.dll"
Fri 11 Aug 2006 1,933,312 A..H. --- "C:\Program Files\DivX\DivX Content Uploader\ContentUploadCheck.dll"
Fri 11 Aug 2006 845,824 A..H. --- "C:\Program Files\DivX\DivX Content Uploader\libxml2.dll"
Fri 11 Aug 2006 1,159,168 A..H. --- "C:\Program Files\DivX\DivX Content Uploader\npUpload.dll"
Fri 11 Aug 2006 1,933,312 A..H. --- "C:\Program Files\DivX\DivX Player\ContentUploadCheck.dll"
Thu 31 Aug 2006 2,260,992 A..H. --- "C:\Program Files\DivX\DivX Player\ConverterPlugin.dll"
Fri 11 Aug 2006 323,584 A..H. --- "C:\Program Files\DivX\DivX Player\DCManager.dll"
Mon 4 Sep 2006 1,799,168 A..H. --- "C:\Program Files\DivX\DivX Player\DivX Player.exe"
Fri 11 Aug 2006 845,824 A..H. --- "C:\Program Files\DivX\DivX Player\libxml2.dll"
Mon 4 Sep 2006 94,208 A..H. --- "C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll"
Fri 11 Aug 2006 159,744 A..H. --- "C:\Program Files\DivX\DivX Player\primosdk.dll"
Fri 11 Aug 2006 528,896 A..H. --- "C:\Program Files\DivX\DivX Web Player\npdivx32.dll"
Tue 19 Jun 2001 77,824 A..H. --- "C:\Program Files\EACom\GTShare\authauth.dll"
Mon 9 Jul 2001 278,528 A..H. --- "C:\Program Files\EACom\GTShare\GmEmitter.dll"
Tue 19 Jun 2001 98,304 A..H. --- "C:\Program Files\EACom\GTShare\HighScore.dll"
Fri 4 Aug 2006 229,376 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\2004Utils.dll"
Fri 4 Aug 2006 90,112 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\ATLJabber.exe"
Fri 4 Aug 2006 442,368 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\AutoRunGUI.dll"
Fri 4 Aug 2006 147,456 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\BrowserEngine2.dll"
Fri 4 Aug 2006 397,312 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\DSockCom.dll"
Fri 4 Aug 2006 184,320 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\EASO04Patcher.dll"
Thu 31 Aug 2006 405,504 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\EASOUNInstaller.exe"
Fri 4 Aug 2006 487,424 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\msvcp70.dll"
Fri 4 Aug 2006 344,064 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\msvcr70.dll"
Fri 4 Aug 2006 145,408 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\PogoServiceRelease.DLL"
Fri 4 Aug 2006 102,400 A..H. --- "C:\Program Files\EA SPORTS\EA SPORTS online\SportsWrapper.exe"
Mon 22 Mar 2004 347,136 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\binkw32.dll"
Fri 25 Jan 2002 135,168 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\eax.dll"
Thu 29 Apr 2004 3,752,004 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\HitmanContracts.exe"
Mon 19 Jan 2004 159,744 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\jpegdll.dll"
Thu 29 Aug 2002 401,462 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\Msvcp60.dll"
Thu 29 Aug 2002 323,072 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\msvcrt.dll"
Wed 7 Apr 2004 40,960 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\restoredefaults.exe"
Wed 7 Apr 2004 167,936 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\uninstall.exe"
Thu 24 May 2001 162,304 A..H. --- "C:\Program Files\Eidos\Hitman Contracts\UNWISE.EXE"
Thu 13 Jul 2006 45,246 A..H. --- "C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2-uninst.exe"
Mon 13 Sep 2004 1,928,704 A..H. --- "C:\Program Files\Elaborate Bytes\CloneDVD2\CloneDVD2.exe"
Fri 10 Sep 2004 86,016 A..H. --- "C:\Program Files\Elaborate Bytes\CloneDVD2\InstallHelp.dll"
Mon 13 Sep 2004 86,016 A..H. --- "C:\Program Files\Elaborate Bytes\CloneDVD2\RegCloneDVD.exe"
Mon 13 Sep 2004 81,920 A..H. --- "C:\Program Files\Elaborate Bytes\CloneDVD2\WriteDVD.dll"
Mon 30 Aug 2004 180,224 A..H. --- "C:\Program Files\ESET\Install\main.dll"
Mon 30 Aug 2004 36,864 A..H. --- "C:\Program Files\ESET\Install\mainlang.dll"
Fri 23 Apr 1999 995,383 A..H. --- "C:\Program Files\ESET\Install\mfc42.dll"
Tue 30 Nov 1999 995,384 A..H. --- "C:\Program Files\ESET\Install\mfc42u.dll"
Fri 23 Apr 1999 266,293 A..H. --- "C:\Program Files\ESET\Install\msvcrt.dll"
Mon 30 Aug 2004 233,472 A..H. --- "C:\Program Files\ESET\Install\setup.exe"
Mon 21 Aug 2006 180,224 A..H. --- "C:\Program Files\ESET\Setup\main.dll"
Mon 21 Aug 2006 36,864 A..H. --- "C:\Program Files\ESET\Setup\mainlang.dll"
Mon 21 Aug 2006 233,472 A..H. --- "C:\Program Files\ESET\Setup\setup.exe"
Tue 24 May 2005 114,688 A..H. --- "C:\Program Files\HP\Digital Imaging\NCPMLInst.dll"
Tue 24 May 2005 90,112 A..H. --- "C:\Program Files\HP\Digital Imaging\NCUIApi.dll"
Mon 8 Aug 2005 163,840 A..H. --- "C:\Program Files\HP\Photosmart Essential\AdvertisedPlugins.dll"
Wed 8 Feb 2006 886,784 A..H. --- "C:\Program Files\HP\Photosmart Essential\CreatPl2.dll"
Wed 8 Feb 2006 21,504 A..H. --- "C:\Program Files\HP\Photosmart Essential\creatrs2.dll"
Sat 20 Aug 2005 12,288 A..H. --- "C:\Program Files\HP\Photosmart Essential\eBayIcon.dll"
Sat 20 Aug 2005 139,264 A..H. --- "C:\Program Files\HP\Photosmart Essential\eBayIcon.exe"
Wed 8 Feb 2006 36,864 A..H. --- "C:\Program Files\HP\Photosmart Essential\EmailCom.dll"
Wed 8 Feb 2006 8,704 A..H. --- "C:\Program Files\HP\Photosmart Essential\EmailRes.dll"
Mon 24 Oct 2005 1,591,808 A..H. --- "C:\Program Files\HP\Photosmart Essential\fermataU.dll"
Wed 8 Feb 2006 621,056 A..H. --- "C:\Program Files\HP\Photosmart Essential\FixPlg.dll"
Wed 8 Feb 2006 14,336 A..H. --- "C:\Program Files\HP\Photosmart Essential\FixRes.dll"
Wed 22 Jun 2005 126,976 A..H. --- "C:\Program Files\HP\Photosmart Essential\hphfyiel.dll"
Thu 28 Jul 2005 110,592 A..H. --- "C:\Program Files\HP\Photosmart Essential\hpqishtm.dll"
Wed 8 Feb 2006 45,056 A..H. --- "C:\Program Files\HP\Photosmart Essential\HP_IZE.dll"
Wed 8 Feb 2006 830,464 A..H. --- "C:\Program Files\HP\Photosmart Essential\HP_IZE.exe"
Wed 8 Feb 2006 45,056 A..H. --- "C:\Program Files\HP\Photosmart Essential\hp_promo.dll"
Wed 8 Feb 2006 45,056 A..H. --- "C:\Program Files\HP\Photosmart Essential\IZEHelp.dll"
Wed 8 Feb 2006 20,480 A..H. --- "C:\Program Files\HP\Photosmart Essential\IZERes.dll"
Wed 22 Jun 2005 249,856 A..H. --- "C:\Program Files\HP\Photosmart Essential\MSLURT.dll"
Wed 8 Feb 2006 247,808 A..H. --- "C:\Program Files\HP\Photosmart Essential\PrintPlg.dll"
Wed 8 Feb 2006 13,824 A..H. --- "C:\Program Files\HP\Photosmart Essential\PrintRes.dll"
Wed 8 Feb 2006 1,003,008 A..H. --- "C:\Program Files\HP\Photosmart Essential\SharePl2.dll"
Wed 8 Feb 2006 16,896 A..H. --- "C:\Program Files\HP\Photosmart Essential\ShareRs2.dll"
Tue 7 Dec 2004 258,352 A..H. --- "C:\Program Files\HP\Photosmart Essential\unicows.dll"
Wed 8 Feb 2006 911,360 A..H. --- "C:\Program Files\HP\Photosmart Essential\ViewPl2.dll"
Wed 8 Feb 2006 32,026 A..H. --- "C:\Program Files\HP\Photosmart Essential\ViewRs2.dll"
Wed 6 Dec 2006 4,608 A..H. --- "C:\Program Files\ICQLite\LiteDataFiles\bartout.exe"
Tue 3 Jul 2007 69,276 A..H. --- "C:\Program Files\ICQLite\LiteDataFiles\icqfilexfer.exe"
Tue 1 Mar 2005 2,560 A..H. --- "C:\Program Files\ICQLite\LiteDataFiles\icqtoolbarpatch.exe"
Fri 22 Oct 2004 118,736 A..H. --- "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\setup.exe"
Thu 12 Apr 2007 380,928 A..H. --- "C:\Program Files\InstallShield Installation Information\{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}\_setup.dll"
Wed 5 Sep 2001 168,448 A..H. --- "C:\Program Files\InstallShield Installation Information\{20071984-5EB1-4881-8EDB-082532ACEC6D}\Setup.exe"
Wed 16 Jun 2004 107,512 A..H. --- "C:\Program Files\InstallShield Installation Information\{336F464B-60EF-4590-8FE0-FF2221BCBFDF}\setup.exe"
Sat 26 May 2007 344,064 A..H. --- "C:\Program Files\InstallShield Installation Information\{336F464B-60EF-4590-8FE0-FF2221BCBFDF}\_setup.dll"
Sun 16 Jul 2006 147,456 A..H. --- "C:\Program Files\InstallShield Installation Information\{3374B4A6-5595-4667-882D-755ABE093806}\_setup.dll"
Tue 16 May 2000 134,656 A..H. --- "C:\Program Files\InstallShield Installation Information\{5490882C-6961-11D5-BAE5-00E0188E010B}\Setup.exe"
Tue 3 Oct 2006 552,214 A..H. --- "C:\Program Files\InstallShield Installation Information\{56C3017A-6E09-4101-8B35-EAC40DA86A9E}\ISSetup.dll"
Tue 3 Oct 2006 455,600 A..H. --- "C:\Program Files\InstallShield Installation Information\{56C3017A-6E09-4101-8B35-EAC40DA86A9E}\setup.exe"
Tue 3 Oct 2006 164,784 A..H. --- "C:\Program Files\InstallShield Installation Information\{56C3017A-6E09-4101-8B35-EAC40DA86A9E}\_Setup.dll"
Fri 1 Oct 2004 118,736 A..H. --- "C:\Program Files\InstallShield Installation Information\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}\setup.exe"
Mon 9 Apr 2007 147,456 A..H. --- "C:\Program Files\InstallShield Installation Information\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}\_setup.dll"
Wed 28 Feb 2001 139,264 A..H. --- "C:\Program Files\InstallShield Installation Information\{6F498E3F-616E-4368-0086-3F260E8FAB40}\Setup.exe"
Mon 10 Nov 2003 116,880 A..H. --- "C:\Program Files\InstallShield Installation Information\{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}\setup.exe"
Thu 5 Oct 2000 54,272 A..H. --- "C:\Program Files\InstallShield Installation Information\{CB17278E-E94C-4B09-93F5-AD812823E042}\Setup.exe"
Wed 5 Sep 2001 168,448 A..H. --- "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\Setup.exe"
Mon 2 Dec 2002 107,512 A..H. --- "C:\Program Files\InstallShield Installation Information\{E672B767-4483-419E-9C8A-0CE59390E79E}\setup.exe"
Thu 22 Jun 2006 344,064 A..H. --- "C:\Program Files\InstallShield Installation Information\{E672B767-4483-419E-9C8A-0CE59390E79E}\_setup.dll"
Mon 2 Dec 2002 107,512 A..H. --- "C:\Program Files\InstallShield Installation Information\{F79AAB3A-B8B4-4AC7-94AB-1C4C076C6A89}\setup.exe"
Wed 6 Apr 2005 121,064 A..H. --- "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe"
Thu 22 Jun 2006 368,640 A..H. --- "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\_setup.dll"
Tue 17 Aug 2004 61,440 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwconn.dll"
Tue 17 Aug 2004 215,552 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe"
Tue 17 Aug 2004 86,016 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwconn2.exe"
Tue 17 Aug 2004 32,768 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwdl.dll"
Tue 17 Aug 2004 172,032 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwhelp.dll"
Thu 25 Oct 2001 65,536 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwres.dll"
Tue 17 Aug 2004 24,576 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwrmind.exe"
Thu 25 Oct 2001 73,728 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwtutor.exe"
Tue 17 Aug 2004 49,152 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\icwutil.dll"
Tue 17 Aug 2004 20,480 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\inetwiz.exe"
Thu 25 Oct 2001 16,384 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\isignup.exe"
Thu 25 Oct 2001 40,960 A..H. --- "C:\Program Files\Internet Explorer\Connection Wizard\trialoc.dll"
Wed 14 May 2003 133,376 A..H. --- "C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll"
Mon 19 May 2003 377,856 A..H. --- "C:\Program Files\Micro Application\Cesta do stýedu ZemŘ\binkw32.dll"
Thu 18 Dec 2003 654,393 A..H. --- "C:\Program Files\Micro Application\Cesta do stýedu ZemŘ\game.exe"
Thu 24 Jun 2004 3,417,111 A..H. --- "C:\Program Files\Micro Application\Cesta do stýedu ZemŘ\protect.dll"
Wed 7 Feb 2001 128,416 A..H. --- "C:\Program Files\Microsoft Office\Office10\AW.DLL"
Fri 22 Sep 2000 40,960 A..H. --- "C:\Program Files\Microsoft Office\Office10\BIDI32.DLL"
Fri 9 Feb 2001 79,264 A..H. --- "C:\Program Files\Microsoft Office\Office10\BLNMGR.DLL"
Fri 9 Feb 2001 62,880 A..H. --- "C:\Program Files\Microsoft Office\Office10\BLNMGRPS.DLL"
Wed 11 Apr 2001 9,169,016 A..HR --- "C:\Program Files\Microsoft Office\Office10\EXCEL.EXE"
Mon 26 Feb 2001 1,169,528 A..H. --- "C:\Program Files\Microsoft Office\Office10\FPCUTL.DLL"
Wed 28 Feb 2001 204,800 A..H. --- "C:\Program Files\Microsoft Office\Office10\FPDTC.DLL"
Sun 4 Feb 2001 2,143,648 A..H. --- "C:\Program Files\Microsoft Office\Office10\GRAPH.EXE"
Wed 9 Dec 1998 31,744 A..H. --- "C:\Program Files\Microsoft Office\Office10\HLP95EN.DLL"
Mon 6 Nov 2000 126,976 A..H. --- "C:\Program Files\Microsoft Office\Office10\INTLDATE.DLL"
Tue 27 Feb 2001 42,400 A..H. --- "C:\Program Files\Microsoft Office\Office10\MCANSI.DLL"
Thu 21 Sep 2000 856,155 A..H. --- "C:\Program Files\Microsoft Office\Office10\MCDLC.EXE"
Thu 21 Sep 2000 37,376 A..H. --- "C:\Program Files\Microsoft Office\Office10\MCDLCAN.DLL"
Tue 27 Feb 2001 91,552 A..H. --- "C:\Program Files\Microsoft Office\Office10\MCPS.DLL"
Wed 24 Jan 2001 180,279 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOAUTH.DLL"
Tue 13 Feb 2001 79,264 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOHEV.DLL"
Tue 13 Feb 2001 66,976 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOHTMED.EXE"
Mon 30 Oct 2000 36,864 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOSTYLE.DLL"
Mon 30 Oct 2000 3,076,141 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOWC.DLL"
Mon 30 Oct 2000 253,952 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOWCF.DLL"
Thu 2 Nov 2000 1,200,177 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSOWCW.DLL"
Tue 27 Feb 2001 648,608 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSTORDB.EXE"
Tue 27 Feb 2001 103,840 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSTORE.EXE"
Tue 27 Feb 2001 558,496 A..H. --- "C:\Program Files\Microsoft Office\Office10\MSTORES.DLL"
Thu 4 Jan 2001 188,416 A..H. --- "C:\Program Files\Microsoft Office\Office10\MULTIMGR.DLL"
Tue 30 Jan 2001 90,112 A..H. --- "C:\Program Files\Microsoft Office\Office10\MULTIQ.DLL"
Tue 13 Feb 2001 83,360 A..H. --- "C:\Program Files\Microsoft Office\Office10\OSA.EXE"
Fri 16 Feb 2001 603,552 A..H. --- "C:\Program Files\Microsoft Office\Office10\OWSCLT.DLL"
Fri 16 Feb 2001 42,400 A..H. --- "C:\Program Files\Microsoft Office\Office10\OWSSUPP.DLL"
Wed 31 Jan 2001 71,072 A..H. --- "C:\Program Files\Microsoft Office\Office10\PDIGRAPH.DLL"
Mon 26 Feb 2001 5,974,136 A..HR --- "C:\Program Files\Microsoft Office\Office10\POWERPNT.EXE"
Wed 11 Apr 2001 223,376 A..H. --- "C:\Program Files\Microsoft Office\Office10\PROFLWIZ.EXE"
Fri 24 Sep 1999 77,824 A..H. --- "C:\Program Files\Microsoft Office\Office10\REFEDIT.DLL"
Wed 3 Jan 2001 110,639 A..H. --- "C:\Program Files\Microsoft Office\Office10\SAEXT.DLL"
Tue 12 Oct 1999 90,112 A..H. --- "C:\Program Files\Microsoft Office\Office10\SEQCHK10.DLL"
Wed 28 Jun 2000 82,192 A..H. --- "C:\Program Files\Microsoft Office\Office10\UCSCRIBE.DLL"
Fri 18 Feb 2000 110,592 A..H. --- "C:\Program Files\Microsoft Office\Office10\WAVTOASF.EXE"
Wed 20 Oct 1999 86,016 A..H. --- "C:\Program Files\Microsoft Office\Office10\WDBIMP.DLL"
Fri 12 Jan 2001 316,824 A..H. --- "C:\Program Files\Microsoft Office\Office10\WEBPAGE.DLL"
Wed 7 Mar 2001 10,577,312 A..HR --- "C:\Program Files\Microsoft Office\Office10\WINWORD.EXE"
Fri 10 Dec 1999 32,768 A..H. --- "C:\Program Files\Microsoft Office\Office10\XLCALL32.DLL"
Thu 25 Oct 2001 82,501 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\bckg.dll"
Thu 25 Oct 2001 1,817,687 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\bckgres.dll"
Thu 25 Oct 2001 42,577 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\bckgzm.exe"
Thu 25 Oct 2001 40,515 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\chkr.dll"
Thu 25 Oct 2001 780,885 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\chkrres.dll"
Thu 25 Oct 2001 42,575 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\chkrzm.exe"
Thu 25 Oct 2001 217,160 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Cmnclim.dll"
Thu 25 Oct 2001 1,040,467 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Cmnresm.dll"
Thu 25 Oct 2001 57,409 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\hrtz.dll"
Thu 25 Oct 2001 1,175,635 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Hrtzres.dll"
Thu 25 Oct 2001 42,573 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\hrtzzm.exe"
Thu 25 Oct 2001 48,706 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\rvse.dll"
Thu 25 Oct 2001 753,236 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Rvseres.dll"
Thu 25 Oct 2001 42,574 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Rvsezm.exe"
Thu 25 Oct 2001 66,113 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\shvl.dll"
Thu 25 Oct 2001 2,178,131 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\Shvlres.dll"
Thu 25 Oct 2001 42,573 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\shvlzm.exe"
Thu 25 Oct 2001 32,339 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\UniAnsi.dll"
Thu 25 Oct 2001 36,937 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\zClientm.exe"
Thu 25 Oct 2001 41,029 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\ZCorem.dll"
Thu 25 Oct 2001 4,677 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\zeeverm.dll"
Thu 25 Oct 2001 29,760 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\ZNetM.dll"
Thu 25 Oct 2001 113,222 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\zoneclim.dll"
Thu 25 Oct 2001 13,894 A..H. --- "C:\Program Files\MSN Gaming Zone\Windows\zonelibM.dll"
Sun 24 Dec 2006 748,830 A..H. --- "C:\Program Files\PartyGaming\PartyPoker\Uninstall.exe"
Sun 24 Dec 2006 1,606,247 A..H. --- "C:\Program Files\PartyGaming\tmpUpgrade\upgradePG105-106man.exe"
Thu 13 Sep 2001 135,168 A..H. --- "C:\Program Files\Roger Wilco\rwbs\rwbs.exe"
Thu 13 Sep 2001 114,688 A..H. --- "C:\Program Files\Roger Wilco\rwbs\rwnet.dll"
Tue 21 Aug 2001 149,504 A..H. --- "C:\Program Files\Roger Wilco\rwbs\UNWISE.EXE"
Fri 3 Feb 2006 41,168 A..H. --- "C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\FirewallInstallHelper.dll"
Thu 22 Feb 2007 509,054 A..H. --- "C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\setup-bp.exe"
Fri 8 Jun 2007 750,440 A..H. --- "C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\unins000.exe"
Tue 27 Apr 2004 12,800 A..H. --- "C:\Program Files\Webteh\BSPlayer\bplay.exe"
Tue 27 Apr 2004 12,800 A..H. --- "C:\Program Files\Webteh\BSPlayer\bsplay.exe"
Fri 21 Sep 2007 1,190,400 A..H. --- "C:\Program Files\Webteh\BSPlayer\bsplayer.exe"
Fri 21 Sep 2007 2,174,016 A..H. --- "C:\Program Files\Webteh\BSPlayer\bsrendv2.dll"
Sat 22 Sep 2007 63,495 A..H. --- "C:\Program Files\Webteh\BSPlayer\uninstall.EXE"
Tue 17 Aug 2004 215,552 A..H. --- "C:\Program Files\Windows NT\Accessories\wordpad.exe"
Mon 8 Oct 2001 36,864 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Advertising.dll"
Mon 8 Oct 2001 77,824 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Alarms.dll"
Mon 8 Oct 2001 45,056 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Bpk.dll"
Mon 8 Oct 2001 32,768 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\FavoriteLinks.dll"
Mon 8 Oct 2001 229,376 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\MP3Dancer.exe"
Mon 8 Oct 2001 20,480 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Network.dll"
Mon 8 Oct 2001 24,576 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\SoundCapture.dll"
Mon 8 Oct 2001 24,576 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Statistics.dll"
Mon 8 Oct 2001 49,152 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Stats.dll"
Mon 8 Oct 2001 45,056 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\System.dll"
Fri 25 Jun 1999 149,504 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\UNWISE.EXE"
Mon 8 Oct 2001 57,344 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Upd.exe"
Mon 8 Oct 2001 45,056 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Update.dll"
Mon 8 Oct 2001 40,960 A..H. --- "C:\Program Files\Windows NT\MP3Dancer\Windows.dll"
Tue 17 Aug 2004 282,112 A..H. --- "C:\Program Files\Windows NT\Pinball\PINBALL.EXE"
Wed 19 Oct 2005 189,992 A..H. --- "C:\Program Files\Yahoo!\Common\unyt.exe"
Thu 5 Apr 2007 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Fri 1 Oct 2004 118,736 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\Set193.tmp"
Mon 10 Nov 2003 116,880 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\set25F.tmp"
Mon 27 Nov 2000 166,400 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\Set49B.tmp"
Fri 1 Oct 2004 118,736 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\Set7F2.tmp"
Thu 5 Oct 2000 54,272 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\SetCB1.tmp"
Fri 1 Oct 2004 118,736 A..H. --- "C:\Documents and Settings\PC\Local Settings\Temp\SetCB2.tmp"
Mon 3 Nov 2003 28,672 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Esl\AiodLite.dll"
Thu 1 May 2003 565,248 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\Ace.dll"
Wed 14 May 2003 53,248 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\Acrofx32.dll"
Mon 3 Nov 2003 7,671,876 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe"
Wed 14 May 2003 303,616 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\AdobeUpdateManager.exe"
Fri 29 Aug 2003 1,506,304 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\Agm.dll"
Fri 14 Jul 2000 58,938 A..HR --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\atl.dll"
Thu 1 May 2003 151,552 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\Bib.dll"
Fri 29 Aug 2003 1,626,112 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\CoolType.dll"
Wed 14 May 2003 81,920 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\esdupdate.dll"
Tue 29 Apr 2003 524,373 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\JP2KLib.dll"
Thu 1 May 2003 94,208 A..H. --- "C:\Program Files\Adobe\Acrobat 6.0\Reader\OPP.dll"
Mon 4 Oct 1999 53,248 A..H. --- "C:\Program Files\Adobe\Acrobat 4.0\Reader\Acrofx32.dll"
Thu 21 Oct 1999 155,136 A..H. --- "C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroJs32.dll"
Thu 27 Jan 2000 2,334,208 A..H. --- "C:\Program Files\Adobe\Acrobat 4.0\Reader\AcroRd32.exe"
Wed 6 Oct 1999 582,656 A..H. --- "C:\Program Files\Adobe\Acrobat 4.0\Reader\Agm.dll"
Thu 18 Nov 1999 885,760 A..H. --- "C:\Program Files\Adobe\Acrobat 4.0\Reader\Cooltype.dll"
Wed 19 Feb 2003 1,564,672 ...H. --- "C:\Program Files\Ahead\Shared\AudioPlugins\Aac.dll"
Tue 18 Feb 2003 806,912 ...H. --- "C:\Program Files\Ahead\Shared\AudioPlugins\aacenc32.dll"
Sat 3 Feb 2007 49,152 A..H. --- "C:\Program Files\BearShare Applications\MediaBar\2.bin\B5PLUGIN.DLL"
Sat 3 Feb 2007 233,472 A..H. --- "C:\Program Files\BearShare Applications\MediaBar\2.bin\BEARSMBR.DLL"
Sat 3 Feb 2007 24,576 A..H. --- "C:\Program Files\BearShare Applications\MediaBar\2.bin\NPBERSMB.DLL"
Tue 16 Feb 1999 212,992 A..H. --- "C:\Program Files\Common Files\Adobe\Web\Adobeweb.dll"
Tue 18 Oct 2005 872,448 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Aac.dll"
Thu 18 May 2006 507,904 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\aacenc32.dll"
Fri 19 May 2006 94,208 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Aiff.dll"
Fri 19 May 2006 151,552 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\DefConvertor.dll"
Fri 7 Oct 2005 225,280 A..H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\lame_enc.dll"
Fri 19 May 2006 122,880 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\mp3PP.dll"
Fri 19 May 2006 565,248 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\mp3PRO.dll"
Fri 19 May 2006 9,216 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\mp3PRO_dmo.dll"
Fri 19 May 2006 9,216 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\mp3PRO_hlp.dll"
Thu 1 Sep 2005 303,104 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\msa.dll"
Fri 19 May 2006 1,134,592 ...H. --- "C:\Program Files\Common Files\Ahead\AudioPlugins\ogg.dll"
Tue 16 Dec 2003 204,800 A..HR --- "C:\Program Files\Common Files\Ahead\AudioPlugins\Vqf.dll"
Tue 16 Dec 2003 667,648 A..HR --- "C:\Program Files

Napsal: 11 lis 2007 16:01
od fredik
Vítej na fóru

Postupuj podle tohoto návodu Warezov / Stration - aktualizovany navod na odstraneni (použij alternativní postup s avengerem)

Po tom projeď pc tímto a vlož sem log jak je napsáno v návodu: Mwav

Pak sem dej nový log z HijackThis.

Napsal: 12 lis 2007 17:10
od Snoopy21
Tak sem to projel tim stration remover a po HiJackThis to napsalo toto :


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:06:52, on 12.11.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\chat1302.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\LADA- NEMAZAT !!!!!!!!!!!!!!!\QIP\qip.exe
C:\Program Files\Opera\Opera.exe
C:\totalcmd\TOTALCMD.EXE
c:\LADA- NEMAZAT !!!!!!!!!!!!!!!\Hijack\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: BearShareMediaBar BHO - {E49CE891-CD83-4841-8CC9-6E284D7978D0} - C:\Program Files\BearShare Applications\MediaBar\2.bin\BEARSMBR.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O3 - Toolbar: BearShare Media Bar - {E49CE899-CD83-4841-8CC9-6E284D7978D0} - C:\Program Files\BearShare Applications\MediaBar\2.bin\BEARSMBR.DLL
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [spup.exe] C:\WINDOWS\chat1302.exe s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-725345543-1637723038-2147196821-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{FABD71EB-16FD-410B-8A58-E541B572DD62}: NameServer = 213.250.192.1,213.250.194.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: pmspwups.dll ql0ugig.dll
O20 - Winlogon Notify: kbdidpla - C:\WINDOWS\system32\kbdidpla.dll (file missing)
O20 - Winlogon Notify: vbscsysi - C:\WINDOWS\system32\vbscsysi.dll (file missing)
O20 - Winlogon Notify: winnatkc - C:\WINDOWS\system32\winnatkc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe

--
End of file - 5413 bytes


Už je to v pořádku ?

Napsal: 12 lis 2007 17:52
od fredik
Ještě není

Chybí ti základní zabezpečení PC:
- doinstaluj si tam antivir a proveď s ním kontrolu tvého PC
- Pro lepší zabezpečení by bylo dobré si doinstalovat firewall, můžeš si vybrat některý zde uvedený nebo některý jiný z odkazu: Přehled osobních firewallů
Firewally zdarma:
Comodo - kvalitní, pokročilý, s mnoha funkcemi, originálně v angličtině, čeština by měla být asi až od verze 3 která by se měl objevit v brzké době
Kerio - přehledný, větší možnosti nastavení, náročnější na systémové prostředky, v češtině
ZoneAlarm - jednoduchý, kompatibilní, nenáročný na systémové prostředky, málo možností nastavení, v angličtině

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
Doporučil bych ti odinstalovat přes Přidat nebo odebrat programy:
BearShareMediaBar

Spusť znovu HijackThis a zaškrtni v něm okénka před řádky:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe (file missing)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/carlo/zu.....der_v5.cab
po zaškrtnutí klikni na tlačítko Fix Checked

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Stáhni si Avengera spusť ho pod účtem administrátora.
Zvol možnost - Input script manually a klikni na ikonku lupy vyskočí prázdné okno kam zkopíruj tento tučný text:
Files to delete:
%windir%\system32\pmspwups.dll
%windir%\system32\ql0ugig.dll
%windir%\system32\winnatkc.dll
%windir%\chat1302.exe

Registry values to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | spup.exe

Registry values to replace with dummy:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs

Registry keys to delete:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\kbdidpla
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vbscsysi
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winnatkc

Poté klikni na Done.
Pak klikni na ikonku semafory.
Vyskočí ti hláška kde odklikni Yes. PC se restartuje po restartu by ti měl "vyskočit" výpis z Avengeru tak ho sem zkopíruj.

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Projeď PC a dej sem log z Mwav jak už jsem psal a po něm nový log z HJT.
Časové pásmo: UTC+02:00
Stránka 1 z 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/