Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:36:19, on 29.6.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Electronic Arts\EADM\Core.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\TuneUp Utilities 2009\Integrator.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Nikola\Plocha\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - G:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [OpwareSE2] "G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] "G:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: rncsys32.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 8527134125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 8596986500
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - G:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Služba inteligentního přenosu na pozadí (BITS) (BITS) - Unknown owner - C:\WINDOWS\
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Automatické aktualizace (wuauserv) - Unknown owner - C:\WINDOWS\
--
End of file - 8149 bytes
prosím o kontrolu logu:-) Vyřešeno
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43290
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu logu:-)
Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.
Kód: Vybrat vše
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - Startup: rncsys32.exe
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosím o kontrolu logu:-)
tady je obsah logu
Malwarebytes' Anti-Malware 1.38
Verze databáze: 2297
Windows 5.1.2600 Service Pack 3
29.6.2009 13:52:24
mbam-log-2009-06-29 (13-52-21).txt
Typ skenu: Rychlý sken
Objektu skenováno: 92534
Uplynulý cas: 2 minute(s), 1 second(s)
Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)
Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)
Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované složky:
(Žádné zákerné položky nebyly zjišteny)
Infikované soubory:
c:\documents and settings\Nikola\Data aplikací\wiaserva.log (Malware.Trace) -> No action taken.
Malwarebytes' Anti-Malware 1.38
Verze databáze: 2297
Windows 5.1.2600 Service Pack 3
29.6.2009 13:52:24
mbam-log-2009-06-29 (13-52-21).txt
Typ skenu: Rychlý sken
Objektu skenováno: 92534
Uplynulý cas: 2 minute(s), 1 second(s)
Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 1
Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)
Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)
Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované složky:
(Žádné zákerné položky nebyly zjišteny)
Infikované soubory:
c:\documents and settings\Nikola\Data aplikací\wiaserva.log (Malware.Trace) -> No action taken.
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43290
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu logu:-)
. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit log
Vypni rez. ochranu u NOD32.
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Později se podívám..
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit
Můžeš sem pak vložit log
Vypni rez. ochranu u NOD32.
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Později se podívám..
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosím o kontrolu logu:-)
Malwarebytes' Anti-Malware 1.38
Verze databáze: 2297
Windows 5.1.2600 Service Pack 3
29.6.2009 14:25:34
mbam-log-2009-06-29 (14-25-34).txt
Typ skenu: Rychlý sken
Objektu skenováno: 93139
Uplynulý cas: 2 minute(s), 10 second(s)
Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 0
Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)
Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)
Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované složky:
(Žádné zákerné položky nebyly zjišteny)
Infikované soubory:
(Žádné zákerné položky nebyly zjišteny)
Log z Combofixu
ComboFix 09-06-28.02 - Nikola 29.06.2009 14:11.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2013.1538 [GMT 2:00]
Spuštěný z: c:\documents and settings\Nikola\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
G:\desktop.ini
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-28 do 2009-06-29 )))))))))))))))))))))))))))))))
.
2009-06-29 11:49 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-29 11:49 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 10:44 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-06-29 10:44 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-06-29 10:17 . 2009-06-29 10:17 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-29 10:16 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-29 10:16 . 2009-06-29 10:16 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-29 07:31 . 2009-06-29 10:17 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-28 15:51 . 2009-03-25 07:45 151552 ----a-w- c:\windows\system32\igfxCoIn_v5047.dll
2009-06-26 04:26 . 2009-06-26 04:27 -------- d-----w- c:\documents and settings\Ostatní
2009-06-24 15:38 . 2009-06-24 15:38 -------- d-----w- c:\program files\Lavalys
2009-06-24 14:35 . 2009-06-24 14:35 -------- d-----w- C:\ProgramData
2009-06-24 14:33 . 2009-06-24 14:33 -------- d-----w- c:\program files\Electronic Arts
2009-06-24 14:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-24 14:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\windows\Logs
2009-06-18 17:46 . 2008-03-05 13:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-06-15 15:08 . 2009-06-15 15:09 -------- d-----w- c:\documents and settings\Nikola\KBCertifikat
2009-06-06 18:39 . 2009-06-06 18:41 -------- d-----w- c:\program files\Any Video Converter Professional
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-29 07:55 . 2001-10-25 16:00 83630 ----a-w- c:\windows\system32\perfc005.dat
2009-06-29 07:55 . 2001-10-25 16:00 440310 ----a-w- c:\windows\system32\perfh005.dat
2009-06-25 20:34 . 2009-03-31 16:58 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-28 05:28 . 2009-03-31 20:18 -------- d-----w- c:\program files\Windows Desktop Search
2009-05-10 18:22 . 2009-05-10 18:22 -------- d-----w- c:\program files\GIMP-2.0
2009-05-03 09:05 . 2009-05-03 09:05 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-03 09:02 . 2009-05-03 09:02 -------- d-----w- c:\program files\Application
2009-04-28 14:36 . 2009-04-08 13:27 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-24 06:28 . 2009-03-31 17:11 997912 ----a-w- c:\windows\system32\igxpun.exe
2009-04-02 13:00 . 2009-04-02 13:00 737280 ----a-w- c:\windows\iun6002.exe
2009-04-01 16:19 . 2009-04-01 16:18 28352 ----a-w- c:\windows\system32\drivers\MxlW2k.sys
2009-03-31 19:21 . 2009-03-31 19:21 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-31 18:12 . 2009-03-31 16:15 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-03-31 18:12 . 2009-03-31 16:15 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-03-31 16:58 . 2009-03-31 16:58 319488 ----a-w- c:\windows\HideWin.exe
2009-03-31 16:31 . 2009-03-31 16:15 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-03-31 16:14 . 2009-03-31 16:14 21812 ----a-w- c:\windows\system32\emptyregdb.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"EA Core"="g:\program files\Electronic Arts\EADM\Core.exe" [2009-04-29 3338240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"OpwareSE2"="g:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-25 134656]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-25 166912]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-25 136192]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 202544]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-07-31 16806912]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2004-06-08 29696]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2009-4-1 581632]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "g:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- g:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"g:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 14:24 93336]
R1 SASDIFSV;SASDIFSV;g:\program files\SUPERAntiSpyware\sasdifsv.sys [28.4.2009 11:33 9968]
R1 SASKUTIL;SASKUTIL;g:\program files\SUPERAntiSpyware\SASKUTIL.SYS [28.4.2009 11:33 72944]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [29.6.2009 12:44 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 14:23 727720]
R2 SbPF.Launcher;SbPF.Launcher;g:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;g:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [29.6.2009 12:17 604416]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [31.3.2009 19:11 110080]
R3 P0630VID;Creative WebCam Live!;c:\windows\system32\drivers\P0630Vid.sys [1.4.2009 18:12 91797]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [29.6.2009 12:44 65576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [24.6.2009 17:38 26736]
S3 SASENUM;SASENUM;g:\program files\SUPERAntiSpyware\SASENUM.SYS [28.4.2009 11:33 7408]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'
2009-06-29 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
2009-06-29 c:\windows\Tasks\User_Feed_Synchronization-{F08D6994-B125-42B9-A557-8A2AF779265E}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
2009-06-29 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
.
.
------- Asociace souborů -------
.
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 14:16
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(1448)
g:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\documents and settings\Nikola\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
.
Celkový čas: 2009-06-29 14:18
ComboFix-quarantined-files.txt 2009-06-29 12:17
Před spuštěním: Volných bajtů: 26 898 505 728
Po spuštění: Volných bajtů: 26 886 066 176
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
160 --- E O F --- 2009-05-27 14:33
Verze databáze: 2297
Windows 5.1.2600 Service Pack 3
29.6.2009 14:25:34
mbam-log-2009-06-29 (14-25-34).txt
Typ skenu: Rychlý sken
Objektu skenováno: 93139
Uplynulý cas: 2 minute(s), 10 second(s)
Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 0
Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)
Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)
Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)
Infikované složky:
(Žádné zákerné položky nebyly zjišteny)
Infikované soubory:
(Žádné zákerné položky nebyly zjišteny)
Log z Combofixu
ComboFix 09-06-28.02 - Nikola 29.06.2009 14:11.1 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2013.1538 [GMT 2:00]
Spuštěný z: c:\documents and settings\Nikola\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
* Rezidentní štít AV je zapnutý
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
G:\desktop.ini
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-28 do 2009-06-29 )))))))))))))))))))))))))))))))
.
2009-06-29 11:49 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-29 11:49 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 10:44 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-06-29 10:44 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-06-29 10:17 . 2009-06-29 10:17 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-29 10:16 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-29 10:16 . 2009-06-29 10:16 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-29 07:31 . 2009-06-29 10:17 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-28 15:51 . 2009-03-25 07:45 151552 ----a-w- c:\windows\system32\igfxCoIn_v5047.dll
2009-06-26 04:26 . 2009-06-26 04:27 -------- d-----w- c:\documents and settings\Ostatní
2009-06-24 15:38 . 2009-06-24 15:38 -------- d-----w- c:\program files\Lavalys
2009-06-24 14:35 . 2009-06-24 14:35 -------- d-----w- C:\ProgramData
2009-06-24 14:33 . 2009-06-24 14:33 -------- d-----w- c:\program files\Electronic Arts
2009-06-24 14:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-24 14:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\windows\Logs
2009-06-18 17:46 . 2008-03-05 13:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-06-15 15:08 . 2009-06-15 15:09 -------- d-----w- c:\documents and settings\Nikola\KBCertifikat
2009-06-06 18:39 . 2009-06-06 18:41 -------- d-----w- c:\program files\Any Video Converter Professional
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-29 07:55 . 2001-10-25 16:00 83630 ----a-w- c:\windows\system32\perfc005.dat
2009-06-29 07:55 . 2001-10-25 16:00 440310 ----a-w- c:\windows\system32\perfh005.dat
2009-06-25 20:34 . 2009-03-31 16:58 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-28 05:28 . 2009-03-31 20:18 -------- d-----w- c:\program files\Windows Desktop Search
2009-05-10 18:22 . 2009-05-10 18:22 -------- d-----w- c:\program files\GIMP-2.0
2009-05-03 09:05 . 2009-05-03 09:05 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-03 09:02 . 2009-05-03 09:02 -------- d-----w- c:\program files\Application
2009-04-28 14:36 . 2009-04-08 13:27 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-24 06:28 . 2009-03-31 17:11 997912 ----a-w- c:\windows\system32\igxpun.exe
2009-04-02 13:00 . 2009-04-02 13:00 737280 ----a-w- c:\windows\iun6002.exe
2009-04-01 16:19 . 2009-04-01 16:18 28352 ----a-w- c:\windows\system32\drivers\MxlW2k.sys
2009-03-31 19:21 . 2009-03-31 19:21 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-31 18:12 . 2009-03-31 16:15 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-03-31 18:12 . 2009-03-31 16:15 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-03-31 16:58 . 2009-03-31 16:58 319488 ----a-w- c:\windows\HideWin.exe
2009-03-31 16:31 . 2009-03-31 16:15 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-03-31 16:14 . 2009-03-31 16:14 21812 ----a-w- c:\windows\system32\emptyregdb.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"EA Core"="g:\program files\Electronic Arts\EADM\Core.exe" [2009-04-29 3338240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"OpwareSE2"="g:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-25 134656]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-25 166912]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-25 136192]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 202544]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-07-31 16806912]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2004-06-08 29696]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2009-4-1 581632]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "g:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- g:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"g:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 14:24 93336]
R1 SASDIFSV;SASDIFSV;g:\program files\SUPERAntiSpyware\sasdifsv.sys [28.4.2009 11:33 9968]
R1 SASKUTIL;SASKUTIL;g:\program files\SUPERAntiSpyware\SASKUTIL.SYS [28.4.2009 11:33 72944]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [29.6.2009 12:44 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 14:23 727720]
R2 SbPF.Launcher;SbPF.Launcher;g:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;g:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [29.6.2009 12:17 604416]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [31.3.2009 19:11 110080]
R3 P0630VID;Creative WebCam Live!;c:\windows\system32\drivers\P0630Vid.sys [1.4.2009 18:12 91797]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [29.6.2009 12:44 65576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [24.6.2009 17:38 26736]
S3 SASENUM;SASENUM;g:\program files\SUPERAntiSpyware\SASENUM.SYS [28.4.2009 11:33 7408]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'
2009-06-29 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
2009-06-29 c:\windows\Tasks\User_Feed_Synchronization-{F08D6994-B125-42B9-A557-8A2AF779265E}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
2009-06-29 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
.
.
------- Asociace souborů -------
.
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 14:16
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(1448)
g:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\documents and settings\Nikola\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
.
Celkový čas: 2009-06-29 14:18
ComboFix-quarantined-files.txt 2009-06-29 12:17
Před spuštěním: Volných bajtů: 26 898 505 728
Po spuštění: Volných bajtů: 26 886 066 176
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
160 --- E O F --- 2009-05-27 14:33
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43290
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu logu:-)
Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE
Kód: Vybrat vše
File::
c:\windows\iun6002.exe
c:\windows\HideWin.exe
Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000000
Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.
Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu + nový log z HJT
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosím o kontrolu logu:-)
Combofix
ComboFix 09-06-28.04 - Nikola 29.06.2009 16:19.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2013.1194 [GMT 2:00]
Spuštěný z: c:\documents and settings\Nikola\Plocha\Programy\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Nikola\Plocha\Programy\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
FILE ::
"c:\windows\HideWin.exe"
"c:\windows\iun6002.exe"
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\HideWin.exe
c:\windows\iun6002.exe
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-28 do 2009-06-29 )))))))))))))))))))))))))))))))
.
2009-06-29 12:45 . 2009-06-29 14:11 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-06-29 12:32 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-29 12:32 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-29 12:32 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-29 12:32 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-29 12:27 . 2008-08-14 15:23 147456 ----a-w- c:\windows\system32\igfxCoIn_v1545.dll
2009-06-29 12:27 . 2008-08-14 15:15 2469888 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2009-06-29 12:27 . 2008-08-14 15:15 3379200 ----a-w- c:\windows\system32\igdumd32.dll
2009-06-29 12:27 . 2008-08-14 15:13 147172 ----a-w- c:\windows\system32\igfcg550.bin
2009-06-29 12:27 . 2008-08-14 15:12 536576 ----a-w- c:\windows\system32\igdumdx32.dll
2009-06-29 12:27 . 2008-08-14 15:08 2195456 ----a-w- c:\windows\system32\igd10umd32.dll
2009-06-29 12:27 . 2008-08-14 14:51 258048 ----a-w- c:\windows\system32\igfxTMM.dll
2009-06-29 12:27 . 2008-08-14 14:51 69632 ----a-w- c:\windows\system32\oemdspif.dll
2009-06-29 11:49 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-29 11:49 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 10:44 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-06-29 10:44 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-06-29 10:17 . 2009-06-29 10:17 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-29 10:16 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-29 10:16 . 2009-06-29 10:16 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-29 07:31 . 2009-06-29 10:17 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-28 15:51 . 2009-03-25 07:45 151552 ----a-w- c:\windows\system32\igfxCoIn_v5047.dll
2009-06-26 04:26 . 2009-06-26 04:27 -------- d-----w- c:\documents and settings\Ostatní
2009-06-24 15:38 . 2009-06-24 15:38 -------- d-----w- c:\program files\Lavalys
2009-06-24 14:35 . 2009-06-24 14:35 -------- d-----w- C:\ProgramData
2009-06-24 14:33 . 2009-06-24 14:33 -------- d-----w- c:\program files\Electronic Arts
2009-06-24 14:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-24 14:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\windows\Logs
2009-06-18 17:46 . 2008-03-05 13:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-06-15 15:08 . 2009-06-15 15:09 -------- d-----w- c:\documents and settings\Nikola\KBCertifikat
2009-06-06 18:39 . 2009-06-06 18:41 -------- d-----w- c:\program files\Any Video Converter Professional
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-29 13:56 . 2009-03-31 20:34 -------- d-----w- c:\program files\Microsoft Works
2009-06-29 07:55 . 2001-10-25 16:00 83630 ----a-w- c:\windows\system32\perfc005.dat
2009-06-29 07:55 . 2001-10-25 16:00 440310 ----a-w- c:\windows\system32\perfh005.dat
2009-06-25 20:34 . 2009-03-31 16:58 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-28 05:28 . 2009-03-31 20:18 -------- d-----w- c:\program files\Windows Desktop Search
2009-05-13 05:05 . 2004-08-17 15:49 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-10 18:22 . 2009-05-10 18:22 -------- d-----w- c:\program files\GIMP-2.0
2009-05-07 15:33 . 2004-08-17 15:49 346624 ----a-w- c:\windows\system32\localspl.dll
2009-05-03 09:05 . 2009-05-03 09:05 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-03 09:02 . 2009-05-03 09:02 -------- d-----w- c:\program files\Application
2009-04-28 14:36 . 2009-04-08 13:27 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-19 19:44 . 2004-08-17 15:44 1847808 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2004-08-17 15:49 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-01 16:19 . 2009-04-01 16:18 28352 ----a-w- c:\windows\system32\drivers\MxlW2k.sys
2009-03-31 19:21 . 2009-03-31 19:21 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-31 18:12 . 2009-03-31 16:15 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-03-31 18:12 . 2009-03-31 16:15 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-03-31 16:31 . 2009-03-31 16:15 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-03-31 16:14 . 2009-03-31 16:14 21812 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((( SnapShot@2009-06-29_12.16.01 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-29 14:03 . 2009-06-29 14:03 16384 c:\windows\Temp\Perflib_Perfdata_284.dat
+ 2009-03-31 20:35 . 2008-11-10 09:41 67472 c:\windows\system32\spool\drivers\w32x86\msonpui.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 67472 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 57344 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxprd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 51712 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxsrvc.dll
+ 2009-06-29 12:27 . 2009-03-25 07:10 23552 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxexps.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 94720 c:\windows\system32\ReinstallBackups\0026\DriverFiles\hccutils.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 57344 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxprd32.dll
- 2009-06-28 15:52 . 2008-08-11 17:48 57344 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxprd32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 51712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxsrvc.dll
+ 2009-06-29 12:29 . 2008-08-14 14:51 24576 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxexps.dll
- 2009-06-28 15:52 . 2008-08-11 17:24 24576 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxexps.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 94720 c:\windows\system32\ReinstallBackups\0023\DriverFiles\hccutils.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 32656 c:\windows\system32\msonpmon.dll
+ 2009-03-31 17:11 . 2008-08-25 16:39 73728 c:\windows\system32\Lang\HDMI\CSY\HDMICSY.dll
+ 2004-08-17 15:49 . 2009-04-30 21:16 25600 c:\windows\system32\jsproxy.dll
- 2004-08-17 15:49 . 2009-03-08 02:33 25600 c:\windows\system32\jsproxy.dll
+ 2009-03-31 17:11 . 2008-08-14 14:51 52224 c:\windows\system32\igfxsrvc.dll
+ 2009-03-31 17:11 . 2008-08-14 14:51 24576 c:\windows\system32\igfxexps.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 69632 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\oemdspif.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 52224 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxsrvc.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 24576 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxexps.dll
+ 2009-03-08 02:33 . 2009-04-30 21:16 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 02:33 . 2009-03-08 02:33 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-31 20:35 . 2009-05-13 18:50 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-04-03 16:01 . 2009-04-03 16:01 71504 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNVP.DLL
+ 2009-04-03 15:57 . 2009-04-03 15:57 21320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12EXE.EXE
+ 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2006-10-26 19:13 . 2006-10-26 19:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XL12CNVP.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WORDPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 64288 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-26 17:49 . 2006-10-26 17:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-26 18:55 . 2006-10-26 18:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-26 18:55 . 2006-10-26 18:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPOL.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OPHPROXY.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 13:11 . 2006-10-27 13:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 11544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICEPL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 16192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NPOFF12.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 20280 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-27 13:26 . 2006-10-27 13:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPUI.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 33104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPPPR.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPMON.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 13:01 . 2006-10-27 13:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2006-10-26 19:41 . 2006-10-26 19:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\INLAUNCH.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPOL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-26 19:18 . 2006-10-26 19:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACCOLK.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB969897-IE8\xpshims.dll
+ 2009-06-29 13:51 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB969897-IE8\jsproxy.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 864144 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 864144 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll
+ 2009-06-29 12:27 . 2009-03-25 07:34 212480 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpgd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:45 151552 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpco32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:34 982196 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igkrng500.bin
+ 2009-06-29 12:27 . 2009-03-25 07:10 134656 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxtray.exe
+ 2009-06-29 12:27 . 2009-03-25 07:09 244224 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxsrvc.exe
+ 2009-06-29 12:27 . 2009-03-25 07:10 199168 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxpph.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 136192 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxpers.exe
+ 2009-06-29 12:27 . 2009-03-25 07:10 165888 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxext.exe
+ 2009-06-29 12:27 . 2009-03-25 07:09 130048 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxdo.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 206848 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxdev.dll
+ 2009-06-29 12:27 . 2009-03-25 07:12 645120 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxcfg.exe
+ 2009-06-29 12:27 . 2009-03-25 07:34 417344 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igcompkrng500.bin
+ 2009-06-29 12:27 . 2009-03-25 07:10 166912 c:\windows\system32\ReinstallBackups\0026\DriverFiles\hkcmd.exe
+ 2009-06-29 12:29 . 2009-03-25 07:34 212480 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpgd32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:45 151552 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpco32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:10 134656 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxtray.exe
+ 2009-06-29 12:29 . 2009-03-25 07:09 244224 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxsrvc.exe
+ 2009-06-29 12:29 . 2008-08-14 14:51 217088 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxpph.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 136192 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxpers.exe
+ 2009-06-29 12:29 . 2008-08-25 09:42 178712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxext.exe
- 2009-06-28 15:52 . 2008-08-15 13:06 178712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxext.exe
+ 2009-06-29 12:29 . 2008-08-14 14:50 135168 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdo.dll
- 2009-06-28 15:52 . 2008-08-11 17:24 135168 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdo.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 206848 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdev.dll
+ 2009-06-29 12:29 . 2008-08-25 09:42 670232 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxcfg.exe
+ 2009-06-29 12:29 . 2008-08-14 15:13 445796 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igcompkrng500.bin
+ 2009-06-29 12:29 . 2009-03-25 07:10 166912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\hkcmd.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 920088 c:\windows\system32\igxpun.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 150040 c:\windows\system32\igfxtray.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 256536 c:\windows\system32\igfxsrvc.exe
+ 2009-03-31 17:11 . 2008-08-14 14:51 217088 c:\windows\system32\igfxpph.dll
+ 2009-03-31 17:11 . 2008-08-25 09:42 154136 c:\windows\system32\igfxpers.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 178712 c:\windows\system32\igfxext.exe
+ 2009-03-31 17:11 . 2008-08-14 14:50 135168 c:\windows\system32\igfxdo.dll
+ 2009-03-31 17:11 . 2008-08-14 14:50 221184 c:\windows\system32\igfxdev.dll
+ 2009-03-31 17:11 . 2008-08-25 09:42 670232 c:\windows\system32\igfxcfg.exe
+ 2009-03-31 17:11 . 2008-08-14 15:13 445796 c:\windows\system32\igcompkrng500.bin
+ 2004-08-17 15:49 . 2009-04-30 21:16 385536 c:\windows\system32\iedkcs32.dll
- 2004-08-17 15:49 . 2009-03-08 02:32 173056 c:\windows\system32\ie4uinit.exe
+ 2004-08-17 15:49 . 2009-04-30 11:21 173056 c:\windows\system32\ie4uinit.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 178712 c:\windows\system32\hkcmd.exe
+ 2009-03-31 17:11 . 2008-08-14 14:50 106496 c:\windows\system32\hccutils.dll
- 2009-03-31 18:04 . 2009-05-24 06:10 271784 c:\windows\system32\FNTCACHE.DAT
+ 2009-03-31 18:04 . 2009-06-29 14:03 271784 c:\windows\system32\FNTCACHE.DAT
+ 2009-06-29 12:27 . 2008-08-14 15:23 147456 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igxpco32.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 150040 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxtray.exe
+ 2009-06-29 12:27 . 2008-08-14 14:51 258048 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxTMM.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 256536 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxsrvc.exe
+ 2009-06-29 12:27 . 2008-08-14 14:51 217088 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxpph.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 154136 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxpers.exe
+ 2009-06-29 12:27 . 2008-08-25 09:42 178712 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxext.exe
+ 2009-06-29 12:27 . 2008-08-14 14:50 135168 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxdo.dll
+ 2009-06-29 12:27 . 2008-08-14 14:50 221184 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxdev.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 670232 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxcfg.exe
+ 2009-06-29 12:27 . 2008-08-14 15:13 147172 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfcg550.bin
+ 2009-06-29 12:27 . 2008-08-14 15:12 536576 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdumdx32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:13 445796 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igcompkrng500.bin
+ 2009-06-29 12:27 . 2008-08-25 09:42 178712 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\hkcmd.exe
+ 2009-06-29 12:27 . 2008-08-14 14:50 106496 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\hccutils.dll
+ 2009-03-08 02:34 . 2009-05-13 05:05 915456 c:\windows\system32\dllcache\wininet.dll
+ 2009-04-15 14:54 . 2009-04-15 14:54 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2009-05-07 15:33 . 2009-05-07 15:33 346624 c:\windows\system32\dllcache\localspl.dll
+ 2009-03-08 12:09 . 2009-04-30 21:16 385536 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 02:32 . 2009-03-08 02:32 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 02:32 . 2009-04-30 11:21 173056 c:\windows\system32\dllcache\ie4uinit.exe
- 2009-03-31 17:11 . 2006-11-10 07:25 319456 c:\windows\system32\difxapi.dll
+ 2009-03-31 17:11 . 2006-11-10 14:25 319456 c:\windows\system32\difxapi.dll
+ 2009-06-29 13:54 . 2009-06-29 13:54 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
- 2009-03-31 20:51 . 2009-03-31 20:51 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-04-03 16:11 . 2009-04-03 16:11 408424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WINWORD.EXE
+ 2007-06-07 17:51 . 2007-06-07 17:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2007-06-07 17:51 . 2007-06-07 17:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSSTDFMT.DLL
+ 2006-10-26 18:49 . 2006-10-26 18:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-26 19:07 . 2006-10-26 19:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-27 13:16 . 2006-10-27 13:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-20 06:37 . 2006-10-20 06:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 416544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICE.DLL
+ 2006-10-26 17:55 . 2006-10-26 17:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 12:47 . 2006-10-26 12:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPDRV.DLL
+ 2006-10-26 11:58 . 2006-10-26 11:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 150320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DSSM.EXE
+ 2009-06-29 13:51 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB969897-IE8\wininet.dll
+ 2009-06-29 13:51 . 2008-07-09 07:36 391032 c:\windows\ie8updates\KB969897-IE8\spuninst\updspapi.dll
+ 2009-06-29 13:51 . 2007-11-30 12:39 233848 c:\windows\ie8updates\KB969897-IE8\spuninst\spuninst.exe
+ 2009-06-29 13:51 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB969897-IE8\ieproxy.dll
+ 2009-06-29 13:51 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB969897-IE8\iedkcs32.dll
+ 2009-06-29 13:51 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB969897-IE8\ie4uinit.exe
+ 2009-06-29 13:57 . 2009-06-29 13:57 609160 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 118176 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-06-29 13:57 . 2009-06-29 13:57 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2004-08-17 15:49 . 2009-04-30 21:16 1207808 c:\windows\system32\urlmon.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 6313088 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpmp32.sys
+ 2009-06-29 12:27 . 2009-03-25 07:35 3440128 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpdx32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 2900352 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpdv32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 5702656 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxress.dll
+ 2009-06-29 12:27 . 2009-03-25 07:21 5054464 c:\windows\system32\ReinstallBackups\0026\DriverFiles\ig4icd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:21 3203072 c:\windows\system32\ReinstallBackups\0026\DriverFiles\ig4dev32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 6313088 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpmp32.sys
+ 2009-06-29 12:29 . 2009-03-25 07:35 3440128 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpdx32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 2900352 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpdv32.dll
+ 2009-06-29 12:29 . 2008-08-14 15:13 2026604 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igkrng500.bin
- 2009-06-28 15:52 . 2008-08-11 17:48 2026604 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igkrng500.bin
+ 2009-06-29 12:29 . 2009-03-25 07:09 5702656 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxress.dll
+ 2009-06-29 12:29 . 2008-08-14 14:59 3878912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\ig4icd32.dll
+ 2009-06-29 12:29 . 2008-08-14 15:00 2342912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\ig4dev32.dll
+ 2004-08-17 15:49 . 2009-05-13 05:05 5936128 c:\windows\system32\mshtml.dll
+ 2009-03-31 17:11 . 2008-08-14 15:13 2026604 c:\windows\system32\igkrng500.bin
+ 2009-03-31 17:11 . 2008-08-14 14:50 5672960 c:\windows\system32\igfxress.dll
+ 2009-03-31 17:11 . 2008-08-14 14:59 3878912 c:\windows\system32\ig4icd32.dll
+ 2009-03-31 17:11 . 2008-08-14 15:00 2342912 c:\windows\system32\ig4dev32.dll
- 2009-03-08 02:32 . 2009-03-08 02:32 1985024 c:\windows\system32\iertutil.dll
+ 2009-03-08 02:32 . 2009-04-30 21:16 1985024 c:\windows\system32\iertutil.dll
+ 2008-11-20 21:06 . 2008-11-20 21:06 1194848 c:\windows\system32\FM20.DLL
+ 2009-06-29 12:27 . 2008-08-14 15:13 2026604 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igkrng500.bin
+ 2009-06-29 12:27 . 2008-08-14 15:13 1498700 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igkrng400.bin
+ 2009-06-29 12:27 . 2008-08-14 14:50 5672960 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxress.dll
+ 2009-06-29 12:27 . 2008-08-14 15:15 3379200 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdumd32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:15 2469888 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdkmd32.sys
+ 2009-06-29 12:27 . 2008-08-14 15:08 2195456 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igd10umd32.dll
+ 2009-06-29 12:27 . 2008-08-14 14:59 3878912 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\ig4icd32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:00 2342912 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\ig4dev32.dll
+ 2009-03-31 16:58 . 2009-04-19 19:44 1847808 c:\windows\system32\dllcache\win32k.sys
+ 2009-03-08 02:34 . 2009-04-30 21:16 1207808 c:\windows\system32\dllcache\urlmon.dll
+ 2009-03-08 02:41 . 2009-05-13 05:05 5936128 c:\windows\system32\dllcache\mshtml.dll
+ 2009-03-31 20:35 . 2009-06-29 14:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2009-04-03 15:57 . 2009-04-03 15:57 4671320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12CNV.DLL
+ 2006-10-26 12:47 . 2006-10-26 12:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 1276720 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPIA.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB969897-IE8\urlmon.dll
+ 2009-06-29 13:51 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB969897-IE8\mshtml.dll
+ 2009-06-29 13:51 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB969897-IE8\iertutil.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-03-31 20:04 . 2009-06-01 16:51 23635392 c:\windows\system32\MRT.exe
+ 2009-03-08 02:39 . 2009-04-30 21:16 11064832 c:\windows\system32\ieframe.dll
+ 2009-04-03 16:01 . 2009-04-03 16:01 15108448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNV.EXE
+ 2009-04-03 16:11 . 2009-04-03 16:11 17740136 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WWLIB.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB969897-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"EA Core"="g:\program files\Electronic Arts\EADM\Core.exe" [2009-04-29 3338240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"OpwareSE2"="g:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-25 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-25 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-25 154136]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 202544]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-07-31 16806912]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2004-06-08 29696]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2009-4-1 581632]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "g:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- g:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"g:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 14:24 93336]
R1 SASDIFSV;SASDIFSV;g:\program files\SUPERAntiSpyware\sasdifsv.sys [28.4.2009 11:33 9968]
R1 SASKUTIL;SASKUTIL;g:\program files\SUPERAntiSpyware\SASKUTIL.SYS [28.4.2009 11:33 72944]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [29.6.2009 12:44 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 14:23 727720]
R2 SbPF.Launcher;SbPF.Launcher;g:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;g:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [29.6.2009 12:17 604416]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [31.3.2009 19:11 110080]
R3 P0630VID;Creative WebCam Live!;c:\windows\system32\drivers\P0630Vid.sys [1.4.2009 18:12 91797]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [29.6.2009 12:44 65576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [24.6.2009 17:38 26736]
S3 SASENUM;SASENUM;g:\program files\SUPERAntiSpyware\SASENUM.SYS [28.4.2009 11:33 7408]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'
2009-06-29 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
2009-06-29 c:\windows\Tasks\User_Feed_Synchronization-{F08D6994-B125-42B9-A557-8A2AF779265E}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
2009-06-29 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 16:24
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(1336)
g:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\documents and settings\Nikola\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
.
Celkový čas: 2009-06-29 16:26
ComboFix-quarantined-files.txt 2009-06-29 14:26
ComboFix2.txt 2009-06-29 12:18
Před spuštěním: Volných bajtů: 25 019 944 960
Po spuštění: Volných bajtů: 25 052 450 816
421 --- E O F --- 2009-06-29 14:05
ComboFix 09-06-28.04 - Nikola 29.06.2009 16:19.2 - NTFSx86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2013.1194 [GMT 2:00]
Spuštěný z: c:\documents and settings\Nikola\Plocha\Programy\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Nikola\Plocha\Programy\CFScript.txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
FILE ::
"c:\windows\HideWin.exe"
"c:\windows\iun6002.exe"
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\HideWin.exe
c:\windows\iun6002.exe
.
((((((((((((((((((((((((( Soubory vytvořené od 2009-05-28 do 2009-06-29 )))))))))))))))))))))))))))))))
.
2009-06-29 12:45 . 2009-06-29 14:11 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-06-29 12:32 . 2009-04-30 21:16 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-06-29 12:32 . 2009-04-30 21:16 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-06-29 12:32 . 2009-04-30 21:16 1985024 -c----w- c:\windows\system32\dllcache\iertutil.dll
2009-06-29 12:32 . 2009-04-30 21:16 11064832 -c----w- c:\windows\system32\dllcache\ieframe.dll
2009-06-29 12:27 . 2008-08-14 15:23 147456 ----a-w- c:\windows\system32\igfxCoIn_v1545.dll
2009-06-29 12:27 . 2008-08-14 15:15 2469888 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2009-06-29 12:27 . 2008-08-14 15:15 3379200 ----a-w- c:\windows\system32\igdumd32.dll
2009-06-29 12:27 . 2008-08-14 15:13 147172 ----a-w- c:\windows\system32\igfcg550.bin
2009-06-29 12:27 . 2008-08-14 15:12 536576 ----a-w- c:\windows\system32\igdumdx32.dll
2009-06-29 12:27 . 2008-08-14 15:08 2195456 ----a-w- c:\windows\system32\igd10umd32.dll
2009-06-29 12:27 . 2008-08-14 14:51 258048 ----a-w- c:\windows\system32\igfxTMM.dll
2009-06-29 12:27 . 2008-08-14 14:51 69632 ----a-w- c:\windows\system32\oemdspif.dll
2009-06-29 11:49 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-29 11:49 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-29 10:44 . 2008-10-31 05:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-06-29 10:44 . 2008-06-21 02:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-06-29 10:17 . 2009-06-29 10:17 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-29 10:16 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-29 10:16 . 2009-06-29 10:16 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-29 07:31 . 2009-06-29 10:17 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-28 15:51 . 2009-03-25 07:45 151552 ----a-w- c:\windows\system32\igfxCoIn_v5047.dll
2009-06-26 04:26 . 2009-06-26 04:27 -------- d-----w- c:\documents and settings\Ostatní
2009-06-24 15:38 . 2009-06-24 15:38 -------- d-----w- c:\program files\Lavalys
2009-06-24 14:35 . 2009-06-24 14:35 -------- d-----w- C:\ProgramData
2009-06-24 14:33 . 2009-06-24 14:33 -------- d-----w- c:\program files\Electronic Arts
2009-06-24 14:32 . 2008-09-04 18:17 447752 ----a-r- c:\windows\system32\vp6vfw.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\program files\Microsoft WSE
2009-06-24 14:32 . 2006-09-28 14:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2009-06-24 14:32 . 2009-06-24 14:32 -------- d-----w- c:\windows\Logs
2009-06-18 17:46 . 2008-03-05 13:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-06-15 15:08 . 2009-06-15 15:09 -------- d-----w- c:\documents and settings\Nikola\KBCertifikat
2009-06-06 18:39 . 2009-06-06 18:41 -------- d-----w- c:\program files\Any Video Converter Professional
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-29 13:56 . 2009-03-31 20:34 -------- d-----w- c:\program files\Microsoft Works
2009-06-29 07:55 . 2001-10-25 16:00 83630 ----a-w- c:\windows\system32\perfc005.dat
2009-06-29 07:55 . 2001-10-25 16:00 440310 ----a-w- c:\windows\system32\perfh005.dat
2009-06-25 20:34 . 2009-03-31 16:58 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-28 05:28 . 2009-03-31 20:18 -------- d-----w- c:\program files\Windows Desktop Search
2009-05-13 05:05 . 2004-08-17 15:49 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-10 18:22 . 2009-05-10 18:22 -------- d-----w- c:\program files\GIMP-2.0
2009-05-07 15:33 . 2004-08-17 15:49 346624 ----a-w- c:\windows\system32\localspl.dll
2009-05-03 09:05 . 2009-05-03 09:05 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-05-03 09:02 . 2009-05-03 09:02 -------- d-----w- c:\program files\Application
2009-04-28 14:36 . 2009-04-08 13:27 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-04-19 19:44 . 2004-08-17 15:44 1847808 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:54 . 2004-08-17 15:49 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-01 16:19 . 2009-04-01 16:18 28352 ----a-w- c:\windows\system32\drivers\MxlW2k.sys
2009-03-31 19:21 . 2009-03-31 19:21 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-03-31 18:12 . 2009-03-31 16:15 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-03-31 18:12 . 2009-03-31 16:15 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-03-31 16:31 . 2009-03-31 16:15 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-03-31 16:14 . 2009-03-31 16:14 21812 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((( SnapShot@2009-06-29_12.16.01 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-06-29 14:03 . 2009-06-29 14:03 16384 c:\windows\Temp\Perflib_Perfdata_284.dat
+ 2009-03-31 20:35 . 2008-11-10 09:41 67472 c:\windows\system32\spool\drivers\w32x86\msonpui.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 67472 c:\windows\system32\spool\drivers\w32x86\3\msonpui.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 57344 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxprd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 51712 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxsrvc.dll
+ 2009-06-29 12:27 . 2009-03-25 07:10 23552 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxexps.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 94720 c:\windows\system32\ReinstallBackups\0026\DriverFiles\hccutils.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 57344 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxprd32.dll
- 2009-06-28 15:52 . 2008-08-11 17:48 57344 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxprd32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 51712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxsrvc.dll
+ 2009-06-29 12:29 . 2008-08-14 14:51 24576 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxexps.dll
- 2009-06-28 15:52 . 2008-08-11 17:24 24576 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxexps.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 94720 c:\windows\system32\ReinstallBackups\0023\DriverFiles\hccutils.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 32656 c:\windows\system32\msonpmon.dll
+ 2009-03-31 17:11 . 2008-08-25 16:39 73728 c:\windows\system32\Lang\HDMI\CSY\HDMICSY.dll
+ 2004-08-17 15:49 . 2009-04-30 21:16 25600 c:\windows\system32\jsproxy.dll
- 2004-08-17 15:49 . 2009-03-08 02:33 25600 c:\windows\system32\jsproxy.dll
+ 2009-03-31 17:11 . 2008-08-14 14:51 52224 c:\windows\system32\igfxsrvc.dll
+ 2009-03-31 17:11 . 2008-08-14 14:51 24576 c:\windows\system32\igfxexps.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 69632 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\oemdspif.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 52224 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxsrvc.dll
+ 2009-06-29 12:27 . 2008-08-14 14:51 24576 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxexps.dll
+ 2009-03-08 02:33 . 2009-04-30 21:16 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-08 02:33 . 2009-03-08 02:33 25600 c:\windows\system32\dllcache\jsproxy.dll
- 2009-03-31 20:35 . 2009-05-13 18:50 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 35088 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 18704 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 20240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-04-03 16:01 . 2009-04-03 16:01 71504 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNVP.DLL
+ 2009-04-03 15:57 . 2009-04-03 15:57 21320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12EXE.EXE
+ 2006-07-24 08:50 . 2006-07-24 08:50 47920 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\VBAME.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 92976 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSADDNDR.DLL
+ 2006-10-26 19:13 . 2006-10-26 19:13 72472 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\XL12CNVP.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WORDPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 64288 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\VBIDEPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 15672 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SMARTTAGINSTALL.EXE
+ 2006-10-26 17:49 . 2006-10-26 17:49 34104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SETLANG.EXE
+ 2006-10-26 18:55 . 2006-10-26 18:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-26 18:55 . 2006-10-26 18:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 40424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\REFIEBAR.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12112 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPTPOL.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 18760 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OPHPROXY.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 16728 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OMUOPTINPS.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 23392 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OISCTRL.DLL
+ 2006-10-27 13:11 . 2006-10-27 13:11 54680 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFRHD.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 11544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICEPL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 16192 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NPOFF12.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 20280 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTAGPIA.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 43832 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSSH.DLL
+ 2006-10-27 13:26 . 2006-10-27 13:26 35152 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOSTYLE.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 67408 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPUI.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 33104 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPPPR.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 32592 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPMON.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOMSE.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 67896 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHTMED.EXE
+ 2006-10-27 13:01 . 2006-10-27 13:01 76088 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSOHEV.DLL
+ 2006-10-26 17:59 . 2006-10-26 17:59 19768 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSMH.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 48424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSE7.EXE
+ 2006-10-26 18:12 . 2006-10-26 18:12 89400 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\METCONV.DLL
+ 2006-10-26 19:41 . 2006-10-26 19:41 66368 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\INLAUNCH.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPOL.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 12096 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPOL.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 53576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\AUTHZAX.DLL
+ 2006-10-26 19:18 . 2006-10-26 19:18 94016 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ACCOLK.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:33 12288 c:\windows\ie8updates\KB969897-IE8\xpshims.dll
+ 2009-06-29 13:51 . 2009-03-08 02:33 25600 c:\windows\ie8updates\KB969897-IE8\jsproxy.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 10576 c:\windows\assembly\GAC\Policy.11.0.office\12.0.0.0__71e9bce111e9429c\Policy.11.0.Office.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11112 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Vbe.Interop.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Word.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11136 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.SmartTag.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11152 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.PowerPoint\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.PowerPoint.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 11128 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Graph.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 11144 c:\windows\assembly\GAC\Policy.11.0.Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Policy.11.0.Microsoft.Office.Interop.Excel.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 63336 c:\windows\assembly\GAC\Microsoft.Vbe.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Vbe.Interop.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 19320 c:\windows\assembly\GAC\Microsoft.Office.Interop.SmartTag\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.SmartTag.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 864144 c:\windows\system32\spool\drivers\w32x86\msonpdrv.dll
+ 2009-03-31 20:35 . 2008-11-10 09:41 864144 c:\windows\system32\spool\drivers\w32x86\3\msonpdrv.dll
+ 2009-06-29 12:27 . 2009-03-25 07:34 212480 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpgd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:45 151552 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpco32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:34 982196 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igkrng500.bin
+ 2009-06-29 12:27 . 2009-03-25 07:10 134656 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxtray.exe
+ 2009-06-29 12:27 . 2009-03-25 07:09 244224 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxsrvc.exe
+ 2009-06-29 12:27 . 2009-03-25 07:10 199168 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxpph.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 136192 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxpers.exe
+ 2009-06-29 12:27 . 2009-03-25 07:10 165888 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxext.exe
+ 2009-06-29 12:27 . 2009-03-25 07:09 130048 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxdo.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 206848 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxdev.dll
+ 2009-06-29 12:27 . 2009-03-25 07:12 645120 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxcfg.exe
+ 2009-06-29 12:27 . 2009-03-25 07:34 417344 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igcompkrng500.bin
+ 2009-06-29 12:27 . 2009-03-25 07:10 166912 c:\windows\system32\ReinstallBackups\0026\DriverFiles\hkcmd.exe
+ 2009-06-29 12:29 . 2009-03-25 07:34 212480 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpgd32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:45 151552 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpco32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:10 134656 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxtray.exe
+ 2009-06-29 12:29 . 2009-03-25 07:09 244224 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxsrvc.exe
+ 2009-06-29 12:29 . 2008-08-14 14:51 217088 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxpph.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 136192 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxpers.exe
+ 2009-06-29 12:29 . 2008-08-25 09:42 178712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxext.exe
- 2009-06-28 15:52 . 2008-08-15 13:06 178712 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxext.exe
+ 2009-06-29 12:29 . 2008-08-14 14:50 135168 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdo.dll
- 2009-06-28 15:52 . 2008-08-11 17:24 135168 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdo.dll
+ 2009-06-29 12:29 . 2009-03-25 07:09 206848 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxdev.dll
+ 2009-06-29 12:29 . 2008-08-25 09:42 670232 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxcfg.exe
+ 2009-06-29 12:29 . 2008-08-14 15:13 445796 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igcompkrng500.bin
+ 2009-06-29 12:29 . 2009-03-25 07:10 166912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\hkcmd.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 920088 c:\windows\system32\igxpun.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 150040 c:\windows\system32\igfxtray.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 256536 c:\windows\system32\igfxsrvc.exe
+ 2009-03-31 17:11 . 2008-08-14 14:51 217088 c:\windows\system32\igfxpph.dll
+ 2009-03-31 17:11 . 2008-08-25 09:42 154136 c:\windows\system32\igfxpers.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 178712 c:\windows\system32\igfxext.exe
+ 2009-03-31 17:11 . 2008-08-14 14:50 135168 c:\windows\system32\igfxdo.dll
+ 2009-03-31 17:11 . 2008-08-14 14:50 221184 c:\windows\system32\igfxdev.dll
+ 2009-03-31 17:11 . 2008-08-25 09:42 670232 c:\windows\system32\igfxcfg.exe
+ 2009-03-31 17:11 . 2008-08-14 15:13 445796 c:\windows\system32\igcompkrng500.bin
+ 2004-08-17 15:49 . 2009-04-30 21:16 385536 c:\windows\system32\iedkcs32.dll
- 2004-08-17 15:49 . 2009-03-08 02:32 173056 c:\windows\system32\ie4uinit.exe
+ 2004-08-17 15:49 . 2009-04-30 11:21 173056 c:\windows\system32\ie4uinit.exe
+ 2009-03-31 17:11 . 2008-08-25 09:42 178712 c:\windows\system32\hkcmd.exe
+ 2009-03-31 17:11 . 2008-08-14 14:50 106496 c:\windows\system32\hccutils.dll
- 2009-03-31 18:04 . 2009-05-24 06:10 271784 c:\windows\system32\FNTCACHE.DAT
+ 2009-03-31 18:04 . 2009-06-29 14:03 271784 c:\windows\system32\FNTCACHE.DAT
+ 2009-06-29 12:27 . 2008-08-14 15:23 147456 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igxpco32.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 150040 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxtray.exe
+ 2009-06-29 12:27 . 2008-08-14 14:51 258048 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxTMM.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 256536 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxsrvc.exe
+ 2009-06-29 12:27 . 2008-08-14 14:51 217088 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxpph.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 154136 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxpers.exe
+ 2009-06-29 12:27 . 2008-08-25 09:42 178712 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxext.exe
+ 2009-06-29 12:27 . 2008-08-14 14:50 135168 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxdo.dll
+ 2009-06-29 12:27 . 2008-08-14 14:50 221184 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxdev.dll
+ 2009-06-29 12:27 . 2008-08-25 09:42 670232 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxcfg.exe
+ 2009-06-29 12:27 . 2008-08-14 15:13 147172 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfcg550.bin
+ 2009-06-29 12:27 . 2008-08-14 15:12 536576 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdumdx32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:13 445796 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igcompkrng500.bin
+ 2009-06-29 12:27 . 2008-08-25 09:42 178712 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\hkcmd.exe
+ 2009-06-29 12:27 . 2008-08-14 14:50 106496 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\hccutils.dll
+ 2009-03-08 02:34 . 2009-05-13 05:05 915456 c:\windows\system32\dllcache\wininet.dll
+ 2009-04-15 14:54 . 2009-04-15 14:54 585216 c:\windows\system32\dllcache\rpcrt4.dll
+ 2009-05-07 15:33 . 2009-05-07 15:33 346624 c:\windows\system32\dllcache\localspl.dll
+ 2009-03-08 12:09 . 2009-04-30 21:16 385536 c:\windows\system32\dllcache\iedkcs32.dll
- 2009-03-08 02:32 . 2009-03-08 02:32 173056 c:\windows\system32\dllcache\ie4uinit.exe
+ 2009-03-08 02:32 . 2009-04-30 11:21 173056 c:\windows\system32\dllcache\ie4uinit.exe
- 2009-03-31 17:11 . 2006-11-10 07:25 319456 c:\windows\system32\difxapi.dll
+ 2009-03-31 17:11 . 2006-11-10 14:25 319456 c:\windows\system32\difxapi.dll
+ 2009-06-29 13:54 . 2009-06-29 13:54 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
- 2009-03-31 20:51 . 2009-03-31 20:51 217864 c:\windows\Installer\{90120000-006E-0405-0000-0000000FF1CE}\misc.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 888080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 272648 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 922384 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 845584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 217864 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 184080 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 159504 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
+ 2009-04-03 16:11 . 2009-04-03 16:11 408424 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WINWORD.EXE
+ 2007-06-07 17:51 . 2007-06-07 17:51 125320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\SSGEN.DLL
+ 2007-06-07 17:51 . 2007-06-07 17:51 465800 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\OUTLFLTR.DLL
+ 2006-07-24 08:50 . 2006-07-24 08:50 125744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\MSSTDFMT.DLL
+ 2006-10-26 18:49 . 2006-10-26 18:49 509200 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\WRD12CVR.DLL
+ 2006-10-26 19:07 . 2006-10-26 19:07 368968 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\PPSLAX.DLL
+ 2006-10-27 13:16 . 2006-10-27 13:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-20 06:37 . 2006-10-20 06:37 637744 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OGALEGIT.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 416544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\OFFICE.DLL
+ 2006-10-26 17:55 . 2006-10-26 17:55 145688 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSTORE.EXE
+ 2006-10-26 12:47 . 2006-10-26 12:47 727840 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSPROOF6.DLL
+ 2006-10-26 17:56 . 2006-10-26 17:56 864080 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSONPDRV.DLL
+ 2006-10-26 11:58 . 2006-10-26 11:58 290576 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MSCDM.DLL
+ 2006-10-26 17:52 . 2006-10-26 17:52 460616 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\MODHELP.DLL
+ 2006-10-26 18:00 . 2006-10-26 18:00 178488 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\IETAG.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 150320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\GRAPHPIA.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-26 18:55 . 2006-10-26 18:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2006-10-26 18:12 . 2006-10-26 18:12 106824 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\DSSM.EXE
+ 2009-06-29 13:51 . 2009-03-08 02:34 914944 c:\windows\ie8updates\KB969897-IE8\wininet.dll
+ 2009-06-29 13:51 . 2008-07-09 07:36 391032 c:\windows\ie8updates\KB969897-IE8\spuninst\updspapi.dll
+ 2009-06-29 13:51 . 2007-11-30 12:39 233848 c:\windows\ie8updates\KB969897-IE8\spuninst\spuninst.exe
+ 2009-06-29 13:51 . 2009-03-08 02:33 246784 c:\windows\ie8updates\KB969897-IE8\ieproxy.dll
+ 2009-06-29 13:51 . 2009-03-08 12:09 391536 c:\windows\ie8updates\KB969897-IE8\iedkcs32.dll
+ 2009-06-29 13:51 . 2009-03-08 02:32 173056 c:\windows\ie8updates\KB969897-IE8\ie4uinit.exe
+ 2009-06-29 13:57 . 2009-06-29 13:57 609160 c:\windows\assembly\GAC_MSIL\Microsoft.Office.InfoPath.Client.Internal.Host\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 118176 c:\windows\assembly\GAC_32\Microsoft.Office.InfoPath.Client.Internal.Host.Interop\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Infopath.Client.Internal.Host.Interop.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 423784 c:\windows\assembly\GAC\office\12.0.0.0__71e9bce111e9429c\OFFICE.DLL
+ 2009-06-29 13:57 . 2009-06-29 13:57 870256 c:\windows\assembly\GAC\Microsoft.Office.Interop.Word\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Word.dll
+ 2009-06-29 13:56 . 2009-06-29 13:56 149352 c:\windows\assembly\GAC\Microsoft.Office.Interop.Graph\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Graph.dll
+ 2004-08-17 15:49 . 2009-04-30 21:16 1207808 c:\windows\system32\urlmon.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 6313088 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpmp32.sys
+ 2009-06-29 12:27 . 2009-03-25 07:35 3440128 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpdx32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:35 2900352 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igxpdv32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:09 5702656 c:\windows\system32\ReinstallBackups\0026\DriverFiles\igfxress.dll
+ 2009-06-29 12:27 . 2009-03-25 07:21 5054464 c:\windows\system32\ReinstallBackups\0026\DriverFiles\ig4icd32.dll
+ 2009-06-29 12:27 . 2009-03-25 07:21 3203072 c:\windows\system32\ReinstallBackups\0026\DriverFiles\ig4dev32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 6313088 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpmp32.sys
+ 2009-06-29 12:29 . 2009-03-25 07:35 3440128 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpdx32.dll
+ 2009-06-29 12:29 . 2009-03-25 07:35 2900352 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igxpdv32.dll
+ 2009-06-29 12:29 . 2008-08-14 15:13 2026604 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igkrng500.bin
- 2009-06-28 15:52 . 2008-08-11 17:48 2026604 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igkrng500.bin
+ 2009-06-29 12:29 . 2009-03-25 07:09 5702656 c:\windows\system32\ReinstallBackups\0023\DriverFiles\igfxress.dll
+ 2009-06-29 12:29 . 2008-08-14 14:59 3878912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\ig4icd32.dll
+ 2009-06-29 12:29 . 2008-08-14 15:00 2342912 c:\windows\system32\ReinstallBackups\0023\DriverFiles\ig4dev32.dll
+ 2004-08-17 15:49 . 2009-05-13 05:05 5936128 c:\windows\system32\mshtml.dll
+ 2009-03-31 17:11 . 2008-08-14 15:13 2026604 c:\windows\system32\igkrng500.bin
+ 2009-03-31 17:11 . 2008-08-14 14:50 5672960 c:\windows\system32\igfxress.dll
+ 2009-03-31 17:11 . 2008-08-14 14:59 3878912 c:\windows\system32\ig4icd32.dll
+ 2009-03-31 17:11 . 2008-08-14 15:00 2342912 c:\windows\system32\ig4dev32.dll
- 2009-03-08 02:32 . 2009-03-08 02:32 1985024 c:\windows\system32\iertutil.dll
+ 2009-03-08 02:32 . 2009-04-30 21:16 1985024 c:\windows\system32\iertutil.dll
+ 2008-11-20 21:06 . 2008-11-20 21:06 1194848 c:\windows\system32\FM20.DLL
+ 2009-06-29 12:27 . 2008-08-14 15:13 2026604 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igkrng500.bin
+ 2009-06-29 12:27 . 2008-08-14 15:13 1498700 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igkrng400.bin
+ 2009-06-29 12:27 . 2008-08-14 14:50 5672960 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igfxress.dll
+ 2009-06-29 12:27 . 2008-08-14 15:15 3379200 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdumd32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:15 2469888 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igdkmd32.sys
+ 2009-06-29 12:27 . 2008-08-14 15:08 2195456 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\igd10umd32.dll
+ 2009-06-29 12:27 . 2008-08-14 14:59 3878912 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\ig4icd32.dll
+ 2009-06-29 12:27 . 2008-08-14 15:00 2342912 c:\windows\system32\DRVSTORE\igdlh_4FEC1CDDF47E8026549D1B715FA3358484BE25D7\ig4dev32.dll
+ 2009-03-31 16:58 . 2009-04-19 19:44 1847808 c:\windows\system32\dllcache\win32k.sys
+ 2009-03-08 02:34 . 2009-04-30 21:16 1207808 c:\windows\system32\dllcache\urlmon.dll
+ 2009-03-08 02:41 . 2009-05-13 05:05 5936128 c:\windows\system32\dllcache\mshtml.dll
+ 2009-03-31 20:35 . 2009-06-29 14:00 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 1172240 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-03-31 20:35 . 2009-06-29 14:00 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
- 2009-03-31 20:35 . 2009-05-13 18:50 1165584 c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
+ 2009-04-03 15:57 . 2009-04-03 15:57 4671320 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WRD12CNV.DLL
+ 2006-10-26 12:47 . 2006-10-26 12:47 1512304 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\NLSD0000.DLL
+ 2009-03-31 20:33 . 2009-03-31 20:33 1276720 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.4518\EXCELPIA.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:34 1206784 c:\windows\ie8updates\KB969897-IE8\urlmon.dll
+ 2009-06-29 13:51 . 2009-03-08 02:41 5937152 c:\windows\ie8updates\KB969897-IE8\mshtml.dll
+ 2009-06-29 13:51 . 2009-03-08 02:32 1985024 c:\windows\ie8updates\KB969897-IE8\iertutil.dll
+ 2009-06-29 13:57 . 2009-06-29 13:57 1279848 c:\windows\assembly\GAC\Microsoft.Office.Interop.Excel\12.0.0.0__71e9bce111e9429c\Microsoft.Office.Interop.Excel.dll
+ 2009-03-31 20:04 . 2009-06-01 16:51 23635392 c:\windows\system32\MRT.exe
+ 2009-03-08 02:39 . 2009-04-30 21:16 11064832 c:\windows\system32\ieframe.dll
+ 2009-04-03 16:01 . 2009-04-03 16:01 15108448 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\XL12CNV.EXE
+ 2009-04-03 16:11 . 2009-04-03 16:11 17740136 c:\windows\Installer\$PatchCache$\Managed\00002109030000000000000000F01FEC\12.0.6425\WWLIB.DLL
+ 2009-06-29 13:51 . 2009-03-08 02:39 11063808 c:\windows\ie8updates\KB969897-IE8\ieframe.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"EA Core"="g:\program files\Electronic Arts\EADM\Core.exe" [2009-04-29 3338240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2007-11-15 16384]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"OpwareSE2"="g:\program files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [2003-05-08 49152]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-25 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-25 178712]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-25 154136]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2007-11-15 202544]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-07-31 16806912]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2004-06-08 29696]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\KEM.exe [2009-4-1 581632]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "g:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 10:05 356352 ----a-w- g:\program files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"g:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 14:24 93336]
R1 SASDIFSV;SASDIFSV;g:\program files\SUPERAntiSpyware\sasdifsv.sys [28.4.2009 11:33 9968]
R1 SASKUTIL;SASKUTIL;g:\program files\SUPERAntiSpyware\SASKUTIL.SYS [28.4.2009 11:33 72944]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [29.6.2009 12:44 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 14:23 727720]
R2 SbPF.Launcher;SbPF.Launcher;g:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;g:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [29.6.2009 12:17 604416]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [31.3.2009 19:11 110080]
R3 P0630VID;Creative WebCam Live!;c:\windows\system32\drivers\P0630Vid.sys [1.4.2009 18:12 91797]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [29.6.2009 12:44 65576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [24.6.2009 17:38 26736]
S3 SASENUM;SASENUM;g:\program files\SUPERAntiSpyware\SASENUM.SYS [28.4.2009 11:33 7408]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Obsah adresáře 'Naplánované úlohy'
2009-06-29 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
2009-06-29 c:\windows\Tasks\User_Feed_Synchronization-{F08D6994-B125-42B9-A557-8A2AF779265E}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]
2009-06-29 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Easy-WebPrint Add To Print List - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
IE: Easy-WebPrint High Speed Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint Preview - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint Print - g:\program files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-29 16:24
Windows 5.1.2600 Service Pack 3 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\EverestDriver]
"ImagePath"="\??\c:\program files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(1336)
g:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\documents and settings\Nikola\Data aplikací\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
.
Celkový čas: 2009-06-29 16:26
ComboFix-quarantined-files.txt 2009-06-29 14:26
ComboFix2.txt 2009-06-29 12:18
Před spuštěním: Volných bajtů: 25 019 944 960
Po spuštění: Volných bajtů: 25 052 450 816
421 --- E O F --- 2009-06-29 14:05
Re: prosím o kontrolu logu:-)
Hijackthis
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:28:07, on 29.6.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Nikola\Plocha\Programy\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - G:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [OpwareSE2] "G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] "G:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 8527134125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 8596986500
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - G:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - G:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - G:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 7671 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:28:07, on 29.6.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
G:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\WINDOWS\system32\ctfmon.exe
G:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Nikola\Plocha\Programy\hijackthis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - G:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [OpwareSE2] "G:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EA Core] "G:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://G:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - G:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 8527134125
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 8596986500
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - G:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - G:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - G:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 7671 bytes
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43290
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu logu:-)
logy O.K:
takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Pokud nejsou problémy , je to vše..
takže jestli nejsou problémy,tak vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Pokud nejsou problémy , je to vše..
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: prosím o kontrolu logu:-)
Díky moc za to že jste s emi cely den venoval:-)
-
jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43290
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Offline
Re: prosím o kontrolu logu:-) Vyřešeno
Není zač..
M§žeš dát vyřešeno , fajfku.
M§žeš dát vyřešeno , fajfku.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 120 hostů