Prosim o kontrolu logu Vyřešeno

[Yelkinson]

Potrebuju zkontrolovat log.Po stazeni US downloaderu z nejaky ruskystranky mi zacali vyskakovat nejaky prasarny kdyz otevru prohlizec.ypc sem projizdel Mbamem ale ten nic nenasel!DIK



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:58:05, on 20.6.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ScsiAccess.EXE
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.gametop.com/?utm_source=Ab ... dium=start
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\SiteAccess.dll
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\system32\ScsiAccess.EXE

--
End of file - 4676 bytes

[Reklama]

[jaro3]

Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.gametop.com/?utm_source=Ab ... dium=start
O20 - AppInit_DLLs: C:\WINDOWS\system32\SiteAccess.dll


Stáhni si program OTMoveIt3 (by OldTimer)
http://www.edisk.cz/stahni/07995/OTMove ... .39KB.html
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:
Poznámka: Nepoužij k označení funkci VYBRAT VŠE

Kód: Vybrat vše

:Processes
explorer.exe

:Services

:Reg

:Files
C:\WINDOWS\system32\SiteAccess.dll

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]


- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMoveIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.
*****************************************************************************************************************************************
Vypni rez. ochranu u NOD32 (potom si pořiď něco na spyware..)
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Podívám se zítra...

[Yelkinson]

Tak tady je ten Mov:


PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
DllUnregisterServer procedure not found in C:\WINDOWS\system32\SiteAccess.dll
C:\WINDOWS\system32\SiteAccess.dll NOT unregistered.
C:\WINDOWS\system32\SiteAccess.dll moved successfully.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
File delete failed. C:\Documents and Settings\XXX\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
User's Temporary Internet Files folder emptied.
Local Service Temp folder emptied.
File delete failed. C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat scheduled to be deleted on reboot.
Local Service Temporary Internet Files folder emptied.
Network Service Temp folder emptied.
Network Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_6f8.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTM by OldTimer - Version 2.1.0.1 log created on 06202009_224613

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_6f8.dat not found!

Registry entries deleted on Reboot...






A v prohlizeci uz mi nic nevyskakuje tak ted jdu na ten Combofix.

[Yelkinson]

ComboFix 09-06-20.02 - XXX 20.06.2009 23:00.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.383.174 [GMT 2:00]
Spuštěný z: c:\documents and settings\XXX\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\OGACheckControl.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-20 do 2009-06-20 )))))))))))))))))))))))))))))))
.

2009-06-20 20:46 . 2009-06-20 20:46 -------- d-----w- C:\_OTM
2009-06-20 17:57 . 2009-06-20 17:57 -------- d-----w- c:\program files\Trend Micro
2009-06-20 16:40 . 2009-06-20 16:41 -------- d-----w- c:\program files\Windows Live Safety Center
2009-06-20 14:31 . 2009-06-20 14:31 -------- d-----w- c:\program files\SiteAccess
2009-06-20 14:10 . 2009-06-20 15:58 -------- d-----w- C:\USD
2009-06-19 11:21 . 2009-06-20 07:14 -------- d-----w- c:\program files\Aquitania
2009-06-19 10:29 . 2009-06-19 10:29 -------- d-----w- c:\program files\BFG
2009-06-19 10:00 . 2009-06-19 10:04 -------- d-----w- c:\program files\Soggy Melon
2009-06-19 09:22 . 2009-06-19 09:28 -------- d-----w- c:\program files\Oberon Media
2009-06-18 15:32 . 2009-06-18 15:32 -------- d-----w- c:\program files\MSXML 4.0
2009-06-17 14:16 . 1999-11-10 10:05 86016 ----a-w- c:\windows\unvise32qt.exe
2009-06-17 14:16 . 2009-06-18 11:03 -------- d-----w- c:\windows\system32\QuickTime
2009-06-17 14:16 . 2009-06-18 11:03 -------- d-----w- c:\program files\QuickTime
2009-06-17 14:15 . 2009-06-17 14:15 -------- d-----w- c:\program files\Common Files\Kodak
2009-06-17 14:14 . 2009-06-17 14:14 -------- d-----w- c:\windows\system32\color
2009-06-17 14:14 . 2009-06-17 14:14 -------- d-----w- c:\windows\system32\BWKDLogs
2009-06-17 14:11 . 2009-06-17 14:15 -------- d-----w- c:\program files\Kodak
2009-06-17 07:54 . 2009-06-17 07:54 -------- d-----w- c:\program files\ReflexiveArcade
2009-06-16 21:58 . 2009-06-16 22:07 -------- d-----w- c:\program files\3B Software
2009-06-15 14:41 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-15 14:41 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-15 14:41 . 2009-06-20 17:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-14 13:51 . 2009-06-14 13:51 -------- d-----w- c:\program files\IObit
2009-06-12 13:42 . 2009-06-12 13:42 -------- d-----w- c:\program files\ESET
2009-06-11 08:28 . 2009-06-11 08:28 -------- d-----w- c:\program files\OpenOffice.org 3
2009-06-11 07:44 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-11 07:44 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-11 07:44 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-11 07:44 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-09 19:00 . 2009-06-09 20:06 -------- d-----w- c:\program files\Counter-Strike Source
2009-06-09 10:01 . 2009-06-16 10:48 -------- d-----w- c:\program files\Avanquest update
2009-06-09 09:58 . 2009-06-09 09:58 -------- d-----w- c:\program files\Sony Ericsson
2009-06-09 08:01 . 2007-06-25 09:43 10792 ----a-w- c:\windows\system32\drivers\s117cr.sys
2009-06-09 08:01 . 2007-06-25 09:43 98856 ----a-w- c:\windows\system32\drivers\s117unic.sys
2009-06-09 08:01 . 2007-06-25 09:43 100264 ----a-w- c:\windows\system32\drivers\s117mgmt.sys
2009-06-09 08:01 . 2007-06-25 09:43 98344 ----a-w- c:\windows\system32\drivers\s117obex.sys
2009-06-09 08:01 . 2007-06-25 09:43 22952 ----a-w- c:\windows\system32\drivers\s117nd5.sys
2009-06-09 08:01 . 2007-06-25 09:43 14888 ----a-w- c:\windows\system32\drivers\s117mdfl.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117cmnt.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117cm.sys
2009-06-09 08:01 . 2007-06-25 09:43 108456 ----a-w- c:\windows\system32\drivers\s117mdm.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117whnt.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117wh.sys
2009-06-09 08:01 . 2007-06-25 09:43 82984 ----a-w- c:\windows\system32\drivers\s117bus.sys
2009-06-09 08:00 . 2009-06-09 10:00 -------- dc----w- c:\windows\system32\DRVSTORE
2009-06-08 19:01 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-06-08 19:01 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-06-07 23:49 . 2009-06-07 23:51 -------- d-----w- c:\windows\nview
2009-06-07 23:49 . 2006-10-22 10:22 208896 ----a-w- c:\windows\system32\nvudisp.exe
2009-06-07 23:48 . 2006-10-22 13:06 208896 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-06-07 23:48 . 2009-06-07 23:48 -------- d-----w- C:\NVIDIA
2009-06-07 23:45 . 2009-06-07 23:45 -------- d-----w- c:\program files\SystemRequirementsLab
2009-06-07 23:45 . 2009-06-07 23:45 -------- d-----w- c:\documents and settings\XXX\SystemRequirementsLab
2009-06-07 23:44 . 2009-06-07 23:44 -------- d-----w- c:\windows\Sun
2009-06-07 23:38 . 2009-06-20 16:37 -------- d-----w- c:\documents and settings\XXX\Tracing
2009-06-07 23:36 . 2009-06-07 23:36 -------- d-----w- c:\program files\Microsoft
2009-06-07 23:36 . 2009-06-07 23:36 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-06-07 23:36 . 2009-06-07 23:37 -------- d-----w- c:\program files\Windows Live
2009-06-07 23:32 . 2009-06-07 23:32 -------- d-----w- c:\program files\Common Files\Windows Live
2009-06-07 23:16 . 2006-08-18 05:52 4017536 ----a-r- c:\windows\system32\drivers\ALCXWDM.SYS
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\Realtek Sound Manager
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\AvRack
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\Realtek AC97
2009-06-07 23:15 . 2006-08-09 23:27 10528768 ----a-w- c:\windows\system32\RTLCPL.EXE
2009-06-07 23:15 . 2006-08-02 21:12 577536 ----a-w- c:\windows\SOUNDMAN.EXE
2009-06-07 23:15 . 2006-08-01 06:58 143360 ----a-w- c:\windows\system32\RTLCPAPI.dll
2009-06-07 23:15 . 2006-07-31 03:19 315392 ----a-w- c:\windows\alcupd.exe
2009-06-07 23:15 . 2006-07-31 03:27 217088 ----a-w- c:\windows\Alcrmv.exe
2009-06-07 23:12 . 2008-04-13 18:45 6272 ----a-w- c:\windows\system32\drivers\splitter.sys
2009-06-07 23:12 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2009-06-07 23:12 . 2008-04-13 18:45 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys
2009-06-07 23:12 . 2008-04-13 18:45 52864 ----a-w- c:\windows\system32\drivers\dmusic.sys
2009-06-07 23:12 . 2008-04-13 18:45 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2009-06-07 23:12 . 2008-04-13 18:39 7552 ----a-w- c:\windows\system32\drivers\mskssrv.sys
2009-06-07 23:12 . 2008-04-13 18:39 4992 ----a-w- c:\windows\system32\drivers\mspqm.sys
2009-06-07 23:12 . 2008-04-13 19:17 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2009-06-07 23:12 . 2008-04-13 18:45 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2009-06-07 23:12 . 2008-04-13 18:39 5376 ----a-w- c:\windows\system32\drivers\mspclock.sys
2009-06-07 23:12 . 2008-04-13 19:15 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2009-06-07 23:12 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-06-07 23:10 . 2008-04-14 03:21 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll
2009-06-07 23:10 . 2008-04-14 03:21 4096 ----a-w- c:\windows\system32\ksuser.dll
2009-06-07 23:10 . 2008-04-13 19:19 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys
2009-06-07 23:10 . 2008-04-13 19:19 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2009-06-07 23:10 . 2001-08-17 22:00 2944 ----a-w- c:\windows\system32\drivers\msmpu401.sys
2009-06-07 23:10 . 2008-04-13 18:45 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys
2009-06-07 23:10 . 2008-04-13 18:45 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2009-06-07 23:10 . 2003-07-17 15:58 36992 ----a-w- c:\windows\system32\drivers\SISAGPX.SYS
2009-06-07 23:10 . 2008-04-13 18:36 40960 ----a-w- c:\windows\system32\drivers\sisagp.sys
2009-06-07 23:10 . 2008-04-14 03:22 75264 ----a-w- c:\windows\system32\usbui.dll
2009-06-07 23:10 . 2008-04-13 18:45 10624 ----a-w- c:\windows\system32\drivers\gameenum.sys
2009-06-07 23:09 . 2009-06-18 15:32 -------- d-sh--w- c:\windows\Installer
2009-06-07 23:06 . 2009-06-20 21:00 -------- d-----w- c:\windows\system32\CatRoot2
2009-06-07 23:06 . 2009-06-07 22:06 -------- d-----w- c:\windows\system32\CatRoot
2009-06-07 23:06 . 2009-06-07 23:08 -------- d--h--r- c:\documents and settings\Default User\Data aplikací
2009-06-07 23:06 . 2009-06-20 10:14 -------- d--h--r- c:\documents and settings\All Users\Data aplikací
2009-06-07 23:05 . 2009-06-19 10:03 -------- d-----w- c:\documents and settings\All Users
2009-06-07 23:05 . 2009-06-07 15:31 -------- d-----w- C:\Documents and Settings
2009-06-07 23:05 . 2009-06-07 15:31 -------- d--h--w- c:\documents and settings\Default User
2009-06-07 23:02 . 2009-06-07 23:02 -------- d-----w- c:\program files\Lavalys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-19 09:21 . 2009-06-07 21:55 -------- d-----w- c:\program files\GameTop.com
2009-06-15 07:25 . 2001-10-25 14:00 46016 ----a-w- c:\windows\system32\perfc005.dat
2009-06-15 07:25 . 2001-10-25 14:00 309716 ----a-w- c:\windows\system32\perfh005.dat
2009-06-09 10:01 . 2009-06-07 16:32 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-07 23:11 . 2009-06-07 23:11 -------- d-----w- c:\program files\sisagp
2009-06-07 23:11 . 2009-06-07 23:11 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-07 22:41 . 2009-06-07 22:34 -------- d-----w- c:\program files\RegCleaner
2009-06-07 22:22 . 2009-06-07 22:22 -------- d-----w- c:\program files\CCleaner
2009-06-07 22:20 . 2009-06-07 22:20 -------- d-----w- c:\program files\Combined Community Codec Pack
2009-06-07 21:53 . 2009-06-07 21:53 -------- d-----w- c:\program files\Ashampoo
2009-06-07 21:14 . 2009-06-07 20:31 -------- d-----w- c:\program files\NOS
2009-06-07 21:14 . 2009-06-07 21:14 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2009-06-07 21:13 . 2009-06-07 21:13 -------- d-----w- c:\program files\VSO
2009-06-07 21:05 . 2009-06-07 21:06 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-06-07 21:05 . 2009-06-07 21:05 -------- d-----w- c:\program files\Java
2009-06-07 20:58 . 2009-06-07 20:58 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-06-07 20:53 . 2009-06-07 20:49 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-07 20:28 . 2009-06-07 16:49 -------- d-----r- c:\program files\Skype
2009-06-07 19:25 . 2009-06-07 15:22 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-07 19:25 . 2009-06-07 15:22 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-06-07 19:22 . 2009-06-07 15:22 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-06-07 16:52 . 2009-06-07 16:52 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-06-07 16:49 . 2009-06-07 16:49 -------- d-----w- c:\program files\Common Files\Skype
2009-06-07 16:35 . 2009-06-07 16:31 -------- d-----w- c:\program files\ICQ6.5
2009-06-07 16:07 . 2009-06-07 16:07 0 ----a-w- c:\windows\nsreg.dat
2009-06-07 15:24 . 2009-06-07 15:24 -------- d-----w- c:\program files\microsoft frontpage
2009-06-07 15:17 . 2009-06-07 15:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-13 05:05 . 2004-08-17 13:49 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-17 13:49 346624 ----a-w- c:\windows\system32\localspl.dll
2009-04-28 09:47 . 2009-04-28 09:47 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-04-28 09:47 . 2009-04-28 09:47 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-04-19 19:52 . 2004-08-17 13:44 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2004-08-17 13:49 585216 ----a-w- c:\windows\system32\rpcrt4.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-07-01 1447168]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-10-22 1622016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Kodak EasyShare software.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Kodak EasyShare software.lnk
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^XXX^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\XXX\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Counter-Strike Source\\hl2.exe"=
"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [1.7.2008 9:04 34312]
R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [21.12.2007 8:21 468224]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
FF - ProfilePath - c:\documents and settings\XXX\Data aplikací\Mozilla\Firefox\Profiles\fu9ql31a.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: network.proxy.type - 4

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-20 23:04
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
Celkový čas: 2009-06-20 23:07
ComboFix-quarantined-files.txt 2009-06-20 21:07

Před spuštěním: Volných bajtů: 26 125 115 392
Po spuštění: Volných bajtů: 26 108 575 744

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

216 --- E O F --- 2009-06-18 15:32

[jaro3]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
File::
c:\windows\system32\ezsidmv.dat
c:\windows\nsreg.dat

Folder::
c:\program files\SiteAccess

Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Tato složka :
C:\USD -to je stažený US downloader ? Pokud ano , tak jí taky smaž.

[Yelkinson]

Tak tady je ten log na dvakrat a ten C:USD...sem smazal.
Jo a jeste me to psalo ze je nova verze Combofixu tak sem dal instalovat.


ComboFix 09-06-20.04 - XXX 21.06.2009 15:49.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.383.208 [GMT 2:00]
Spuštěný z: c:\documents and settings\XXX\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\XXX\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

FILE ::
"c:\windows\nsreg.dat"
"c:\windows\system32\ezsidmv.dat"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\SiteAccess
c:\windows\nsreg.dat
c:\windows\system32\ezsidmv.dat

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-21 do 2009-06-21 )))))))))))))))))))))))))))))))
.

2009-06-21 07:15 . 2009-06-21 07:27 -------- d-----w- c:\program files\Plants vs. Zombies
2009-06-20 22:47 . 2009-06-20 22:47 -------- d-----w- c:\program files\edu-learning
2009-06-20 22:14 . 2007-10-22 01:39 267272 ----a-w- c:\windows\system32\xactengine2_10.dll
2009-06-20 22:12 . 2009-06-20 22:12 -------- d-----w- c:\windows\Logs
2009-06-20 22:11 . 2009-06-20 22:11 -------- d-----w- c:\program files\HDD Health
2009-06-20 20:46 . 2009-06-20 20:46 -------- d-----w- C:\_OTM
2009-06-20 17:57 . 2009-06-20 17:57 -------- d-----w- c:\program files\Trend Micro
2009-06-20 16:40 . 2009-06-20 16:41 -------- d-----w- c:\program files\Windows Live Safety Center
2009-06-19 11:21 . 2009-06-20 07:14 -------- d-----w- c:\program files\Aquitania
2009-06-19 10:29 . 2009-06-19 10:29 -------- d-----w- c:\program files\BFG
2009-06-19 10:00 . 2009-06-19 10:04 -------- d-----w- c:\program files\Soggy Melon
2009-06-19 09:22 . 2009-06-19 09:28 -------- d-----w- c:\program files\Oberon Media
2009-06-18 15:32 . 2009-06-18 15:32 -------- d-----w- c:\program files\MSXML 4.0
2009-06-17 14:16 . 1999-11-10 10:05 86016 ----a-w- c:\windows\unvise32qt.exe
2009-06-17 14:16 . 2009-06-18 11:03 -------- d-----w- c:\windows\system32\QuickTime
2009-06-17 14:16 . 2009-06-18 11:03 -------- d-----w- c:\program files\QuickTime
2009-06-17 14:15 . 2009-06-17 14:15 -------- d-----w- c:\program files\Common Files\Kodak
2009-06-17 14:14 . 2009-06-17 14:14 -------- d-----w- c:\windows\system32\color
2009-06-17 14:14 . 2009-06-17 14:14 -------- d-----w- c:\windows\system32\BWKDLogs
2009-06-17 14:11 . 2009-06-17 14:15 -------- d-----w- c:\program files\Kodak
2009-06-17 07:54 . 2009-06-17 07:54 -------- d-----w- c:\program files\ReflexiveArcade
2009-06-16 21:58 . 2009-06-16 22:07 -------- d-----w- c:\program files\3B Software
2009-06-15 14:41 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-15 14:41 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-15 14:41 . 2009-06-20 17:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-06-14 13:51 . 2009-06-14 13:51 -------- d-----w- c:\program files\IObit
2009-06-12 13:42 . 2009-06-12 13:42 -------- d-----w- c:\program files\ESET
2009-06-11 08:28 . 2009-06-11 08:28 -------- d-----w- c:\program files\OpenOffice.org 3
2009-06-11 07:44 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-11 07:44 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-11 07:44 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-11 07:44 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-09 19:00 . 2009-06-09 20:06 -------- d-----w- c:\program files\Counter-Strike Source
2009-06-09 10:01 . 2009-06-16 10:48 -------- d-----w- c:\program files\Avanquest update
2009-06-09 09:58 . 2009-06-09 09:58 -------- d-----w- c:\program files\Sony Ericsson
2009-06-09 08:01 . 2007-06-25 09:43 10792 ----a-w- c:\windows\system32\drivers\s117cr.sys
2009-06-09 08:01 . 2007-06-25 09:43 98856 ----a-w- c:\windows\system32\drivers\s117unic.sys
2009-06-09 08:01 . 2007-06-25 09:43 100264 ----a-w- c:\windows\system32\drivers\s117mgmt.sys
2009-06-09 08:01 . 2007-06-25 09:43 98344 ----a-w- c:\windows\system32\drivers\s117obex.sys
2009-06-09 08:01 . 2007-06-25 09:43 22952 ----a-w- c:\windows\system32\drivers\s117nd5.sys
2009-06-09 08:01 . 2007-06-25 09:43 14888 ----a-w- c:\windows\system32\drivers\s117mdfl.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117cmnt.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117cm.sys
2009-06-09 08:01 . 2007-06-25 09:43 108456 ----a-w- c:\windows\system32\drivers\s117mdm.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117whnt.sys
2009-06-09 08:01 . 2007-06-25 09:43 12200 ----a-w- c:\windows\system32\drivers\s117wh.sys
2009-06-09 08:01 . 2007-06-25 09:43 82984 ----a-w- c:\windows\system32\drivers\s117bus.sys
2009-06-09 08:00 . 2009-06-09 10:00 -------- dc----w- c:\windows\system32\DRVSTORE
2009-06-08 19:01 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-06-08 19:01 . 2008-10-16 12:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-06-07 23:49 . 2009-06-07 23:51 -------- d-----w- c:\windows\nview
2009-06-07 23:49 . 2006-10-22 10:22 208896 ----a-w- c:\windows\system32\nvudisp.exe
2009-06-07 23:48 . 2006-10-22 13:06 208896 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-06-07 23:48 . 2009-06-07 23:48 -------- d-----w- C:\NVIDIA
2009-06-07 23:45 . 2009-06-07 23:45 -------- d-----w- c:\program files\SystemRequirementsLab
2009-06-07 23:45 . 2009-06-07 23:45 -------- d-----w- c:\documents and settings\XXX\SystemRequirementsLab
2009-06-07 23:44 . 2009-06-07 23:44 -------- d-----w- c:\windows\Sun
2009-06-07 23:38 . 2009-06-20 16:37 -------- d-----w- c:\documents and settings\XXX\Tracing
2009-06-07 23:36 . 2009-06-07 23:36 -------- d-----w- c:\program files\Microsoft
2009-06-07 23:36 . 2009-06-07 23:36 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-06-07 23:36 . 2009-06-07 23:37 -------- d-----w- c:\program files\Windows Live
2009-06-07 23:32 . 2009-06-07 23:32 -------- d-----w- c:\program files\Common Files\Windows Live
2009-06-07 23:16 . 2006-08-18 05:52 4017536 ----a-r- c:\windows\system32\drivers\ALCXWDM.SYS
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\Realtek Sound Manager
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\AvRack
2009-06-07 23:16 . 2009-06-07 23:16 -------- d-----w- c:\program files\Realtek AC97
2009-06-07 23:15 . 2006-08-09 23:27 10528768 ----a-w- c:\windows\system32\RTLCPL.EXE
2009-06-07 23:15 . 2006-08-02 21:12 577536 ----a-w- c:\windows\SOUNDMAN.EXE
2009-06-07 23:15 . 2006-08-01 06:58 143360 ----a-w- c:\windows\system32\RTLCPAPI.dll
2009-06-07 23:15 . 2006-07-31 03:19 315392 ----a-w- c:\windows\alcupd.exe
2009-06-07 23:15 . 2006-07-31 03:27 217088 ----a-w- c:\windows\Alcrmv.exe
2009-06-07 23:12 . 2008-04-13 18:45 6272 ----a-w- c:\windows\system32\drivers\splitter.sys
2009-06-07 23:12 . 2008-04-13 16:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2009-06-07 23:12 . 2008-04-13 18:45 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys
2009-06-07 23:12 . 2008-04-13 18:45 52864 ----a-w- c:\windows\system32\drivers\dmusic.sys
2009-06-07 23:12 . 2008-04-13 18:45 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2009-06-07 23:12 . 2008-04-13 18:39 7552 ----a-w- c:\windows\system32\drivers\mskssrv.sys
2009-06-07 23:12 . 2008-04-13 18:39 4992 ----a-w- c:\windows\system32\drivers\mspqm.sys
2009-06-07 23:12 . 2008-04-13 19:17 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2009-06-07 23:12 . 2008-04-13 18:45 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2009-06-07 23:12 . 2008-04-13 18:39 5376 ----a-w- c:\windows\system32\drivers\mspclock.sys
2009-06-07 23:12 . 2008-04-13 19:15 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2009-06-07 23:12 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-06-07 23:10 . 2008-04-14 03:21 4096 -c--a-w- c:\windows\system32\dllcache\ksuser.dll
2009-06-07 23:10 . 2008-04-14 03:21 4096 ----a-w- c:\windows\system32\ksuser.dll
2009-06-07 23:10 . 2008-04-13 19:19 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys
2009-06-07 23:10 . 2008-04-13 19:19 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2009-06-07 23:10 . 2001-08-17 22:00 2944 ----a-w- c:\windows\system32\drivers\msmpu401.sys
2009-06-07 23:10 . 2008-04-13 18:45 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys
2009-06-07 23:10 . 2008-04-13 18:45 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2009-06-07 23:10 . 2003-07-17 15:58 36992 ----a-w- c:\windows\system32\drivers\SISAGPX.SYS
2009-06-07 23:10 . 2008-04-13 18:36 40960 ----a-w- c:\windows\system32\drivers\sisagp.sys
2009-06-07 23:10 . 2008-04-14 03:22 75264 ----a-w- c:\windows\system32\usbui.dll
2009-06-07 23:10 . 2008-04-13 18:45 10624 ----a-w- c:\windows\system32\drivers\gameenum.sys
2009-06-07 23:09 . 2009-06-20 22:47 -------- d-sh--w- c:\windows\Installer
2009-06-07 23:06 . 2009-06-21 13:48 -------- d-----w- c:\windows\system32\CatRoot2
2009-06-07 23:06 . 2009-06-07 22:06 -------- d-----w- c:\windows\system32\CatRoot
2009-06-07 23:06 . 2009-06-07 23:08 -------- d--h--r- c:\documents and settings\Default User\Data aplikací
2009-06-07 23:06 . 2009-06-20 22:47 -------- d--h--r- c:\documents and settings\All Users\Data aplikací
2009-06-07 23:05 . 2009-06-20 21:07 -------- d--h--w- c:\documents and settings\Default User
2009-06-07 23:05 . 2009-06-19 10:03 -------- d-----w- c:\documents and settings\All Users
2009-06-07 23:05 . 2009-06-07 15:31 -------- d-----w- C:\Documents and Settings
2009-06-07 23:02 . 2009-06-07 23:02 -------- d-----w- c:\program files\Lavalys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-20 22:46 . 2001-10-25 14:00 68736 ----a-w- c:\windows\system32\perfc005.dat
2009-06-20 22:46 . 2001-10-25 14:00 389664 ----a-w- c:\windows\system32\perfh005.dat
2009-06-19 09:21 . 2009-06-07 21:55 -------- d-----w- c:\program files\GameTop.com
2009-06-09 10:01 . 2009-06-07 16:32 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-07 23:11 . 2009-06-07 23:11 -------- d-----w- c:\program files\sisagp
2009-06-07 23:11 . 2009-06-07 23:11 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-07 22:41 . 2009-06-07 22:34 -------- d-----w- c:\program files\RegCleaner
2009-06-07 22:22 . 2009-06-07 22:22 -------- d-----w- c:\program files\CCleaner
2009-06-07 22:20 . 2009-06-07 22:20 -------- d-----w- c:\program files\Combined Community Codec Pack
2009-06-07 21:53 . 2009-06-07 21:53 -------- d-----w- c:\program files\Ashampoo
2009-06-07 21:14 . 2009-06-07 20:31 -------- d-----w- c:\program files\NOS
2009-06-07 21:14 . 2009-06-07 21:14 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2009-06-07 21:13 . 2009-06-07 21:13 -------- d-----w- c:\program files\VSO
2009-06-07 21:05 . 2009-06-07 21:06 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-06-07 21:05 . 2009-06-07 21:05 -------- d-----w- c:\program files\Java
2009-06-07 20:58 . 2009-06-07 20:58 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-06-07 20:53 . 2009-06-07 20:49 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-07 20:28 . 2009-06-07 16:49 -------- d-----r- c:\program files\Skype
2009-06-07 19:25 . 2009-06-07 15:22 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-07 19:25 . 2009-06-07 15:22 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-06-07 19:22 . 2009-06-07 15:22 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-06-07 16:49 . 2009-06-07 16:49 -------- d-----w- c:\program files\Common Files\Skype
2009-06-07 16:35 . 2009-06-07 16:31 -------- d-----w- c:\program files\ICQ6.5
2009-06-07 15:24 . 2009-06-07 15:24 -------- d-----w- c:\program files\microsoft frontpage
2009-06-07 15:17 . 2009-06-07 15:17 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-13 05:05 . 2004-08-17 13:49 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-07 15:33 . 2004-08-17 13:49 346624 ----a-w- c:\windows\system32\localspl.dll
2009-04-28 09:47 . 2009-04-28 09:47 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-04-28 09:47 . 2009-04-28 09:47 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-04-19 19:52 . 2004-08-17 13:44 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2004-08-17 13:49 585216 ----a-w- c:\windows\system32\rpcrt4.dl

[Yelkinson]

((((((((((((((((((((((((((((( SnapShot@2009-06-20_21.04.25 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-21 13:56 . 2009-06-21 13:56 16384 c:\windows\temp\Perflib_Perfdata_7f8.dat
+ 2009-06-20 22:14 . 2005-12-05 16:07 61136 c:\windows\system32\xinput9_1_0.dll
+ 2009-06-20 22:14 . 2007-04-04 16:53 81768 c:\windows\system32\xinput1_3.dll
+ 2009-06-20 22:14 . 2006-07-28 07:30 62744 c:\windows\system32\xinput1_2.dll
+ 2009-06-20 22:14 . 2006-03-31 10:39 62672 c:\windows\system32\xinput1_1.dll
+ 2009-06-20 22:15 . 2009-03-16 12:18 69448 c:\windows\system32\XAPOFX1_3.dll
+ 2009-06-20 22:15 . 2008-10-27 08:04 70992 c:\windows\system32\XAPOFX1_2.dll
+ 2009-06-20 22:15 . 2008-07-30 04:20 68616 c:\windows\system32\XAPOFX1_1.dll
+ 2009-06-20 22:15 . 2008-05-30 12:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2009-06-20 22:15 . 2009-03-16 12:18 22360 c:\windows\system32\X3DAudio1_6.dll
+ 2009-06-20 22:15 . 2008-10-27 08:04 23376 c:\windows\system32\X3DAudio1_5.dll
+ 2009-06-20 22:15 . 2008-05-30 12:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2009-06-20 22:15 . 2008-03-05 14:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2009-06-20 22:14 . 2007-10-22 01:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2009-06-20 22:14 . 2007-03-05 10:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2009-06-20 22:14 . 2006-02-03 06:41 14032 c:\windows\system32\x3daudio1_0.dll
+ 2001-10-25 14:00 . 2009-06-20 22:46 58596 c:\windows\system32\perfc009.dat
+ 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\system32\netfxperf.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 74240 c:\windows\system32\mscories.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 83456 c:\windows\system32\dfshim.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 28160 c:\windows\Microsoft.NET\Framework\v2.0.50727\WMINet_Utils.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 71680 c:\windows\Microsoft.NET\Framework\v2.0.50727\TLBREF.DLL
+ 2005-09-23 05:28 . 2005-09-23 05:28 86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.RegularExpressions.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 47616 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Thunk.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.Design.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Configuration.Install.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\ShFusRes.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 59072 c:\windows\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 53248 c:\windows\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 78336 c:\windows\Microsoft.NET\Framework\v2.0.50727\PerfCounter.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 14848 c:\windows\Microsoft.NET\Framework\v2.0.50727\normalization.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 96440 c:\windows\Microsoft.NET\Framework\v2.0.50727\ngen.exe
+ 2005-09-23 05:29 . 2005-09-23 05:29 22528 c:\windows\Microsoft.NET\Framework\v2.0.50727\MUI\0409\mscorsecr.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 10240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscortim.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 66240 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 67072 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorld.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorie.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 73216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbc.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 69632 c:\windows\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\MmcAspExt.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 12800 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 32768 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Vsa.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Vsa.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 73728 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Utilities.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Framework.dll
+ 2005-09-23 04:36 . 2005-09-23 04:36 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3082.dll
+ 2005-09-23 04:29 . 2005-09-23 04:29 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.3076.dll
+ 2005-09-23 04:47 . 2005-09-23 04:47 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2070.dll
+ 2005-09-23 04:30 . 2005-09-23 04:30 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.2052.dll
+ 2005-09-23 04:47 . 2005-09-23 04:47 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1055.dll
+ 2005-09-23 04:47 . 2005-09-23 04:47 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1053.dll
+ 2005-09-23 04:47 . 2005-09-23 04:47 82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1049.dll
+ 2005-09-23 04:47 . 2005-09-23 04:47 82432 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1046.dll
+ 2005-09-23 04:46 . 2005-09-23 04:46 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1045.dll
+ 2005-09-23 04:46 . 2005-09-23 04:46 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1044.dll
+ 2005-09-23 04:46 . 2005-09-23 04:46 83456 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1043.dll
+ 2005-09-23 04:44 . 2005-09-23 04:44 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1042.dll
+ 2005-09-23 04:42 . 2005-09-23 04:42 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1041.dll
+ 2005-09-23 04:40 . 2005-09-23 04:40 84480 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1040.dll
+ 2005-09-23 04:40 . 2005-09-23 04:40 83968 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1038.dll
+ 2005-09-23 04:40 . 2005-09-23 04:40 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1037.dll
+ 2005-09-23 04:38 . 2005-09-23 04:38 86016 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1036.dll
+ 2005-09-23 04:38 . 2005-09-23 04:38 81408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1035.dll
+ 2005-09-23 01:46 . 2005-09-23 01:46 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1033.dll
+ 2005-09-23 04:36 . 2005-09-23 04:36 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1032.dll
+ 2005-09-23 04:34 . 2005-09-23 04:34 85504 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1031.dll
+ 2005-09-23 04:34 . 2005-09-23 04:34 81920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1030.dll
+ 2005-09-23 04:34 . 2005-09-23 04:34 82944 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1029.dll
+ 2005-09-23 04:32 . 2005-09-23 04:32 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1028.dll
+ 2005-09-23 04:29 . 2005-09-23 04:29 80896 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.res.1025.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 40960 c:\windows\Microsoft.NET\Framework\v2.0.50727\jsc.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 72192 c:\windows\Microsoft.NET\Framework\v2.0.50727\ISymWrapper.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 55296 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtilLib.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 28672 c:\windows\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEHost.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 52736 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfdll.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 31936 c:\windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 68608 c:\windows\Microsoft.NET\Framework\v2.0.50727\CustomMarshalers.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 17920 c:\windows\Microsoft.NET\Framework\v2.0.50727\Culture.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 13312 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscompmgd.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 76984 c:\windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 88576 c:\windows\Microsoft.NET\Framework\v2.0.50727\CORPerfMonExt.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 29888 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 29896 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 26824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 13824 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 70656 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_rc.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 23552 c:\windows\Microsoft.NET\Framework\v2.0.50727\Aspnet_perf.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_filter.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 36864 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 55488 c:\windows\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 87552 c:\windows\Microsoft.NET\Framework\v2.0.50727\alink.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 10752 c:\windows\Microsoft.NET\Framework\v2.0.50727\Accessibility.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 18944 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\alinkui.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 86528 c:\windows\Microsoft.NET\Framework\v1.0.3705\mscormmc.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 72704 c:\windows\Microsoft.NET\Framework\NETFXSBS10.exe
+ 2009-06-21 06:56 . 2009-06-21 06:56 81920 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Fra#\609e115430225040a242e2aee3456885\Microsoft.Build.Framework.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 15360 c:\windows\assembly\NativeImages_v2.0.50727_32\dfsvc\809c856bfb3cfa4e9079ab91826b6bef\dfsvc.ni.exe
+ 2009-06-21 06:56 . 2009-06-21 06:56 26624 c:\windows\assembly\NativeImages_v2.0.50727_32\Accessibility\eb95b6e53990fb4d8997300bb956a77f\Accessibility.ni.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 86016 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 73728 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 36864 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 68608 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 6144 c:\windows\system32\mui\0409\mscorees.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7680 c:\windows\Microsoft.NET\Framework\v2.0.50727\sbscmp20_mscorlib.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsn.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft_VsaVb.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualC.Dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 5632 c:\windows\Microsoft.NET\Framework\v2.0.50727\IIEHost.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExecRemote.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 9728 c:\windows\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 9216 c:\windows\Microsoft.NET\Framework\v2.0.50727\fusion.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 8192 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_isapi.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 4608 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\CvtResUI.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7680 c:\windows\Microsoft.NET\Framework\SharedReg12.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp20_perfcounter.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp20_mscorwks.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 7680 c:\windows\Microsoft.NET\Framework\sbscmp10.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_wminet_utils.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_VsaVb7rt.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.enterpriseservices.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.data.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_system.configuration.install.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscorsec.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscorrc.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_mscordbi.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5632 c:\windows\Microsoft.NET\Framework\sbs_microsoft.vsa.vb.codedomprocessor.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_iehost.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 5120 c:\windows\Microsoft.NET\Framework\sbs_diasymreader.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
+ 2009-06-20 22:43 . 2009-06-20 22:43 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 5632 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 114176 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2009-06-20 22:15 . 2009-03-16 12:18 517448 c:\windows\system32\XAudio2_4.dll
+ 2009-06-20 22:15 . 2008-10-27 08:04 514384 c:\windows\system32\XAudio2_3.dll
+ 2009-06-20 22:15 . 2008-07-30 04:20 509448 c:\windows\system32\XAudio2_2.dll
+ 2009-06-20 22:15 . 2008-05-30 12:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2009-06-20 22:15 . 2008-03-05 14:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2009-06-20 22:15 . 2009-03-16 12:18 235352 c:\windows\system32\xactengine3_4.dll
+ 2009-06-20 22:15 . 2008-10-27 08:04 235856 c:\windows\system32\xactengine3_3.dll
+ 2009-06-20 22:15 . 2008-07-30 04:20 238088 c:\windows\system32\xactengine3_2.dll
+ 2009-06-20 22:15 . 2008-05-30 12:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2009-06-20 22:15 . 2008-03-05 14:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2009-06-20 22:14 . 2007-07-19 22:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2009-06-20 22:14 . 2007-06-20 18:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2009-06-20 22:14 . 2007-04-04 16:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2009-06-20 22:14 . 2007-01-24 13:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2009-06-20 22:14 . 2006-12-08 10:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2009-06-20 22:14 . 2006-09-28 14:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2009-06-20 22:14 . 2006-07-28 07:30 236824 c:\windows\system32\xactengine2_3.dll
+ 2009-06-20 22:14 . 2006-05-31 05:24 230168 c:\windows\system32\xactengine2_2.dll
+ 2009-06-20 22:14 . 2006-03-31 10:39 229584 c:\windows\system32\xactengine2_1.dll
+ 2009-06-20 22:14 . 2006-02-03 06:42 230096 c:\windows\system32\xactengine2_0.dll
+ 2001-10-25 14:00 . 2009-06-20 22:46 392296 c:\windows\system32\perfh009.dat
+ 2005-09-23 05:28 . 2005-09-23 05:28 150016 c:\windows\system32\mscorier.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 270848 c:\windows\system32\mscoree.dll
+ 2009-06-20 22:15 . 2009-03-09 13:27 453456 c:\windows\system32\d3dx10_41.dll
+ 2009-06-20 22:15 . 2008-10-10 02:52 452440 c:\windows\system32\d3dx10_40.dll
+ 2009-06-20 22:15 . 2008-07-10 09:01 467984 c:\windows\system32\d3dx10_39.dll
+ 2009-06-20 22:15 . 2008-05-30 12:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2009-06-20 22:15 . 2008-02-05 21:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2009-06-20 22:14 . 2007-10-02 07:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2009-06-20 22:14 . 2007-07-19 16:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2009-06-20 22:14 . 2007-05-16 14:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2009-06-20 22:14 . 2007-03-15 14:57 443752 c:\windows\system32\d3dx10_33.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 298496 c:\windows\Microsoft.NET\Framework\v2.0.50727\webengine.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 823296 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Services.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 835584 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.Mobile.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 260096 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Transactions.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 114688 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.ServiceProcess.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Security.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 131072 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Serialization.Formatters.Soap.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 299008 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Runtime.Remoting.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Messaging.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 368640 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Management.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 114176 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.Wrapper.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 258048 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.EnterpriseServices.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 700416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Drawing.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 188416 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.Protocols.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 397312 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.DirectoryServices.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 884736 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Deployment.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 716800 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.SqlXml.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 482304 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.OracleClient.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 389120 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.configuration.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\sysglobl.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 377344 c:\windows\Microsoft.NET\Framework\v2.0.50727\SOS.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 107520 c:\windows\Microsoft.NET\Framework\v2.0.50727\shfusion.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\peverify.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 226816 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvc.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 330752 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorrc.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 102400 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorpe.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 326144 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 288768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordbi.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 800768 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscordacwks.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 667648 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 372736 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 110592 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 745472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 647168 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Tasks.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 413696 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft.Build.Engine.dll
+ 2005-09-23 05:57 . 2005-09-23 05:57 245408 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\unicows.dll
+ 2005-09-23 05:01 . 2005-09-23 05:01 609472 c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 224952 c:\windows\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 788992 c:\windows\Microsoft.NET\Framework\v2.0.50727\EventLogMessages.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 547840 c:\windows\Microsoft.NET\Framework\v2.0.50727\diasymreader.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 503808 c:\windows\Microsoft.NET\Framework\v2.0.50727\AspNetMMCExt.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 106496 c:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 138240 c:\windows\Microsoft.NET\Framework\v2.0.50727\AdoNetDiag.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 208896 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\Vsavb7rtUI.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 183808 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\vbc7ui.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 136192 c:\windows\Microsoft.NET\Framework\v2.0.50727\1033\cscompui.dll
+ 2009-06-20 22:47 . 2009-06-20 22:47 103848 c:\windows\Installer\{99032CFF-DBB0-4C9C-B03D-B922422F4A39}\controlPanelIcon.exe
+ 2009-06-21 06:57 . 2009-06-21 06:57 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.RegularE#\07aa5f0ae3cfb74ab6b9eec5563d6ca5\System.Web.RegularExpressions.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 684032 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\8a5f8a1856b57440a6084c0deaeed655\System.Transactions.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 729088 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Security\b17d218d793249448907ad6b38799ecf\System.Security.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 294912 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\eb4809072ce2a045a633c3513d9da733\System.EnterpriseServices.Wrapper.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 659456 c:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\eb4809072ce2a045a633c3513d9da733\System.EnterpriseServices.ni.dll
+ 2009-06-20 22:44 . 2009-06-20 22:44 229376 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing.Desi#\2f21d26f8b722b4d8c53e5801dddf354\System.Drawing.Design.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 512000 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\fb273ef0024b4d4a9c308ff01b83d684\System.DirectoryServices.Protocols.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 962560 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\f8f4b4fc72c5d94d875306a10a674737\System.Configuration.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 163840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Uti#\1daef01e5c7ae54690b386fb9d78c736\Microsoft.Build.Utilities.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 880640 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Eng#\5788d56be8722747917b32e0a914292f\Microsoft.Build.Engine.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 237568 c:\windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\1f42a93adde17a4f8df705e34885d8d5\CustomMarshalers.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 860160 c:\windows\assembly\NativeImages_v2.0.50727_32\AspNetMMCExt\10e25fdfd296d5418b25c4bcb4e29af6\AspNetMMCExt.ni.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 823296 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2009-06-20 22:43 . 2009-06-20 22:43 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 299008 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 368640 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 700416 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 397312 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 884736 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 716800 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 389120 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
+ 2009-06-20 22:43 . 2009-06-20 22:43 667648 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2009-06-20 22:43 . 2009-06-20 22:43 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2009-06-20 22:43 . 2009-06-20 22:43 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 745472 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 647168 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 413696 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 503808 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 260096 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 114176 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 482304 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
+ 2009-06-20 22:15 . 2009-03-09 13:27 4178264 c:\windows\system32\D3DX9_41.dll
+ 2009-06-20 22:15 . 2008-10-10 02:52 4379984 c:\windows\system32\D3DX9_40.dll
+ 2009-06-20 22:15 . 2008-07-10 09:00 3851784 c:\windows\system32\D3DX9_39.dll
+ 2009-06-20 22:15 . 2008-05-30 12:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2009-06-20 22:15 . 2008-03-05 13:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2009-06-20 22:14 . 2007-10-12 13:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2009-06-20 22:14 . 2007-07-19 16:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2009-06-20 22:14 . 2007-05-16 14:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2009-06-20 22:14 . 2007-03-12 14:42 3495784 c:\windows\system32\d3dx9_33.dll
+ 2009-06-20 22:14 . 2006-11-29 11:06 3426072 c:\windows\system32\d3dx9_32.dll
+ 2009-06-20 22:14 . 2006-09-28 14:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2009-06-20 22:14 . 2006-03-31 10:40 2388176 c:\windows\system32\d3dx9_30.dll
+ 2009-06-20 22:14 . 2006-02-03 06:43 2332368 c:\windows\system32\d3dx9_29.dll
+ 2009-06-20 22:14 . 2005-12-05 16:09 2323664 c:\windows\system32\d3dx9_28.dll
+ 2009-06-20 22:14 . 2005-07-22 17:59 2319568 c:\windows\system32\d3dx9_27.dll
+ 2009-06-20 22:14 . 2005-05-26 13:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2009-06-20 22:14 . 2005-03-18 15:19 2337488 c:\windows\system32\d3dx9_25.dll
+ 2009-06-20 22:14 . 2005-02-05 17:45 2222800 c:\windows\system32\d3dx9_24.dll
+ 2009-06-20 22:15 . 2009-03-09 13:27 1846632 c:\windows\system32\D3DCompiler_41.dll
+ 2009-06-20 22:15 . 2008-10-10 02:52 2036576 c:\windows\system32\D3DCompiler_40.dll
+ 2009-06-20 22:15 . 2008-07-10 09:00 1493528 c:\windows\system32\D3DCompiler_39.dll
+ 2009-06-20 22:15 . 2008-05-30 12:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2009-06-20 22:15 . 2008-03-05 13:56 1420824 c:\windows\system32\D3DCompiler_37.dll
+ 2009-06-20 22:14 . 2007-10-12 13:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2009-06-20 22:14 . 2007-07-19 16:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2009-06-20 22:14 . 2007-05-16 14:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2009-06-20 22:14 . 2007-03-12 14:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 1306624 c:\windows\Microsoft.NET\Framework\v2.0.50727\VsaVb7rt.dll
+ 2005-09-23 05:29 . 2005-09-23 05:29 1140920 c:\windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe
+ 2005-09-23 05:28 . 2005-09-23 05:28 2035712 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.XML.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 5316608 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Windows.Forms.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 5025792 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Web.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 3018752 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 5050368 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Design.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 2878976 c:\windows\Microsoft.NET\Framework\v2.0.50727\System.Data.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 5615616 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 4308992 c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
+ 2005-09-23 05:28 . 2005-09-23 05:28 1144832 c:\windows\Microsoft.NET\Framework\v2.0.50727\cscomp.dll
+ 2009-06-20 22:44 . 2009-06-20 22:44 8093696 c:\windows\assembly\NativeImages_v2.0.50727_32\System\1f57832faf51a34bac93465427ebf98f\System.ni.dll
+ 2009-06-20 22:45 . 2009-06-20 22:45 5640192 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ec1b654d224b264087834340248b5556\System.Xml.ni.dll
+ 2009-06-21 06:57 . 2009-06-21 06:57 1945600 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\f0dbc517c10e8942bd368246c8d6c8d1\System.Web.Services.ni.dll
+ 2009-06-21 06:57 . 2009-06-21 06:57 2310144 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web.Mobile\457f3f0335f937439969c3a1c02447de\System.Web.Mobile.ni.dll
+ 2009-06-20 22:44 . 2009-06-20 22:44 1626112 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\900128dc81985941a5505553f7cf47ef\System.Drawing.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 1220608 c:\windows\assembly\NativeImages_v2.0.50727_32\System.DirectorySer#\188ea869ada5db469b64837ad38687dc\System.DirectoryServices.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 1716224 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\8a5056f43ce69f46b718205301b799d6\System.Deployment.ni.dll
+ 2009-06-20 22:45 . 2009-06-20 22:45 6688768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\88057dad8891b34e9de8584a0d19ae42\System.Data.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 1724416 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\2b41166570b5a842ab1453036ccec517\Microsoft.VisualBasic.ni.dll
+ 2009-06-21 06:56 . 2009-06-21 06:56 1691648 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.Build.Tas#\1f94f009fdfdde4ab7ca87c611d293f2\Microsoft.Build.Tasks.ni.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 3018752 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 2035712 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 5316608 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 5050368 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 5025792 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 2878976 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2009-06-20 22:42 . 2009-06-20 22:42 4308992 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
+ 2009-06-20 22:45 . 2009-06-20 22:45 13107200 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\2548bfb18698854fb66101a7522b3ff1\System.Windows.Forms.ni.dll
+ 2009-06-21 06:57 . 2009-06-21 06:57 11808768 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\2e75704c5ce4e14ea622b263340241fa\System.Web.ni.dll
+ 2009-06-20 22:46 . 2009-06-20 22:46 10723328 c:\windows\assembly\NativeImages_v2.0.50727_32\System.Design\bcc4b229225a4346a2caa7c5fed13de2\System.Design.ni.dll
+ 2009-06-20 22:43 . 2009-06-20 22:44 11415552 c:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\016b44718c745549a449d99e08ec675a\mscorlib.ni.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-10-22 7700480]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-10-22 86016]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-07-01 1447168]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2006-10-22 1622016]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Kodak EasyShare software.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Kodak EasyShare software.lnk
backup=c:\windows\pss\Kodak EasyShare software.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Kodak software updater.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Kodak software updater.lnk
backup=c:\windows\pss\Kodak software updater.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^XXX^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\XXX\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Counter-Strike Source\\hl2.exe"=
"c:\\Program Files\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=

R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [1.7.2008 9:04 34312]
R2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [21.12.2007 8:21 468224]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Doplňkový sken -------
.
FF - ProfilePath -

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-21 15:56
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'explorer.exe'(2684)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\drivers\KodakCCS.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\ScsiAccess.EXE
c:\windows\system32\devldr32.exe
.
**************************************************************************
.
Celkový čas: 2009-06-21 16:01 - počítač byl restartován
ComboFix-quarantined-files.txt 2009-06-21 14:01
ComboFix2.txt 2009-06-20 21:07

Před spuštěním: Volných bajtů: 25 607 434 240
Po spuštění: Volných bajtů: 25 597 218 816

607 --- E O F --- 2009-06-18 15:32

[jaro3]

Log O.K. , ještě vlož nový log z HJT.

[Yelkinson]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:17:41, on 21.6.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ScsiAccess.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\system32\ScsiAccess.EXE

--
End of file - 4041 bytes

[jaro3]

Log O.K.

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

takže jestli nejsou problémy,tak vyčisti systém CCleanerem

a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Je to vše.

[Yelkinson]

Tak diky moc snad se tu zase jen tak nepotkame(alespon ne u tohoto tema)