Prosím o kontrolu logu. Děkuji

[Jirka_Ka]

[2010.05.16 18:45:08 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll
[2010.05.16 18:45:08 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe
[2010.05.16 18:45:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2010.05.16 18:45:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe
[2010.05.16 18:45:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010.05.16 18:45:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010.05.16 18:44:53 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Dokumenty\Filmy
[6 C:\WINDOWS\Fonts\*.tmp files -> C:\WINDOWS\Fonts\*.tmp -> ]

========== Files - Modified Within 14 Days ==========

[2010.05.28 17:03:44 | 000,076,996 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\certifikat_firestop_p.Drapela.pdf
[2010.05.28 16:54:25 | 000,000,408 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010.05.28 16:43:25 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.05.28 16:43:22 | 000,276,202 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2010.05.28 16:43:15 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.05.28 16:43:12 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.28 16:42:58 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.28 16:42:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.28 16:42:13 | 001,572,864 | -H-- | M] () -- C:\Documents and Settings\Jirka\NTUSER.DAT
[2010.05.28 16:38:03 | 001,020,296 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.05.28 16:38:03 | 000,432,492 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.05.28 16:38:03 | 000,429,018 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.05.28 16:38:03 | 000,078,030 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.05.28 16:38:03 | 000,067,448 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.05.28 16:35:58 | 003,700,273 | R--- | M] () -- C:\Documents and Settings\Jirka\Plocha\ComboFix.exe
[2010.05.28 07:19:05 | 005,887,928 | -H-- | M] () -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\IconCache.db
[2010.05.27 22:38:26 | 000,289,720 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\Diagnostika váhy vzduchu a ....pdf
[2010.05.27 22:37:43 | 000,000,706 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\PDFCreator.lnk
[2010.05.27 07:11:03 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jirka\Plocha\OTL.exe
[2010.05.26 22:13:17 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe
[2010.05.26 22:09:07 | 000,015,600 | ---- | M] (Windows (R) 2000 DDK provider) -- C:\WINDOWS\gdrv.sys
[2010.05.26 21:05:51 | 000,011,222 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\obálka_long_JCI.odt
[2010.05.26 20:40:29 | 000,001,765 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\CanoScan Toolbox 5.0.lnk
[2010.05.25 22:47:16 | 000,010,733 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\nástraha hlodavce.odt
[2010.05.25 22:23:44 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.05.23 17:01:10 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.05.21 17:29:30 | 000,073,728 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\Subdodávka_vyplneno-Drapela_hotovo.xls
[2010.05.21 14:14:28 | 000,221,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MpSigStub.exe
[2010.05.20 16:59:08 | 001,712,055 | ---- | M] () -- C:\WINDOWS\System32\bezhalogenove_trubky_a_hadice.pdf
[2010.05.18 19:08:41 | 000,001,819 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Design Review.lnk
[2010.05.18 19:07:21 | 000,000,864 | ---- | M] () -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
[2010.05.18 19:04:46 | 000,000,682 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Editor schémat.lnk
[2010.05.18 15:01:09 | 000,004,566 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.05.17 19:12:12 | 000,018,496 | ---- | M] () -- C:\Documents and Settings\Jirka\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
[2010.05.17 19:11:41 | 000,122,136 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.05.16 22:47:31 | 000,000,678 | ---- | M] () -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění\PopTray.lnk
[2010.05.16 22:47:31 | 000,000,666 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\PopTray.lnk
[2010.05.16 22:44:57 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\Jirka\Plocha\Total Commander.lnk
[2010.05.16 22:42:24 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.05.16 22:41:34 | 000,001,668 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Thunderbird.lnk
[2010.05.16 22:38:48 | 000,000,871 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\OpenOffice.org 3.2.lnk
[2010.05.16 22:32:36 | 000,001,717 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Fakturky 4.9.0.lnk
[2010.05.16 22:07:33 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010.05.16 22:07:29 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2010.05.16 21:52:39 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010.05.16 21:31:44 | 000,250,576 | ---- | M] () -- C:\ntldr
[2010.05.16 20:35:53 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\Jirka\ntuser.ini
[2010.05.16 20:06:47 | 000,001,503 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Výběr prohlížeče.lnk
[2010.05.16 19:05:37 | 000,000,832 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Microsoft Security Essentials.lnk
[2010.05.16 18:51:15 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010.05.16 18:50:29 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.05.16 18:48:48 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.05.16 18:48:48 | 000,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.05.16 18:48:48 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010.05.16 18:48:48 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010.05.16 18:48:48 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini
[2010.05.16 18:48:48 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010.05.16 18:48:48 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010.05.16 18:48:45 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.05.16 18:48:45 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.05.16 18:48:37 | 000,004,249 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010.05.16 18:47:59 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010.05.16 18:47:59 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010.05.16 18:45:57 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini
[2010.05.16 18:45:57 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini
[2010.05.16 18:44:04 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2010.05.16 18:02:36 | 002,472,477 | ---- | M] () -- C:\Documents and Settings\Jirka\Dokumenty\INTERNA_III_PUDORYSY_0320.dwg

========== Files Created - No Company Name ==========

[2010.05.28 17:03:44 | 000,076,996 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\certifikat_firestop_p.Drapela.pdf
[2010.05.28 16:38:45 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.05.28 16:38:44 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.05.28 16:38:44 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.05.28 16:38:44 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.05.28 16:38:44 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.05.28 16:38:11 | 003,700,273 | R--- | C] () -- C:\Documents and Settings\Jirka\Plocha\ComboFix.exe
[2010.05.27 22:38:25 | 000,289,720 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\Diagnostika váhy vzduchu a ....pdf
[2010.05.27 22:37:43 | 000,000,706 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\PDFCreator.lnk
[2010.05.27 22:37:38 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2010.05.26 21:04:30 | 000,011,222 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\obálka_long_JCI.odt
[2010.05.26 20:40:29 | 000,001,765 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\CanoScan Toolbox 5.0.lnk
[2010.05.25 22:47:15 | 000,010,733 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\nástraha hlodavce.odt
[2010.05.25 22:23:44 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.05.23 17:01:10 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.05.23 17:01:08 | 000,261,312 | ---- | C] () -- C:\cmldr
[2010.05.21 17:29:29 | 000,073,728 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\Subdodávka_vyplneno-Drapela_hotovo.xls
[2010.05.20 16:59:08 | 001,712,055 | ---- | C] () -- C:\WINDOWS\System32\bezhalogenove_trubky_a_hadice.pdf
[2010.05.18 19:09:49 | 002,472,477 | ---- | C] () -- C:\Documents and Settings\Jirka\Dokumenty\INTERNA_III_PUDORYSY_0320.dwg
[2010.05.18 19:08:41 | 000,001,819 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Autodesk Design Review.lnk
[2010.05.18 19:07:21 | 000,000,864 | ---- | C] () -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.2.lnk
[2010.05.18 19:04:46 | 000,000,682 | ---- | C] () -- C:\Documents and Settings\Jirka\Plocha\Editor schémat.lnk
[2010.05.16 22:58:47 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.05.16 22:53:39 | 000,000,096 | ---- | C] () -- C:\Documents and Settings\Jirka\pki-component-logica-dflt.log
[2010.05.16 22:53:29 | 000,000,595 | ---- | C] () -- C:\WINDOWS\System32\XRXS2LMK.SMT
[2010.05.16 22:47:31 | 000,000,678 | ---- | C] () -- C:\Documents and Settings\Jirka\Nabídka Start\Programy\Po spuštění\PopTray.lnk
[2010.05.16 22:47:31 | 000,000,666 | ---- | C] () -- C:\Documents and Settings\Jirka\Plocha\PopTray.lnk
[2010.05.16 22:42:24 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.05.16 22:41:34 | 000,001,668 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Thunderbird.lnk
[2010.05.16 22:38:48 | 000,000,871 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\OpenOffice.org 3.2.lnk
[2010.05.16 22:32:36 | 000,001,717 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Fakturky 4.9.0.lnk
[2010.05.16 22:27:46 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\Jirka\Plocha\Total Commander.lnk
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF
[2010.05.16 22:27:44 | 000,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF
[2010.05.16 22:07:33 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.05.16 22:07:29 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Mozilla Firefox.lnk
[2010.05.16 20:43:28 | 000,239,616 | ---- | C] () -- C:\WINDOWS\System32\wstrenderer.ax
[2010.05.16 20:43:27 | 000,118,272 | ---- | C] () -- C:\WINDOWS\System32\mpeg2data.ax
[2010.05.16 20:43:25 | 000,164,352 | ---- | C] () -- C:\WINDOWS\System32\wstpager.ax
[2010.05.16 20:43:24 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\vbicodec.ax
[2010.05.16 20:43:19 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2010.05.16 20:43:18 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2010.05.16 20:43:16 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2010.05.16 20:43:13 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2010.05.16 20:43:12 | 000,148,992 | ---- | C] () -- C:\WINDOWS\System32\mpg2splt.ax
[2010.05.16 20:43:11 | 000,004,310 | ---- | C] () -- C:\WINDOWS\System32\odbcconf.rsp
[2010.05.16 20:43:08 | 000,265,948 | ---- | C] () -- C:\WINDOWS\System32\locale.nls
[2010.05.16 20:43:08 | 000,250,576 | ---- | C] () -- C:\ntldr
[2010.05.16 20:43:08 | 000,023,044 | ---- | C] () -- C:\WINDOWS\System32\sorttbls.nls
[2010.05.16 20:40:52 | 000,674,168 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm
[2010.05.16 20:40:52 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2010.05.16 20:40:52 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2010.05.16 20:40:52 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2010.05.16 20:40:52 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2010.05.16 20:40:52 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2010.05.16 20:40:52 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2010.05.16 20:40:52 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2010.05.16 20:40:52 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2010.05.16 20:40:52 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2010.05.16 20:40:52 | 000,069,570 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm
[2010.05.16 20:40:52 | 000,058,456 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf
[2010.05.16 20:40:52 | 000,028,164 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm
[2010.05.16 20:40:52 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta
[2010.05.16 20:40:52 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css
[2010.05.16 20:40:52 | 000,001,746 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf
[2010.05.16 20:40:52 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js
[2010.05.16 20:40:51 | 000,034,548 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf
[2010.05.16 20:40:51 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2010.05.16 20:40:51 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif
[2010.05.16 20:40:51 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif
[2010.05.16 20:40:51 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif
[2010.05.16 20:40:51 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif
[2010.05.16 20:40:51 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif
[2010.05.16 20:40:51 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif
[2010.05.16 20:40:51 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif
[2010.05.16 20:40:51 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif
[2010.05.16 20:40:51 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif
[2010.05.16 20:40:50 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv
[2010.05.16 20:40:50 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif
[2010.05.16 20:40:50 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif
[2010.05.16 20:40:49 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif
[2010.05.16 20:40:49 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js
[2010.05.16 20:40:49 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif
[2010.05.16 20:40:49 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif
[2010.05.16 20:40:49 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif
[2010.05.16 20:40:49 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif
[2010.05.16 20:40:49 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif
[2010.05.16 20:40:49 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif
[2010.05.16 20:40:49 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif
[2010.05.16 20:40:49 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif
[2010.05.16 20:40:47 | 000,001,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf
[2010.05.16 20:40:47 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm
[2010.05.16 20:40:45 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv
[2010.05.16 20:40:45 | 000,066,170 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz
[2010.05.16 20:40:44 | 000,086,446 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm
[2010.05.16 20:40:44 | 000,001,483 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl
[2010.05.16 20:40:44 | 000,001,480 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl
[2010.05.16 20:40:44 | 000,001,479 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl
[2010.05.16 20:40:44 | 000,001,465 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl
[2010.05.16 20:40:44 | 000,001,462 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl
[2010.05.16 20:40:44 | 000,001,263 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl
[2010.05.16 20:40:44 | 000,001,059 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl
[2010.05.16 20:40:44 | 000,001,042 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl
[2010.05.16 20:40:44 | 000,001,034 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl
[2010.05.16 20:40:44 | 000,000,809 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl
[2010.05.16 20:40:44 | 000,000,806 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl
[2010.05.16 20:40:44 | 000,000,783 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl
[2010.05.16 20:40:44 | 000,000,777 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl
[2010.05.16 20:40:44 | 000,000,774 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl
[2010.05.16 20:40:44 | 000,000,722 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl
[2010.05.16 20:40:43 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv
[2010.05.16 20:40:42 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip
[2010.05.16 20:40:42 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2010.05.16 20:40:41 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2010.05.16 20:40:37 | 000,097,117 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.hlp
[2010.05.16 20:40:37 | 000,036,870 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf
[2010.05.16 20:40:37 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif
[2010.05.16 20:40:37 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif
[2010.05.16 20:40:37 | 000,001,885 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.cnt
[2010.05.16 20:40:36 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv
[2010.05.16 20:40:31 | 000,001,950 | ---- | C] () -- C:\WINDOWS\System32\pid.inf
[2010.05.16 20:40:30 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js
[2010.05.16 20:40:29 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010.05.16 20:40:28 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv
[2010.05.16 20:40:28 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css
[2010.05.16 20:40:28 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm
[2010.05.16 20:40:28 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js
[2010.05.16 20:40:27 | 000,184,130 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz
[2010.05.16 20:40:27 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif
[2010.05.16 20:40:27 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif
[2010.05.16 20:40:27 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif
[2010.05.16 20:40:27 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif
[2010.05.16 20:40:27 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif
[2010.05.16 20:40:27 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif
[2010.05.16 20:40:26 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2010.05.16 20:29:44 | 000,004,566 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.05.16 20:29:39 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd
[2010.05.16 20:29:39 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2010.05.16 20:29:39 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf
[2010.05.16 20:29:38 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2010.05.16 20:29:36 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls
[2010.05.16 20:29:36 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls
[2010.05.16 20:29:35 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls
[2010.05.16 20:29:35 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls
[2010.05.16 20:29:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls
[2010.05.16 20:29:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls
[2010.05.16 20:29:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls
[2010.05.16 20:29:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls
[2010.05.16 20:29:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls
[2010.05.16 20:29:30 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls
[2010.05.16 20:29:30 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls
[2010.05.16 20:29:30 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls
[2010.05.16 20:29:30 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls
[2010.05.16 20:29:30 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls
[2010.05.16 20:29:28 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls
[2010.05.16 20:29:28 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls
[2010.05.16 20:29:28 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls
[2010.05.16 20:29:28 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls
[2010.05.16 20:29:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls
[2010.05.16 20:29:28 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS
[2010.05.16 20:29:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls
[2010.05.16 20:29:27 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls
[2010.05.16 20:29:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls
[2010.05.16 20:29:21 | 000,001,592 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010.05.16 20:27:33 | 001,014,483 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT
[2010.05.16 20:27:33 | 000,809,394 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2010.05.16 20:27:33 | 000,399,670 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2010.05.16 20:27:33 | 000,037,509 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT
[2010.05.16 20:27:33 | 000,013,497 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2010.05.16 20:27:33 | 000,008,599 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2010.05.16 20:27:33 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2010.05.16 20:27:33 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat
[2010.05.16 20:26:56 | 000,122,136 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.05.16 20:26:05 | 000,000,281 | RHS- | C] () -- C:\boot.ini
[2010.05.16 20:26:03 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.05.16 20:06:47 | 000,001,503 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Výběr prohlížeče.lnk
[2010.05.16 19:11:40 | 000,000,408 | -H-- | C] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010.05.16 19:05:37 | 000,000,832 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Microsoft Security Essentials.lnk
[2010.05.16 18:52:19 | 000,001,024 | -H-- | C] () -- C:\Documents and Settings\Jirka\ntuser.dat.LOG
[2010.05.16 18:52:19 | 000,000,178 | -HS- | C] () -- C:\Documents and Settings\Jirka\ntuser.ini
[2010.05.16 18:52:18 | 001,572,864 | -H-- | C] () -- C:\Documents and Settings\Jirka\NTUSER.DAT
[2010.05.16 18:51:15 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010.05.16 18:50:29 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.05.16 18:50:26 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls
[2010.05.16 18:50:07 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls
[2010.05.16 18:50:07 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls
[2010.05.16 18:49:56 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls
[2010.05.16 18:49:55 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2010.05.16 18:49:50 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2010.05.16 18:49:49 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2010.05.16 18:49:48 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2010.05.16 18:49:38 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2010.05.16 18:49:25 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls
[2010.05.16 18:49:25 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls
[2010.05.16 18:49:25 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls
[2010.05.16 18:49:25 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls
[2010.05.16 18:49:25 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls
[2010.05.16 18:49:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls
[2010.05.16 18:49:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls
[2010.05.16 18:49:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls
[2010.05.16 18:49:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls
[2010.05.16 18:49:25 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls
[2010.05.16 18:49:24 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls
[2010.05.16 18:49:24 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls
[2010.05.16 18:49:24 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls
[2010.05.16 18:49:23 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls
[2010.05.16 18:49:23 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls
[2010.05.16 18:49:23 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls
[2010.05.16 18:49:23 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls
[2010.05.16 18:49:23 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls
[2010.05.16 18:49:23 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls
[2010.05.16 18:49:22 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls
[2010.05.16 18:49:22 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls
[2010.05.16 18:49:22 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls
[2010.05.16 18:49:21 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls
[2010.05.16 18:49:21 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls
[2010.05.16 18:49:21 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls
[2010.05.16 18:49:21 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls
[2010.05.16 18:49:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls
[2010.05.16 18:49:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls
[2010.05.16 18:49:21 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls
[2010.05.16 18:49:20 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls
[2010.05.16 18:49:20 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls
[2010.05.16 18:48:48 | 000,002,504 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.05.16 18:48:48 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010.05.16 18:48:48 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010.05.16 18:48:48 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010.05.16 18:48:48 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010.05.16 18:48:45 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.05.16 18:48:45 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.05.16 18:48:44 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010.05.16 18:47:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest
[2010.05.16 18:47:59 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest
[2010.05.16 18:47:55 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest
[2010.05.16 18:47:41 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex
[2010.05.16 18:47:11 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010.05.16 18:47:11 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010.05.16 18:47:04 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf
[2010.05.16 18:45:24 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Prérijní vítr.bmp
[2010.05.16 18:45:24 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Omítka Santa Fe.bmp
[2010.05.16 18:45:24 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Řeka Sumida.bmp
[2010.05.16 18:45:24 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rododendron.bmp
[2010.05.16 18:45:24 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotec.bmp
[2010.05.16 18:45:23 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce
[2010.05.16 18:45:23 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Mýdlové bubliny.bmp
[2010.05.16 18:45:23 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Zelený kámen.bmp
[2010.05.16 18:45:23 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Na rybách.bmp
[2010.05.16 18:45:23 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Zrnko kávy.bmp
[2010.05.16 18:45:23 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Textura peří.bmp
[2010.05.16 18:45:23 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Modrá krajka 16.bmp
[2010.05.16 18:45:22 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce
[2010.05.16 18:45:22 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce
[2010.05.16 18:45:22 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce
[2010.05.16 18:45:22 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce
[2010.05.16 18:45:22 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce
[2010.05.16 18:45:22 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce
[2010.05.16 18:45:22 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce
[2010.05.16 18:45:20 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010.05.16 18:45:20 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010.05.16 18:45:19 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010.05.16 18:45:12 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc

========== LOP Check ==========

[2010.05.18 19:12:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Autodesk
[2010.05.18 19:12:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Autodesk
[2010.05.26 20:53:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Canon
[2010.05.16 22:53:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\CSAS
[2010.05.16 22:27:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\GHISLER
[2010.05.18 19:07:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\OpenOffice.org
[2010.05.18 19:06:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\ProfiCAD
[2010.05.16 22:46:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jirka\Data aplikací\Thunderbird
[2010.05.28 16:54:25 | 000,000,408 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========


< End of report >

[Reklama]

[Jirka_Ka]

OTL Extras logfile created on: 28.5.2010 18:21:13 - Run 2
OTL by OldTimer - Version 3.2.5.0 Folder = C:\Documents and Settings\Jirka\Dokumenty\Stažené soubory
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

3,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 85,00% Memory free
5,00 Gb Paging File | 5,00 Gb Available in Paging File | 93,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 24,41 Gb Total Space | 13,03 Gb Free Space | 53,38% Space Free | Partition Type: NTFS
Drive D: | 124,63 Gb Total Space | 10,31 Gb Free Space | 8,27% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
Drive F: | 465,76 Gb Total Space | 465,68 Gb Free Space | 99,98% Space Free | Partition Type: NTFS
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive J: | 1,20 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS

Computer Name: JIRKA-37A1B326C
Current User Name: Jirka
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 14 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1039:TCP" = 1039:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"%Product_Name% 4.9.0 " = Fakturky 4.9.0
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{5DE71D48-01EB-4BF2-A643-50FE6C9B6AC9}" = OpenOffice.org 3.2
"{669A37FF-A446-46F9-8AAE-EEC1988A2ADF}" = Autodesk Design Review Firefox Add-on v1.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B1AF68B-4606-4152-9991-1E9D4FF5F0FA}" = Microsoft Antimalware Service CS-CZ Language Pack
"{8D20B4D7-3422-4099-9332-39F27E617A6F}" = Autodesk Design Review 2011
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E590FD1C-E8C6-4D2E-8CA9-77B403F7EE01}" = Microsoft Antimalware
"{EF98A02A-1748-4762-9B7D-5ED1600520D5}" = Microsoft Security Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Autodesk Design Review 2011" = Autodesk Design Review 2011
"CanoScan Toolbox 5.0" = Canon CanoScan Toolbox 5.0
"HD Tune_is1" = HD Tune 2.55
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.9.0 (Basic)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Essentials" = Microsoft Security Essentials
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"Mozilla Thunderbird (3.0.4)" = Mozilla Thunderbird (3.0.4)
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"PopTray" = PopTray 3.20
"ProfiCAD_is1" = ProfiCAD
"Totalcmd" = Total Commander (Remove or Repair)
"Windows XP Service Pack" = Windows XP Service Pack 3
"Xerox Phaser 3122" = Xerox Phaser 3122

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 26.5.2010 13:28:01 | Computer Name = JIRKA-37A1B326C | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8007043c, P2 beginsearch, P3 search, P4
2.1.6519.0, P5 mpsigdwn.dll, P6 2.1.6519.0, P7 microsoft antimalware (bcf43643-a118-4432-aede-d861fcbcfcde),
P8 NIL, P9 NIL, P10 NIL.

Error - 26.5.2010 13:58:04 | Computer Name = JIRKA-37A1B326C | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8007043c, P2 beginsearch, P3 search, P4
2.1.6519.0, P5 mpsigdwn.dll, P6 2.1.6519.0, P7 microsoft antimalware (bcf43643-a118-4432-aede-d861fcbcfcde),
P8 NIL, P9 NIL, P10 NIL.

Error - 26.5.2010 14:29:24 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Visual FoxPro 9 | ID = 1000
Description =

Error - 26.5.2010 16:29:40 | Computer Name = JIRKA-37A1B326C | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 800706ba, P2 beginsearch, P3 search, P4
2.1.6519.0, P5 mpsigdwn.dll, P6 2.1.6519.0, P7 microsoft antimalware (bcf43643-a118-4432-aede-d861fcbcfcde),
P8 NIL, P9 NIL, P10 NIL.

Error - 26.5.2010 16:29:41 | Computer Name = JIRKA-37A1B326C | Source = MSSecurityEssentials | ID = 5000
Description =

Error - 26.5.2010 16:29:45 | Computer Name = JIRKA-37A1B326C | Source = MSSecurityEssentials | ID = 5000
Description =

Error - 26.5.2010 16:33:42 | Computer Name = JIRKA-37A1B326C | Source = EventSystem | ID = 4609
Description = Systém událostí modelu COM+ zjistil při vnitřním zpracovávání chybný
návratový kód. Hodnota HRESULT byla 800706BA z řádku 44 v d:\comxp_sp3\com\com1x\src\events\tier1\eventsystemobj.cpp.Obraťte
se na služby odborné pomoci společnosti Microsoft a informujte je o této chyb

Error - 26.5.2010 16:34:45 | Computer Name = JIRKA-37A1B326C | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 800706ba, P2 beginsearch, P3 search, P4
2.1.6519.0, P5 mpsigdwn.dll, P6 2.1.6519.0, P7 microsoft antimalware (bcf43643-a118-4432-aede-d861fcbcfcde),
P8 NIL, P9 NIL, P10 NIL.

Error - 26.5.2010 16:34:45 | Computer Name = JIRKA-37A1B326C | Source = MSSecurityEssentials | ID = 5000
Description =

Error - 26.5.2010 16:41:39 | Computer Name = JIRKA-37A1B326C | Source = EventSystem | ID = 4609
Description = Systém událostí modelu COM+ zjistil při vnitřním zpracovávání chybný
návratový kód. Hodnota HRESULT byla 800706BA z řádku 44 v d:\comxp_sp3\com\com1x\src\events\tier1\eventsystemobj.cpp.Obraťte
se na služby odborné pomoci společnosti Microsoft a informujte je o této chyb

[ System Events ]
Error - 21.5.2010 0:52:33 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 5008
Description = %%861 – stroj byl ukončen z důvodu neočekávané chyby. Typ chyby: %%830

Kód
výjimky: 0xc0000005 Prostředek: file:C:\WINDOWS\System32\mqsnap.dll

Error - 21.5.2010 0:52:33 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 3002
Description = %%861 – funkce ochrany v reálném čase selhala z důvodu chyby. Funkce:
%%834 Kód chyby: 0x80070006 Popis chyby: Neplatný popisovač. Důvod: %%837

Error - 21.5.2010 0:52:33 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 3002
Description = %%861 – funkce ochrany v reálném čase selhala z důvodu chyby. Funkce:
%%835 Kód chyby: 0x80070006 Popis chyby: Neplatný popisovač. Důvod: %%837

Error - 21.5.2010 0:55:52 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 2004
Description = %%861 – došlo k chybě při načítání podpisů; bude proveden pokus o
vrácení k poslední funkční sadě podpisů. Pokus o načtení podpisů: %%824 Kód chyby:
0x8050800c Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné
aktualizace a potom opakujte spuštění programu. Informace o instalaci aktualizací
naleznete v nápovědě a podpoře. Verze podpisu: 1.83.160.0;1.83.160.0 Verze stroje:
1.1.5802.0

Error - 21.5.2010 1:11:29 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 2004
Description = %%861 – došlo k chybě při načítání podpisů; bude proveden pokus o
vrácení k poslední funkční sadě podpisů. Pokus o načtení podpisů: %%824 Kód chyby:
0x8050800c Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné
aktualizace a potom opakujte spuštění programu. Informace o instalaci aktualizací
naleznete v nápovědě a podpoře. Verze podpisu: 1.83.182.0;1.83.182.0 Verze stroje:
1.1.5802.0

Error - 24.5.2010 0:48:53 | Computer Name = JIRKA-37A1B326C | Source = Dhcp | ID = 1002
Description = Zapůjčení adresy IP 172.16.0.4 pro síťovou kartu s adresou 001A4D4FD723
byla serverem DHCP 172.16.0.1 odmítnuta. (Server DHCP odeslal zprávu DHCPNACK).

Error - 24.5.2010 0:59:36 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 5008
Description = %%861 – stroj byl ukončen z důvodu neočekávané chyby. Typ chyby: %%830

Kód
výjimky: 0xc0000005 Prostředek: file:C:\Program Files\FSViewer42\FSViewer.exe

Error - 24.5.2010 0:59:36 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 3002
Description = %%861 – funkce ochrany v reálném čase selhala z důvodu chyby. Funkce:
%%834 Kód chyby: 0x80070006 Popis chyby: Neplatný popisovač. Důvod: %%837

Error - 24.5.2010 0:59:36 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 3002
Description = %%861 – funkce ochrany v reálném čase selhala z důvodu chyby. Funkce:
%%835 Kód chyby: 0x80070006 Popis chyby: Neplatný popisovač. Důvod: %%837

Error - 24.5.2010 1:04:10 | Computer Name = JIRKA-37A1B326C | Source = Microsoft Antimalware | ID = 2004
Description = %%861 – došlo k chybě při načítání podpisů; bude proveden pokus o
vrácení k poslední funkční sadě podpisů. Pokus o načtení podpisů: %%824 Kód chyby:
0x8050800c Popis chyby: Došlo k neočekávaným potížím. Nainstalujte všechny dostupné
aktualizace a potom opakujte spuštění programu. Informace o instalaci aktualizací
naleznete v nápovědě a podpoře. Verze podpisu: 1.83.353.0;1.83.353.0 Verze stroje:
1.1.5802.0


< End of report >

[Damned]

Poklepej na ikonu OTL na ploše.Ujisti se , že máš všechny ostatní aplikace a prohlížeče zavřeny.
Pod Vlastní skenování/Opravy do okénka vlož následující text, zobrazený zeleně:

Kód: Vybrat vše

:OTL
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
DRV - (catchme) -- File not found

:Services
2609715
2712178

:Files
C:\WINDOWS\System32\drivers\2609715.sys
C:\WINDOWS\System32\drivers\2712178.sys
C:\WINDOWS\*.tmp
C:\WINDOWS\Fonts\*.tmp
C:\WINDOWS\System32\*.tmp
C:\WINDOWS\system32\*.tmp.dll
C:\WINDOWS\system32\SET*.tmp
C:\eef9245a5f76e1ec8513cfad7708b2
C:\Recycler
C:\$RECYCLE.BIN
C:\Windows\tasks\SA.DAT

:Reg

:Commands
[purity]
[emptytemp]
[emptyflash]
[start explorer]
[Reboot]


Poté klikni nahoře na Opravit. Nech program nerušeně běžet, na konci se provede restart PC.
Po restartu se objeví log , prosím zkopíruj sem celý jeho obsah.

[Jirka_Ka]

Trvalo to několik vteřin.Zde je log:

¨All processes killed
========== OTL ==========
Process explorer.exe killed successfully!
Service catchme stopped successfully!
Service catchme deleted successfully!
File File not found not found.
========== SERVICES/DRIVERS ==========
Error: No service named 2609715 was found to stop!
Service\Driver key 2609715 not found.
Error: No service named 2712178 was found to stop!
Service\Driver key 2712178 not found.
========== FILES ==========
C:\WINDOWS\System32\drivers\2609715.sys moved successfully.
C:\WINDOWS\System32\drivers\2712178.sys moved successfully.
File\Folder C:\WINDOWS\*.tmp not found.
C:\WINDOWS\Fonts\SET91.tmp moved successfully.
C:\WINDOWS\Fonts\SET92.tmp moved successfully.
C:\WINDOWS\Fonts\SET93.tmp moved successfully.
C:\WINDOWS\Fonts\SET94.tmp moved successfully.
C:\WINDOWS\Fonts\SET95.tmp moved successfully.
C:\WINDOWS\Fonts\SET96.tmp moved successfully.
File\Folder C:\WINDOWS\System32\*.tmp not found.
File\Folder C:\WINDOWS\system32\*.tmp.dll not found.
File\Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\eef9245a5f76e1ec8513cfad7708b2 folder moved successfully.
File\Folder C:\Recycler not found.
File\Folder C:\$RECYCLE.BIN not found.
C:\Windows\tasks\SA.DAT moved successfully.
========== REGISTRY ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 3391997 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Jirka
->Temp folder emptied: 77387 bytes
->Temporary Internet Files folder emptied: 328022 bytes
->FireFox cache emptied: 36092157 bytes
->Flash cache emptied: 1679 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 4622 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 27176 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 38,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: Jirka
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.5.0 log created on 05282010_191215

Files\Folders moved on Reboot...
File\Folder C:\WINDOWS\temp\Perflib_Perfdata_104.dat not found!

Registry entries deleted on Reboot...

Děkuji

[Damned]

Z mého pohledu by si to měl mít v pořádku.

Vypni antivir a pokud máš i Antispyware a odinstaluj ComboFix ( nutné ) .
ComboFix se odinstaluje takto:
Start -> Spustit a zadej do řádku: Combofix[mezera]/uninstall

Smaž složku C:\_OTL a vysypej Koš.

Stáhni si ToolsCleaner2 (by de A.Rothstein & Dj Quiou) na Plochu a spusť ho.

Klikni na Pt. Restauration (obnova) a poté na OK.
Klikni na Corbeille (koš) a poté na OK.
Klikni na Fichiers temp (temp složky) a poté na OK.
Klikni na Recherche (hledání) a nech Cleaner pracovat. Může se během čištění zastavit , ale nech ho pokračovat.
Když program skončí , klikni na Suppression (odstranění) a odstraň nalezené.
Zavři a smaž program.

Vlož mi sem ještě nový log z HJT.

[Jirka_Ka]

OK , děkuji za pomoc.Dám vědět jak se pc bude chovat dále:

Zde je log:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:30:07, on 29.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\PopTray\PopTray.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
c:\Documents and Settings\Jirka\Dokumenty\Stažené soubory\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [MSSE] "C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\JMRaidSetup.exe boot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: PopTray.lnk = C:\Program Files\PopTray\PopTray.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 4029923828
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 4069 bytes
Děkuji

[Damned]

Z mého pohledu to máš v pořádku - není tam malware ani podobnej šmejd. Ten TC se umravnil? Ta zvukovka a SM řadiče?

[Jirka_Ka]

Zdravim


Tak jsem si myslel že je to OK, chvilku byl klid,ale opět se začíná PC restartovat a total comander opět hlásí že je zavirovaný.Chtěl jsem přepnout na druhý disk v liště nahoře,zástupce disku po najetí zčernal a opět zahlásil viru.


Děkuji

[bledulka]

Ahoj,
otestuj na http://www.virustotal.com
C:\WINDOWS\WMSysPr9.prx
C:\WINDOWS\System32\XRXS2LMK.SMT
-Do okénka zkopíruj cestu k souboru , pokud napíše, že soubor byl už testován, dej otestovat znovu.
-Sem vlož link s výsledky.

Total comander jsi poprvé, když hlásil zavirování, přeinstaloval?
Nevím jak je velký, asi otestovat na virustotalu nepůjde?

Dělal jsi kontrolu těch ramek?

-------------------------------------------------------------------
Damnede, děkuji za záskok

[MiliNess]

Jak dopadl ten test pomocí GoldMemory?

[Jirka_Ka]

Takže zde je výsledek testů
1 soubor

Antivirus Verze Poslední aktualizace Výsledek
a-squared 5.0.0.26 2010.06.01 -
AhnLab-V3 2010.06.01.01 2010.06.01 -
AntiVir 8.2.1.242 2010.06.01 -
Antiy-AVL 2.0.3.7 2010.06.01 -
Authentium 5.2.0.5 2010.06.01 -
Avast 4.8.1351.0 2010.06.01 -
Avast5 5.0.332.0 2010.06.01 -
AVG 9.0.0.787 2010.06.01 -
BitDefender 7.2 2010.06.01 -
CAT-QuickHeal 10.00 2010.06.01 -
ClamAV 0.96.0.3-git 2010.06.01 -
Comodo 4977 2010.06.01 -
DrWeb 5.0.2.03300 2010.06.01 -
eSafe 7.0.17.0 2010.06.01 -
eTrust-Vet 35.2.7523 2010.06.01 -
F-Prot 4.6.0.103 2010.06.01 -
F-Secure 9.0.15370.0 2010.06.01 -
Fortinet 4.1.133.0 2010.06.01 -
GData 21 2010.06.01 -
Ikarus T3.1.1.84.0 2010.06.01 -
Jiangmin 13.0.900 2010.05.31 -
Kaspersky 7.0.0.125 2010.06.01 -
McAfee 5.400.0.1158 2010.06.01 -
McAfee-GW-Edition 2010.1 2010.06.01 -
Microsoft 1.5802 2010.06.01 -
NOD32 5163 2010.06.01 -
Norman 6.04.12 2010.06.01 -
nProtect 2010-06-01.02 2010.06.01 -
Panda 10.0.2.7 2010.05.31 -
PCTools 7.0.3.5 2010.06.01 -
Prevx 3.0 2010.06.01 -
Rising 22.50.01.03 2010.06.01 -
Sophos 4.53.0 2010.06.01 -
Sunbelt 6384 2010.06.01 -
Symantec 20101.1.0.89 2010.06.01 -
TheHacker 6.5.2.0.290 2010.05.31 -
TrendMicro 9.120.0.1004 2010.06.01 -
TrendMicro-HouseCall 9.120.0.1004 2010.06.01 -
VBA32 3.12.12.5 2010.06.01 -
ViRobot 2010.6.1.2333 2010.06.01 -
VirusBuster 5.0.27.0 2010.06.01 -
Rozšiřující informace
File size: 316640 bytes
MD5...: dc17dd0189b0c36d863b4dd0a036c10f
SHA1..: 3e8efb478bec1cb04c25c8bb5a3edafe63fe6d53
SHA256: 95f1edbc3cb9aa70a374a61b43bd16818636b0190aa841504130bb718c39c2c7
ssdeep: 768:dPCm/6FENWYEJapyORCKeXPVqArKk9ZK6zDlFpuL:4m/ldEJapyGeXHrKk9Z
K6VFpuL
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
trid..: Windows Media stream profile (98.9%)
Text - UTF-16 (LE) encoded (0.6%)
MP3 audio (0.3%)
Lumena CEL bitmap (0.0%)
Corel Photo Paint (0.0%)
packers (F-Prot): Unicode

http://www.virustotal.com/cs/analisis/9 ... 1275410161

2. soubor

Antivirus Verze Poslední aktualizace Výsledek
a-squared 5.0.0.26 2010.06.01 -
AhnLab-V3 2010.06.01.01 2010.06.01 -
AntiVir 8.2.1.242 2010.06.01 -
Antiy-AVL 2.0.3.7 2010.06.01 -
Authentium 5.2.0.5 2010.06.01 -
Avast 4.8.1351.0 2010.06.01 -
Avast5 5.0.332.0 2010.06.01 -
AVG 9.0.0.787 2010.06.01 -
BitDefender 7.2 2010.06.01 -
CAT-QuickHeal 10.00 2010.06.01 -
ClamAV 0.96.0.3-git 2010.06.01 -
Comodo 4977 2010.06.01 -
DrWeb 5.0.2.03300 2010.06.01 -
eSafe 7.0.17.0 2010.06.01 -
eTrust-Vet 35.2.7523 2010.06.01 -
F-Prot 4.6.0.103 2010.06.01 -
F-Secure 9.0.15370.0 2010.06.01 -
Fortinet 4.1.133.0 2010.06.01 -
GData 21 2010.06.01 -
Ikarus T3.1.1.84.0 2010.06.01 -
Jiangmin 13.0.900 2010.05.31 -
Kaspersky 7.0.0.125 2010.06.01 -
McAfee 5.400.0.1158 2010.06.01 -
McAfee-GW-Edition 2010.1 2010.06.01 -
Microsoft 1.5802 2010.06.01 -
NOD32 5163 2010.06.01 -
Norman 6.04.12 2010.06.01 -
nProtect 2010-06-01.02 2010.06.01 -
Panda 10.0.2.7 2010.05.31 -
PCTools 7.0.3.5 2010.06.01 -
Prevx 3.0 2010.06.01 -
Rising 22.50.01.03 2010.06.01 -
Sophos 4.53.0 2010.06.01 -
Sunbelt 6384 2010.06.01 -
Symantec 20101.1.0.89 2010.06.01 -
TheHacker 6.5.2.0.290 2010.05.31 -
TrendMicro 9.120.0.1004 2010.06.01 -
TrendMicro-HouseCall 9.120.0.1004 2010.06.01 -
VBA32 3.12.12.5 2010.06.01 -
ViRobot 2010.6.1.2333 2010.06.01 -
VirusBuster 5.0.27.0 2010.06.01 -
Rozšiřující informace
File size: 595 bytes
MD5...: b4e87cdc4ea47784fafe2288e6fa0cdf
SHA1..: 05e6c4128688078655eda1ac683cc3f56fb521e0
SHA256: 003e87160a2eebc13e1e53877d420979e68e9953a93e9152c88ee09183af3928
ssdeep: 12:thqpgHMZIuWvKZkCRbJAPTdAqrA1ZeB07X4OW2fMOSvxfSvxxv:tcM7uMCRbJ
wd3qeB08vlOQxfQxxv
PEiD..: -
PEInfo: -
RDS...: NSRL Reference Data Set
-
pdfid.: -
trid..: Generic INI configuration (100.0%)
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned

http://www.virustotal.com/cs/analisis/0 ... 1275410479

- Test pamětí jsem udělal a zjistil jsem chybu jednoho modulu.Ten jsem vyselektoval a odebral z PC. Zdá se že vše se chová tak jak má. Je možné že i detekce v total comanderu a pod způsobovala vadná paměť? Včetně falešných detekcí ?

Děkuji, Jiří

[MiliNess]

Nelze předpovědět, jak se bude operační systém včetně aplikací chovat s vadným paměťovým modulem, takže je to možné.