prosim o kontrolu Vyřešeno

[pitrisek_brno]

Prosim o kontrolu - nelze mi napr. aktualizovat ad-aware, hlasi ze nejsem pripojen na net a to stejne u programku picasa 3

moc dekuji

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:15:15, on 19.1.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: (no name) - {68FF9E0F-2E96-4467-87FA-1A8B9734C7E7} - (no file)
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Pitrisek/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg

--
End of file - 9413 bytes

[Reklama]

[jaro3]

Vypni rez .ochranu u Spy Sweeper

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[pitrisek_brno]

Vkladam vysledek:
ComboFix 09-01-18.06 - Pitrisek 2009-01-19 17:53:15.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1029.18.1014.479 [GMT 1:00]
Running from: c:\documents and settings\Pitrisek\Plocha\ComboFix.exe
AV: *On-access scanning enabled* (Updated)
AV: CyberDefender Internet Security *On-access scanning enabled* (Updated)
FW: *enabled*
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Pitrisek\Data aplikacˇ\inst.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\299914
c:\windows\system32\drivers\npf.sys
c:\windows\system32\lsprst7.dll
c:\windows\system32\packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\ssprs.dll
c:\windows\system32\sys_dll.dll
c:\windows\system32\wpcap.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_NPF


((((((((((((((((((((((((( Files Created from 2008-12-19 to 2009-01-19 )))))))))))))))))))))))))))))))
.

2009-01-19 16:06 . 2009-01-19 16:06 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-01-19 16:06 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\Malwarebytes
2009-01-19 16:06 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-19 16:06 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-01-19 15:19 . 2009-01-19 15:19 <DIR> d-------- c:\program files\Windows Installer Clean Up
2009-01-14 12:19 . 2009-01-16 07:55 <DIR> d-------- c:\program files\TuneUp Utilities 2009
2009-01-14 12:19 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\TuneUp Software
2009-01-14 12:19 . 2009-01-14 12:19 603,904 --a------ c:\windows\system32\TUProgSt.exe
2009-01-14 12:19 . 2009-01-14 12:19 360,192 --a------ c:\windows\system32\TuneUpDefragService.exe
2009-01-14 12:19 . 2008-12-11 13:31 27,904 --a------ c:\windows\system32\uxtuneup.dll
2009-01-12 17:03 . 2009-01-12 17:05 <DIR> d-------- c:\program files\DreamCom
2009-01-05 23:33 . 2009-01-05 23:33 3,751,995 --a------ c:\windows\system32\GPhotos.scr
2009-01-03 14:44 . 2009-01-03 14:44 <DIR> d-------- c:\program files\Windows Defender
2009-01-03 13:58 . 2009-01-03 13:58 <DIR> d-------- c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
2009-01-03 10:59 . 2009-01-03 10:59 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard
2009-01-02 20:10 . 2009-01-18 10:21 <DIR> d-------- c:\program files\ICQ6Toolbar
2009-01-02 12:26 . 2009-01-02 12:26 0 --a------ c:\windows\system32\mapisvc.inf
2009-01-02 09:00 . 2009-01-02 09:29 309,280 --ahs---- c:\windows\system32\drivers\fidbox.dat
2009-01-02 09:00 . 2009-01-02 09:29 28,704 --ahs---- c:\windows\system32\drivers\fidbox2.dat
2009-01-02 09:00 . 2009-01-02 09:29 4,700 --ahs---- c:\windows\system32\drivers\fidbox.idx
2009-01-02 09:00 . 2009-01-02 09:29 3,764 --ahs---- c:\windows\system32\drivers\fidbox2.idx
2009-01-01 16:29 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\Acronis
2009-01-01 16:18 . <DIR> c:\documents and settings\LocalService\Data aplikací\Acronis
2009-01-01 16:14 . 2009-01-01 16:14 441,760 --a------ c:\windows\system32\drivers\timntr.sys
2009-01-01 16:14 . 2009-01-01 16:14 129,248 --a------ c:\windows\system32\drivers\snapman.sys
2009-01-01 16:14 . 2009-01-01 16:14 44,384 --a------ c:\windows\system32\drivers\tifsfilt.sys
2009-01-01 16:13 . 2009-01-01 20:13 <DIR> d-------- c:\program files\Common Files\Acronis
2009-01-01 16:13 . 2009-01-01 16:13 368,736 --a------ c:\windows\system32\drivers\tdrpman.sys
2008-12-31 15:32 . 2008-12-31 15:32 <DIR> d-------- c:\program files\Nsasoft
2008-12-31 15:32 . 2008-12-31 15:32 <DIR> d-------- c:\program files\AxBx
2008-12-31 15:31 . 2008-12-31 15:31 <DIR> d-------- c:\program files\Windows Sidebar
2008-12-31 15:31 . 2009-01-11 15:21 <DIR> d-------- c:\program files\Norton Internet Security
2008-12-30 08:32 . 2008-12-30 08:32 <DIR> d-------- c:\program files\Trend Micro
2008-12-29 15:28 . 2008-12-29 15:28 53 --a------ c:\windows\av_affiliate.ini
2008-12-29 15:28 . 2008-12-29 15:28 53 --a------ c:\windows\as_affiliate.ini
2008-12-29 15:27 . 2008-12-29 16:04 67,424 --a------ c:\windows\system32\drivers\CDAVFS.sys
2008-12-29 15:21 . 2008-12-29 15:21 21,194 --a------ C:\Local Analyze Result.html
2008-12-29 15:21 . 2008-12-29 15:21 20,738 --a------ C:\Remote Analyze Result.html
2008-12-29 15:21 . 2008-12-29 15:21 1,650 --a------ C:\Log Result.html
2008-12-29 12:04 . 2008-12-29 12:04 4,828 --a------ c:\windows\system32\drivers\srtspl.PNF
2008-12-29 12:04 . 2008-12-29 12:04 4,828 --a------ c:\windows\system32\drivers\srtsp.PNF
2008-12-29 12:04 . 2008-12-29 12:04 4,820 --a------ c:\windows\system32\drivers\srtspx.PNF
2008-12-29 12:04 . 2008-12-29 12:04 3,960 --a------ c:\windows\system32\drivers\COH_Mon.PNF
2008-12-29 12:04 . 2008-12-29 12:04 3,952 --a------ c:\windows\system32\drivers\CO_Mon.PNF
2008-12-29 11:32 . 2008-12-29 13:16 4,484 --a------ c:\windows\system32\drivers\SYMEVENT.PNF
2008-12-29 11:31 . 2008-12-29 13:15 123,952 --a------ c:\windows\system32\drivers\SYMEVENT.SYS
2008-12-29 11:31 . 2008-12-29 13:15 60,800 --a------ c:\windows\system32\S32EVNT1.DLL
2008-12-29 11:31 . 2008-12-29 13:15 10,671 --a------ c:\windows\system32\drivers\SYMEVENT.CAT
2008-12-29 11:31 . 2008-12-29 13:15 805 --a------ c:\windows\system32\drivers\SYMEVENT.INF
2008-12-28 14:54 . 2008-12-28 14:54 <DIR> d-------- C:\UPM
2008-12-27 20:05 . 2008-12-27 20:05 67 --a------ C:\Ntf10.tmp
2008-12-26 17:27 . 2008-04-14 00:10 96,512 --a------ c:\windows\system32\drivers\atapi.sys
2008-12-26 17:27 . 2008-04-14 00:10 96,512 --a--c--- c:\windows\system32\dllcache\atapi.sys
2008-12-26 17:18 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\Simply Super Software
2008-12-24 12:51 . 2008-12-26 14:05 202 --a------ c:\windows\system32\BIN_STRSBW.SPT
2008-12-21 20:06 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\skypePM
2008-12-21 20:06 . 2008-12-21 20:06 56 --ah----- c:\windows\system32\ezsidmv.dat
2008-12-21 20:04 . 2008-12-21 20:04 <DIR> d-------- c:\program files\Skype
2008-12-21 20:04 . 2008-12-21 20:04 <DIR> d-------- c:\program files\Common Files\Skype
2008-12-21 20:04 . <DIR> c:\documents and settings\Pitrisek\Data aplikací\Skype

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-19 13:37 --------- d-----w c:\program files\Google
2009-01-19 11:57 --------- d-----w c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR
2009-01-19 11:52 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar
2009-01-19 08:34 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\Vso
2009-01-18 17:23 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-18 17:23 --------- d-----w c:\program files\Samsung
2009-01-18 09:16 --------- d-----w c:\program files\Batch Watermark Creator
2009-01-13 11:39 --------- d-----w c:\program files\Flock
2009-01-03 10:40 --------- d-----w c:\program files\MOBILedit!
2008-12-31 14:31 --------- d-----w c:\program files\Common Files\Symantec Shared
2008-12-29 18:58 --------- d-s---w c:\documents and settings\NetworkService\Data aplikací\Microsoft
2008-12-29 12:16 21,328 ----a-w c:\windows\system32\drivers\INFCACHE.1
2008-12-29 11:04 5,468 -c--a-w c:\windows\system32\drivers\SymRedir.PNF
2008-12-28 19:20 --------- d-----w c:\program files\FlashGet
2008-12-26 19:20 --------- d-s---w c:\documents and settings\Pitrisek\Data aplikací\Microsoft
2008-12-20 12:24 --------- d-----w c:\program files\Free Ringtones
2008-12-15 15:34 --------- d-----w c:\program files\wxMusik
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-07 09:56 253,139 ----a-w c:\windows\PDFCreator_Toolbar_Uninstaller_5812.exe
2008-12-07 09:56 --------- d-----w c:\program files\PDFCreator Toolbar
2008-12-07 09:56 --------- d-----w c:\program files\PDFCreator
2008-12-06 11:59 --------- d-----w c:\program files\Common Files\Adobe AIR
2008-12-06 11:54 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\Adobe
2008-11-30 12:52 --------- d-----w c:\program files\Katalog filmů
2008-11-30 12:40 47,360 -c--a-w c:\documents and settings\Pitrisek\Data aplikací\pcouffin.sys
2008-11-30 12:40 47,360 ----a-w c:\windows\system32\drivers\pcouffin.sys
2008-11-30 12:20 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\Zoner
2008-11-30 12:19 --------- d-----w c:\program files\Zoner
2008-11-27 16:55 --------- d-----w c:\program files\Konvertor
2008-11-27 16:51 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\GetRightToGo
2008-11-26 18:31 --------- d-----w c:\program files\Picasa2
2008-10-19 07:27 738,304 ----a-w c:\windows\GPInstall.exe
2008-05-08 18:08 81,920 -c--a-w c:\documents and settings\Pitrisek\Data aplikací\ezpinst.exe
2008-03-31 18:34 1,278 -c--a-w c:\program files\ImageBuilder.log
2008-03-31 18:31 0 -c--a-w c:\program files\init_x.cfg
2008-01-06 15:22 774,144 -c--a-w c:\program files\RngInterstitial.dll
2007-01-25 02:52 65,536 ----a-w c:\program files\Common Files\NMSAccessU.exe
2007-07-25 07:41 12,592 -c--a-w c:\program files\mozilla firefox\plugins\libcomm.dll
2007-07-25 07:41 37,256 -c--a-w c:\program files\mozilla firefox\plugins\NanoInst.dll
2007-07-25 07:41 43,824 -c--a-w c:\program files\mozilla firefox\plugins\PSComm.dll
2007-07-25 07:41 113,456 -c--a-w c:\program files\mozilla firefox\plugins\PSNAdBrk.dll
2008-08-31 16:56 168 -csh--r c:\windows\system32\F1F6970D34.sys
2008-08-31 16:56 2,828 -csha-w c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 1241088]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyDocs"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMMyDocs"= 1 (0x1)
"NoRecentDocsNetHood"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2007-02-05 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.HFYU"= huffyuv.dll
"msacm.divxa32"= divxa32.acm
"VIDC.I420"= i420vfw.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\c:\0autocheck autochk /p \??\c:\0oodbs\0lsdelete

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2004-08-18 69120]
R4 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [2008-10-17 149352]
R4 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [2008-08-01 45848]
R4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009-01-14 603904]
R4 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS --> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.sys --> c:\program files\SUPERAntiSpyware\SASKUTIL.sys [?]
S3 CDAVFS;CDAVFS;c:\windows\system32\drivers\CDAVFS.sys [2008-12-29 67424]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2007-05-29 23888]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2008-12-29 99376]
S3 Fkndisf;FortKnox Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\fortknoxfw_ndisim.sys --> c:\windows\system32\DRIVERS\fortknoxfw_ndisim.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2009-01-19 38496]
S3 SASENUM;SASENUM;\??\c:\program files\SUPERAntiSpyware\SASENUM.SYS --> c:\program files\SUPERAntiSpyware\SASENUM.SYS [?]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [2007-10-14 23600]
S3 UWProSys;Process monitor.;\??\c:\program files\CyberDefender\AntiSpyware\uwprosys.sys --> c:\program files\CyberDefender\AntiSpyware\uwprosys.sys [?]
S3 VM0517VM11;UMAX AstraSlim 1200 Scanner ProdID x0110;c:\windows\system32\drivers\usb0517.sys [2001-11-08 18120]
S4 fortknox;FortKnox Personal Firewall; [x]
S4 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys --> c:\program files\LogMeIn\x86\RaInfo.sys [?]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - COMHOST

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2009-01-19 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 21:36]

2008-06-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57]

2009-01-19 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
.
- - - - ORPHANS REMOVED - - - -

Notify-dimsntfy - (no file)
Notify-LMIinit - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath -

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-19 18:01:53
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1292428093-2147244605-725345543-1005\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{530DDC5C-B598-D3AE-F96F-C0A96502D1A4}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"oakhinpemcnjkiiohgakkdjmogjmhp"=hex:6a,61,68,63,70,64,62,61,70,6c,69,6e,6b,64,
6b,6a,64,61,63,64,00,ee
"naahoknffdbdpedaogbnfknlknop"=hex:6a,61,6f,63,61,65,69,62,70,67,66,65,67,63,
6a,6a,6a,64,61,6b,00,ee

[HKEY_USERS\S-1-5-21-1292428093-2147244605-725345543-1005\Software\nanocosmos\VideoTransformer\ExtData*]
"InstallDate"=dword:475a5dd9

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{08809bfe-db5a-44c2-8e8a-c3f8a46da788}]
@Denied: (Full) (Everyone)
"Model"=dword:00000103
"Therad"=dword:0000002b
"MData"=hex(0):2b,8f,78,29,5a,0c,ce,ec,48,d4,68,e5,9f,6a,96,3e,ab,de,c5,81,26,
38,95,44,85,b1,12,f9,90,dd,23,a1,49,8c,bf,1a,9d,fe,41,71,cb,3f,46,a4,7c,ab,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:c8,28,51,af,b0,29,a3,98,b2,fe,36,b6,fa,
8d,40,5d,e2,63,26,f1,3f,c8,ff,68,41,78,54,6b,cb,25,73,5e,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):4b,74,eb,3e,9f,a5,10,ba,d2,72,23,28,e6,e9,24,f2,c6,e9,8e,6b,31,
d6,f9,bb,95,59,17,d4,f0,25,8a,84,65,80,6c,39,1e,e6,e6,d0,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:6a,9c,d6,61,af,45,84,18,5e,a2,d4,57,dd,
1d,c8,ee,6a,9c,d6,61,af,45,84,18,38,bb,d5,45,c2,68,70,5c,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,77,7f,cf,9b,95,
eb,a7,89,ff,7c,85,e0,43,d4,0e,fe,e7,38,ef,42,95,63,97,c3,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:6b,65,49,6a,7e,99,74,f7,03,78,87,19,a4,
4d,e0,a8,86,8c,21,01,be,91,eb,e7,ba,33,a5,03,1a,41,48,16,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,1a,33,e9,e8,24,
30,8a,9a,f5,1d,4d,73,a8,13,5c,05,1d,83,69,e8,ac,fb,66,38,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:df,20,58,62,78,6b,cf,c8,fa,af,3c,57,f7,
67,e6,fe,df,20,58,62,78,6b,cf,c8,4e,9e,52,48,ec,c0,a7,1c,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,8b,b1,20,ae,a8,
ee,84,1a,fb,a7,78,e6,12,2f,9a,ea,e2,c6,0d,83,3a,45,f8,77,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:83,6c,56,8b,a0,85,96,ab,eb,f5,98,62,71,
66,b9,11,01,3a,48,fc,e8,04,4a,f1,82,29,83,2f,7d,40,7b,d2,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,8a,dd,7c,74,f1,
d9,78,e0,f6,0f,4e,58,98,5b,89,c9,25,df,65,00,2e,63,32,b1,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:37,a4,aa,c3,a6,15,56,0a,80,79,d8,73,e9,
a5,03,94,3d,ce,ea,26,2d,45,aa,78,37,32,9f,41,5c,1f,78,77,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:e3,0e,66,d5,eb,bc,2f,6b,48,19,37,43,93,
6c,56,ab,2a,b7,cc,b5,b9,7f,41,e7,8b,2c,6d,d9,31,77,a6,50,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:05,73,21,dd,54,d8,4a,c5,19,26,88,41,b8,
5e,8e,bd,6c,43,2d,1e,aa,22,2f,9c,92,e1,1e,0f,d6,06,73,36,6c,43,2d,1e,aa,22,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\CDBurnerXP\NMSAccessU.exe
c:\windows\system32\PSIService.exe
c:\program files\CyberLink\Shared files\RichVideo.exe
c:\windows\system32\snmp.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
c:\program files\Canon\CAL\CALMAIN.exe
.
**************************************************************************
.
Completion time: 2009-01-19 18:06:28 - machine was rebooted
ComboFix-quarantined-files.txt 2009-01-19 17:06:25

Pre-Run: Volněch bajt…: 30˙414˙213˙120
Post-Run: Volněch bajt…: 30,516,772,864

330 --- E O F --- 2009-01-14 06:53:22

[pitrisek_brno]

sd fix - stav nouze mi nefungoval, dr web cuit nahlasil nasleduji:
data002\32788R22FWJFW\C.bat C:\Documents and Settings\Pitrisek\Plocha\ComboFix.exe\data002
data002\32788R22FWJFW\psexec.cfexe C:\Documents and Settings\Pitrisek\Plocha\ComboFix.exe\data002
data002 C:\Documents and Settings\Pitrisek\Plocha\ComboFix.exe
ComboFix.exe C:\Documents and Settings\Pitrisek\Plocha
SDFix.exe\SDFix\apps\Process.exe C:\Documents and Settings\Pitrisek\Plocha\SDFix.exe
SDFix.exe C:\Documents and Settings\Pitrisek\Plocha
Process.exe C:\SDFix\apps
A0000024.exe C:\System Volume Information\_restore{6223E47D-17AD-4688-909D-91336A6807F9}\RP1
A0000154.exe C:\System Volume Information\_restore{6223E47D-17AD-4688-909D-91336A6807F9}\RP1
A0000217.exe\SDFix\apps\Process.exe C:\System Volume Information\_restore{6223E47D-17AD-4688-909D-91336A6807F9}\RP1\A0000217.exe
A0000217.exe C:\System Volume Information\_restore{6223E47D-17AD-4688-909D-91336A6807F9}\RP1

vypnuti obnovy systemu, restart, zapnuti obnovy systemu a restart take nepomohlo.

nejde aktualizovat ad-aware, ani picassa a kdyz chci spusti i explorer tak take ukazuje ze neni pripojen, ale stejne pouzivam mozillu f.

[jaro3]

START-spustit-napiš=cmd.exe-dej OK- v dosovém okně vlož myší toto:
sc stop SASDIFSV
sc delete SASDIFSV
sc stop SASKUTIL
sc delete SASKUTIL
sc stop fortknoxfw_ndisim
sc delete fortknoxfw_ndisim
sc stop SASENUM
sc delete SASENUM
sc stop uwprosys
sc delete uwprosys
sc stop FortKnox Personal Firewall
sc delete FortKnox Personal Firewall
sc stop RaInfo
sc delete RaInfo
sc stop LMIRfsClientNP
sc delete LMIRfsClientNP
exit


Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

File::
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
c:\windows\system32\F1F6970D34.sys

Driver::
F1F6970D34

Folder::
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000000


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT

Toto otestuj na Virustotal
C:\Local Analyze Result.html
C:\Remote Analyze Result.html
C:\Log Result.html
C:\Ntf10.tmp
c:\windows\PDFCreator_Toolbar_Uninstaller_5812.exe
Vlož sem pak odkazy výsledků.

[pitrisek_brno]

tak prvne prikladam vysledek z HIJACKU

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56:44, on 20.1.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: (no name) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: (no name) - {68FF9E0F-2E96-4467-87FA-1A8B9734C7E7} - (no file)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] HDAShCut.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crl ... crlocx.ocx
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Pitrisek/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg

--
End of file - 9327 bytes

[pitrisek_brno]

nyni se pokusim prilozit vysledek z COMBA - ale bude to na pokracovani

ComboFix 09-01-19.05 - Pitrisek 2009-01-20 11:50:12.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.1.1029.18.1014.490 [GMT 1:00]
Spuštěný z: c:\documents and settings\Pitrisek\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Pitrisek\Plocha\CFScript.txt
AV: *On-access scanning enabled* (Updated)
AV: CyberDefender Internet Security *On-access scanning enabled* (Updated)
FW: *enabled*
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!

FILE ::
c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
c:\windows\system32\F1F6970D34.sys
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\COMBOSEARCH.acs
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\connect.ico
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\dnload.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\dnloado.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\downfile\megauper.zip
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\downfile\megauperB.zip
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\ErrorLog.txt
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\ErrorPageTemplate.css
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\extend.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\extendi.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\extendo.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred0.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred0_5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred1.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred1_5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred2.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred2_5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred3.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred3_5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred4.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred4_5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\graphred5.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\happyhour.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\happyhouri.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\happyhouro.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\help.gif
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\ie7tab3.zip
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\info.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\links.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\logo.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\logoo.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\marrow.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\megauper.exe
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\megauploadtoolbartb0500.cfg
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\powered_by_yahoo.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\search.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\searchA.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\searchAo.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\searcho.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\sinfo.txt
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\sinfo.txt6882515
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\slider.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\tab_icon.png
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\tabdata.js
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\tablib.js
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\tabwelcome.html
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\Thumbs.db
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\upload.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\uploado.bmp
c:\documents and settings\Pitrisek\Data aplikací\MegauploadToolbar\yahoo_search.gif
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\COMBOSEARCH.acs
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\connect.ico
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\dnload.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\dnloado.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\downfile\megauper.zip782281
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\downfile\megauperB.zip
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\ErrorPageTemplate.css
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\extend.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\extendi.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\extendo.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred0.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred0_5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred1.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred1_5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred2.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred2_5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred3.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred3_5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred4.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred4_5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\graphred5.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\happyhour.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\happyhouri.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\happyhouro.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\help.gif
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\ie7tab3.zip
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\info.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\links.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\logo.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\logoo.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\marrow.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\megauper.exe
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\megauploadtoolbartb0500.cfg
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\powered_by_yahoo.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\search.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\searchA.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\searchAo.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\searcho.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\sinfo.txt
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\slider.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\tab_icon.png
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\tabdata.js
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\tablib.js
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\tabwelcome.html
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\Thumbs.db
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\upload.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\uploado.bmp
c:\documents and settings\Tomáš\Data aplikací\MEGAUPLOADTOOLBAR\yahoo_search.gif
c:\windows\system32\F1F6970D34.sys

[pitrisek_brno]

pokracovani dve - combo

((((((((((((((((((((((((( Soubory vytvořené od 2008-12-20 do 2009-01-20 )))))))))))))))))))))))))))))))
.

2009-01-19 20:20 . 2009-01-19 20:53 <DIR> d-------- c:\documents and settings\Pitrisek\DoctorWeb
2009-01-19 19:37 . 2009-01-19 19:37 <DIR> d-------- C:\Intel
2009-01-19 19:37 . 2005-03-22 12:58 167,936 --a------ c:\windows\system32\igfxres.dll
2009-01-19 19:27 . 2004-08-18 13:00 426,041 --a--c--- c:\windows\system32\dllcache\voicepad.dll
2009-01-19 19:27 . 2004-08-18 13:00 156,672 --a--c--- c:\windows\system32\dllcache\winzm.ime
2009-01-19 19:27 . 2004-08-18 13:00 156,672 --a--c--- c:\windows\system32\dllcache\winsp.ime
2009-01-19 19:27 . 2004-08-18 13:00 156,672 --a--c--- c:\windows\system32\dllcache\winpy.ime
2009-01-19 19:27 . 2004-08-18 13:00 86,073 --a--c--- c:\windows\system32\dllcache\voicesub.dll
2009-01-19 19:27 . 2004-08-18 13:00 79,360 --a--c--- c:\windows\system32\dllcache\winar30.ime
2009-01-19 19:27 . 2004-08-18 13:00 69,120 --a--c--- c:\windows\system32\dllcache\wingb.ime
2009-01-19 19:27 . 2004-08-18 13:00 65,536 --a--c--- c:\windows\system32\dllcache\winime.ime
2009-01-19 19:27 . 2004-08-18 13:00 48,256 --a--c--- c:\windows\system32\dllcache\w32.dll
2009-01-19 19:27 . 2004-08-18 13:00 41,600 --a--c--- c:\windows\system32\dllcache\weitekp9.dll
2009-01-19 19:27 . 2004-08-18 13:00 31,360 --a--c--- c:\windows\system32\dllcache\weitekp9.sys
2009-01-19 19:27 . 2004-08-18 13:00 28,288 --a--c--- c:\windows\system32\dllcache\xjis.nls
2009-01-19 19:25 . 2004-08-18 13:00 1,875,968 --a--c--- c:\windows\system32\dllcache\msir3jp.lex
2009-01-19 19:24 . 2004-08-18 13:00 13,463,552 --a--c--- c:\windows\system32\dllcache\hwxjpn.dll
2009-01-19 19:23 . 2004-08-18 13:00 330,752 --a--c--- c:\windows\system32\dllcache\aqueue.dll
2009-01-19 19:14 . 2004-08-18 13:00 16,384 --a--c--- c:\windows\system32\dllcache\isignup.exe
2009-01-19 19:14 . 2009-01-19 19:14 749 -rah----- c:\windows\WindowsShell.Manifest
2009-01-19 19:14 . 2009-01-19 19:14 749 -rah----- c:\windows\system32\wuaucpl.cpl.manifest
2009-01-19 19:14 . 2009-01-19 19:14 749 -rah----- c:\windows\system32\sapi.cpl.manifest
2009-01-19 19:14 . 2009-01-19 19:14 749 -rah----- c:\windows\system32\ncpa.cpl.manifest
2009-01-19 19:14 . 2009-01-19 19:14 488 -rah----- c:\windows\system32\logonui.exe.manifest
2009-01-19 18:29 . 2008-11-06 02:03 <DIR> d-------- C:\SDFix
2009-01-19 16:06 . 2009-01-19 16:06 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-01-19 16:06 . 2009-01-19 16:06 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\Malwarebytes
2009-01-19 16:06 . 2009-01-19 16:06 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2009-01-19 16:06 . 2009-01-14 16:11 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-19 16:06 . 2009-01-14 16:11 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-01-19 15:19 . 2009-01-19 15:19 <DIR> d-------- c:\program files\Windows Installer Clean Up
2009-01-18 21:07 . 2009-01-19 15:17 14,460 --a------ c:\windows\setupapi.old
2009-01-14 12:19 . 2009-01-16 07:55 <DIR> d-------- c:\program files\TuneUp Utilities 2009
2009-01-14 12:19 . 2009-01-14 12:19 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\TuneUp Software
2009-01-14 12:19 . 2009-01-14 12:19 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\TuneUp Software
2009-01-14 12:19 . 2009-01-14 12:19 603,904 --a------ c:\windows\system32\TUProgSt.exe
2009-01-14 12:19 . 2009-01-14 12:19 360,192 --a------ c:\windows\system32\TuneUpDefragService.exe
2009-01-14 12:19 . 2008-12-11 13:31 27,904 --a------ c:\windows\system32\uxtuneup.dll
2009-01-14 12:18 . 2009-01-14 12:18 <DIR> d--hs---- c:\documents and settings\All Users\Data aplikací\{55A29068-F2CE-456C-9148-C869879E2357}
2009-01-12 17:03 . 2009-01-12 17:05 <DIR> d-------- c:\program files\DreamCom
2009-01-05 23:33 . 2009-01-05 23:33 3,751,995 --a------ c:\windows\system32\GPhotos.scr
2009-01-03 14:44 . 2009-01-03 14:44 <DIR> d-------- c:\program files\Windows Defender
2009-01-03 13:58 . 2009-01-03 13:58 <DIR> d-------- c:\windows\DED53B0BB67C4244AE6AD6FD3C28D1EF.TMP
2009-01-03 10:59 . 2009-01-03 10:59 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard
2009-01-02 20:10 . 2009-01-18 10:21 <DIR> d-------- c:\program files\ICQ6Toolbar
2009-01-02 12:26 . 2009-01-02 12:26 0 --a------ c:\windows\system32\mapisvc.inf
2009-01-02 09:00 . 2009-01-02 09:29 309,280 --ahs---- c:\windows\system32\drivers\fidbox.dat
2009-01-02 09:00 . 2009-01-02 09:29 28,704 --ahs---- c:\windows\system32\drivers\fidbox2.dat
2009-01-02 09:00 . 2009-01-02 09:29 4,700 --ahs---- c:\windows\system32\drivers\fidbox.idx
2009-01-02 09:00 . 2009-01-02 09:29 3,764 --ahs---- c:\windows\system32\drivers\fidbox2.idx
2009-01-01 19:38 . 2009-01-01 19:38 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\sentinel
2009-01-01 17:22 . 2009-01-01 17:22 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Downloaded Installations
2009-01-01 16:29 . 2009-01-01 16:29 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\Acronis
2009-01-01 16:18 . 2009-01-01 16:18 <DIR> d-------- c:\documents and settings\LocalService\Data aplikací\Acronis
2009-01-01 16:14 . 2009-01-01 16:14 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Acronis
2009-01-01 16:14 . 2009-01-01 16:14 441,760 --a------ c:\windows\system32\drivers\timntr.sys
2009-01-01 16:14 . 2009-01-01 16:14 129,248 --a------ c:\windows\system32\drivers\snapman.sys
2009-01-01 16:14 . 2009-01-01 16:14 44,384 --a------ c:\windows\system32\drivers\tifsfilt.sys
2009-01-01 16:13 . 2009-01-01 20:13 <DIR> d-------- c:\program files\Common Files\Acronis
2009-01-01 16:13 . 2009-01-01 16:13 368,736 --a------ c:\windows\system32\drivers\tdrpman.sys
2008-12-31 15:32 . 2008-12-31 15:32 <DIR> d-------- c:\program files\Nsasoft
2008-12-31 15:32 . 2008-12-31 15:32 <DIR> d-------- c:\program files\AxBx
2008-12-31 15:31 . 2008-12-31 15:31 <DIR> d-------- c:\program files\Windows Sidebar
2008-12-31 15:31 . 2009-01-11 15:21 <DIR> d-------- c:\program files\Norton Internet Security
2008-12-30 08:32 . 2008-12-30 08:32 <DIR> d-------- c:\program files\Trend Micro
2008-12-29 15:28 . 2008-12-29 15:28 53 --a------ c:\windows\av_affiliate.ini
2008-12-29 15:28 . 2008-12-29 15:28 53 --a------ c:\windows\as_affiliate.ini
2008-12-29 15:27 . 2008-12-29 16:04 67,424 --a------ c:\windows\system32\drivers\CDAVFS.sys
2008-12-29 15:21 . 2008-12-29 15:21 21,194 --a------ C:\Local Analyze Result.html
2008-12-29 15:21 . 2008-12-29 15:21 20,738 --a------ C:\Remote Analyze Result.html
2008-12-29 15:21 . 2008-12-29 15:21 1,650 --a------ C:\Log Result.html
2008-12-29 12:04 . 2008-12-29 12:04 4,828 --a------ c:\windows\system32\drivers\srtspl.PNF
2008-12-29 12:04 . 2008-12-29 12:04 4,828 --a------ c:\windows\system32\drivers\srtsp.PNF
2008-12-29 12:04 . 2008-12-29 12:04 4,820 --a------ c:\windows\system32\drivers\srtspx.PNF
2008-12-29 12:04 . 2008-12-29 12:04 3,960 --a------ c:\windows\system32\drivers\COH_Mon.PNF
2008-12-29 12:04 . 2008-12-29 12:04 3,952 --a------ c:\windows\system32\drivers\CO_Mon.PNF
2008-12-29 11:32 . 2008-12-29 13:16 4,484 --a------ c:\windows\system32\drivers\SYMEVENT.PNF
2008-12-29 11:31 . 2008-12-29 13:15 123,952 --a------ c:\windows\system32\drivers\SYMEVENT.SYS
2008-12-29 11:31 . 2008-12-29 13:15 60,800 --a------ c:\windows\system32\S32EVNT1.DLL
2008-12-29 11:31 . 2008-12-29 13:15 10,671 --a------ c:\windows\system32\drivers\SYMEVENT.CAT
2008-12-29 11:31 . 2008-12-29 13:15 805 --a------ c:\windows\system32\drivers\SYMEVENT.INF
2008-12-28 14:54 . 2008-12-28 14:54 <DIR> d-------- C:\UPM
2008-12-27 20:05 . 2008-12-27 20:05 67 --a------ C:\Ntf10.tmp
2008-12-26 17:18 . 2008-12-26 17:18 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\Simply Super Software
2008-12-24 12:51 . 2008-12-26 14:05 202 --a------ c:\windows\system32\BIN_STRSBW.SPT
2008-12-21 20:06 . 2009-01-20 10:11 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\skypePM
2008-12-21 20:06 . 2008-12-21 20:06 56 --ah----- c:\windows\system32\ezsidmv.dat
2008-12-21 20:04 . 2008-12-21 20:04 <DIR> d-------- c:\program files\Skype
2008-12-21 20:04 . 2008-12-21 20:04 <DIR> d-------- c:\program files\Common Files\Skype
2008-12-21 20:04 . 2009-01-20 11:12 <DIR> d-------- c:\documents and settings\Pitrisek\Data aplikací\Skype
2008-12-21 20:03 . 2008-12-21 20:04 <DIR> d-------- c:\documents and settings\All Users\Data aplikací\Skype

[pitrisek_brno]

pokracovani 3 z COMBA:

(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-20 09:52 --------- d-----w c:\program files\FlashGet
2009-01-19 18:03 21,208 ----a-w c:\windows\system32\drivers\INFCACHE.1
2009-01-19 13:37 --------- d-----w c:\program files\Google
2009-01-19 12:12 --------- d-----w c:\documents and settings\All Users\Data aplikací\Symantec
2009-01-19 08:34 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\Vso
2009-01-18 17:23 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-18 17:23 --------- d-----w c:\program files\Samsung
2009-01-18 09:16 --------- d-----w c:\program files\Batch Watermark Creator
2009-01-14 14:13 --------- d-----w c:\documents and settings\All Users\Data aplikací\Microsoft Help
2009-01-13 11:39 --------- d-----w c:\program files\Flock
2009-01-03 10:40 --------- d-----w c:\program files\MOBILedit!
2009-01-03 09:59 --------- d-----w c:\documents and settings\All Users\Data aplikací\Lavasoft
2009-01-01 10:51 --------- d---a-w c:\documents and settings\All Users\Data aplikací\TEMP
2008-12-31 14:31 --------- d-----w c:\program files\Common Files\Symantec Shared
2008-12-29 11:04 5,468 -c--a-w c:\windows\system32\drivers\SymRedir.PNF
2008-12-20 12:24 --------- d-----w c:\program files\Free Ringtones
2008-12-15 15:34 --------- d-----w c:\program files\wxMusik
2008-12-07 09:56 253,139 ----a-w c:\windows\PDFCreator_Toolbar_Uninstaller_5812.exe
2008-12-07 09:56 --------- d-----w c:\program files\PDFCreator Toolbar
2008-12-07 09:56 --------- d-----w c:\program files\PDFCreator
2008-12-06 11:59 --------- d-----w c:\program files\Common Files\Adobe AIR
2008-11-30 13:04 --------- d-----w c:\documents and settings\All Users\Data aplikací\vsosdk
2008-11-30 12:52 --------- d-----w c:\program files\Katalog filmů
2008-11-30 12:40 47,360 -c--a-w c:\documents and settings\Pitrisek\Data aplikací\pcouffin.sys
2008-11-30 12:40 47,360 ----a-w c:\windows\system32\drivers\pcouffin.sys
2008-11-30 12:20 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\Zoner
2008-11-30 12:19 --------- d-----w c:\program files\Zoner
2008-11-27 16:55 --------- d-----w c:\program files\Konvertor
2008-11-27 16:51 --------- d-----w c:\documents and settings\Pitrisek\Data aplikací\GetRightToGo
2008-11-26 18:31 --------- d-----w c:\program files\Picasa2
2008-10-29 13:54 155,648 ----a-w c:\windows\system32\libssl32.dll
2008-05-08 18:08 81,920 -c--a-w c:\documents and settings\Pitrisek\Data aplikací\ezpinst.exe
2008-03-31 18:34 1,278 -c--a-w c:\program files\ImageBuilder.log
2008-03-31 18:31 0 -c--a-w c:\program files\init_x.cfg
2008-01-06 15:22 774,144 -c--a-w c:\program files\RngInterstitial.dll
2007-01-25 02:52 65,536 ----a-w c:\program files\Common Files\NMSAccessU.exe
2007-07-25 07:41 12,592 -c--a-w c:\program files\mozilla firefox\plugins\libcomm.dll
2007-07-25 07:41 37,256 -c--a-w c:\program files\mozilla firefox\plugins\NanoInst.dll
2007-07-25 07:41 43,824 -c--a-w c:\program files\mozilla firefox\plugins\PSComm.dll
2007-07-25 07:41 113,456 -c--a-w c:\program files\mozilla firefox\plugins\PSNAdBrk.dll
2008-08-31 16:56 2,828 -csha-w c:\windows\system32\KGyGaAvL.sys
.

[pitrisek_brno]

pokracovani 4 z COMBA

((((((((((((((((((((((((((((( snapshot@2009-01-19_18.05.12.96 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-04-14 06:51:38 1,852,928 ----a-w c:\windows\AppPatch\acgenral.dll
+ 2004-08-18 12:00:00 1,852,416 ----a-w c:\windows\AppPatch\AcGenral.dll
- 2008-04-14 06:51:38 451,072 -c--a-w c:\windows\AppPatch\aclayers.dll
+ 2004-08-18 12:00:00 450,048 ----a-w c:\windows\AppPatch\AcLayers.dll
- 2008-04-14 06:51:38 141,312 -c--a-w c:\windows\AppPatch\aclua.dll
+ 2004-08-18 12:00:00 137,728 ----a-w c:\windows\AppPatch\AcLua.dll
- 2008-04-14 06:51:38 245,248 -c--a-w c:\windows\AppPatch\acspecfc.dll
+ 2004-08-18 12:00:00 244,736 ----a-w c:\windows\AppPatch\AcSpecfc.dll
- 2008-04-14 06:51:38 116,224 -c--a-w c:\windows\AppPatch\acxtrnal.dll
+ 2004-08-18 12:00:00 116,224 ----a-w c:\windows\AppPatch\AcXtrnal.dll
+ 2005-09-28 23:35:25 134,272 ------w c:\windows\Driver Cache\i386\halmacpi.dll
- 2008-10-24 11:21:09 455,296 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
+ 2005-01-19 04:26:52 451,584 ------w c:\windows\Driver Cache\i386\mrxsmb.sys
- 2008-08-14 13:26:30 2,147,328 -c----w c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2005-09-29 18:30:14 2,138,112 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2008-08-14 13:26:42 2,068,224 -c----w c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2005-09-29 18:30:19 2,059,520 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2008-08-14 13:26:27 2,025,984 -c----w c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2005-09-29 18:30:22 2,017,792 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2008-08-14 13:26:30 2,191,360 -c----w c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2005-09-29 18:30:36 2,182,272 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2004-03-16 09:58:20 136,960 ------w c:\windows\Driver Cache\i386\portcls.sys
- 2008-04-14 06:52:24 1,034,240 ----a-w c:\windows\explorer.exe
+ 2004-08-18 12:00:00 1,032,704 ----a-w c:\windows\explorer.exe
- 2008-04-14 06:51:58 34,816 -c--a-w c:\windows\Help\sniffpol.dll
+ 2004-08-18 12:00:00 34,816 ----a-w c:\windows\Help\sniffpol.dll
- 2008-04-14 06:52:04 33,280 -c--a-w c:\windows\Help\sstub.dll
+ 2004-08-18 12:00:00 33,280 ----a-w c:\windows\Help\sstub.dll
- 2008-04-14 06:52:06 279,040 -c--a-w c:\windows\Help\tshoot.dll
+ 2004-08-18 12:00:00 279,040 ----a-w c:\windows\Help\tshoot.dll
- 2008-04-14 06:51:48 220,160 -c--a-w c:\windows\ime\mscandui.dll
+ 2004-08-18 12:00:00 220,160 ----a-w c:\windows\ime\mscandui.dll
- 2008-04-14 06:51:58 130,048 -c--a-w c:\windows\ime\softkbd.dll
+ 2004-08-18 12:00:00 130,048 ----a-w c:\windows\ime\SOFTKBD.DLL
- 2008-04-13 20:13:20 62,976 -c--a-w c:\windows\ime\spgrmr.dll
+ 2004-08-18 12:00:00 62,976 ----a-w c:\windows\ime\SPGRMR.dll
- 2008-04-14 06:52:04 272,384 ----a-w c:\windows\ime\sptip.dll
+ 2004-08-18 12:00:00 272,384 ----a-w c:\windows\ime\SPTIP.dll
- 2007-06-27 13:31:34 317,952 ----a-w c:\windows\inf\unregmp2.exe
+ 2004-08-18 12:00:00 208,896 ----a-w c:\windows\inf\unregmp2.exe
- 2008-04-14 06:51:38 24,064 -c--a-w c:\windows\msagent\agentanm.dll
+ 2004-08-18 12:00:00 24,064 ----a-w c:\windows\msagent\agentanm.dll
- 2008-04-14 06:51:38 214,016 -c--a-w c:\windows\msagent\agentctl.dll
+ 2004-08-18 12:00:00 214,016 ----a-w c:\windows\msagent\agentctl.dll
- 2008-04-14 06:51:38 42,496 -c--a-w c:\windows\msagent\agentdp2.dll
+ 2004-08-18 12:00:00 41,984 ----a-w c:\windows\msagent\agentdp2.dll
- 2008-04-14 06:51:38 57,344 -c--a-w c:\windows\msagent\agentdpv.dll
+ 2005-04-22 05:08:58 57,344 ----a-w c:\windows\msagent\agentdpv.dll
- 2008-04-14 06:51:38 49,152 -c--a-w c:\windows\msagent\agentmpx.dll
+ 2004-08-18 12:00:00 49,152 ----a-w c:\windows\msagent\agentmpx.dll
- 2008-04-14 06:51:38 24,064 ----a-w c:\windows\msagent\agentpsh.dll
+ 2004-08-18 12:00:00 24,064 ----a-w c:\windows\msagent\agentpsh.dll
- 2008-04-14 06:51:38 44,032 -c--a-w c:\windows\msagent\agentsr.dll
+ 2004-08-18 12:00:00 44,032 ----a-w c:\windows\msagent\agentsr.dll
- 2008-04-14 06:52:10 256,512 -c--a-w c:\windows\msagent\agentsvr.exe
+ 2004-08-18 12:00:00 256,512 ----a-w c:\windows\msagent\agentsvr.exe
- 2008-04-14 06:51:38 24,064 -c--a-w c:\windows\msagent\agtintl.dll
+ 2004-08-18 12:00:00 24,064 ----a-w c:\windows\msagent\agtintl.dll
- 2007-04-02 21:56:00 19,456 -c--a-w c:\windows\msagent\intl\agt0405.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0405.dll
- 2007-04-02 21:56:00 19,456 -c--a-w c:\windows\msagent\intl\agt0406.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0406.dll
- 2007-04-02 21:56:02 21,504 -c--a-w c:\windows\msagent\intl\agt0407.dll
+ 2004-08-18 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt0407.dll
- 2007-04-02 21:56:02 22,016 -c--a-w c:\windows\msagent\intl\agt0408.dll
+ 2004-08-18 12:00:00 22,016 ----a-w c:\windows\msagent\intl\agt0408.dll
- 2008-04-13 21:02:30 19,968 -c--a-w c:\windows\msagent\intl\agt0409.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0409.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt040b.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt040b.dll
- 2007-04-02 21:56:02 21,504 -c--a-w c:\windows\msagent\intl\agt040c.dll
+ 2004-08-18 12:00:00 21,504 ----a-w c:\windows\msagent\intl\agt040c.dll
- 2007-04-02 21:56:02 19,968 -c--a-w c:\windows\msagent\intl\agt040e.dll
+ 2004-08-18 12:00:00 19,968 ----a-w c:\windows\msagent\intl\agt040e.dll
- 2007-04-02 21:56:02 20,992 -c--a-w c:\windows\msagent\intl\agt0410.dll
+ 2004-08-18 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0410.dll
- 2007-04-02 21:56:02 20,992 -c--a-w c:\windows\msagent\intl\agt0413.dll
+ 2004-08-18 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0413.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt0414.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0414.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt0415.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0415.dll
- 2007-04-02 21:56:02 20,480 -c--a-w c:\windows\msagent\intl\agt0416.dll
+ 2004-08-18 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0416.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt0419.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt0419.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt041d.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041d.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\msagent\intl\agt041f.dll
+ 2004-08-18 12:00:00 19,456 ----a-w c:\windows\msagent\intl\agt041f.dll
- 2007-04-02 21:56:04 20,992 -c--a-w c:\windows\msagent\intl\agt0816.dll
+ 2004-08-18 12:00:00 20,992 ----a-w c:\windows\msagent\intl\agt0816.dll
- 2007-04-02 21:56:04 20,480 -c--a-w c:\windows\msagent\intl\agt0c0a.dll
+ 2004-08-18 12:00:00 20,480 ----a-w c:\windows\msagent\intl\agt0c0a.dll
- 2008-04-14 06:51:50 39,936 -c--a-w c:\windows\msagent\mslwvtts.dll
+ 2004-08-18 12:00:00 39,936 ----a-w c:\windows\msagent\mslwvtts.dll
- 2008-04-14 06:52:40 69,632 ----a-w c:\windows\notepad.exe
+ 2004-08-18 12:00:00 69,632 ----a-w c:\windows\notepad.exe
- 2008-04-14 06:52:04 151,552 -c--a-w c:\windows\PeerNet\sqldb20.dll
+ 2004-08-18 12:00:00 151,552 ----a-w c:\windows\PeerNet\sqldb20.dll
- 2008-04-14 06:52:04 462,848 -c--a-w c:\windows\PeerNet\sqlqp20.dll
+ 2004-08-18 12:00:00 462,848 ----a-w c:\windows\PeerNet\sqlqp20.dll
- 2008-04-14 06:52:04 110,592 -c--a-w c:\windows\PeerNet\sqlse20.dll
+ 2004-08-18 12:00:00 110,592 ----a-w c:\windows\PeerNet\sqlse20.dll
- 2008-04-14 06:52:26 769,024 -c--a-w c:\windows\pchealth\helpctr\binaries\helpctr.exe
+ 2004-08-18 12:00:00 768,512 ----a-w c:\windows\pchealth\helpctr\binaries\HelpCtr.exe
- 2008-04-14 06:52:26 744,448 ----a-w c:\windows\pchealth\helpctr\binaries\helpsvc.exe
+ 2004-08-18 12:00:00 743,936 ----a-w c:\windows\pchealth\helpctr\binaries\HelpSvc.exe
- 2008-04-14 06:52:26 18,432 -c--a-w c:\windows\pchealth\helpctr\binaries\hscupd.exe
+ 2004-08-18 12:00:00 18,944 ----a-w c:\windows\pchealth\helpctr\binaries\HscUpd.exe
- 2008-04-14 06:52:36 171,008 -c--a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
+ 2004-08-18 12:00:00 159,232 ----a-w c:\windows\pchealth\helpctr\binaries\msconfig.exe
- 2008-04-14 06:51:50 378,880 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
+ 2004-08-18 12:00:00 378,368 ----a-w c:\windows\pchealth\helpctr\binaries\msinfo.dll
- 2008-04-14 06:51:54 102,912 -c--a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
+ 2004-08-18 12:00:00 102,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchshell.dll
- 2008-04-14 06:51:54 38,400 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
+ 2004-08-18 12:00:00 38,912 ----a-w c:\windows\pchealth\helpctr\binaries\pchsvc.dll
- 2008-04-14 06:52:52 150,528 -c--a-w c:\windows\pchealth\UploadLB\Binaries\uploadm.exe
+ 2004-08-18 12:00:00 150,528 ----a-w c:\windows\pchealth\UploadLB\Binaries\UploadM.exe
- 2008-04-14 06:52:44 147,968 -c--a-w c:\windows\regedit.exe
+ 2004-08-18 12:00:00 147,968 ----a-w c:\windows\regedit.exe
- 2007-07-28 18:22:33 233,472 -c-ha-w c:\windows\repair\ntuser.dat
+ 2009-01-19 18:23:01 3,133,440 -c-ha-w c:\windows\repair\ntuser.dat
- 2008-04-14 06:52:48 32,866 -c----w c:\windows\slrundll.exe
+ 2004-08-17 14:49:28 32,866 ----a-w c:\windows\slrundll.exe
- 2008-04-14 06:52:04 58,434 -c--a-w c:\windows\srchasst\srchctls.dll
+ 2004-08-18 12:00:00 58,434 ----a-w c:\windows\srchasst\srchctls.dll
- 2008-04-14 06:52:04 726,590 -c--a-w c:\windows\srchasst\srchui.dll
+ 2004-08-18 12:00:00 726,078 ----a-w c:\windows\srchasst\srchui.dll
- 2008-04-14 06:53:00 146,944 -c--a-w c:\windows\system\winspool.drv
+ 2004-08-18 12:00:00 146,944 ----a-w c:\windows\system\WINSPOOL.DRV
- 2004-08-18 12:00:00 80,208 ----a-w c:\windows\system32\1029\dwintl.dll
+ 2004-08-18 12:00:00 55,632 ----a-w c:\windows\system32\1029\dwintl.dll
- 2004-08-18 12:00:00 80,208 -c--a-w c:\windows\system32\1033\dwintl.dll
+ 2004-08-18 12:00:00 55,632 ----a-w c:\windows\system32\1033\dwintl.dll
- 2008-04-14 06:51:36 100,352 ----a-w c:\windows\system32\6to4svc.dll
+ 2004-08-18 12:00:00 100,352 ----a-w c:\windows\system32\6to4svc.dll
- 2008-04-14 06:52:10 185,856 -c--a-w c:\windows\system32\accwiz.exe
+ 2004-08-18 12:00:00 185,344 ----a-w c:\windows\system32\accwiz.exe
- 2008-04-14 06:51:38 116,224 ----a-w c:\windows\system32\aclui.dll
+ 2004-08-18 12:00:00 115,200 ----a-w c:\windows\system32\aclui.dll
- 2008-04-14 06:51:38 193,536 ----a-w c:\windows\system32\activeds.dll
+ 2004-08-18 12:00:00 194,048 ----a-w c:\windows\system32\activeds.dll
- 2008-04-14 06:52:10 4,096 -c--a-w c:\windows\system32\actmovie.exe
+ 2004-08-18 12:00:00 4,096 ----a-w c:\windows\system32\actmovie.exe
- 2008-04-14 06:51:38 98,304 ----a-w c:\windows\system32\actxprxy.dll
+ 2004-08-18 12:00:00 101,888 ----a-w c:\windows\system32\actxprxy.dll
- 2007-08-13 17:39:20 71,680 ----a-w c:\windows\system32\admparse.dll
+ 2004-08-18 12:00:00 61,440 ----a-w c:\windows\system32\admparse.dll
- 2008-04-14 06:51:38 175,616 -c--a-w c:\windows\system32\adsldp.dll
+ 2004-08-18 12:00:00 175,616 ----a-w c:\windows\system32\adsldp.dll
- 2008-04-14 06:51:38 143,360 ----a-w c:\windows\system32\adsldpc.dll
+ 2004-08-18 12:00:00 143,360 ----a-w c:\windows\system32\adsldpc.dll
- 2008-04-14 06:51:38 68,096 -c--a-w c:\windows\system32\adsmsext.dll
+ 2004-08-18 12:00:00 68,096 ----a-w c:\windows\system32\adsmsext.dll
- 2008-04-14 06:51:38 263,680 -c--a-w c:\windows\system32\adsnt.dll
+ 2004-08-18 12:00:00 263,680 ----a-w c:\windows\system32\adsnt.dll
- 2008-04-14 06:51:38 684,032 ----a-w c:\windows\system32\advapi32.dll
+ 2004-08-18 12:00:00 683,520 ----a-w c:\windows\system32\advapi32.dll
- 2008-10-16 20:33:48 124,928 ----a-w c:\windows\system32\advpack.dll
+ 2004-08-18 12:00:00 100,352 ----a-w c:\windows\system32\advpack.dll
- 2008-04-14 06:52:10 98,304 -c--a-w c:\windows\system32\ahui.exe
+ 2004-08-18 12:00:00 98,304 ----a-w c:\windows\system32\ahui.exe
- 2008-04-14 06:52:10 44,544 ----a-w c:\windows\system32\alg.exe
+ 2004-08-18 12:00:00 44,544 ----a-w c:\windows\system32\alg.exe
- 2008-04-14 06:51:38 17,408 ----a-w c:\windows\system32\alrsvc.dll
+ 2004-08-18 12:00:00 17,408 ----a-w c:\windows\system32\alrsvc.dll
- 2008-04-14 06:51:38 70,656 -c--a-w c:\windows\system32\amstream.dll
+ 2004-08-18 12:00:00 70,656 ----a-w c:\windows\system32\amstream.dll
- 2008-04-14 06:51:38 125,952 ----a-w c:\windows\system32\apphelp.dll
+ 2004-08-18 12:00:00 126,976 ----a-w c:\windows\system32\apphelp.dll
- 2007-01-05 18:50:32 6,656 -c--a-w c:\windows\system32\asferror.dll
+ 2004-08-18 12:00:00 7,680 ----a-w c:\windows\system32\asferror.dll
- 2008-04-14 06:51:38 65,024 ----a-w c:\windows\system32\asycfilt.dll
+ 2004-08-18 12:00:00 65,024 ----a-w c:\windows\system32\asycfilt.dll
- 2008-04-14 06:52:10 25,088 -c--a-w c:\windows\system32\at.exe
+ 2004-08-18 12:00:00 25,088 ----a-w c:\windows\system32\at.exe
- 2008-04-14 06:51:38 229,376 -c----w c:\windows\system32\ati2cqag.dll
+ 2004-08-17 14:49:04 229,376 ----a-w c:\windows\system32\ati2cqag.dll
- 2008-04-14 06:51:38 377,984 -c----w c:\windows\system32\ati2dvaa.dll
+ 2004-08-17 14:49:04 377,984 ----a-w c:\windows\system32\ati2dvaa.dll
- 2008-04-14 06:51:38 201,728 -c----w c:\windows\system32\ati2dvag.dll
+ 2004-08-17 14:49:04 201,728 ----a-w c:\windows\system32\ati2dvag.dll
- 2008-04-14 06:51:38 870,784 -c----w c:\windows\system32\ati3d1ag.dll
+ 2004-08-17 14:49:04 870,784 ----a-w c:\windows\system32\ati3d1ag.dll
- 2008-04-14 06:51:38 1,888,992 -c----w c:\windows\system32\ati3duag.dll
+ 2004-08-17 14:49:04 1,888,992 ----a-w c:\windows\system32\ati3duag.dll
- 2008-04-14 06:51:38 32,768 -c----w c:\windows\system32\ativtmxx.dll
+ 2004-08-17 14:49:04 32,768 ----a-w c:\windows\system32\ativtmxx.dll
- 2008-04-14 06:51:38 516,768 -c----w c:\windows\system32\ativvaxx.dll
+ 2004-08-17 14:49:04 516,768 ----a-w c:\windows\system32\ativvaxx.dll
- 2008-04-14 06:51:38 58,880 ----a-w c:\windows\system32\atl.dll
+ 2004-08-18 12:00:00 58,880 ----a-w c:\windows\system32\atl.dll
- 2008-04-14 06:52:10 11,264 -c--a-w c:\windows\system32\atmadm.exe
+ 2004-08-18 12:00:00 11,264 ----a-w c:\windows\system32\atmadm.exe
- 2008-04-14 06:37:56 285,696 ----a-w c:\windows\system32\atmfd.dll
+ 2004-08-18 12:00:00 285,696 ----a-w c:\windows\system32\atmfd.dll
- 2008-04-14 06:51:38 30,208 ----a-w c:\windows\system32\atmlib.dll
+ 2004-08-18 12:00:00 30,208 ----a-w c:\windows\system32\atmlib.dll
- 2008-04-14 06:52:10 12,288 -c--a-w c:\windows\system32\attrib.exe
+ 2004-08-18 12:00:00 11,264 ----a-w c:\windows\system32\attrib.exe
- 2008-04-14 06:51:38 42,496 ----a-w c:\windows\system32\audiosrv.dll
+ 2004-08-18 12:00:00 42,496 ----a-w c:\windows\system32\audiosrv.dll
- 2008-04-14 06:52:10 14,336 -c--a-w c:\windows\system32\auditusr.exe
+ 2004-08-18 12:00:00 14,336 ----a-w c:\windows\system32\auditusr.exe
- 2008-04-14 06:51:38 62,464 ----a-w c:\windows\system32\authz.dll
+ 2005-03-02 18:18:13 56,832 ----a-w c:\windows\system32\authz.dll
- 2008-04-14 06:52:12 614,912 -c--a-w c:\windows\system32\autoconv.exe
+ 2004-08-18 12:00:00 614,912 ----a-w c:\windows\system32\autoconv.exe
- 2008-04-14 06:52:12 592,896 -c--a-w c:\windows\system32\autofmt.exe
+ 2004-08-18 12:00:00 592,896 ----a-w c:\windows\system32\autofmt.exe
- 2008-04-14 06:52:12 601,088 -c--a-w c:\windows\system32\autochk.exe
+ 2004-08-18 12:00:00 601,088 ----a-w c:\windows\system32\autochk.exe
- 2008-04-14 06:52:12 11,264 -c--a-w c:\windows\system32\autolfn.exe
+ 2004-08-18 12:00:00 11,264 ----a-w c:\windows\system32\autolfn.exe
- 2008-04-14 06:51:38 84,992 ----a-w c:\windows\system32\avifil32.dll
+ 2004-08-18 12:00:00 84,992 ----a-w c:\windows\system32\avifil32.dll
- 2008-04-14 06:51:38 52,736 ----a-w c:\windows\system32\basesrv.dll
+ 2004-08-18 12:00:00 52,736 ----a-w c:\windows\system32\basesrv.dll
- 2008-04-14 06:51:38 29,184 -c--a-w c:\windows\system32\batmeter.dll
+ 2004-08-18 12:00:00 28,672 ----a-w c:\windows\system32\batmeter.dll
- 2008-04-14 06:51:38 8,704 -c--a-w c:\windows\system32\batt.dll
+ 2004-08-18 12:00:00 8,704 ----a-w c:\windows\system32\batt.dll
- 2008-04-14 06:51:38 17,408 -c--a-w c:\windows\system32\bidispl.dll
+ 2004-08-18 12:00:00 17,408 ----a-w c:\windows\system32\bidispl.dll
- 2008-04-14 06:51:38 8,192 -c--a-w c:\windows\system32\bitsprx2.dll
+ 2004-08-18 12:00:00 8,192 ----a-w c:\windows\system32\bitsprx2.dll
- 2008-04-14 06:51:38 7,168 -c--a-w c:\windows\system32\bitsprx3.dll
+ 2004-08-18 12:00:00 7,168 ----a-w c:\windows\system32\bitsprx3.dll
- 2006-10-18 19:47:10 542,720 -c--a-w c:\windows\system32\blackbox.dll
+ 2004-08-18 12:00:00 286,208 ----a-w c:\windows\system32\blackbox.dll
- 2008-04-14 06:52:14 71,680 -c--a-w c:\windows\system32\blastcln.exe
+ 2004-08-18 12:00:00 71,680 ----a-w c:\windows\system32\blastcln.exe
- 2008-04-14 05:44:44 66,048 ----a-w c:\windows\system32\browselc.dll
+ 2004-08-18 12:00:00 66,048 ----a-w c:\windows\system32\browselc.dll
- 2008-04-14 06:51:38 77,824 ----a-w c:\windows\system32\browser.dll
+ 2004-08-18 12:00:00 77,312 ----a-w c:\windows\system32\browser.dll
- 2008-04-14 06:51:38 1,025,024 -c--a-w c:\windows\system32\browseui.dll

[pitrisek_brno]

pokracovani 5 z COMBA

+ 2005-09-02 23:54:56 1,019,904 ----a-w c:\windows\system32\browseui.dll
- 2008-04-14 06:51:38 78,336 -c--a-w c:\windows\system32\browsewm.dll
+ 2004-08-18 12:00:00 78,336 ----a-w c:\windows\system32\browsewm.dll
- 2008-04-14 06:51:38 20,992 -c--a-w c:\windows\system32\bthci.dll
+ 2004-08-18 12:00:00 20,992 ----a-w c:\windows\system32\bthci.dll
- 2008-04-14 06:51:38 30,208 ----a-w c:\windows\system32\bthserv.dll
+ 2004-08-18 12:00:00 30,208 ----a-w c:\windows\system32\bthserv.dll
- 2008-04-14 06:51:38 50,688 -c--a-w c:\windows\system32\btpanui.dll
+ 2004-08-18 12:00:00 50,688 ----a-w c:\windows\system32\btpanui.dll
- 2008-04-14 06:51:38 60,416 ----a-w c:\windows\system32\cabinet.dll
+ 2004-08-18 12:00:00 59,904 ----a-w c:\windows\system32\cabinet.dll
- 2008-04-14 06:51:38 84,480 -c--a-w c:\windows\system32\cabview.dll
+ 2004-08-18 12:00:00 84,480 ----a-w c:\windows\system32\cabview.dll
- 2008-04-14 06:52:14 20,480 -c--a-w c:\windows\system32\cacls.exe
+ 2004-08-18 12:00:00 18,944 ----a-w c:\windows\system32\cacls.exe
- 2008-04-14 06:51:38 50,688 -c--a-w c:\windows\system32\camocx.dll
+ 2004-08-18 12:00:00 50,688 ----a-w c:\windows\system32\camocx.dll
- 2008-04-14 06:51:38 151,040 -c--a-w c:\windows\system32\capesnpn.dll
+ 2004-08-18 12:00:00 143,872 ----a-w c:\windows\system32\capesnpn.dll
- 2008-04-14 06:51:38 226,304 ----a-r c:\windows\system32\catsrv.dll
+ 2005-07-26 04:42:49 225,792 ----a-r c:\windows\system32\catsrv.dll
- 2008-04-14 06:51:38 85,504 -c--a-w c:\windows\system32\catsrvps.dll
+ 2004-08-18 12:00:00 85,504 ----a-w c:\windows\system32\catsrvps.dll
- 2008-04-14 06:51:38 625,664 ----a-r c:\windows\system32\catsrvut.dll
+ 2005-07-26 04:42:49 625,152 ----a-r c:\windows\system32\catsrvut.dll
- 2008-04-14 06:51:38 151,552 -c--a-w c:\windows\system32\cdfview.dll
+ 2005-09-02 23:54:56 151,552 ----a-w c:\windows\system32\cdfview.dll
- 2008-10-16 13:09:44 92,696 ----a-w c:\windows\system32\cdm.dll
+ 2004-08-18 12:00:00 66,560 ----a-w c:\windows\system32\cdm.dll
- 2008-04-14 06:51:38 2,091,520 -c--a-w c:\windows\system32\cdosys.dll
+ 2005-09-10 01:55:30 2,067,968 ----a-w c:\windows\system32\cdosys.dll
- 2008-04-14 06:51:38 196,096 ----a-w c:\windows\system32\certcli.dll
+ 2004-08-18 12:00:00 196,096 ----a-w c:\windows\system32\certcli.dll
- 2008-04-14 06:51:40 460,800 -c--a-w c:\windows\system32\certmgr.dll
+ 2004-08-18 12:00:00 460,800 ----a-w c:\windows\system32\certmgr.dll
- 2006-10-18 19:47:10 229,376 ----a-w c:\windows\system32\cewmdm.dll
+ 2004-08-18 12:00:00 159,232 ----a-w c:\windows\system32\cewmdm.dll
- 2008-04-14 06:51:40 39,424 -c--a-w c:\windows\system32\cfgbkend.dll
+ 2004-08-18 12:00:00 39,424 ----a-w c:\windows\system32\cfgbkend.dll
- 2008-04-14 06:38:20 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
+ 2004-08-18 12:00:00 16,896 ----a-w c:\windows\system32\cfgmgr32.dll
- 2008-04-14 06:51:40 148,480 -c--a-w c:\windows\system32\cic.dll
+ 2004-08-18 12:00:00 109,568 ----a-w c:\windows\system32\cic.dll
- 2008-04-14 06:51:40 69,120 ----a-w c:\windows\system32\ciodm.dll
+ 2004-08-18 12:00:00 69,120 ----a-w c:\windows\system32\ciodm.dll
- 2008-04-14 06:52:14 5,632 ----a-w c:\windows\system32\cisvc.exe
+ 2004-08-18 12:00:00 5,632 ----a-w c:\windows\system32\cisvc.exe
- 2008-04-14 06:51:40 110,592 -c--a-r c:\windows\system32\clbcatex.dll
+ 2005-07-26 04:42:49 110,080 ----a-r c:\windows\system32\clbcatex.dll
- 2008-04-14 06:51:40 498,688 ----a-r c:\windows\system32\clbcatq.dll
+ 2005-07-26 04:42:50 498,688 ----a-r c:\windows\system32\clbcatq.dll
- 2008-04-14 06:52:16 64,512 -c--a-w c:\windows\system32\cleanmgr.exe
+ 2004-08-18 12:00:00 64,512 ----a-w c:\windows\system32\cleanmgr.exe
- 2008-04-14 06:51:40 77,824 -c--a-w c:\windows\system32\cliconfg.dll
+ 2004-08-18 12:00:00 77,824 ----a-w c:\windows\system32\cliconfg.dll
- 2008-04-14 06:52:16 20,480 -c--a-w c:\windows\system32\cliconfg.exe
+ 2004-08-18 12:00:00 20,480 ----a-w c:\windows\system32\cliconfg.exe
- 2008-04-14 06:52:16 103,424 -c--a-w c:\windows\system32\clipbrd.exe
+ 2004-08-18 12:00:00 103,424 ----a-w c:\windows\system32\clipbrd.exe
- 2008-04-14 06:52:16 33,280 -c--a-w c:\windows\system32\clipsrv.exe
+ 2004-08-18 12:00:00 33,280 ----a-w c:\windows\system32\clipsrv.exe
- 2008-04-14 06:51:40 58,368 ----a-w c:\windows\system32\clusapi.dll
+ 2004-08-18 12:00:00 57,856 ----a-w c:\windows\system32\clusapi.dll
- 2008-04-14 06:51:40 15,872 -c--a-w c:\windows\system32\cmcfg32.dll
+ 2004-08-18 12:00:00 15,872 ----a-w c:\windows\system32\cmcfg32.dll
- 2008-04-14 06:52:16 390,144 -c--a-w c:\windows\system32\cmd.exe
+ 2004-08-18 12:00:00 389,632 ----a-w c:\windows\system32\cmd.exe
- 2008-04-14 06:51:40 346,624 -c--a-w c:\windows\system32\cmdial32.dll
+ 2004-08-18 12:00:00 345,600 ----a-w c:\windows\system32\cmdial32.dll
- 2008-04-14 06:52:16 25,600 -c--a-w c:\windows\system32\cmdl32.exe
+ 2004-08-18 12:00:00 47,104 ----a-w c:\windows\system32\cmdl32.exe
- 2008-04-14 06:52:16 39,424 -c--a-w c:\windows\system32\cmmon32.exe
+ 2004-08-18 12:00:00 39,424 ----a-w c:\windows\system32\cmmon32.exe
- 2008-04-14 06:51:40 185,856 -c--a-w c:\windows\system32\cmprops.dll
+ 2004-08-18 12:00:00 185,856 ----a-w c:\windows\system32\cmprops.dll
- 2008-04-14 06:51:40 13,312 -c--a-w c:\windows\system32\cmsetacl.dll
+ 2004-08-18 12:00:00 13,824 ----a-w c:\windows\system32\cmsetACL.dll
- 2008-04-14 06:52:16 63,488 -c--a-w c:\windows\system32\cmstp.exe
+ 2004-08-18 12:00:00 63,488 ----a-w c:\windows\system32\cmstp.exe
- 2008-04-14 06:51:40 40,960 -c--a-w c:\windows\system32\cmutil.dll
+ 2004-08-18 12:00:00 40,960 ----a-w c:\windows\system32\cmutil.dll
- 2008-04-14 06:51:40 49,152 ----a-w c:\windows\system32\cnbjmon.dll
+ 2004-08-18 12:00:00 49,152 ----a-w c:\windows\system32\cnbjmon.dll
- 2008-04-14 06:51:40 60,416 ----a-r c:\windows\system32\colbact.dll
+ 2005-07-26 04:42:50 60,416 ----a-r c:\windows\system32\colbact.dll
- 2008-04-14 06:51:40 195,072 -c--a-r c:\windows\system32\Com\comadmin.dll
+ 2005-07-26 04:42:50 195,072 ----a-r c:\windows\system32\Com\comadmin.dll
- 2008-04-14 06:52:16 9,728 -c--a-w c:\windows\system32\Com\comrepl.exe
+ 2004-08-18 12:00:00 9,728 ----a-w c:\windows\system32\Com\comrepl.exe
- 2008-04-14 06:52:18 6,144 -c--a-w c:\windows\system32\Com\comrereg.exe
+ 2004-08-18 12:00:00 5,120 ----a-w c:\windows\system32\Com\comrereg.exe
- 2008-04-14 06:51:40 28,160 -c--a-w c:\windows\system32\comaddin.dll
+ 2004-08-18 12:00:00 25,600 ----a-w c:\windows\system32\comaddin.dll
- 2008-04-14 06:51:40 617,472 -c--a-w c:\windows\system32\comctl32.dll
+ 2004-08-18 12:00:00 611,328 ----a-w c:\windows\system32\comctl32.dll
- 2008-04-14 06:51:40 279,040 -c--a-w c:\windows\system32\comdlg32.dll
+ 2004-08-18 12:00:00 278,528 ----a-w c:\windows\system32\comdlg32.dll
- 2008-04-14 06:51:40 229,376 -c--a-w c:\windows\system32\compstui.dll
+ 2004-08-18 12:00:00 229,376 ----a-w c:\windows\system32\compstui.dll
- 2008-04-14 06:51:40 97,792 -c--a-r c:\windows\system32\comrepl.dll
+ 2005-07-26 04:42:50 97,792 ----a-r c:\windows\system32\comrepl.dll
- 2008-04-14 06:51:40 806,912 -c--a-w c:\windows\system32\comres.dll
+ 2004-08-18 12:00:00 806,912 ----a-w c:\windows\system32\comres.dll
- 2008-04-14 06:51:40 167,424 -c--a-w c:\windows\system32\comsnap.dll
+ 2004-08-18 12:00:00 147,456 ----a-w c:\windows\system32\comsnap.dll
- 2008-04-14 06:51:40 1,267,200 ----a-r c:\windows\system32\comsvcs.dll
+ 2005-07-26 04:42:50 1,267,200 ----a-r c:\windows\system32\comsvcs.dll
- 2008-04-14 06:38:58 539,648 -c--a-r c:\windows\system32\comuid.dll
+ 2005-07-26 04:42:50 540,160 ----a-r c:\windows\system32\comuid.dll
- 2009-01-02 08:26:57 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
+ 2009-01-19 18:34:04 16,384 -c--a-w c:\windows\system32\config\systemprofile\Cookies\index.dat
- 2009-01-02 08:26:57 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2009-01-19 18:34:04 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
+ 2009-01-19 18:34:02 32,768 ----a-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012009011920090120\index.dat
- 2009-01-02 08:26:57 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2009-01-19 18:34:04 32,768 -c--a-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2008-04-14 06:51:40 358,400 -c--a-w c:\windows\system32\confmsp.dll
+ 2004-08-18 12:00:00 346,112 ----a-w c:\windows\system32\confmsp.dll
- 2008-04-14 06:52:18 27,648 -c--a-w c:\windows\system32\conime.exe
+ 2004-08-18 12:00:00 27,648 ----a-w c:\windows\system32\conime.exe
- 2008-04-14 06:51:40 35,328 ----a-w c:\windows\system32\corpol.dll
+ 2004-08-18 12:00:00 35,328 ----a-w c:\windows\system32\corpol.dll
- 2008-04-14 06:51:40 163,840 -c--a-w c:\windows\system32\credui.dll
+ 2004-08-18 12:00:00 163,840 ----a-w c:\windows\system32\credui.dll
- 2008-04-14 06:51:40 602,112 ----a-w c:\windows\system32\crypt32.dll
+ 2004-08-18 12:00:00 600,576 ----a-w c:\windows\system32\crypt32.dll
- 2008-04-14 06:51:40 74,752 -c--a-w c:\windows\system32\cryptdlg.dll
+ 2004-08-18 12:00:00 75,264 ----a-w c:\windows\system32\cryptdlg.dll
- 2008-04-14 06:51:40 33,280 ----a-w c:\windows\system32\cryptdll.dll
+ 2004-08-18 12:00:00 33,280 ----a-w c:\windows\system32\cryptdll.dll
- 2008-04-14 06:51:40 54,272 ----a-w c:\windows\system32\cryptext.dll
+ 2004-08-18 12:00:00 54,272 ----a-w c:\windows\system32\cryptext.dll
- 2008-04-14 06:51:40 64,512 ----a-w c:\windows\system32\cryptnet.dll
+ 2004-08-18 12:00:00 63,488 ----a-w c:\windows\system32\cryptnet.dll
- 2008-04-14 06:51:40 62,464 ----a-w c:\windows\system32\cryptsvc.dll
+ 2004-08-18 12:00:00 60,416 ----a-w c:\windows\system32\cryptsvc.dll
- 2008-04-14 06:51:40 515,584 -c--a-w c:\windows\system32\cryptui.dll
+ 2004-08-18 12:00:00 515,584 ----a-w c:\windows\system32\cryptui.dll
- 2008-04-14 06:51:40 102,400 -c--a-w c:\windows\system32\cscdll.dll
+ 2004-08-18 12:00:00 102,400 ----a-w c:\windows\system32\cscdll.dll
- 2008-05-07 09:07:23 135,168 ----a-w c:\windows\system32\cscript.exe
+ 2004-08-18 12:00:00 98,304 ----a-w c:\windows\system32\cscript.exe
- 2008-04-14 06:51:40 328,704 -c--a-w c:\windows\system32\cscui.dll
+ 2004-08-18 12:00:00 328,704 ----a-w c:\windows\system32\cscui.dll
- 2008-04-14 06:51:40 32,256 ----a-w c:\windows\system32\csrsrv.dll
+ 2004-08-18 12:00:00 32,768 ----a-w c:\windows\system32\csrsrv.dll
- 2008-04-14 06:52:18 6,144 ----a-w c:\windows\system32\csrss.exe
+ 2004-08-18 12:00:00 6,144 ----a-w c:\windows\system32\csrss.exe
- 2008-04-14 06:52:18 15,360 -c--a-w c:\windows\system32\ctfmon.exe
+ 2004-08-18 12:00:00 15,360 ----a-w c:\windows\system32\ctfmon.exe
- 2008-04-14 06:51:40 1,179,648 ----a-w c:\windows\system32\d3d8.dll
+ 2004-08-18 12:00:00 1,179,648 ----a-w c:\windows\system32\d3d8.dll
- 2008-04-14 06:51:40 8,192 ----a-w c:\windows\system32\d3d8thk.dll
+ 2004-08-18 12:00:00 8,192 ----a-w c:\windows\system32\d3d8thk.dll
- 2008-04-14 06:51:40 1,689,088 ----a-w c:\windows\system32\d3d9.dll
+ 2004-08-18 12:00:00 1,689,088 ----a-w c:\windows\system32\d3d9.dll
- 2008-04-14 06:51:40 824,320 ----a-w c:\windows\system32\d3dim700.dll
+ 2004-08-18 12:00:00 825,344 ----a-w c:\windows\system32\d3dim700.dll
- 2008-04-14 06:51:40 1,055,232 -c--a-w c:\windows\system32\danim.dll
+ 2005-09-02 23:54:57 1,054,720 ----a-w c:\windows\system32\danim.dll
- 2008-04-14 06:51:40 54,272 -c--a-w c:\windows\system32\dataclen.dll
+ 2004-08-18 12:00:00 54,272 ----a-w c:\windows\system32\dataclen.dll
- 2008-04-14 06:51:40 165,376 -c--a-w c:\windows\system32\datime.dll
+ 2004-08-18 12:00:00 152,064 ----a-w c:\windows\system32\datime.dll
- 2008-04-14 06:51:40 25,600 ----a-w c:\windows\system32\davclnt.dll
+ 2004-08-18 12:00:00 25,088 ----a-w c:\windows\system32\davclnt.dll
- 2008-04-14 06:51:40 640,000 ----a-w c:\windows\system32\dbghelp.dll
+ 2004-08-18 12:00:00 640,000 ----a-w c:\windows\system32\dbghelp.dll
- 2008-04-14 06:51:40 24,576 -c--a-w c:\windows\system32\dbmsrpcn.dll
+ 2004-08-18 12:00:00 24,576 ----a-w c:\windows\system32\dbmsrpcn.dll
- 2008-04-14 06:51:40 110,592 -c--a-w c:\windows\system32\dbnetlib.dll
+ 2004-08-18 12:00:00 110,592 ----a-w c:\windows\system32\dbnetlib.dll
- 2008-04-14 06:51:40 28,672 -c--a-w c:\windows\system32\dbnmpntw.dll
+ 2004-08-18 12:00:00 28,672 ----a-w c:\windows\system32\dbnmpntw.dll
- 2008-04-14 07:16:08 1,804 -c--a-w c:\windows\system32\dcache.bin
+ 2004-08-18 12:00:00 1,788 ----a-w c:\windows\system32\Dcache.bin
- 2008-04-14 06:51:40 8,704 ----a-w c:\windows\system32\dciman32.dll
+ 2004-08-18 12:00:00 8,704 ----a-w c:\windows\system32\dciman32.dll
- 2008-04-14 06:52:18 6,144 -c--a-w c:\windows\system32\dcomcnfg.exe
+ 2004-08-18 12:00:00 5,120 ----a-w c:\windows\system32\dcomcnfg.exe
- 2008-04-14 06:52:18 31,744 -c--a-w c:\windows\system32\ddeshare.exe
+ 2004-08-18 12:00:00 31,744 ----a-w c:\windows\system32\ddeshare.exe
- 2008-04-14 06:51:40 279,552 ----a-w c:\windows\system32\ddraw.dll
+ 2004-08-18 12:00:00 266,240 ----a-w c:\windows\system32\ddraw.dll
- 2008-04-14 06:51:40 27,136 ----a-w c:\windows\system32\ddrawex.dll
+ 2004-08-18 12:00:00 27,136 ----a-w c:\windows\system32\ddrawex.dll
- 2008-04-14 06:52:18 25,088 -c--a-w c:\windows\system32\defrag.exe
+ 2004-08-18 12:00:00 25,088 ----a-w c:\windows\system32\defrag.exe
- 2008-04-14 06:51:40 59,904 ----a-w c:\windows\system32\devenum.dll
+ 2004-08-18 12:00:00 59,904 ----a-w c:\windows\system32\devenum.dll
- 2008-04-14 06:51:40 283,648 -c--a-w c:\windows\system32\devmgr.dll
+ 2004-08-18 12:00:00 283,648 ----a-w c:\windows\system32\devmgr.dll
- 2008-04-14 06:52:18 82,944 -c--a-w c:\windows\system32\dfrgfat.exe
+ 2004-08-18 12:00:00 82,432 ----a-w c:\windows\system32\dfrgfat.exe
- 2008-04-14 06:52:20 105,472 -c--a-w c:\windows\system32\dfrgntfs.exe
+ 2004-08-18 12:00:00 104,960 ----a-w c:\windows\system32\dfrgntfs.exe
- 2008-04-14 06:51:40 39,424 -c--a-w c:\windows\system32\dfrgsnap.dll
+ 2004-08-18 12:00:00 38,912 ----a-w c:\windows\system32\dfrgsnap.dll
- 2008-04-14 06:51:40 124,416 -c--a-w c:\windows\system32\dfrgui.dll
+ 2004-08-18 12:00:00 123,904 ----a-w c:\windows\system32\dfrgui.dll
- 2008-04-14 06:51:40 28,672 ----a-w c:\windows\system32\dfsshlex.dll
+ 2004-08-18 12:00:00 28,672 ----a-w c:\windows\system32\dfsshlex.dll
- 2008-04-14 06:51:40 113,664 -c--a-w c:\windows\system32\dgnet.dll
+ 2004-08-18 12:00:00 113,664 ----a-w c:\windows\system32\dgnet.dll
- 2008-04-14 06:51:40 125,952 ----a-w c:\windows\system32\dhcpcsvc.dll
+ 2004-08-18 12:00:00 110,080 ----a-w c:\windows\system32\dhcpcsvc.dll
- 2008-04-14 06:51:40 390,656 -c--a-w c:\windows\system32\dhcpmon.dll
+ 2004-08-18 12:00:00 380,928 ----a-w c:\windows\system32\dhcpmon.dll
- 2008-04-14 06:52:20 87,040 -c--a-w c:\windows\system32\diantz.exe
+ 2004-08-18 12:00:00 85,504 ----a-w c:\windows\system32\diantz.exe
- 2008-04-14 06:51:40 68,608 -c--a-w c:\windows\system32\digest.dll
+ 2004-08-18 12:00:00 68,608 ----a-w c:\windows\system32\digest.dll
- 2008-04-14 06:51:40 163,840 ----a-w c:\windows\system32\dinput.dll
+ 2004-08-18 12:00:00 163,840 ----a-w c:\windows\system32\dinput.dll
- 2008-04-14 06:51:40 186,880 -c--a-w c:\windows\system32\dinput8.dll
+ 2004-08-18 12:00:00 186,880 ----a-w c:\windows\system32\dinput8.dll
- 2008-04-14 06:51:40 1,504,768 -c--a-w c:\windows\system32\diskcopy.dll
+ 2004-08-18 12:00:00 1,502,208 ----a-w c:\windows\system32\diskcopy.dll
- 2008-04-14 06:52:20 163,840 -c--a-w c:\windows\system32\diskpart.exe
+ 2004-08-18 12:00:00 163,840 ----a-w c:\windows\system32\diskpart.exe
- 2008-04-14 06:51:40 32,768 -c--a-w c:\windows\system32\dispex.dll
+ 2004-08-18 12:00:00 45,083 ----a-w c:\windows\system32\dispex.dll
+ 2004-08-18 12:00:00 100,352 -c--a-w c:\windows\system32\dllcache\6to4svc.dll
+ 2004-08-18 12:00:00 25,600 -c--a-w c:\windows\system32\dllcache\aaaamon.dll
+ 2004-08-18 12:00:00 64,512 -c--a-w c:\windows\system32\dllcache\acctres.dll
+ 2004-08-18 12:00:00 185,344 -c--a-w c:\windows\system32\dllcache\accwiz.exe
+ 2004-08-18 12:00:00 1,852,416 -c--a-w c:\windows\system32\dllcache\acgenral.dll
- 2008-04-14 06:51:38 451,072 -c--a-w c:\windows\system32\dllcache\aclayers.dll
+ 2004-08-18 12:00:00 450,048 -c--a-w c:\windows\system32\dllcache\aclayers.dll
- 2008-04-14 06:51:38 141,312 -c--a-w c:\windows\system32\dllcache\aclua.dll
+ 2004-08-18 12:00:00 137,728 -c--a-w c:\windows\system32\dllcache\aclua.dll
+ 2004-08-18 12:00:00 115,200 -c--a-w c:\windows\system32\dllcache\aclui.dll
- 2008-04-14 06:51:38 245,248 -c--a-w c:\windows\system32\dllcache\acspecfc.dll
+ 2004-08-18 12:00:00 244,736 -c--a-w c:\windows\system32\dllcache\acspecfc.dll
+ 2004-08-18 12:00:00 194,048 -c--a-w c:\windows\system32\dllcache\activeds.dll
- 2008-04-14 06:52:10 4,096 -c--a-w c:\windows\system32\dllcache\actmovie.exe
+ 2004-08-18 12:00:00 4,096 -c--a-w c:\windows\system32\dllcache\actmovie.exe
+ 2004-08-18 12:00:00 101,888 -c--a-w c:\windows\system32\dllcache\actxprxy.dll
- 2008-04-14 06:51:38 116,224 -c--a-w c:\windows\system32\dllcache\acxtrnal.dll
+ 2004-08-18 12:00:00 116,224 -c--a-w c:\windows\system32\dllcache\acxtrnal.dll
- 2008-04-14 06:51:38 20,540 -c--a-w c:\windows\system32\dllcache\admin.dll
+ 2003-03-24 14:52:04 20,540 -c--a-w c:\windows\system32\dllcache\admin.dll
- 2008-04-14 06:52:10 16,439 -c--a-w c:\windows\system32\dllcache\admin.exe
+ 2003-03-24 14:52:04 16,439 -c--a-w c:\windows\system32\dllcache\admin.exe
- 2007-08-13 17:39:20 71,680 -c----w c:\windows\system32\dllcache\admparse.dll
+ 2004-08-18 12:00:00 61,440 -c--a-w c:\windows\system32\dllcache\admparse.dll
- 2008-04-14 06:51:38 175,616 -c--a-w c:\windows\system32\dllcache\adsldp.dll
+ 2004-08-18 12:00:00 175,616 -c--a-w c:\windows\system32\dllcache\adsldp.dll
+ 2004-08-18 12:00:00 143,360 -c--a-w c:\windows\system32\dllcache\adsldpc.dll
- 2008-04-14 06:51:38 68,096 -c--a-w c:\windows\system32\dllcache\adsmsext.dll
+ 2004-08-18 12:00:00 68,096 -c--a-w c:\windows\system32\dllcache\adsmsext.dll
- 2008-04-14 06:51:38 263,680 -c--a-w c:\windows\system32\dllcache\adsnt.dll
+ 2004-08-18 12:00:00 263,680 -c--a-w c:\windows\system32\dllcache\adsnt.dll
+ 2004-08-18 12:00:00 683,520 -c--a-w c:\windows\system32\dllcache\advapi32.dll
- 2008-10-16 20:33:48 124,928 -c----w c:\windows\system32\dllcache\advpack.dll
+ 2004-08-18 12:00:00 100,352 -c--a-w c:\windows\system32\dllcache\advpack.dll
- 2008-08-14 10:04:36 138,496 -c----w c:\windows\system32\dllcache\afd.sys
+ 2004-08-18 12:00:00 138,496 -c--a-w c:\windows\system32\dllcache\afd.sys
- 2008-04-14 06:51:38 24,064 -c--a-w c:\windows\system32\dllcache\agentanm.dll
+ 2004-08-18 12:00:00 24,064 -c--a-w c:\windows\system32\dllcache\agentanm.dll
- 2008-04-14 06:51:38 214,016 -c--a-w c:\windows\system32\dllcache\agentctl.dll
+ 2004-08-18 12:00:00 214,016 -c--a-w c:\windows\system32\dllcache\agentctl.dll
+ 2004-08-18 12:00:00 41,984 -c--a-w c:\windows\system32\dllcache\agentdp2.dll
+ 2005-04-22 05:08:58 57,344 -c--a-w c:\windows\system32\dllcache\agentdpv.dll
- 2008-04-14 06:51:38 49,152 -c--a-w c:\windows\system32\dllcache\agentmpx.dll
+ 2004-08-18 12:00:00 49,152 -c--a-w c:\windows\system32\dllcache\agentmpx.dll
+ 2004-08-18 12:00:00 24,064 -c--a-w c:\windows\system32\dllcache\agentpsh.dll
- 2008-04-14 06:51:38 44,032 -c--a-w c:\windows\system32\dllcache\agentsr.dll
+ 2004-08-18 12:00:00 44,032 -c--a-w c:\windows\system32\dllcache\agentsr.dll
+ 2004-08-18 12:00:00 256,512 -c--a-w c:\windows\system32\dllcache\agentsvr.exe
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0401.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0404.dll
- 2007-04-02 21:56:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0405.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0405.dll
- 2007-04-02 21:56:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0406.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0406.dll
- 2007-04-02 21:56:02 21,504 -c--a-w c:\windows\system32\dllcache\agt0407.dll
+ 2004-08-18 12:00:00 21,504 -c--a-w c:\windows\system32\dllcache\agt0407.dll
- 2007-04-02 21:56:02 22,016 -c--a-w c:\windows\system32\dllcache\agt0408.dll
+ 2004-08-18 12:00:00 22,016 -c--a-w c:\windows\system32\dllcache\agt0408.dll
- 2008-04-13 21:02:30 19,968 -c--a-w c:\windows\system32\dllcache\agt0409.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0409.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt040b.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt040b.dll
- 2007-04-02 21:56:02 21,504 -c--a-w c:\windows\system32\dllcache\agt040c.dll
+ 2004-08-18 12:00:00 21,504 -c--a-w c:\windows\system32\dllcache\agt040c.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt040d.dll
- 2007-04-02 21:56:02 19,968 -c--a-w c:\windows\system32\dllcache\agt040e.dll
+ 2004-08-18 12:00:00 19,968 -c--a-w c:\windows\system32\dllcache\agt040e.dll
- 2007-04-02 21:56:02 20,992 -c--a-w c:\windows\system32\dllcache\agt0410.dll
+ 2004-08-18 12:00:00 20,992 -c--a-w c:\windows\system32\dllcache\agt0410.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0411.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0412.dll
- 2007-04-02 21:56:02 20,992 -c--a-w c:\windows\system32\dllcache\agt0413.dll
+ 2004-08-18 12:00:00 20,992 -c--a-w c:\windows\system32\dllcache\agt0413.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt0414.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0414.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt0415.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0415.dll
- 2007-04-02 21:56:02 20,480 -c--a-w c:\windows\system32\dllcache\agt0416.dll
+ 2004-08-18 12:00:00 20,480 -c--a-w c:\windows\system32\dllcache\agt0416.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt0419.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0419.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt041d.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt041d.dll
- 2007-04-02 21:56:02 19,456 -c--a-w c:\windows\system32\dllcache\agt041f.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt041f.dll
+ 2004-08-18 12:00:00 19,456 -c--a-w c:\windows\system32\dllcache\agt0804.dll
- 2007-04-02 21:56:04 20,992 -c--a-w c:\windows\system32\dllcache\agt0816.dll
+ 2004-08-18 12:00:00 20,992 -c--a-w c:\windows\system32\dllcache\agt0816.dll
- 2007-04-02 21:56:04 20,480 -c--a-w c:\windows\system32\dllcache\agt0c0a.dll
+ 2004-08-18 12:00:00 20,480 -c--a-w c:\windows\system32\dllcache\agt0c0a.dll
- 2008-04-14 06:51:38 24,064 -c--a-w c:\windows\system32\dllcache\agtintl.dll
+ 2004-08-18 12:00:00 24,064 -c--a-w c:\windows\system32\dllcache\agtintl.dll
+ 2004-08-18 12:00:00 98,304 -c--a-w c:\windows\system32\dllcache\ahui.exe
+ 2004-08-18 12:00:00 44,544 -c--a-w c:\windows\system32\dllcache\alg.exe

[pitrisek_brno]

pokracovani 6 z COMBA
+ 2004-08-18 12:00:00 17,408 -c--a-w c:\windows\system32\dllcache\alrsvc.dll
- 2008-04-14 06:51:38 70,656 -c--a-w c:\windows\system32\dllcache\amstream.dll
+ 2004-08-18 12:00:00 70,656 -c--a-w c:\windows\system32\dllcache\amstream.dll
+ 2004-08-18 12:00:00 126,976 -c--a-w c:\windows\system32\dllcache\apphelp.dll
- 2007-01-05 18:50:32 6,656 -c--a-w c:\windows\system32\dllcache\asferror.dll
+ 2004-08-18 12:00:00 7,680 -c--a-w c:\windows\system32\dllcache\asferror.dll
- 2008-04-14 06:51:38 65,024 -c--a-w c:\windows\system32\dllcache\asycfilt.dll
+ 2004-08-18 12:00:00 65,024 -c--a-w c:\windows\system32\dllcache\asycfilt.dll
+ 2004-08-18 12:00:00 14,336 -c--a-w c:\windows\system32\dllcache\asyncmac.sys
- 2008-04-14 06:52:10 25,088 -c--a-w c:\windows\system32\dllcache\at.exe
+ 2004-08-18 12:00:00 25,088 -c--a-w c:\windows\system32\dllcache\at.exe
+ 2004-08-18 12:00:00 58,880 -c--a-w c:\windows\system32\dllcache\atl.dll
- 2008-04-14 06:52:10 11,264 -c--a-w c:\windows\system32\dllcache\atmadm.exe
+ 2004-08-18 12:00:00 11,264 -c--a-w c:\windows\system32\dllcache\atmadm.exe
+ 2004-08-18 12:00:00 59,904 -c--a-w c:\windows\system32\dllcache\atmarpc.sys
+ 2004-08-18 12:00:00 285,696 -c--a-w c:\windows\system32\dllcache\atmfd.dll
- 2008-04-13 22:21:32 55,808 -c--a-w c:\windows\system32\dllcache\atmlane.sys
+ 2004-08-18 12:00:00 55,936 -c--a-w c:\windows\system32\dllcache\atmlane.sys
+ 2004-08-18 12:00:00 30,208 -c--a-w c:\windows\system32\dllcache\atmlib.dll
- 2008-04-14 06:52:10 12,288 -c--a-w c:\windows\system32\dllcache\attrib.exe
+ 2004-08-18 12:00:00 11,264 -c--a-w c:\windows\system32\dllcache\attrib.exe
+ 2004-08-18 12:00:00 42,496 -c--a-w c:\windows\system32\dllcache\audiosrv.dll
- 2008-04-14 06:52:10 14,336 -c--a-w c:\windows\system32\dllcache\auditusr.exe
+ 2004-08-18 12:00:00 14,336 -c--a-w c:\windows\system32\dllcache\auditusr.exe
- 2008-04-14 06:51:38 20,540 -c--a-w c:\windows\system32\dllcache\author.dll
+ 2003-03-24 14:52:04 20,540 -c--a-w c:\windows\system32\dllcache\author.dll
- 2008-04-14 06:52:12 16,439 -c--a-w c:\windows\system32\dllcache\author.exe
+ 2003-03-24 14:52:04 16,439 -c--a-w c:\windows\system32\dllcache\author.exe
+ 2004-08-18 12:00:00 56,832 -c--a-w c:\windows\system32\dllcache\authz.dll
- 2008-04-14 06:52:12 614,912 -c--a-w c:\windows\system32\dllcache\autoconv.exe
+ 2004-08-18 12:00:00 614,912 -c--a-w c:\windows\system32\dllcache\autoconv.exe
- 2008-04-14 06:52:12 592,896 -c--a-w c:\windows\system32\dllcache\autofmt.exe
+ 2004-08-18 12:00:00 592,896 -c--a-w c:\windows\system32\dllcache\autofmt.exe
- 2008-04-14 06:52:12 601,088 -c--a-w c:\windows\system32\dllcache\autochk.exe
+ 2004-08-18 12:00:00 601,088 -c--a-w c:\windows\system32\dllcache\autochk.exe
- 2008-04-14 06:52:12 11,264 -c--a-w c:\windows\system32\dllcache\autolfn.exe
+ 2004-08-18 12:00:00 11,264 -c--a-w c:\windows\system32\dllcache\autolfn.exe
+ 2004-08-18 12:00:00 65,536 -c--a-w c:\windows\system32\dllcache\avicap32.dll
+ 2004-08-18 12:00:00 84,992 -c--a-w c:\windows\system32\dllcache\avifil32.dll
+ 2004-08-18 12:00:00 52,736 -c--a-w c:\windows\system32\dllcache\basesrv.dll
+ 2004-08-18 12:00:00 28,672 -c--a-w c:\windows\system32\dllcache\batmeter.dll
+ 2004-08-18 12:00:00 8,704 -c--a-w c:\windows\system32\dllcache\batt.dll
+ 2004-08-18 12:00:00 1,817,687 -c--a-w c:\windows\system32\dllcache\bckgres.dll
+ 2004-08-18 12:00:00 4,224 -c--a-w c:\windows\system32\dllcache\beep.sys
- 2008-04-14 06:51:38 17,408 -c--a-w c:\windows\system32\dllcache\bidispl.dll
+ 2004-08-18 12:00:00 17,408 -c--a-w c:\windows\system32\dllcache\bidispl.dll
- 2008-04-14 06:51:38 8,192 -c--a-w c:\windows\system32\dllcache\bitsprx2.dll
+ 2004-08-18 12:00:00 8,192 -c--a-w c:\windows\system32\dllcache\bitsprx2.dll
- 2008-04-14 06:51:38 7,168 -c--a-w c:\windows\system32\dllcache\bitsprx3.dll
+ 2004-08-18 12:00:00 7,168 -c--a-w c:\windows\system32\dllcache\bitsprx3.dll
- 2006-10-18 19:47:10 542,720 -c--a-w c:\windows\system32\dllcache\blackbox.dll
+ 2004-08-18 12:00:00 286,208 -c--a-w c:\windows\system32\dllcache\blackbox.dll
- 2008-04-14 06:52:14 71,680 -c--a-w c:\windows\system32\dllcache\blastcln.exe
+ 2004-08-18 12:00:00 71,680 -c--a-w c:\windows\system32\dllcache\blastcln.exe
+ 2004-08-18 12:00:00 361,472 -c--a-w c:\windows\system32\dllcache\blue_ss.dll
- 2008-04-13 22:23:24 71,552 -c--a-w c:\windows\system32\dllcache\bridge.sys
+ 2004-08-18 12:00:00 71,552 -c--a-w c:\windows\system32\dllcache\bridge.sys
+ 2004-08-18 12:00:00 66,048 -c--a-w c:\windows\system32\dllcache\browselc.dll
+ 2004-08-18 12:00:00 77,312 -c--a-w c:\windows\system32\dllcache\browser.dll
- 2006-09-23 12:12:34 1,022,976 -c----w c:\windows\system32\dllcache\browseui.dll
+ 2005-09-02 23:54:56 1,019,904 -c--a-w c:\windows\system32\dllcache\browseui.dll
- 2008-04-14 06:51:38 78,336 -c--a-w c:\windows\system32\dllcache\browsewm.dll
+ 2004-08-18 12:00:00 78,336 -c--a-w c:\windows\system32\dllcache\browsewm.dll
- 2008-04-14 06:51:38 50,688 -c--a-w c:\windows\system32\dllcache\btpanui.dll
+ 2004-08-18 12:00:00 50,688 -c--a-w c:\windows\system32\dllcache\btpanui.dll
+ 2004-08-18 12:00:00 218,112 -c--a-w c:\windows\system32\dllcache\c_g18030.dll
+ 2004-08-18 12:00:00 6,656 -c--a-w c:\windows\system32\dllcache\c_is2022.dll
+ 2004-08-18 12:00:00 10,752 -c--a-w c:\windows\system32\dllcache\c_iscii.dll
+ 2004-08-18 12:00:00 59,904 -c--a-w c:\windows\system32\dllcache\cabinet.dll
+ 2004-08-18 12:00:00 84,480 -c--a-w c:\windows\system32\dllcache\cabview.dll
- 2008-04-14 06:52:14 20,480 -c--a-w c:\windows\system32\dllcache\cacls.exe
+ 2004-08-18 12:00:00 18,944 -c--a-w c:\windows\system32\dllcache\cacls.exe
+ 2004-08-18 12:00:00 114,688 -c--a-w c:\windows\system32\dllcache\calc.exe
- 2008-04-14 06:51:38 385,024 -c--a-w c:\windows\system32\dllcache\callcont.dll
+ 2004-08-18 12:00:00 385,024 -c--a-w c:\windows\system32\dllcache\callcont.dll
- 2008-04-14 06:51:38 50,688 -c--a-w c:\windows\system32\dllcache\camocx.dll
+ 2004-08-18 12:00:00 50,688 -c--a-w c:\windows\system32\dllcache\camocx.dll
+ 2004-08-18 12:00:00 54,528 -c--a-w c:\windows\system32\dllcache\cap7146.sys
+ 2004-08-18 12:00:00 143,872 -c--a-w c:\windows\system32\dllcache\capesnpn.dll
+ 2004-08-18 12:00:00 359,936 -c--a-w c:\windows\system32\dllcache\cards.dll
+ 2005-07-26 04:42:49 225,792 -c--a-w c:\windows\system32\dllcache\catsrv.dll
- 2008-04-14 06:51:38 85,504 -c--a-w c:\windows\system32\dllcache\catsrvps.dll
+ 2004-08-18 12:00:00 85,504 -c--a-w c:\windows\system32\dllcache\catsrvps.dll
+ 2005-07-26 04:42:49 625,152 -c--a-w c:\windows\system32\dllcache\catsrvut.dll
+ 2004-08-18 12:00:00 63,744 -c--a-w c:\windows\system32\dllcache\cdfs.sys
+ 2005-09-02 23:54:56 151,552 -c--a-w c:\windows\system32\dllcache\cdfview.dll
- 2008-10-16 13:09:44 92,696 -c--a-w c:\windows\system32\dllcache\cdm.dll
+ 2004-08-18 12:00:00 66,560 -c--a-w c:\windows\system32\dllcache\cdm.dll
- 2008-04-14 06:51:38 2,091,520 -c--a-w c:\windows\system32\dllcache\cdosys.dll
+ 2005-09-10 01:55:30 2,067,968 -c--a-w c:\windows\system32\dllcache\cdosys.dll
+ 2004-08-18 12:00:00 196,096 -c--a-w c:\windows\system32\dllcache\certcli.dll
+ 2004-08-18 12:00:00 460,800 -c--a-w c:\windows\system32\dllcache\certmgr.dll
+ 2004-08-18 12:00:00 159,232 -c--a-w c:\windows\system32\dllcache\cewmdm.dll
- 2008-04-14 06:51:40 39,424 -c--a-w c:\windows\system32\dllcache\cfgbkend.dll
+ 2004-08-18 12:00:00 39,424 -c--a-w c:\windows\system32\dllcache\cfgbkend.dll
+ 2004-08-18 12:00:00 16,896 -c--a-w c:\windows\system32\dllcache\cfgmgr32.dll
- 2008-04-14 06:52:14 188,480 -c--a-w c:\windows\system32\dllcache\cfgwiz.exe
+ 2003-03-24 14:52:04 188,480 -c--a-w c:\windows\system32\dllcache\cfgwiz.exe
+ 2004-08-18 12:00:00 164,352 -c--a-w c:\windows\system32\dllcache\ciadmin.dll
- 2008-04-14 06:51:40 148,480 -c--a-w c:\windows\system32\dllcache\cic.dll
+ 2004-08-18 12:00:00 109,568 -c--a-w c:\windows\system32\dllcache\cic.dll
+ 2004-08-18 12:00:00 8,192 -c--a-w c:\windows\system32\dllcache\cidaemon.exe
+ 2004-08-18 12:00:00 1,352,704 -c--a-w c:\windows\system32\dllcache\cimwin32.dll
+ 2004-08-18 12:00:00 198,656 -c--a-w c:\windows\system32\dllcache\cintime.dll
+ 2004-08-18 12:00:00 480,256 -c--a-w c:\windows\system32\dllcache\cintsetp.exe
+ 2004-08-18 12:00:00 69,120 -c--a-w c:\windows\system32\dllcache\ciodm.dll
+ 2004-08-18 12:00:00 5,632 -c--a-w c:\windows\system32\dllcache\cisvc.exe
+ 2004-08-18 12:00:00 49,664 -c--a-w c:\windows\system32\dllcache\classpnp.sys
+ 2004-08-18 12:00:00 11,264 -c--a-w c:\windows\system32\dllcache\clb.dll
- 2008-04-14 06:51:40 110,592 -c--a-w c:\windows\system32\dllcache\clbcatex.dll
+ 2005-07-26 04:42:49 110,080 -c--a-w c:\windows\system32\dllcache\clbcatex.dll
+ 2005-07-26 04:42:50 498,688 -c--a-w c:\windows\system32\dllcache\clbcatq.dll
+ 2004-08-18 12:00:00 64,512 -c--a-w c:\windows\system32\dllcache\cleanmgr.exe
+ 2004-08-18 12:00:00 103,424 -c--a-w c:\windows\system32\dllcache\clipbrd.exe
+ 2004-08-18 12:00:00 33,280 -c--a-w c:\windows\system32\dllcache\clipsrv.exe
+ 2004-08-18 12:00:00 57,856 -c--a-w c:\windows\system32\dllcache\clusapi.dll
- 2008-04-14 06:51:40 15,872 -c--a-w c:\windows\system32\dllcache\cmcfg32.dll
+ 2004-08-18 12:00:00 15,872 -c--a-w c:\windows\system32\dllcache\cmcfg32.dll
+ 2004-08-18 12:00:00 389,632 -c--a-w c:\windows\system32\dllcache\cmd.exe
+ 2004-08-18 12:00:00 345,600 -c--a-w c:\windows\system32\dllcache\cmdial32.dll
+ 2004-08-18 12:00:00 47,104 -c--a-w c:\windows\system32\dllcache\cmdl32.exe
+ 2004-08-18 12:00:00 39,424 -c--a-w c:\windows\system32\dllcache\cmmon32.exe
+ 2004-08-18 12:00:00 185,856 -c--a-w c:\windows\system32\dllcache\cmprops.dll
- 2008-04-14 06:51:40 13,312 -c--a-w c:\windows\system32\dllcache\cmsetacl.dll
+ 2004-08-18 12:00:00 13,824 -c--a-w c:\windows\system32\dllcache\cmsetacl.dll
+ 2004-08-18 12:00:00 63,488 -c--a-w c:\windows\system32\dllcache\cmstp.exe
- 2008-04-14 06:51:40 40,960 -c--a-w c:\windows\system32\dllcache\cmutil.dll
+ 2004-08-18 12:00:00 40,960 -c--a-w c:\windows\system32\dllcache\cmutil.dll
+ 2005-07-26 04:42:50 60,416 -c--a-w c:\windows\system32\dllcache\colbact.dll
- 2008-04-14 06:51:40 28,160 -c--a-w c:\windows\system32\dllcache\comaddin.dll
+ 2004-08-18 12:00:00 25,600 -c--a-w c:\windows\system32\dllcache\comaddin.dll
- 2008-04-14 06:51:40 195,072 -c--a-w c:\windows\system32\dllcache\comadmin.dll
+ 2005-07-26 04:42:50 195,072 -c--a-w c:\windows\system32\dllcache\comadmin.dll
+ 2004-08-18 12:00:00 611,328 -c--a-w c:\windows\system32\dllcache\comctl32.dll
+ 2004-08-18 12:00:00 278,528 -c--a-w c:\windows\system32\dllcache\comdlg32.dll
+ 2004-08-18 12:00:00 253,440 -c--a-w c:\windows\system32\dllcache\compatui.dll
+ 2004-08-18 12:00:00 30,160 -c--a-w c:\windows\system32\dllcache\compobj.dll
+ 2004-08-18 12:00:00 229,376 -c--a-w c:\windows\system32\dllcache\compstui.dll
- 2008-04-14 06:51:40 97,792 -c--a-w c:\windows\system32\dllcache\comrepl.dll
+ 2005-07-26 04:42:50 97,792 -c--a-w c:\windows\system32\dllcache\comrepl.dll
- 2008-04-14 06:52:16 9,728 -c--a-w c:\windows\system32\dllcache\comrepl.exe
+ 2004-08-18 12:00:00 9,728 -c--a-w c:\windows\system32\dllcache\comrepl.exe
- 2008-04-14 06:52:18 6,144 -c--a-w c:\windows\system32\dllcache\comrereg.exe
+ 2004-08-18 12:00:00 5,120 -c--a-w c:\windows\system32\dllcache\comrereg.exe
+ 2004-08-18 12:00:00 806,912 -c--a-w c:\windows\system32\dllcache\comres.dll
+ 2004-08-18 12:00:00 259,584 -c--a-w c:\windows\system32\dllcache\comsetup.dll
- 2008-04-14 06:51:40 167,424 -c--a-w c:\windows\system32\dllcache\comsnap.dll
+ 2004-08-18 12:00:00 147,456 -c--a-w c:\windows\system32\dllcache\comsnap.dll
+ 2005-07-26 04:42:50 1,267,200 -c--a-w c:\windows\system32\dllcache\comsvcs.dll
- 2008-04-14 06:38:58 539,648 -c--a-w c:\windows\system32\dllcache\comuid.dll
+ 2005-07-26 04:42:50 540,160 -c--a-w c:\windows\system32\dllcache\comuid.dll
+ 2004-08-18 12:00:00 1,032,192 -c--a-w c:\windows\system32\dllcache\conf.exe
- 2008-04-14 06:51:40 45,056 -c--a-w c:\windows\system32\dllcache\confmrsl.dll
+ 2004-08-18 12:00:00 45,056 -c--a-w c:\windows\system32\dllcache\confmrsl.dll
- 2008-04-14 06:51:40 358,400 -c--a-w c:\windows\system32\dllcache\confmsp.dll
+ 2004-08-18 12:00:00 346,112 -c--a-w c:\windows\system32\dllcache\confmsp.dll
+ 2004-08-18 12:00:00 27,648 -c--a-w c:\windows\system32\dllcache\conime.exe
- 2008-04-14 06:51:40 35,328 -c--a-w c:\windows\system32\dllcache\corpol.dll
+ 2004-08-18 12:00:00 35,328 -c--a-w c:\windows\system32\dllcache\corpol.dll
+ 2004-08-18 12:00:00 57,399 -c--a-w c:\windows\system32\dllcache\cplexe.exe
+ 2004-08-18 12:00:00 18,944 -c--a-w c:\windows\system32\dllcache\cprofile.exe
+ 2004-08-18 12:00:00 163,840 -c--a-w c:\windows\system32\dllcache\credui.dll
+ 2004-08-18 12:00:00 600,576 -c--a-w c:\windows\system32\dllcache\crypt32.dll
- 2008-04-14 06:51:40 74,752 -c--a-w c:\windows\system32\dllcache\cryptdlg.dll
+ 2004-08-18 12:00:00 75,264 -c--a-w c:\windows\system32\dllcache\cryptdlg.dll
+ 2004-08-18 12:00:00 33,280 -c--a-w c:\windows\system32\dllcache\cryptdll.dll
+ 2004-08-18 12:00:00 54,272 -c--a-w c:\windows\system32\dllcache\cryptext.dll
+ 2004-08-18 12:00:00 63,488 -c--a-w c:\windows\system32\dllcache\cryptnet.dll
+ 2004-08-18 12:00:00 60,416 -c--a-w c:\windows\system32\dllcache\cryptsvc.dll
+ 2004-08-18 12:00:00 515,584 -c--a-w c:\windows\system32\dllcache\cryptui.dll
+ 2004-08-18 12:00:00 102,400 -c--a-w c:\windows\system32\dllcache\cscdll.dll
- 2008-05-07 09:07:23 135,168 -c----w c:\windows\system32\dllcache\cscript.exe
+ 2004-08-18 12:00:00 98,304 -c--a-w c:\windows\system32\dllcache\cscript.exe
+ 2004-08-18 12:00:00 328,704 -c--a-w c:\windows\system32\dllcache\cscui.dll
+ 2004-08-18 12:00:00 32,768 -c--a-w c:\windows\system32\dllcache\csrsrv.dll
+ 2004-08-18 12:00:00 6,144 -c--a-w c:\windows\system32\dllcache\csrss.exe
+ 2004-08-18 12:00:00 15,360 -c--a-w c:\windows\system32\dllcache\ctfmon.exe
+ 2004-08-18 12:00:00 27,200 -c--a-w c:\windows\system32\dllcache\ctl3dv2.dll
- 2007-08-13 17:54:10 33,792 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2004-08-18 12:00:00 28,672 -c--a-w c:\windows\system32\dllcache\custsat.dll
+ 2004-08-18 12:00:00 1,179,648 -c--a-w c:\windows\system32\dllcache\d3d8.dll
+ 2004-08-18 12:00:00 8,192 -c--a-w c:\windows\system32\dllcache\d3d8thk.dll
+ 2004-08-18 12:00:00 1,689,088 -c--a-w c:\windows\system32\dllcache\d3d9.dll
+ 2004-08-18 12:00:00 825,344 -c--a-w c:\windows\system32\dllcache\d3dim700.dll
- 2008-04-14 06:51:40 1,055,232 -c--a-w c:\windows\system32\dllcache\danim.dll
+ 2005-09-02 23:54:57 1,054,720 -c--a-w c:\windows\system32\dllcache\danim.dll
- 2008-03-25 04:50:25 554,008 -c--a-w c:\windows\system32\dllcache\dao360.dll
+ 2004-08-18 12:00:00 561,179 -c--a-w c:\windows\system32\dllcache\dao360.dll
+ 2004-08-18 12:00:00 54,272 -c--a-w c:\windows\system32\dllcache\dataclen.dll
- 2008-04-14 06:51:40 165,376 -c--a-w c:\windows\system32\dllcache\datime.dll
+ 2004-08-18 12:00:00 152,064 -c--a-w c:\windows\system32\dllcache\datime.dll
+ 2004-08-18 12:00:00 25,088 -c--a-w c:\windows\system32\dllcache\davclnt.dll
+ 2004-08-18 12:00:00 847,872 -c--a-w c:\windows\system32\dllcache\dbgeng.dll
+ 2004-08-18 12:00:00 640,000 -c--a-w c:\windows\system32\dllcache\dbghelp.dll
- 2008-04-14 06:51:40 110,592 -c--a-w c:\windows\system32\dllcache\dbnetlib.dll
+ 2004-08-18 12:00:00 110,592 -c--a-w c:\windows\system32\dllcache\dbnetlib.dll
- 2008-04-14 06:51:40 40,960 -c--a-w c:\windows\system32\dllcache\dcap32.dll
+ 2004-08-18 12:00:00 40,960 -c--a-w c:\windows\system32\dllcache\dcap32.dll
+ 2004-08-18 12:00:00 8,704 -c--a-w c:\windows\system32\dllcache\dciman32.dll
- 2008-04-14 06:52:18 6,144 -c--a-w c:\windows\system32\dllcache\dcomcnfg.exe
+ 2004-08-18 12:00:00 5,120 -c--a-w c:\windows\system32\dllcache\dcomcnfg.exe
+ 2004-08-18 12:00:00 39,424 -c--a-w c:\windows\system32\dllcache\ddeml.dll
+ 2004-08-18 12:00:00 31,744 -c--a-w c:\windows\system32\dllcache\ddeshare.exe
+ 2004-08-18 12:00:00 266,240 -c--a-w c:\windows\system32\dllcache\ddraw.dll
+ 2004-08-18 12:00:00 27,136 -c--a-w c:\windows\system32\dllcache\ddrawex.dll
- 2008-04-14 06:52:18 25,088 -c--a-w c:\windows\system32\dllcache\defrag.exe
+ 2004-08-18 12:00:00 25,088 -c--a-w c:\windows\system32\dllcache\defrag.exe
+ 2004-08-18 12:00:00 16,896 -c--a-w c:\windows\system32\dllcache\deskadp.dll
+ 2004-08-18 12:00:00 16,896 -c--a-w c:\windows\system32\dllcache\deskmon.dll
+ 2004-08-18 12:00:00 18,432 -c--a-w c:\windows\system32\dllcache\deskperf.dll
+ 2004-08-18 12:00:00 59,904 -c--a-w c:\windows\system32\dllcache\devenum.dll
+ 2004-08-18 12:00:00 283,648 -c--a-w c:\windows\system32\dllcache\devmgr.dll
- 2008-04-14 06:52:18 82,944 -c--a-w c:\windows\system32\dllcache\dfrgfat.exe
+ 2004-08-18 12:00:00 82,432 -c--a-w c:\windows\system32\dllcache\dfrgfat.exe
- 2008-04-14 06:52:20 105,472 -c--a-w c:\windows\system32\dllcache\dfrgntfs.exe
+ 2004-08-18 12:00:00 104,960 -c--a-w c:\windows\system32\dllcache\dfrgntfs.exe
+ 2004-08-18 12:00:00 53,760 -c--a-w c:\windows\system32\dllcache\dfrgres.dll
- 2008-04-14 06:51:40 39,424 -c--a-w c:\windows\system32\dllcache\dfrgsnap.dll
+ 2004-08-18 12:00:00 38,912 -c--a-w c:\windows\system32\dllcache\dfrgsnap.dll
+ 2004-08-18 12:00:00 123,904 -c--a-w c:\windows\system32\dllcache\dfrgui.dll
+ 2004-08-18 12:00:00 28,672 -c--a-w c:\windows\system32\dllcache\dfsshlex.dll
- 2008-04-14 06:51:40 113,664 -c--a-w c:\windows\system32\dllcache\dgnet.dll
+ 2004-08-18 12:00:00 113,664 -c--a-w c:\windows\system32\dllcache\dgnet.dll
+ 2004-08-18 12:00:00 110,080 -c--a-w c:\windows\system32\dllcache\dhcpcsvc.dll
- 2008-04-14 06:51:40 390,656 -c--a-w c:\windows\system32\dllcache\dhcpmon.dll
+ 2004-08-18 12:00:00 380,928 -c--a-w c:\windows\system32\dllcache\dhcpmon.dll
+ 2004-08-18 12:00:00 543,232 -c--a-w c:\windows\system32\dllcache\dialer.exe
- 2008-04-14 06:52:20 87,040 -c--a-w c:\windows\system32\dllcache\diantz.exe
+ 2004-08-18 12:00:00 85,504 -c--a-w c:\windows\system32\dllcache\diantz.exe
+ 2004-08-18 12:00:00 68,608 -c--a-w c:\windows\system32\dllcache\digest.dll
+ 2004-08-18 12:00:00 163,840 -c--a-w c:\windows\system32\dllcache\dinput.dll
- 2008-04-14 06:51:40 186,880 -c--a-w c:\windows\system32\dllcache\dinput8.dll
+ 2004-08-18 12:00:00 186,880 -c--a-w c:\windows\system32\dllcache\dinput8.dll
- 2008-04-14 06:51:40 86,528 -c--a-w c:\windows\system32\dllcache\directdb.dll
+ 2004-08-18 12:00:00 81,408 -c--a-w c:\windows\system32\dllcache\directdb.dll
+ 2004-08-18 12:00:00 1,502,208 -c--a-w c:\windows\system32\dllcache\diskcopy.dll
- 2008-04-13 22:10:46 14,208 -c--a-w c:\windows\system32\dllcache\diskdump.sys
+ 2004-08-18 12:00:00 14,208 -c--a-w c:\windows\system32\dllcache\diskdump.sys
- 2008-04-14 06:52:20 163,840 -c--a-w c:\windows\system32\dllcache\diskpart.exe
+ 2004-08-18 12:00:00 163,840 -c--a-w c:\windows\system32\dllcache\diskpart.exe
- 2008-04-14 06:51:40 32,768 -c--a-w c:\windows\system32\dllcache\dispex.dll
+ 2004-08-18 12:00:00 45,083 -c--a-w c:\windows\system32\dllcache\dispex.dll
+ 2004-08-18 12:00:00 5,120 -c--a-w c:\windows\system32\dllcache\dllhost.exe
+ 2004-08-18 12:00:00 225,280 -c--a-w c:\windows\system32\dllcache\dmadmin.exe
- 2008-04-14 06:51:40 28,672 -c--a-w c:\windows\system32\dllcache\dmband.dll
+ 2004-08-18 12:00:00 28,672 -c--a-w c:\windows\system32\dllcache\dmband.dll
+ 2004-08-18 12:00:00 800,000 -c--a-w c:\windows\system32\dllcache\dmboot.sys
- 2008-04-14 06:51:40 61,440 -c--a-w c:\windows\system32\dllcache\dmcompos.dll
+ 2004-08-18 12:00:00 61,440 -c--a-w c:\windows\system32\dllcache\dmcompos.dll
+ 2004-08-18 12:00:00 273,920 -c--a-w c:\windows\system32\dllcache\dmdlgs.dll