PROSIM O KONTROLU LOGU Vyřešeno
Re: PROSIM O KONTROLU LOGU
problem nejde mi spustit program AW kasa
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
Zkus ještě jednou restartovat PC, a propos :Comodo v něm vidí nákazu , nechceš ho dát pryč? Kde jsi stahoval??
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: PROSIM O KONTROLU LOGU
AW kasa to je pokladni system nelze odinstalovat
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
Comodo se moc neplete, nemáš možnost ten soubor přepsat z jiného PC?
http://www.virustotal.com/cs/analisis/4 ... 1277834510
Ještě script v Combofixu:
Stejný postup pak log z CF+HJT (nový)
Vypni rez.ochrany a firewall.
Spusť F-Secure Online Scanner
Tento skener je možno použít jen v prohlížeči Internet Explorer! Postupuj podle instrukcí na stránce F-Secure pro správnou instalaci. Akceptuj licenci. Po instalaci ActiveX, klikni na Full System Scan. Když stahování skončeno, automaticky začne sken . Vyčkej konce skenu, po jeho dobu neprováděj jiné operace ani neklikej myší. Když skončí sken klikni na tlačítko Automatic clearing (recommended). Poté klikni na tlačítko Show Report a zkopíruj a vlož sem .
http://www.virustotal.com/cs/analisis/4 ... 1277834510
Ještě script v Combofixu:
Kód: Vybrat vše
RegNull::
[HKEY_USERS\S-1-5-21-861567501-1563985344-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{55DB4D56-E44B-73EE-79C5-4502A9D100A2}*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{55DB4D56-E44B-73EE-79C5-4502A9D100A2}\InProcServer32*]
RegLock::
[HKEY_USERS\S-1-5-21-861567501-1563985344-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{55DB4D56-E44B-73EE-79C5-4502A9D100A2}*]
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{55DB4D56-E44B-73EE-79C5-4502A9D100A2}\InProcServer32*]
Stejný postup pak log z CF+HJT (nový)
Vypni rez.ochrany a firewall.
Spusť F-Secure Online Scanner
Tento skener je možno použít jen v prohlížeči Internet Explorer! Postupuj podle instrukcí na stránce F-Secure pro správnou instalaci. Akceptuj licenci. Po instalaci ActiveX, klikni na Full System Scan. Když stahování skončeno, automaticky začne sken . Vyčkej konce skenu, po jeho dobu neprováděj jiné operace ani neklikej myší. Když skončí sken klikni na tlačítko Automatic clearing (recommended). Poté klikni na tlačítko Show Report a zkopíruj a vlož sem .
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: PROSIM O KONTROLU LOGU
ted mi pc nejde zapmout v normalnim rezimu musim v nouzovym co mam delat ted
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
můžeš i v nouz. režimu s prací v síti.
Zkus párkrát restart PC.
Nebo vyber poslední známá fuknční konfigurace.
Zkus párkrát restart PC.
Nebo vyber poslední známá fuknční konfigurace.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: PROSIM O KONTROLU LOGU
ComboFix 10-06-28.01 - user 30.06.2010 14:45:54.3.1 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.2038.1691 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\user\Plocha\CFScript.txt
AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-05-28 do 2010-06-30 )))))))))))))))))))))))))))))))
.
2010-06-30 11:13 . 2010-06-30 11:13 -------- d-----w- c:\documents and settings\Administrator
2010-06-30 01:08 . 2010-06-30 01:08 -------- d-----w- c:\program files\MSXML 6.0
2010-06-30 01:06 . 2010-06-30 01:06 -------- d-----w- C:\439b383a22cec58682848f62
2010-06-30 01:06 . 2010-06-30 01:06 -------- d-----w- C:\472169819d6a5ea2c58e5bec3a2ed0cb
2010-06-30 01:03 . 2010-06-30 01:03 -------- d-----w- c:\windows\ServicePackFiles
2010-06-29 17:46 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-06-29 17:39 . 2010-06-30 01:06 -------- d--h--w- c:\windows\$hf_mig$
2010-06-29 17:22 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-06-29 17:22 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-06-27 17:05 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-27 17:05 . 2010-06-27 17:05 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-27 17:05 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-26 15:57 . 2010-06-26 15:57 -------- d-----w- c:\program files\Trend Micro
2010-06-22 07:00 . 2010-06-22 07:00 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-06-13 08:57 . 2010-06-13 08:57 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-10 16:42 . 2010-06-10 16:42 -------- d-----w- C:\$AVG
2010-06-10 16:33 . 2010-06-10 16:33 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-06-10 16:33 . 2010-06-22 07:00 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-10 16:33 . 2010-06-22 07:00 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-06-10 16:33 . 2010-06-10 17:05 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-10 16:33 . 2010-06-30 12:42 -------- d-----w- c:\windows\system32\drivers\Avg
2010-06-10 16:29 . 2010-06-10 16:29 -------- d-----w- c:\program files\AVG
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-30 01:09 . 2004-09-14 19:34 439626 ----a-w- c:\windows\system32\perfh005.dat
2010-06-30 01:09 . 2004-09-14 19:34 87448 ----a-w- c:\windows\system32\perfc005.dat
2010-06-30 01:08 . 2009-02-19 13:54 -------- d-----w- c:\program files\Microsoft SQL Server
2010-06-29 22:00 . 2010-04-09 12:04 -------- d-----w- c:\program files\LogMeIn
2010-06-10 08:11 . 2010-05-11 17:55 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-06-10 08:11 . 2010-05-11 17:55 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-06-10 08:11 . 2010-05-11 17:55 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-05-08 17:05 . 2010-05-08 17:05 -------- d-----w- c:\program files\Common Files\Java
2010-05-08 17:05 . 2010-05-08 17:05 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-08 17:04 . 2010-05-08 17:04 -------- d-----w- c:\program files\Java
2010-04-25 08:46 . 2009-02-19 12:58 77423 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-04-25 08:46 . 2009-02-19 12:58 3000 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-04-25 08:45 . 2009-02-19 12:59 9328 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-04-22 11:56 . 2010-04-22 11:56 0 ----a-w- c:\windows\nsreg.dat
2010-04-16 15:38 . 2004-09-14 19:40 663040 ----a-w- c:\windows\system32\wininet.dll
2010-04-16 15:38 . 2004-09-14 19:29 81920 ----a-w- c:\windows\system32\ieencode.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-06-29_17.12.17 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-09-14 19:40 . 2009-06-25 08:48 59392 c:\windows\system32\wdigest.dll
+ 2008-11-24 20:31 . 2008-11-24 20:31 65888 c:\windows\system32\sqlctr90.dll
+ 2009-02-19 14:05 . 2007-07-27 21:11 26488 c:\windows\system32\spupdsvc.exe
+ 2009-02-19 13:49 . 2007-11-30 11:18 18296 c:\windows\system32\spmsg.dll
+ 2004-09-14 19:36 . 2009-06-25 08:48 56320 c:\windows\system32\secur32.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 39424 c:\windows\system32\pngfilt.dll
+ 2004-09-14 19:34 . 2010-04-16 15:38 39424 c:\windows\system32\pngfilt.dll
- 2004-09-14 19:34 . 2010-06-16 11:48 76962 c:\windows\system32\perfc009.dat
+ 2004-09-14 19:34 . 2010-06-30 01:09 76962 c:\windows\system32\perfc009.dat
+ 2004-09-14 19:32 . 2009-11-27 16:40 28672 c:\windows\system32\msvidc32.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 11264 c:\windows\system32\msrle32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 11264 c:\windows\system32\msrle32.dll
+ 2006-01-03 23:14 . 2006-01-03 23:14 20480 c:\windows\system32\Macromed\Flash\UninstFl.exe
+ 2006-01-21 14:01 . 2006-01-21 14:01 25088 c:\windows\system32\Macromed\Flash\genuinst.exe
+ 2004-09-14 19:29 . 2010-04-16 15:38 16384 c:\windows\system32\jsproxy.dll
+ 2004-08-17 15:49 . 2009-11-27 16:40 48128 c:\windows\system32\iyuv_32.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 96768 c:\windows\system32\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 96768 c:\windows\system32\inseng.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 55808 c:\windows\system32\extmgr.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 55808 c:\windows\system32\extmgr.dll
+ 2004-09-14 19:30 . 2009-06-22 11:34 92544 c:\windows\system32\drivers\ksecdd.sys
+ 2004-09-14 19:40 . 2009-06-25 08:48 59392 c:\windows\system32\dllcache\wdigest.dll
+ 2004-09-14 19:36 . 2009-06-25 08:48 56320 c:\windows\system32\dllcache\secur32.dll
+ 2004-09-14 19:34 . 2010-04-16 15:38 39424 c:\windows\system32\dllcache\pngfilt.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 39424 c:\windows\system32\dllcache\pngfilt.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 28672 c:\windows\system32\dllcache\msvidc32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2004-09-14 19:30 . 2009-06-22 11:34 92544 c:\windows\system32\dllcache\ksecdd.sys
+ 2004-09-14 19:29 . 2010-04-16 15:38 16384 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 48128 c:\windows\system32\dllcache\iyuv_32.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 96768 c:\windows\system32\dllcache\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 96768 c:\windows\system32\dllcache\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 81920 c:\windows\system32\dllcache\ieencode.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 81920 c:\windows\system32\dllcache\ieencode.dll
- 2009-02-19 12:57 . 2004-09-14 19:29 18432 c:\windows\system32\dllcache\iedw.exe
+ 2009-02-19 12:57 . 2010-04-16 13:36 18432 c:\windows\system32\dllcache\iedw.exe
+ 2004-09-14 19:28 . 2010-04-16 15:38 55808 c:\windows\system32\dllcache\extmgr.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 55808 c:\windows\system32\dllcache\extmgr.dll
+ 2004-09-14 19:27 . 2010-01-13 14:10 85504 c:\windows\system32\dllcache\cabview.dll
+ 2004-09-14 19:26 . 2009-11-27 16:40 84992 c:\windows\system32\dllcache\avifil32.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2004-09-14 19:26 . 2010-03-05 14:57 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2004-09-14 19:27 . 2010-01-13 14:10 85504 c:\windows\system32\cabview.dll
+ 2004-09-14 19:26 . 2009-11-27 16:40 84992 c:\windows\system32\avifil32.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 84992 c:\windows\system32\avifil32.dll
+ 2004-09-14 19:26 . 2010-03-05 14:57 65536 c:\windows\system32\asycfilt.dll
+ 2009-02-19 13:48 . 2010-06-30 01:05 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2007-08-24 03:49 . 2007-08-24 03:49 89976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\DLGSETP.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-26 19:55 . 2006-10-26 19:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2006-10-26 19:09 . 2006-10-26 19:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 46864 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 21312 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MLSHEXT.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 35160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DUMPSTER.DLL
+ 2009-11-27 16:40 . 2009-11-27 16:40 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 75616 c:\windows\assembly\tmp\T17DJQW2\microsoft.sqlserver.mgdsqldumper.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 43872 c:\windows\assembly\tmp\QX39FMSY\Microsoft.SqlServer.WmiEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 35680 c:\windows\assembly\tmp\NV17DJPV\Microsoft.DataWarehouse.Interfaces.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 39776 c:\windows\assembly\tmp\7FLRX39F\Microsoft.SqlServer.ServiceBrokerEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 68448 c:\windows\assembly\tmp\29FLSY4A\Microsoft.SqlServer.RegSvrEnum.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 43872 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.CustomControls\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.CustomControls.dll
+ 2001-10-24 12:25 . 2009-11-27 16:40 8704 c:\windows\system32\tsbyuv.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 8704 c:\windows\system32\dllcache\tsbyuv.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
+ 2008-02-17 02:33 . 2010-04-16 13:47 360448 c:\windows\system32\xpsp3res.dll
+ 2010-06-30 01:02 . 2004-09-14 19:41 221184 c:\windows\system32\wmpns.dll
- 2004-09-14 19:40 . 2004-09-14 19:40 351232 c:\windows\system32\winhttp.dll
+ 2004-09-14 19:40 . 2008-12-16 12:50 351232 c:\windows\system32\winhttp.dll
- 2004-09-14 19:39 . 2004-09-14 19:39 417792 c:\windows\system32\vbscript.dll
+ 2004-09-14 19:39 . 2007-12-18 14:43 417792 c:\windows\system32\vbscript.dll
+ 2004-09-14 19:39 . 2010-04-16 15:38 625152 c:\windows\system32\urlmon.dll
+ 2004-09-14 19:35 . 2009-06-25 08:48 168448 c:\windows\system32\schannel.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 474112 c:\windows\system32\shlwapi.dll
+ 2004-09-14 19:35 . 2009-04-15 15:18 584192 c:\windows\system32\rpcrt4.dll
- 2004-09-14 19:34 . 2010-06-16 11:48 441908 c:\windows\system32\perfh009.dat
+ 2004-09-14 19:34 . 2010-06-30 01:09 441908 c:\windows\system32\perfh009.dat
+ 2004-09-14 19:34 . 2009-10-13 10:53 267776 c:\windows\system32\oakley.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 267776 c:\windows\system32\oakley.dll
+ 2004-09-14 19:33 . 2008-10-15 17:00 332800 c:\windows\system32\netapi32.dll
+ 2004-09-14 19:32 . 2008-06-20 17:42 247296 c:\windows\system32\mswsock.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 247296 c:\windows\system32\mswsock.dll
+ 2004-09-14 19:32 . 2009-08-05 09:07 205312 c:\windows\system32\mswebdvd.dll
+ 2004-09-14 19:32 . 2009-09-11 14:35 133632 c:\windows\system32\msv1_0.dll
+ 2009-02-19 12:56 . 2009-06-05 07:46 655872 c:\windows\system32\mstscax.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 532480 c:\windows\system32\mstime.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 146432 c:\windows\system32\msrating.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 146432 c:\windows\system32\msrating.dll
- 2009-02-19 12:56 . 2004-09-14 19:32 343552 c:\windows\system32\mspaint.exe
+ 2009-02-19 12:56 . 2009-12-17 08:00 343552 c:\windows\system32\mspaint.exe
+ 2004-09-14 19:32 . 2010-04-16 15:38 449024 c:\windows\system32\mshtmled.dll
+ 2004-09-14 19:30 . 2009-06-25 08:48 723456 c:\windows\system32\lsasrv.dll
+ 2004-09-14 19:29 . 2009-06-25 08:48 298496 c:\windows\system32\kerberos.dll
+ 2004-09-14 19:29 . 2009-08-21 06:52 450560 c:\windows\system32\jscript.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 450560 c:\windows\system32\jscript.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 683520 c:\windows\system32\inetcomm.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 251392 c:\windows\system32\iepeers.dll
+ 2004-09-14 19:28 . 2008-10-23 13:01 283648 c:\windows\system32\gdi32.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 205312 c:\windows\system32\dxtrans.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 357888 c:\windows\system32\dxtmsft.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 357888 c:\windows\system32\dxtmsft.dll
+ 2004-09-14 19:38 . 2008-06-20 09:52 225920 c:\windows\system32\drivers\tcpip6.sys
+ 2004-09-14 19:38 . 2008-06-20 10:45 360320 c:\windows\system32\drivers\tcpip.sys
+ 2004-09-14 19:26 . 2008-06-20 10:44 138368 c:\windows\system32\drivers\afd.sys
+ 2004-09-14 19:28 . 2008-06-20 17:42 148992 c:\windows\system32\dnsapi.dll
+ 2009-02-19 12:56 . 2008-04-21 21:28 216576 c:\windows\system32\dllcache\wordpad.exe
+ 2004-09-14 19:40 . 2010-04-16 15:38 663040 c:\windows\system32\dllcache\wininet.dll
+ 2004-09-14 19:40 . 2008-12-16 12:50 351232 c:\windows\system32\dllcache\winhttp.dll
- 2004-09-14 19:40 . 2004-09-14 19:40 351232 c:\windows\system32\dllcache\winhttp.dll
- 2004-09-14 19:39 . 2004-09-14 19:39 417792 c:\windows\system32\dllcache\vbscript.dll
+ 2004-09-14 19:39 . 2007-12-18 14:43 417792 c:\windows\system32\dllcache\vbscript.dll
+ 2004-09-14 19:39 . 2010-04-16 15:38 625152 c:\windows\system32\dllcache\urlmon.dll
+ 2004-09-14 19:38 . 2008-06-20 09:52 225920 c:\windows\system32\dllcache\tcpip6.sys
+ 2004-09-14 19:38 . 2008-06-20 10:45 360320 c:\windows\system32\dllcache\tcpip.sys
+ 2004-09-14 19:35 . 2009-06-25 08:48 168448 c:\windows\system32\dllcache\schannel.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 474112 c:\windows\system32\dllcache\shlwapi.dll
+ 2004-09-14 19:35 . 2009-04-15 15:18 584192 c:\windows\system32\dllcache\rpcrt4.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 267776 c:\windows\system32\dllcache\oakley.dll
+ 2004-09-14 19:34 . 2009-10-13 10:53 267776 c:\windows\system32\dllcache\oakley.dll
+ 2004-09-14 19:33 . 2008-10-15 17:00 332800 c:\windows\system32\dllcache\netapi32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 247296 c:\windows\system32\dllcache\mswsock.dll
+ 2004-09-14 19:32 . 2008-06-20 17:42 247296 c:\windows\system32\dllcache\mswsock.dll
+ 2004-09-14 19:32 . 2009-08-05 09:07 205312 c:\windows\system32\dllcache\mswebdvd.dll
+ 2004-09-14 19:32 . 2009-09-11 14:35 133632 c:\windows\system32\dllcache\msv1_0.dll
+ 2009-02-19 12:56 . 2009-06-05 07:46 655872 c:\windows\system32\dllcache\mstscax.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 532480 c:\windows\system32\dllcache\mstime.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 146432 c:\windows\system32\dllcache\msrating.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 146432 c:\windows\system32\dllcache\msrating.dll
- 2009-02-19 12:56 . 2004-09-14 19:32 343552 c:\windows\system32\dllcache\mspaint.exe
+ 2009-02-19 12:56 . 2009-12-17 08:00 343552 c:\windows\system32\dllcache\mspaint.exe
+ 2004-09-14 19:32 . 2010-04-16 15:38 449024 c:\windows\system32\dllcache\mshtmled.dll
- 2009-02-19 12:57 . 2004-09-14 19:31 331776 c:\windows\system32\dllcache\msadce.dll
+ 2009-02-19 12:57 . 2008-05-01 14:33 331776 c:\windows\system32\dllcache\msadce.dll
+ 2004-09-14 19:30 . 2009-06-25 08:48 723456 c:\windows\system32\dllcache\lsasrv.dll
+ 2004-09-14 19:29 . 2009-06-25 08:48 298496 c:\windows\system32\dllcache\kerberos.dll
+ 2004-09-14 19:29 . 2009-08-21 06:52 450560 c:\windows\system32\dllcache\jscript.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 450560 c:\windows\system32\dllcache\jscript.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 683520 c:\windows\system32\dllcache\inetcomm.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 251392 c:\windows\system32\dllcache\iepeers.dll
+ 2004-09-14 19:28 . 2008-10-23 13:01 283648 c:\windows\system32\dllcache\gdi32.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 205312 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 357888 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 357888 c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-09-14 19:28 . 2008-06-20 17:42 148992 c:\windows\system32\dllcache\dnsapi.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 151552 c:\windows\system32\dllcache\cdfview.dll
+ 2004-09-14 19:26 . 2008-06-20 10:44 138368 c:\windows\system32\dllcache\afd.sys
+ 2004-09-14 19:26 . 2006-08-16 11:59 100352 c:\windows\system32\dllcache\6to4svc.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 100352 c:\windows\system32\dllcache\6to4svc.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 151552 c:\windows\system32\cdfview.dll
+ 2004-09-14 19:26 . 2006-08-16 11:59 100352 c:\windows\system32\6to4svc.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 100352 c:\windows\system32\6to4svc.dll
+ 2010-06-30 01:08 . 2010-06-30 01:08 868864 c:\windows\Installer\1882797.msi
+ 2010-06-30 01:07 . 2010-06-30 01:07 817152 c:\windows\Installer\188277c.msi
+ 2010-06-30 01:06 . 2010-06-30 01:06 813568 c:\windows\Installer\1882750.msi
+ 2009-05-26 16:53 . 2009-05-26 16:53 579072 c:\windows\Installer\1882735.msp
+ 2009-02-19 13:48 . 2010-06-30 01:05 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2007-08-28 22:16 . 2007-08-28 22:16 350064 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\WINWORD.EXE
+ 2007-08-24 03:52 . 2007-08-24 03:52 275896 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\SCNPST64.DLL
+ 2007-08-24 03:52 . 2007-08-24 03:52 266160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\SCNPST32.DLL
+ 2007-08-24 02:43 . 2007-08-24 02:43 593296 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PUBCONV.DLL
+ 2007-08-28 22:39 . 2007-08-28 22:39 625560 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PTXT9.DLL
+ 2007-08-24 03:51 . 2007-08-24 03:51 416112 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PSTPRX32.DLL
+ 2007-08-24 02:43 . 2007-08-24 02:43 138648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PRTF9.DLL
+ 2007-08-28 22:22 . 2007-08-28 22:22 180128 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLPH.DLL
+ 2007-08-28 22:20 . 2007-08-28 22:20 600992 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLMIME.DLL
+ 2007-08-24 04:42 . 2007-08-24 04:42 195480 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OMSXP32.DLL
+ 2007-08-24 04:42 . 2007-08-24 04:42 663432 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OMSMAIN.DLL
+ 2007-08-28 22:38 . 2007-08-28 22:38 500648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MORPH9.DLL
+ 2007-08-24 03:49 . 2007-08-24 03:49 342888 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MIMEDIR.DLL
+ 2007-08-28 22:19 . 2007-08-28 22:19 136064 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\CONTAB32.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 408880 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RTFHTML.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 138024 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 555872 c:\windows\assembly\tmp\X5BHNTZ5\Microsoft.SqlServer.Rmo.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 220000 c:\windows\assembly\tmp\W39FMSY4\Microsoft.SqlServer.SmoEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 543584 c:\windows\assembly\tmp\V18EKQW2\Microsoft.AnalysisServices.AdomdClient.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 360800 c:\windows\assembly\tmp\ELSY4AGM\microsoft.sqlserver.batchparser.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 154464 c:\windows\assembly\tmp\EKQW28EK\Microsoft.SqlServer.ConnectionInfo.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 895840 c:\windows\assembly\tmp\BJPV17DJ\Microsoft.SqlServer.SqlEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 138080 c:\windows\assembly\tmp\17DJPV17\Microsoft.AnalysisServices.DeploymentEngine.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 592736 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.WizardFrameworkLite\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.WizardFrameworkLite.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 199520 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.GridControl\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.GridControl.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 133984 c:\windows\assembly\GAC_MSIL\Microsoft.NetEnterpriseServers.ExceptionMessageBox\9.0.242.0__89845dcd8080cc91\Microsoft.NetEnterpriseServers.ExceptionMessageBox.dll
+ 2004-09-14 19:41 . 2010-04-08 11:53 2113536 c:\windows\system32\WMVCore.dll
+ 2004-09-14 19:41 . 2010-02-16 05:27 4734976 c:\windows\system32\wmp.dll
+ 2008-11-24 20:31 . 2008-11-24 20:31 2248544 c:\windows\system32\sqlncli.dll
+ 2004-09-14 19:36 . 2008-07-03 13:15 8458752 c:\windows\system32\shell32.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 1506816 c:\windows\system32\shdocvw.dll
+ 2004-09-14 19:35 . 2010-02-05 18:40 1293824 c:\windows\system32\quartz.dll
+ 2006-12-04 12:37 . 2006-12-04 12:37 1317648 c:\windows\system32\msxml6.dll
+ 2004-09-14 19:32 . 2008-09-04 16:46 1106944 c:\windows\system32\msxml3.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 3086336 c:\windows\system32\mshtml.dll
+ 2009-08-17 21:33 . 2009-08-17 21:33 1193832 c:\windows\system32\FM20.DLL
+ 2004-09-14 19:41 . 2010-04-08 11:53 2113536 c:\windows\system32\dllcache\WMVCore.dll
+ 2004-09-14 19:41 . 2010-02-16 05:27 4734976 c:\windows\system32\dllcache\wmp.dll
+ 2004-09-14 19:36 . 2008-07-03 13:15 8458752 c:\windows\system32\dllcache\shell32.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 1506816 c:\windows\system32\dllcache\shdocvw.dll
+ 2004-09-14 19:35 . 2010-02-05 18:40 1293824 c:\windows\system32\dllcache\quartz.dll
+ 2004-09-14 19:32 . 2008-09-04 16:46 1106944 c:\windows\system32\dllcache\msxml3.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 1315840 c:\windows\system32\dllcache\msoe.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 3086336 c:\windows\system32\dllcache\mshtml.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1055232 c:\windows\system32\dllcache\danim.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1023488 c:\windows\system32\dllcache\browseui.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1055232 c:\windows\system32\danim.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1023488 c:\windows\system32\browseui.dll
+ 2008-11-25 19:35 . 2008-11-25 19:35 6643712 c:\windows\Installer\188279b.msi
+ 2010-06-30 01:08 . 2010-06-30 01:08 1087488 c:\windows\Installer\188278e.msi
+ 2009-10-16 05:08 . 2009-10-16 05:08 2237952 c:\windows\Installer\1882748.msp
+ 2010-04-24 15:05 . 2010-04-24 15:05 4199424 c:\windows\Installer\1882719.msp
+ 2009-08-18 11:08 . 2009-08-18 11:08 1373696 c:\windows\Installer\1882701.msp
+ 2010-05-18 21:35 . 2010-05-18 21:35 5023744 c:\windows\Installer\18826ee.msp
- 2009-02-19 13:48 . 2009-02-19 14:01 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2007-06-27 19:58 . 2007-06-27 19:58 2585936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\VBE6.DLL
+ 2007-08-28 22:20 . 2007-08-28 22:20 2949512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OLMAPI32.DLL
+ 2007-08-28 22:38 . 2007-08-28 22:38 9584512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MSPUB.EXE
+ 2007-08-23 00:03 . 2007-08-23 00:03 1195888 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\FM20.DLL
+ 2006-09-15 15:25 . 2006-09-15 15:25 3611416 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLFLTR.DAT
+ 2010-06-30 01:09 . 2010-06-30 01:09 1215328 c:\windows\assembly\tmp\AIOU06CI\Microsoft.AnalysisServices.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 1604448 c:\windows\assembly\tmp\2AGMSY4A\Microsoft.SqlServer.Smo.dll
+ 2010-04-24 15:07 . 2010-04-24 15:07 10118144 c:\windows\Installer\18826db.msp
+ 2009-08-18 10:50 . 2009-08-18 10:50 12022272 c:\windows\Installer\18826c6.msp
+ 2007-09-06 16:56 . 2007-09-06 16:56 17490800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\WWLIB.DLL
+ 2007-09-06 17:01 . 2007-09-06 17:01 12836728 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLOOK.EXE
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-03-23 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-03-23 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-03-23 118784]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 196608]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-04-13 69632]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2008-08-11 63048]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-06-22 2065760]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-09-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
AW Kasa.lnk - c:\program files\AWIS\AWKasa\AWKasa.exe [2010-4-9 1444864]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-06-10 08:11 87424 ----a-w- c:\windows\system32\LMIinit.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [10.6.2010 18:33 52872]
R3 tbupddsu;Universal Pointer Device Driver;c:\windows\system32\drivers\TBUPDDSU.SYS [9.4.2010 8:40 141805]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10.6.2010 18:33 216400]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10.6.2010 18:33 243024]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [22.6.2010 9:00 308136]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [11.8.2008 12:41 12856]
S2 tbupddwu;tbupddwu;c:\program files\UPDD\TBUPDDWU.EXE [9.4.2010 8:40 315461]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [10.6.2010 18:33 430152]
S3 FGLPMCLA;LPM Class Device Driver;c:\windows\system32\drivers\FGLPMCLA.sys [9.6.2008 18:44 26160]
S3 FGLPMKER;Kernel-mode LPM Mini Device Driver;c:\windows\system32\drivers\FGLPMKERVAULT.sys [9.6.2008 18:44 351488]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [9.4.2010 14:08 17920]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [9.4.2010 14:08 63488]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {0077EA8A-ACE8-4EF6-914B-67AE57BCC673} = 10.0.0.138
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\8www32dw.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=42&tp=ab&q=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-30 14:49
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FGLPMCLA]
"ImagePath"="system32\DRIVERS\fglpmcla.sys"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FGLPMKER]
"ImagePath"="system32\DRIVERS\fglpmkervault.sys"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(212)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll
.
Celkový čas: 2010-06-30 14:51:05
ComboFix-quarantined-files.txt 2010-06-30 12:51
ComboFix2.txt 2010-06-29 17:57
ComboFix3.txt 2010-06-29 17:13
Před spuštěním: Volných bajtů: 29 257 809 920
Po spuštění: Volných bajtů: 29 260 578 816
- - End Of File - - 7852C61D2568716CA540E7555C9A83BF
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.2038.1691 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\user\Plocha\CFScript.txt
AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((( Soubory vytvořené od 2010-05-28 do 2010-06-30 )))))))))))))))))))))))))))))))
.
2010-06-30 11:13 . 2010-06-30 11:13 -------- d-----w- c:\documents and settings\Administrator
2010-06-30 01:08 . 2010-06-30 01:08 -------- d-----w- c:\program files\MSXML 6.0
2010-06-30 01:06 . 2010-06-30 01:06 -------- d-----w- C:\439b383a22cec58682848f62
2010-06-30 01:06 . 2010-06-30 01:06 -------- d-----w- C:\472169819d6a5ea2c58e5bec3a2ed0cb
2010-06-30 01:03 . 2010-06-30 01:03 -------- d-----w- c:\windows\ServicePackFiles
2010-06-29 17:46 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-06-29 17:39 . 2010-06-30 01:06 -------- d--h--w- c:\windows\$hf_mig$
2010-06-29 17:22 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-06-29 17:22 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-06-27 17:05 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-27 17:05 . 2010-06-27 17:05 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-27 17:05 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-26 15:57 . 2010-06-26 15:57 -------- d-----w- c:\program files\Trend Micro
2010-06-22 07:00 . 2010-06-22 07:00 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-06-13 08:57 . 2010-06-13 08:57 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-10 16:42 . 2010-06-10 16:42 -------- d-----w- C:\$AVG
2010-06-10 16:33 . 2010-06-10 16:33 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2010-06-10 16:33 . 2010-06-22 07:00 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-06-10 16:33 . 2010-06-22 07:00 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-06-10 16:33 . 2010-06-10 17:05 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-10 16:33 . 2010-06-30 12:42 -------- d-----w- c:\windows\system32\drivers\Avg
2010-06-10 16:29 . 2010-06-10 16:29 -------- d-----w- c:\program files\AVG
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-30 01:09 . 2004-09-14 19:34 439626 ----a-w- c:\windows\system32\perfh005.dat
2010-06-30 01:09 . 2004-09-14 19:34 87448 ----a-w- c:\windows\system32\perfc005.dat
2010-06-30 01:08 . 2009-02-19 13:54 -------- d-----w- c:\program files\Microsoft SQL Server
2010-06-29 22:00 . 2010-04-09 12:04 -------- d-----w- c:\program files\LogMeIn
2010-06-10 08:11 . 2010-05-11 17:55 83360 ----a-w- c:\windows\system32\LMIRfsClientNP.dll
2010-06-10 08:11 . 2010-05-11 17:55 29568 ----a-w- c:\windows\system32\LMIport.dll
2010-06-10 08:11 . 2010-05-11 17:55 87424 ----a-w- c:\windows\system32\LMIinit.dll
2010-05-08 17:05 . 2010-05-08 17:05 -------- d-----w- c:\program files\Common Files\Java
2010-05-08 17:05 . 2010-05-08 17:05 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-08 17:04 . 2010-05-08 17:04 -------- d-----w- c:\program files\Java
2010-04-25 08:46 . 2009-02-19 12:58 77423 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-04-25 08:46 . 2009-02-19 12:58 3000 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-04-25 08:45 . 2009-02-19 12:59 9328 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-04-22 11:56 . 2010-04-22 11:56 0 ----a-w- c:\windows\nsreg.dat
2010-04-16 15:38 . 2004-09-14 19:40 663040 ----a-w- c:\windows\system32\wininet.dll
2010-04-16 15:38 . 2004-09-14 19:29 81920 ----a-w- c:\windows\system32\ieencode.dll
.
((((((((((((((((((((((((((((( SnapShot@2010-06-29_17.12.17 )))))))))))))))))))))))))))))))))))))))))
.
+ 2004-09-14 19:40 . 2009-06-25 08:48 59392 c:\windows\system32\wdigest.dll
+ 2008-11-24 20:31 . 2008-11-24 20:31 65888 c:\windows\system32\sqlctr90.dll
+ 2009-02-19 14:05 . 2007-07-27 21:11 26488 c:\windows\system32\spupdsvc.exe
+ 2009-02-19 13:49 . 2007-11-30 11:18 18296 c:\windows\system32\spmsg.dll
+ 2004-09-14 19:36 . 2009-06-25 08:48 56320 c:\windows\system32\secur32.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 39424 c:\windows\system32\pngfilt.dll
+ 2004-09-14 19:34 . 2010-04-16 15:38 39424 c:\windows\system32\pngfilt.dll
- 2004-09-14 19:34 . 2010-06-16 11:48 76962 c:\windows\system32\perfc009.dat
+ 2004-09-14 19:34 . 2010-06-30 01:09 76962 c:\windows\system32\perfc009.dat
+ 2004-09-14 19:32 . 2009-11-27 16:40 28672 c:\windows\system32\msvidc32.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 11264 c:\windows\system32\msrle32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 11264 c:\windows\system32\msrle32.dll
+ 2006-01-03 23:14 . 2006-01-03 23:14 20480 c:\windows\system32\Macromed\Flash\UninstFl.exe
+ 2006-01-21 14:01 . 2006-01-21 14:01 25088 c:\windows\system32\Macromed\Flash\genuinst.exe
+ 2004-09-14 19:29 . 2010-04-16 15:38 16384 c:\windows\system32\jsproxy.dll
+ 2004-08-17 15:49 . 2009-11-27 16:40 48128 c:\windows\system32\iyuv_32.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 96768 c:\windows\system32\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 96768 c:\windows\system32\inseng.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 55808 c:\windows\system32\extmgr.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 55808 c:\windows\system32\extmgr.dll
+ 2004-09-14 19:30 . 2009-06-22 11:34 92544 c:\windows\system32\drivers\ksecdd.sys
+ 2004-09-14 19:40 . 2009-06-25 08:48 59392 c:\windows\system32\dllcache\wdigest.dll
+ 2004-09-14 19:36 . 2009-06-25 08:48 56320 c:\windows\system32\dllcache\secur32.dll
+ 2004-09-14 19:34 . 2010-04-16 15:38 39424 c:\windows\system32\dllcache\pngfilt.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 39424 c:\windows\system32\dllcache\pngfilt.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 28672 c:\windows\system32\dllcache\msvidc32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2004-09-14 19:32 . 2009-11-27 16:40 11264 c:\windows\system32\dllcache\msrle32.dll
+ 2004-09-14 19:30 . 2009-06-22 11:34 92544 c:\windows\system32\dllcache\ksecdd.sys
+ 2004-09-14 19:29 . 2010-04-16 15:38 16384 c:\windows\system32\dllcache\jsproxy.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 48128 c:\windows\system32\dllcache\iyuv_32.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 96768 c:\windows\system32\dllcache\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 96768 c:\windows\system32\dllcache\inseng.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 81920 c:\windows\system32\dllcache\ieencode.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 81920 c:\windows\system32\dllcache\ieencode.dll
- 2009-02-19 12:57 . 2004-09-14 19:29 18432 c:\windows\system32\dllcache\iedw.exe
+ 2009-02-19 12:57 . 2010-04-16 13:36 18432 c:\windows\system32\dllcache\iedw.exe
+ 2004-09-14 19:28 . 2010-04-16 15:38 55808 c:\windows\system32\dllcache\extmgr.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 55808 c:\windows\system32\dllcache\extmgr.dll
+ 2004-09-14 19:27 . 2010-01-13 14:10 85504 c:\windows\system32\dllcache\cabview.dll
+ 2004-09-14 19:26 . 2009-11-27 16:40 84992 c:\windows\system32\dllcache\avifil32.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 84992 c:\windows\system32\dllcache\avifil32.dll
+ 2004-09-14 19:26 . 2010-03-05 14:57 65536 c:\windows\system32\dllcache\asycfilt.dll
+ 2004-09-14 19:27 . 2010-01-13 14:10 85504 c:\windows\system32\cabview.dll
+ 2004-09-14 19:26 . 2009-11-27 16:40 84992 c:\windows\system32\avifil32.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 84992 c:\windows\system32\avifil32.dll
+ 2004-09-14 19:26 . 2010-03-05 14:57 65536 c:\windows\system32\asycfilt.dll
+ 2009-02-19 13:48 . 2010-06-30 01:05 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 35088 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 18704 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 20240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
+ 2007-08-24 03:49 . 2007-08-24 03:49 89976 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\DLGSETP.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 55056 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\SCANOST.EXE
+ 2006-10-26 19:55 . 2006-10-26 19:55 76576 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RM.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 39208 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RECALL.DLL
+ 2006-10-26 19:09 . 2006-10-26 19:09 48448 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\PUBTRAP.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 53048 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLVBA.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 46864 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLRPC.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 21312 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\MLSHEXT.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 35160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\DUMPSTER.DLL
+ 2009-11-27 16:40 . 2009-11-27 16:40 48128 c:\windows\Driver Cache\i386\iyuv_32.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 75616 c:\windows\assembly\tmp\T17DJQW2\microsoft.sqlserver.mgdsqldumper.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 43872 c:\windows\assembly\tmp\QX39FMSY\Microsoft.SqlServer.WmiEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 35680 c:\windows\assembly\tmp\NV17DJPV\Microsoft.DataWarehouse.Interfaces.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 39776 c:\windows\assembly\tmp\7FLRX39F\Microsoft.SqlServer.ServiceBrokerEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 68448 c:\windows\assembly\tmp\29FLSY4A\Microsoft.SqlServer.RegSvrEnum.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 43872 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.CustomControls\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.CustomControls.dll
+ 2001-10-24 12:25 . 2009-11-27 16:40 8704 c:\windows\system32\tsbyuv.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 8704 c:\windows\system32\dllcache\tsbyuv.dll
+ 2009-11-27 16:40 . 2009-11-27 16:40 8704 c:\windows\Driver Cache\i386\tsbyuv.dll
+ 2008-02-17 02:33 . 2010-04-16 13:47 360448 c:\windows\system32\xpsp3res.dll
+ 2010-06-30 01:02 . 2004-09-14 19:41 221184 c:\windows\system32\wmpns.dll
- 2004-09-14 19:40 . 2004-09-14 19:40 351232 c:\windows\system32\winhttp.dll
+ 2004-09-14 19:40 . 2008-12-16 12:50 351232 c:\windows\system32\winhttp.dll
- 2004-09-14 19:39 . 2004-09-14 19:39 417792 c:\windows\system32\vbscript.dll
+ 2004-09-14 19:39 . 2007-12-18 14:43 417792 c:\windows\system32\vbscript.dll
+ 2004-09-14 19:39 . 2010-04-16 15:38 625152 c:\windows\system32\urlmon.dll
+ 2004-09-14 19:35 . 2009-06-25 08:48 168448 c:\windows\system32\schannel.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 474112 c:\windows\system32\shlwapi.dll
+ 2004-09-14 19:35 . 2009-04-15 15:18 584192 c:\windows\system32\rpcrt4.dll
- 2004-09-14 19:34 . 2010-06-16 11:48 441908 c:\windows\system32\perfh009.dat
+ 2004-09-14 19:34 . 2010-06-30 01:09 441908 c:\windows\system32\perfh009.dat
+ 2004-09-14 19:34 . 2009-10-13 10:53 267776 c:\windows\system32\oakley.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 267776 c:\windows\system32\oakley.dll
+ 2004-09-14 19:33 . 2008-10-15 17:00 332800 c:\windows\system32\netapi32.dll
+ 2004-09-14 19:32 . 2008-06-20 17:42 247296 c:\windows\system32\mswsock.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 247296 c:\windows\system32\mswsock.dll
+ 2004-09-14 19:32 . 2009-08-05 09:07 205312 c:\windows\system32\mswebdvd.dll
+ 2004-09-14 19:32 . 2009-09-11 14:35 133632 c:\windows\system32\msv1_0.dll
+ 2009-02-19 12:56 . 2009-06-05 07:46 655872 c:\windows\system32\mstscax.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 532480 c:\windows\system32\mstime.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 146432 c:\windows\system32\msrating.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 146432 c:\windows\system32\msrating.dll
- 2009-02-19 12:56 . 2004-09-14 19:32 343552 c:\windows\system32\mspaint.exe
+ 2009-02-19 12:56 . 2009-12-17 08:00 343552 c:\windows\system32\mspaint.exe
+ 2004-09-14 19:32 . 2010-04-16 15:38 449024 c:\windows\system32\mshtmled.dll
+ 2004-09-14 19:30 . 2009-06-25 08:48 723456 c:\windows\system32\lsasrv.dll
+ 2004-09-14 19:29 . 2009-06-25 08:48 298496 c:\windows\system32\kerberos.dll
+ 2004-09-14 19:29 . 2009-08-21 06:52 450560 c:\windows\system32\jscript.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 450560 c:\windows\system32\jscript.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 683520 c:\windows\system32\inetcomm.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 251392 c:\windows\system32\iepeers.dll
+ 2004-09-14 19:28 . 2008-10-23 13:01 283648 c:\windows\system32\gdi32.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 205312 c:\windows\system32\dxtrans.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 357888 c:\windows\system32\dxtmsft.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 357888 c:\windows\system32\dxtmsft.dll
+ 2004-09-14 19:38 . 2008-06-20 09:52 225920 c:\windows\system32\drivers\tcpip6.sys
+ 2004-09-14 19:38 . 2008-06-20 10:45 360320 c:\windows\system32\drivers\tcpip.sys
+ 2004-09-14 19:26 . 2008-06-20 10:44 138368 c:\windows\system32\drivers\afd.sys
+ 2004-09-14 19:28 . 2008-06-20 17:42 148992 c:\windows\system32\dnsapi.dll
+ 2009-02-19 12:56 . 2008-04-21 21:28 216576 c:\windows\system32\dllcache\wordpad.exe
+ 2004-09-14 19:40 . 2010-04-16 15:38 663040 c:\windows\system32\dllcache\wininet.dll
+ 2004-09-14 19:40 . 2008-12-16 12:50 351232 c:\windows\system32\dllcache\winhttp.dll
- 2004-09-14 19:40 . 2004-09-14 19:40 351232 c:\windows\system32\dllcache\winhttp.dll
- 2004-09-14 19:39 . 2004-09-14 19:39 417792 c:\windows\system32\dllcache\vbscript.dll
+ 2004-09-14 19:39 . 2007-12-18 14:43 417792 c:\windows\system32\dllcache\vbscript.dll
+ 2004-09-14 19:39 . 2010-04-16 15:38 625152 c:\windows\system32\dllcache\urlmon.dll
+ 2004-09-14 19:38 . 2008-06-20 09:52 225920 c:\windows\system32\dllcache\tcpip6.sys
+ 2004-09-14 19:38 . 2008-06-20 10:45 360320 c:\windows\system32\dllcache\tcpip.sys
+ 2004-09-14 19:35 . 2009-06-25 08:48 168448 c:\windows\system32\dllcache\schannel.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 474112 c:\windows\system32\dllcache\shlwapi.dll
+ 2004-09-14 19:35 . 2009-04-15 15:18 584192 c:\windows\system32\dllcache\rpcrt4.dll
- 2004-09-14 19:34 . 2004-09-14 19:34 267776 c:\windows\system32\dllcache\oakley.dll
+ 2004-09-14 19:34 . 2009-10-13 10:53 267776 c:\windows\system32\dllcache\oakley.dll
+ 2004-09-14 19:33 . 2008-10-15 17:00 332800 c:\windows\system32\dllcache\netapi32.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 247296 c:\windows\system32\dllcache\mswsock.dll
+ 2004-09-14 19:32 . 2008-06-20 17:42 247296 c:\windows\system32\dllcache\mswsock.dll
+ 2004-09-14 19:32 . 2009-08-05 09:07 205312 c:\windows\system32\dllcache\mswebdvd.dll
+ 2004-09-14 19:32 . 2009-09-11 14:35 133632 c:\windows\system32\dllcache\msv1_0.dll
+ 2009-02-19 12:56 . 2009-06-05 07:46 655872 c:\windows\system32\dllcache\mstscax.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 532480 c:\windows\system32\dllcache\mstime.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 146432 c:\windows\system32\dllcache\msrating.dll
- 2004-09-14 19:32 . 2004-09-14 19:32 146432 c:\windows\system32\dllcache\msrating.dll
- 2009-02-19 12:56 . 2004-09-14 19:32 343552 c:\windows\system32\dllcache\mspaint.exe
+ 2009-02-19 12:56 . 2009-12-17 08:00 343552 c:\windows\system32\dllcache\mspaint.exe
+ 2004-09-14 19:32 . 2010-04-16 15:38 449024 c:\windows\system32\dllcache\mshtmled.dll
- 2009-02-19 12:57 . 2004-09-14 19:31 331776 c:\windows\system32\dllcache\msadce.dll
+ 2009-02-19 12:57 . 2008-05-01 14:33 331776 c:\windows\system32\dllcache\msadce.dll
+ 2004-09-14 19:30 . 2009-06-25 08:48 723456 c:\windows\system32\dllcache\lsasrv.dll
+ 2004-09-14 19:29 . 2009-06-25 08:48 298496 c:\windows\system32\dllcache\kerberos.dll
+ 2004-09-14 19:29 . 2009-08-21 06:52 450560 c:\windows\system32\dllcache\jscript.dll
- 2004-09-14 19:29 . 2004-09-14 19:29 450560 c:\windows\system32\dllcache\jscript.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 683520 c:\windows\system32\dllcache\inetcomm.dll
+ 2004-09-14 19:29 . 2010-04-16 15:38 251392 c:\windows\system32\dllcache\iepeers.dll
+ 2004-09-14 19:28 . 2008-10-23 13:01 283648 c:\windows\system32\dllcache\gdi32.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 205312 c:\windows\system32\dllcache\dxtrans.dll
+ 2004-09-14 19:28 . 2010-04-16 15:38 357888 c:\windows\system32\dllcache\dxtmsft.dll
- 2004-09-14 19:28 . 2004-09-14 19:28 357888 c:\windows\system32\dllcache\dxtmsft.dll
+ 2004-09-14 19:28 . 2008-06-20 17:42 148992 c:\windows\system32\dllcache\dnsapi.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 151552 c:\windows\system32\dllcache\cdfview.dll
+ 2004-09-14 19:26 . 2008-06-20 10:44 138368 c:\windows\system32\dllcache\afd.sys
+ 2004-09-14 19:26 . 2006-08-16 11:59 100352 c:\windows\system32\dllcache\6to4svc.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 100352 c:\windows\system32\dllcache\6to4svc.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 151552 c:\windows\system32\cdfview.dll
+ 2004-09-14 19:26 . 2006-08-16 11:59 100352 c:\windows\system32\6to4svc.dll
- 2004-09-14 19:26 . 2004-09-14 19:26 100352 c:\windows\system32\6to4svc.dll
+ 2010-06-30 01:08 . 2010-06-30 01:08 868864 c:\windows\Installer\1882797.msi
+ 2010-06-30 01:07 . 2010-06-30 01:07 817152 c:\windows\Installer\188277c.msi
+ 2010-06-30 01:06 . 2010-06-30 01:06 813568 c:\windows\Installer\1882750.msi
+ 2009-05-26 16:53 . 2009-05-26 16:53 579072 c:\windows\Installer\1882735.msp
+ 2009-02-19 13:48 . 2010-06-30 01:05 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 888080 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 272648 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 922384 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 845584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 217864 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
+ 2007-08-28 22:16 . 2007-08-28 22:16 350064 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\WINWORD.EXE
+ 2007-08-24 03:52 . 2007-08-24 03:52 275896 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\SCNPST64.DLL
+ 2007-08-24 03:52 . 2007-08-24 03:52 266160 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\SCNPST32.DLL
+ 2007-08-24 02:43 . 2007-08-24 02:43 593296 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PUBCONV.DLL
+ 2007-08-28 22:39 . 2007-08-28 22:39 625560 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PTXT9.DLL
+ 2007-08-24 03:51 . 2007-08-24 03:51 416112 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PSTPRX32.DLL
+ 2007-08-24 02:43 . 2007-08-24 02:43 138648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\PRTF9.DLL
+ 2007-08-28 22:22 . 2007-08-28 22:22 180128 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLPH.DLL
+ 2007-08-28 22:20 . 2007-08-28 22:20 600992 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLMIME.DLL
+ 2007-08-24 04:42 . 2007-08-24 04:42 195480 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OMSXP32.DLL
+ 2007-08-24 04:42 . 2007-08-24 04:42 663432 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OMSMAIN.DLL
+ 2007-08-28 22:38 . 2007-08-28 22:38 500648 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MORPH9.DLL
+ 2007-08-24 03:49 . 2007-08-24 03:49 342888 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MIMEDIR.DLL
+ 2007-08-28 22:19 . 2007-08-28 22:19 136064 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\CONTAB32.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 408880 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\RTFHTML.DLL
+ 2006-10-27 14:16 . 2006-10-27 14:16 138512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLCTL.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 254776 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OLKFSTUB.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 138024 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\IMPMAIL.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 154960 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\ENVELOPE.DLL
+ 2006-10-26 19:55 . 2006-10-26 19:55 116544 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\EMABLT32.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 555872 c:\windows\assembly\tmp\X5BHNTZ5\Microsoft.SqlServer.Rmo.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 220000 c:\windows\assembly\tmp\W39FMSY4\Microsoft.SqlServer.SmoEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 543584 c:\windows\assembly\tmp\V18EKQW2\Microsoft.AnalysisServices.AdomdClient.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 360800 c:\windows\assembly\tmp\ELSY4AGM\microsoft.sqlserver.batchparser.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 154464 c:\windows\assembly\tmp\EKQW28EK\Microsoft.SqlServer.ConnectionInfo.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 895840 c:\windows\assembly\tmp\BJPV17DJ\Microsoft.SqlServer.SqlEnum.dll
+ 2010-06-30 01:09 . 2010-06-30 01:09 138080 c:\windows\assembly\tmp\17DJPV17\Microsoft.AnalysisServices.DeploymentEngine.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 592736 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.WizardFrameworkLite\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.WizardFrameworkLite.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 199520 c:\windows\assembly\GAC_MSIL\Microsoft.SqlServer.GridControl\9.0.242.0__89845dcd8080cc91\Microsoft.SqlServer.GridControl.dll
+ 2010-06-30 01:07 . 2010-06-30 01:07 133984 c:\windows\assembly\GAC_MSIL\Microsoft.NetEnterpriseServers.ExceptionMessageBox\9.0.242.0__89845dcd8080cc91\Microsoft.NetEnterpriseServers.ExceptionMessageBox.dll
+ 2004-09-14 19:41 . 2010-04-08 11:53 2113536 c:\windows\system32\WMVCore.dll
+ 2004-09-14 19:41 . 2010-02-16 05:27 4734976 c:\windows\system32\wmp.dll
+ 2008-11-24 20:31 . 2008-11-24 20:31 2248544 c:\windows\system32\sqlncli.dll
+ 2004-09-14 19:36 . 2008-07-03 13:15 8458752 c:\windows\system32\shell32.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 1506816 c:\windows\system32\shdocvw.dll
+ 2004-09-14 19:35 . 2010-02-05 18:40 1293824 c:\windows\system32\quartz.dll
+ 2006-12-04 12:37 . 2006-12-04 12:37 1317648 c:\windows\system32\msxml6.dll
+ 2004-09-14 19:32 . 2008-09-04 16:46 1106944 c:\windows\system32\msxml3.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 3086336 c:\windows\system32\mshtml.dll
+ 2009-08-17 21:33 . 2009-08-17 21:33 1193832 c:\windows\system32\FM20.DLL
+ 2004-09-14 19:41 . 2010-04-08 11:53 2113536 c:\windows\system32\dllcache\WMVCore.dll
+ 2004-09-14 19:41 . 2010-02-16 05:27 4734976 c:\windows\system32\dllcache\wmp.dll
+ 2004-09-14 19:36 . 2008-07-03 13:15 8458752 c:\windows\system32\dllcache\shell32.dll
+ 2004-09-14 19:36 . 2010-04-16 15:38 1506816 c:\windows\system32\dllcache\shdocvw.dll
+ 2004-09-14 19:35 . 2010-02-05 18:40 1293824 c:\windows\system32\dllcache\quartz.dll
+ 2004-09-14 19:32 . 2008-09-04 16:46 1106944 c:\windows\system32\dllcache\msxml3.dll
+ 2009-02-19 12:57 . 2010-01-29 15:07 1315840 c:\windows\system32\dllcache\msoe.dll
+ 2004-09-14 19:32 . 2010-04-16 15:38 3086336 c:\windows\system32\dllcache\mshtml.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1055232 c:\windows\system32\dllcache\danim.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1023488 c:\windows\system32\dllcache\browseui.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1055232 c:\windows\system32\danim.dll
+ 2004-09-14 19:27 . 2010-04-16 15:38 1023488 c:\windows\system32\browseui.dll
+ 2008-11-25 19:35 . 2008-11-25 19:35 6643712 c:\windows\Installer\188279b.msi
+ 2010-06-30 01:08 . 2010-06-30 01:08 1087488 c:\windows\Installer\188278e.msi
+ 2009-10-16 05:08 . 2009-10-16 05:08 2237952 c:\windows\Installer\1882748.msp
+ 2010-04-24 15:05 . 2010-04-24 15:05 4199424 c:\windows\Installer\1882719.msp
+ 2009-08-18 11:08 . 2009-08-18 11:08 1373696 c:\windows\Installer\1882701.msp
+ 2010-05-18 21:35 . 2010-05-18 21:35 5023744 c:\windows\Installer\18826ee.msp
- 2009-02-19 13:48 . 2009-02-19 14:01 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 1172240 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
+ 2009-02-19 13:48 . 2010-06-30 01:05 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
- 2009-02-19 13:48 . 2009-02-19 14:01 1165584 c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
+ 2007-06-27 19:58 . 2007-06-27 19:58 2585936 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\VBE6.DLL
+ 2007-08-28 22:20 . 2007-08-28 22:20 2949512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OLMAPI32.DLL
+ 2007-08-28 22:38 . 2007-08-28 22:38 9584512 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\MSPUB.EXE
+ 2007-08-23 00:03 . 2007-08-23 00:03 1195888 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\FM20.DLL
+ 2006-09-15 15:25 . 2006-09-15 15:25 3611416 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.4518\OUTLFLTR.DAT
+ 2010-06-30 01:09 . 2010-06-30 01:09 1215328 c:\windows\assembly\tmp\AIOU06CI\Microsoft.AnalysisServices.DLL
+ 2010-06-30 01:09 . 2010-06-30 01:09 1604448 c:\windows\assembly\tmp\2AGMSY4A\Microsoft.SqlServer.Smo.dll
+ 2010-04-24 15:07 . 2010-04-24 15:07 10118144 c:\windows\Installer\18826db.msp
+ 2009-08-18 10:50 . 2009-08-18 10:50 12022272 c:\windows\Installer\18826c6.msp
+ 2007-09-06 16:56 . 2007-09-06 16:56 17490800 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\WWLIB.DLL
+ 2007-09-06 17:01 . 2007-09-06 17:01 12836728 c:\windows\Installer\$PatchCache$\Managed\00002119130000000000000000F01FEC\12.0.6215\OUTLOOK.EXE
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-03-23 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-03-23 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-03-23 118784]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-04-17 196608]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2004-04-13 69632]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"LogMeIn GUI"="c:\program files\LogMeIn\x86\LogMeInSystray.exe" [2008-08-11 63048]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-06-22 2065760]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-09-14 15360]
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
AW Kasa.lnk - c:\program files\AWIS\AWKasa\AWKasa.exe [2010-4-9 1444864]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2010-06-10 08:11 87424 ----a-w- c:\windows\system32\LMIinit.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgam.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgdiagex.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [10.6.2010 18:33 52872]
R3 tbupddsu;Universal Pointer Device Driver;c:\windows\system32\drivers\TBUPDDSU.SYS [9.4.2010 8:40 141805]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [10.6.2010 18:33 216400]
S1 AvgTdiX;AVG Network Redirector;c:\windows\system32\drivers\avgtdix.sys [10.6.2010 18:33 243024]
S2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [22.6.2010 9:00 308136]
S2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files\LogMeIn\x86\rainfo.sys [11.8.2008 12:41 12856]
S2 tbupddwu;tbupddwu;c:\program files\UPDD\TBUPDDWU.EXE [9.4.2010 8:40 315461]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [10.6.2010 18:33 430152]
S3 FGLPMCLA;LPM Class Device Driver;c:\windows\system32\drivers\FGLPMCLA.sys [9.6.2008 18:44 26160]
S3 FGLPMKER;Kernel-mode LPM Mini Device Driver;c:\windows\system32\drivers\FGLPMKERVAULT.sys [9.6.2008 18:44 351488]
S3 silabenm;Silicon Labs CP210x USB to UART Bridge Serial Port Enumerator Driver;c:\windows\system32\drivers\silabenm.sys [9.4.2010 14:08 17920]
S3 silabser;Silicon Labs CP210x USB to UART Bridge Driver;c:\windows\system32\drivers\silabser.sys [9.4.2010 14:08 63488]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {0077EA8A-ACE8-4EF6-914B-67AE57BCC673} = 10.0.0.138
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\8www32dw.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=42&tp=ab&q=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-30 14:49
Windows 5.1.2600 Service Pack 2 NTFS
skenování skrytých procesů ...
skenování skrytých položek 'Po spuštění' ...
skenování skrytých souborů ...
sken byl úspešně dokončen
skryté soubory: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FGLPMCLA]
"ImagePath"="system32\DRIVERS\fglpmcla.sys"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\FGLPMKER]
"ImagePath"="system32\DRIVERS\fglpmkervault.sys"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
- - - - - - - > 'winlogon.exe'(212)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll
.
Celkový čas: 2010-06-30 14:51:05
ComboFix-quarantined-files.txt 2010-06-30 12:51
ComboFix2.txt 2010-06-29 17:57
ComboFix3.txt 2010-06-29 17:13
Před spuštěním: Volných bajtů: 29 257 809 920
Po spuštění: Volných bajtů: 29 260 578 816
- - End Of File - - 7852C61D2568716CA540E7555C9A83BF
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall
vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš
pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG či Avast, následně T-Cleaner smaž a zapni si AVG či Avast.
Koukni , co je v těch složkách:
C:\439b383a22cec58682848f62
C:\472169819d6a5ea2c58e5bec3a2ed0cb
je-li tam update windows, ponech.
vlož ještě nový log z HJT.
Zkus ten F-Secure.
Start-Spustit a zadej ComboFix /Uninstall
vyčisti systém CCleanerem
a použij i T-Cleaner
smaže vše po Combu,MWAVu atd.-stáhneš>spustíš
pozn. před stažením T-Cleaneru a po dobu čištění deaktivuj AVG či Avast, následně T-Cleaner smaž a zapni si AVG či Avast.
Koukni , co je v těch složkách:
C:\439b383a22cec58682848f62
C:\472169819d6a5ea2c58e5bec3a2ed0cb
je-li tam update windows, ponech.
vlož ještě nový log z HJT.
Zkus ten F-Secure.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: PROSIM O KONTROLU LOGU
ted mam velky problem
po zapnuti pc pak mi zobrazuje modrou obrazovku s textem:
STOP: c000021a Z
vazna chyba systemu
proces system windows subsystem neocekavane skoncil se stavem 0xc0000005 ......
system byl vypnut
zahajovani vypisu fyzicke pameti
........
po zapnuti pc pak mi zobrazuje modrou obrazovku s textem:
STOP: c000021a Z
vazna chyba systemu
proces system windows subsystem neocekavane skoncil se stavem 0xc0000005 ......
system byl vypnut
zahajovani vypisu fyzicke pameti
........
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
Bude třeba otestovat RAM.
http://www.stahuj.centrum.cz/utility_a_ ... i/memtest/
Do políčka vlož největší velikost Tvé jednotlivé paměti RAM (256,512 nebo 1024,2048) dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.
Pokud se nedostaneš do win:
http://www.memtest86.com/memtest86-3.5.iso.zip
vypálit soubor .iso a nabootovat z mechaniky CD/DVD.
http://www.stahuj.centrum.cz/utility_a_ ... i/memtest/
Do políčka vlož největší velikost Tvé jednotlivé paměti RAM (256,512 nebo 1024,2048) dej Start , nech nejméně 2h běžet , pokud bude po 2h stále 0 errors , jsou v pořádku.
Pokud se nedostaneš do win:
http://www.memtest86.com/memtest86-3.5.iso.zip
vypálit soubor .iso a nabootovat z mechaniky CD/DVD.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Re: PROSIM O KONTROLU LOGU
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:08:04, on 2.7.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AW Kasa.lnk = C:\Program Files\AWIS\AWKasa\AWKasa.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS2\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS3\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MySQL - Unknown owner - C:\Program Files\AWIS\AWKasa\bin\mysqld-nt.exe
O23 - Service: tbupddwu - Unknown owner - C:\Program Files\UPDD\tbupddwu.exe
--
End of file - 4252 bytes
Scan saved at 16:08:04, on 2.7.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AW Kasa.lnk = C:\Program Files\AWIS\AWKasa\AWKasa.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS2\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O17 - HKLM\System\CS3\Services\Tcpip\..\{0077EA8A-ACE8-4EF6-914B-67AE57BCC673}: NameServer = 10.0.0.138
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: MySQL - Unknown owner - C:\Program Files\AWIS\AWKasa\bin\mysqld-nt.exe
O23 - Service: tbupddwu - Unknown owner - C:\Program Files\UPDD\tbupddwu.exe
--
End of file - 4252 bytes
- jaro3
- člen Security týmu
-
Guru Level 15
- Příspěvky: 43295
- Registrován: červen 07
- Bydliště: Jižní Čechy
- Pohlaví:
- Stav:
Online
Re: PROSIM O KONTROLU LOGU
Zavři ostatní aplikace a prohlížeče, odpoj se od netu a fixni v HJT:
Návod
Do norm. režimu se nedostaneš?
Jak dopadl Memtest ?
Návod
Kód: Vybrat vše
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
Do norm. režimu se nedostaneš?
Jak dopadl Memtest ?
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra
Kdo je online
Uživatelé prohlížející si toto fórum: Majestic-12 [Bot] a 77 hostů