Prośba o odczytanie log COMBOFIX

[piotr tomczyk]

Bardzo proszę o pomoc i odczytanie loga.


UWAGA - TEN KOMPUTER NIE MA ZAINSTALOWANEJ KONSOLI ODZYSKIWANIA !!
.

((((((((((((((((((((((((((((((((((((((( Usunięto )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Martusia\Ustawienia lokalne\Dane aplikacji\Microsoft\Windows Media\10.0\WMSDKNSD.XML

.
((((((((((((((((((((((((( Pliki utworzone od 2008-10-05 do 2008-11-05 )))))))))))))))))))))))))))))))
.

2008-11-04 23:14 . 2008-11-04 23:14 <DIR> d--hs---- C:\found.000
2008-10-07 20:36 . 2008-10-07 20:36 <DIR> d-------- c:\documents and settings\Martusia\Dane aplikacji\skypePM
2008-10-07 20:33 . 2008-10-08 18:56 <DIR> d-------- c:\documents and settings\Martusia\Dane aplikacji\Skype
2008-10-05 06:36 . 2008-10-05 06:36 292 --a------ c:\windows\EReg072.dat
2008-10-05 06:34 . 2008-10-05 06:34 <DIR> d-------- c:\documents and settings\Kasia i Piotr.X-760408C724564\WINDOWS
2008-10-05 06:34 . 1998-08-10 21:21 132,096 --a------ c:\windows\system32\eaexec.exe
2008-10-05 06:34 . 1998-08-10 21:20 24,576 --a------ c:\windows\system32\ealtest.exe

.
(((((((((((((((((((((((((((((((((((((((( Sekcja Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-05 16:27 --------- d-----w c:\documents and settings\Kasia i Piotr.X-760408C724564\Dane aplikacji\Skype
2008-11-05 15:05 --------- d-----w c:\documents and settings\Kasia i Piotr.X-760408C724564\Dane aplikacji\skypePM
2008-10-27 19:07 --------- d-----w c:\documents and settings\Kasia i Piotr.X-760408C724564\Dane aplikacji\BearShare
2008-10-24 19:44 57,632 ----a-w C:\StiImg.dat
2008-10-11 17:10 --------- d-----w c:\program files\WinX DVD Player 3.0
2008-09-30 17:19 --------- dc-h--w c:\documents and settings\All Users.WINDOWS\Dane aplikacji\{2840BBCB-9BEC-47F6-BA0F-10D3C34BF151}
2008-09-29 16:59 --------- d-----w c:\program files\Common Files\Skype
2008-09-27 13:19 --------- d-----w c:\program files\Google
2008-09-21 14:18 172,032 ----a-w c:\windows\system32\cncs32.dll
2008-09-18 17:47 --------- d--h--w c:\program files\InstallShield Installation Information
2008-09-18 17:46 --------- d-----w c:\program files\Disney Interactive
2008-09-15 15:40 1,846,272 ----a-w c:\windows\system32\win32k.sys
2008-08-20 05:38 662,016 ----a-w c:\windows\system32\wininet.dll
2008-08-14 13:46 2,181,632 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 13:46 2,059,008 ----a-w c:\windows\system32\ntkrnlpa.exe
2008-02-13 20:44 32 ----a-w c:\documents and settings\All Users.WINDOWS\Dane aplikacji\ezsid.dat
.

((((((((((((((((((((((((((((( snapshot@2008-07-09_17.58.15,79 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB938464\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB938464\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB938464\update\spcustom.dll
+ 2007-11-30 11:21:29 763,256 ----a-w c:\windows\$hf_mig$\KB938464\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB938464\update\updspapi.dll
+ 2008-05-02 13:41:39 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP2QFE\msgsc.dll
+ 2008-05-02 14:05:59 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3GDR\msgsc.dll
+ 2008-05-02 13:45:32 83,968 ----a-w c:\windows\$hf_mig$\KB946648\SP3QFE\msgsc.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB946648\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB946648\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB946648\update\spcustom.dll
+ 2007-11-30 11:21:29 763,256 ----a-w c:\windows\$hf_mig$\KB946648\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB946648\update\updspapi.dll
+ 2008-07-07 20:19:06 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
+ 2008-07-07 20:29:10 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
+ 2008-07-07 20:25:43 253,952 ----a-w c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB950974\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB950974\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB950974\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB950974\update\update.exe
+ 2007-11-30 12:40:48 398,200 ----a-w c:\windows\$hf_mig$\KB950974\update\updspapi.dll
+ 2008-04-11 18:41:09 683,520 ----a-w c:\windows\$hf_mig$\KB951066\SP2QFE\inetcomm.dll
+ 2008-04-11 19:06:27 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3GDR\inetcomm.dll
+ 2008-04-11 22:23:38 691,712 ----a-w c:\windows\$hf_mig$\KB951066\SP3QFE\inetcomm.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB951066\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB951066\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB951066\update\spcustom.dll
+ 2007-12-03 15:26:56 763,256 ----a-w c:\windows\$hf_mig$\KB951066\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB951066\update\updspapi.dll
+ 2008-07-14 11:03:00 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP2QFE\tzchange.exe
+ 2008-07-11 12:42:28 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3GDR\tzchange.exe
+ 2008-07-11 12:51:51 62,976 ----a-w c:\windows\$hf_mig$\KB951072-v2\SP3QFE\tzchange.exe
+ 2007-11-30 11:21:28 19,320 ----a-w c:\windows\$hf_mig$\KB951072-v2\spmsg.dll
+ 2007-11-30 11:21:28 234,360 ----a-w c:\windows\$hf_mig$\KB951072-v2\spuninst.exe
+ 2007-11-30 11:21:28 26,488 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB951072-v2\update\updspapi.dll
+ 2006-08-16 12:14:48 100,352 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\6to4svc.dll
+ 2008-06-20 10:44:08 138,368 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\afd.sys
+ 2008-06-20 17:37:41 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\dnsapi.dll
+ 2008-06-20 17:37:41 246,784 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
+ 2008-06-20 10:44:42 360,960 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
+ 2008-06-20 09:32:39 225,920 ----a-w c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip6.sys
+ 2008-06-20 11:40:08 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\afd.sys
+ 2008-06-20 17:48:53 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\dnsapi.dll
+ 2008-06-20 17:48:53 246,784 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
+ 2008-06-20 11:51:12 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
+ 2008-06-20 11:08:27 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip6.sys
+ 2008-06-20 11:48:03 138,496 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\afd.sys
+ 2008-06-20 17:44:44 147,968 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\dnsapi.dll
+ 2008-06-20 17:44:44 246,784 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
+ 2008-06-20 11:59:02 361,600 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
+ 2008-06-20 11:16:44 225,856 ----a-w c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip6.sys
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB951748\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB951748\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB951748\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB951748\update\update.exe
+ 2007-11-30 12:40:48 398,200 ----a-w c:\windows\$hf_mig$\KB951748\update\updspapi.dll
+ 2008-05-01 15:05:37 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP2QFE\msadce.dll
+ 2008-05-01 14:37:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3GDR\msadce.dll
+ 2008-05-01 14:40:00 331,776 ----a-w c:\windows\$hf_mig$\KB952287\SP3QFE\msadce.dll
+ 2007-11-30 11:21:28 19,320 ----a-w c:\windows\$hf_mig$\KB952287\spmsg.dll
+ 2007-11-30 11:21:28 234,360 ----a-w c:\windows\$hf_mig$\KB952287\spuninst.exe
+ 2007-11-30 11:21:28 26,488 ----a-w c:\windows\$hf_mig$\KB952287\update\spcustom.dll
+ 2007-11-30 11:21:28 763,256 ----a-w c:\windows\$hf_mig$\KB952287\update\update.exe
+ 2007-11-30 11:21:29 398,200 ----a-w c:\windows\$hf_mig$\KB952287\update\updspapi.dll
+ 2008-06-24 16:30:57 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP2QFE\mscms.dll
+ 2008-06-24 16:46:33 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3GDR\mscms.dll
+ 2008-06-24 16:54:28 74,240 ----a-w c:\windows\$hf_mig$\KB952954\SP3QFE\mscms.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB952954\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB952954\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB952954\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB952954\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB952954\update\updspapi.dll
+ 2008-06-23 16:16:52 1,024,000 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\browseui.dll
+ 2008-06-23 16:16:52 151,552 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\cdfview.dll
+ 2008-06-23 16:16:52 1,055,744 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\danim.dll
+ 2008-06-23 16:16:52 357,888 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\dxtmsft.dll
+ 2008-06-23 16:16:52 205,312 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\dxtrans.dll
+ 2008-06-23 16:16:52 55,808 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\extmgr.dll
+ 2008-06-23 09:53:58 18,432 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\iedw.exe
+ 2008-06-23 16:16:53 251,904 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\iepeers.dll
+ 2008-06-23 16:16:53 96,768 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\inseng.dll
+ 2008-06-23 16:16:53 16,384 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\jsproxy.dll
+ 2008-06-23 16:16:53 3,088,384 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mshtml.dll
+ 2008-06-23 16:16:53 449,024 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mshtmled.dll
+ 2008-06-23 16:16:53 146,432 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\msrating.dll
+ 2008-06-23 16:16:54 532,480 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\mstime.dll
+ 2008-06-23 16:16:54 39,424 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\pngfilt.dll
+ 2008-06-23 16:16:54 1,499,136 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\shdocvw.dll
+ 2008-06-23 16:16:54 474,112 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\shlwapi.dll
+ 2008-07-03 09:42:47 369,152 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\spru0415.dll
+ 2008-06-23 16:16:54 619,520 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\urlmon.dll
+ 2008-06-23 16:16:55 669,696 ----a-w c:\windows\$hf_mig$\KB953838\SP2QFE\wininet.dll
+ 2008-06-23 15:13:22 3,088,384 ----a-w c:\windows\$hf_mig$\KB953838\SP3GDR\mshtml.dll
+ 2008-06-26 08:14:35 1,499,136 ----a-w c:\windows\$hf_mig$\KB953838\SP3GDR\shdocvw.dll
+ 2008-06-26 08:14:35 619,520 ----a-w c:\windows\$hf_mig$\KB953838\SP3GDR\urlmon.dll
+ 2008-06-23 15:13:22 668,672 ----a-w c:\windows\$hf_mig$\KB953838\SP3GDR\wininet.dll
+ 2008-06-25 04:27:42 3,088,896 ----a-w c:\windows\$hf_mig$\KB953838\SP3QFE\mshtml.dll
+ 2008-06-26 08:01:04 1,499,136 ----a-w c:\windows\$hf_mig$\KB953838\SP3QFE\shdocvw.dll
+ 2008-06-26 08:01:05 619,520 ----a-w c:\windows\$hf_mig$\KB953838\SP3QFE\urlmon.dll
+ 2008-06-23 14:57:40 669,184 ----a-w c:\windows\$hf_mig$\KB953838\SP3QFE\wininet.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB953838\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB953838\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB953838\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB953838\update\update.exe
+ 2007-11-30 12:40:48 398,200 ----a-w c:\windows\$hf_mig$\KB953838\update\updspapi.dll
+ 2007-11-30 12:40:46 19,320 ----a-w c:\windows\$hf_mig$\KB953839\spmsg.dll
+ 2007-11-30 12:40:46 234,360 ----a-w c:\windows\$hf_mig$\KB953839\spuninst.exe
+ 2007-11-30 12:40:46 26,488 ----a-w c:\windows\$hf_mig$\KB953839\update\spcustom.dll
+ 2007-11-30 12:40:47 763,256 ----a-w c:\windows\$hf_mig$\KB953839\update\update.exe
+ 2007-11-30 12:40:47 398,200 ----a-w c:\windows\$hf_mig$\KB953839\update\updspapi.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB938464$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB938464$\spuninst\updspapi.dll
+ 2004-08-03 23:55:54 82,944 -c----w c:\windows\$NtUninstallKB946648$\msgsc.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB946648$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB946648$\spuninst\updspapi.dll
+ 2005-07-26 04:42:34 243,200 -c----w c:\windows\$NtUninstallKB950974$\es.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB950974$\spuninst\spuninst.exe
+ 2007-11-30 12:40:48 398,200 -c----w c:\windows\$NtUninstallKB950974$\spuninst\updspapi.dll
+ 2007-08-21 06:18:06 683,520 -c----w c:\windows\$NtUninstallKB951066$\inetcomm.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB951066$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB951066$\spuninst\updspapi.dll
+ 2007-11-30 11:21:28 234,360 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB951072-v2$\spuninst\updspapi.dll
+ 2007-11-13 11:31:11 60,416 -c----w c:\windows\$NtUninstallKB951072-v2$\tzchange.exe
+ 2004-08-03 21:14:16 138,496 -c----w c:\windows\$NtUninstallKB951748$\afd.sys
+ 2008-02-20 05:38:07 148,992 -c----w c:\windows\$NtUninstallKB951748$\dnsapi.dll
+ 2004-08-03 22:44:06 246,784 -c----w c:\windows\$NtUninstallKB951748$\mswsock.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB951748$\spuninst\spuninst.exe
+ 2007-11-30 12:40:48 398,200 -c----w c:\windows\$NtUninstallKB951748$\spuninst\updspapi.dll
+ 2007-10-30 17:20:55 360,064 -c----w c:\windows\$NtUninstallKB951748$\tcpip.sys
+ 2006-08-16 09:37:30 225,664 -c----w c:\windows\$NtUninstallKB951748$\tcpip6.sys
+ 2004-08-03 22:44:04 331,776 -c----w c:\windows\$NtUninstallKB952287$\msadce.dll
+ 2007-11-30 11:21:28 234,360 -c----w c:\windows\$NtUninstallKB952287$\spuninst\spuninst.exe
+ 2007-11-30 11:21:29 398,200 -c----w c:\windows\$NtUninstallKB952287$\spuninst\updspapi.dll
+ 2005-06-29 01:52:57 74,240 -c----w c:\windows\$NtUninstallKB952954$\mscms.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB952954$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB952954$\spuninst\updspapi.dll
+ 2008-04-21 07:03:48 1,023,488 -c----w c:\windows\$NtUninstallKB953838$\browseui.dll
+ 2008-04-21 07:03:48 151,552 -c----w c:\windows\$NtUninstallKB953838$\cdfview.dll
+ 2008-04-21 07:03:50 1,055,744 -c----w c:\windows\$NtUninstallKB953838$\danim.dll
+ 2008-04-21 07:03:50 357,888 -c----w c:\windows\$NtUninstallKB953838$\dxtmsft.dll
+ 2008-04-21 07:03:50 205,312 -c----w c:\windows\$NtUninstallKB953838$\dxtrans.dll
+ 2008-04-21 07:03:50 55,808 -c----w c:\windows\$NtUninstallKB953838$\extmgr.dll
+ 2008-04-17 10:52:54 18,432 -c----w c:\windows\$NtUninstallKB953838$\iedw.exe
+ 2008-04-21 07:03:51 251,392 -c----w c:\windows\$NtUninstallKB953838$\iepeers.dll
+ 2008-04-21 07:03:51 96,768 -c----w c:\windows\$NtUninstallKB953838$\inseng.dll
+ 2008-04-21 07:03:51 16,384 -c----w c:\windows\$NtUninstallKB953838$\jsproxy.dll
+ 2008-04-21 07:03:55 3,080,704 -c----w c:\windows\$NtUninstallKB953838$\mshtml.dll
+ 2008-04-21 07:03:56 449,024 -c----w c:\windows\$NtUninstallKB953838$\mshtmled.dll
+ 2008-04-21 07:03:56 146,432 -c----w c:\windows\$NtUninstallKB953838$\msrating.dll
+ 2008-04-21 07:03:56 532,480 -c----w c:\windows\$NtUninstallKB953838$\mstime.dll
+ 2008-04-21 07:03:56 39,424 -c----w c:\windows\$NtUninstallKB953838$\pngfilt.dll
+ 2008-04-21 07:03:57 1,494,528 -c----w c:\windows\$NtUninstallKB953838$\shdocvw.dll
+ 2008-04-21 07:03:58 474,112 -c----w c:\windows\$NtUninstallKB953838$\shlwapi.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB953838$\spuninst\spuninst.exe
+ 2007-11-30 12:40:48 398,200 -c----w c:\windows\$NtUninstallKB953838$\spuninst\updspapi.dll
+ 2008-04-21 07:03:58 616,960 -c----w c:\windows\$NtUninstallKB953838$\urlmon.dll
+ 2008-04-21 07:03:59 662,016 -c----w c:\windows\$NtUninstallKB953838$\wininet.dll
+ 2008-04-17 11:03:57 369,152 -c----w c:\windows\$NtUninstallKB953838$\xpsp3res.dll
+ 2007-11-30 12:40:46 234,360 -c----w c:\windows\$NtUninstallKB953839$\spuninst\spuninst.exe
+ 2007-11-30 12:40:47 398,200 -c----w c:\windows\$NtUninstallKB953839$\spuninst\updspapi.dll
+ 1999-03-15 17:54:22 861,696 ------w c:\windows\Corel\uninstal.exe
- 1994-12-05 02:11:00 53,552 ----a-w c:\windows\ctccw.dll
+ 1994-12-05 01:11:00 53,552 ----a-w c:\windows\ctccw.dll
- 1996-05-23 01:24:00 24,976 ----a-w c:\windows\ctres.dll
+ 1996-05-23 00:24:00 24,976 ----a-w c:\windows\ctres.dll
- 1997-06-02 03:06:00 34,816 ----a-w c:\windows\CTRes32.dll
+ 1997-06-02 02:06:00 34,816 ----a-w c:\windows\CTRes32.dll
- 2007-02-28 16:04:45 2,137,600 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
+ 2008-08-14 13:46:46 2,137,600 ------w c:\windows\Driver Cache\i386\ntkrnlmp.exe
- 2007-02-28 16:04:56 2,058,880 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
+ 2008-08-14 13:46:58 2,059,008 ------w c:\windows\Driver Cache\i386\ntkrnlpa.exe
- 2007-02-28 16:04:47 2,017,280 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
+ 2008-08-14 13:46:44 2,017,280 ------w c:\windows\Driver Cache\i386\ntkrpamp.exe
- 2007-02-28 16:04:58 2,181,632 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
+ 2008-08-14 13:46:56 2,181,632 ------w c:\windows\Driver Cache\i386\ntoskrnl.exe
- 2005-10-20 18:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\erdnt\Hiv-backup\ERDNT.EXE
- 2000-08-31 06:00:00 89,504 ----a-w c:\windows\fdsv.exe
+ 2000-08-31 07:00:00 89,504 ----a-w c:\windows\fdsv.exe
- 2000-08-31 06:00:00 80,412 ----a-w c:\windows\grep.exe
+ 2000-08-31 07:00:00 80,412 ----a-w c:\windows\grep.exe
+ 1996-09-25 10:31:50 39,125 ------w c:\windows\iccsigs.dat
- 1998-10-29 15:45:06 306,688 ----a-w c:\windows\IsUninst.exe
+ 1998-10-29 14:45:06 306,688 ----a-w c:\windows\IsUninst.exe
+ 1996-02-28 05:47:16 447,760 ----a-r c:\windows\msapps\DAO\DAO3032.DLL
- 2000-08-31 06:00:00 28,672 ----a-w c:\windows\Nircmd.exe
+ 2000-08-31 07:00:00 28,672 ----a-w c:\windows\NIRCMD.exe
+ 2008-09-29 20:06:40 188,122 ----a-w c:\windows\PCHEALTH\HELPCTR\Config\Cache\Professional_32_1045.dat
+ 2008-09-29 20:06:40 188,122 ----a-w c:\windows\PCHEALTH\HELPCTR\Config\Cache\Professional_32_1045.dat.bak
- 2000-08-31 06:00:00 98,816 ----a-w c:\windows\sed.exe
+ 2000-08-31 07:00:00 98,816 ----a-w c:\windows\sed.exe
+ 2008-09-21 14:18:54 278,282 ----a-w c:\windows\Super Mario Epic\Super Mario Epic.exe
+ 2008-09-21 14:18:53 40,448 ----a-w c:\windows\Super Mario Epic\uninstal.exe
- 2000-08-31 06:00:00 161,792 ----a-w c:\windows\swreg.exe
+ 2000-08-31 07:00:00 161,792 ----a-w c:\windows\SWREG.exe
- 2000-08-31 06:00:00 136,704 ----a-w c:\windows\swsc.exe
+ 2000-08-31 07:00:00 136,704 ----a-w c:\windows\SWSC.exe
- 2000-08-31 06:00:00 212,480 ----a-w c:\windows\swxcacls.exe
+ 2000-08-31 07:00:00 212,480 ----a-w c:\windows\SWXCACLS.exe
+ 2008-08-06 14:22:02 114,688 ----a-w c:\windows\system32\Adobe\Director\np32dsw.dll
+ 2008-08-06 14:30:48 202,168 ----a-w c:\windows\system32\Adobe\Director\swdir.dll
+ 2008-08-06 14:31:08 67,000 ----a-w c:\windows\system32\Adobe\Director\SwDnld.exe
+ 2008-08-06 14:22:42 499,712 ----a-w c:\windows\system32\Adobe\Shockwave 11\Control.dll
+ 2008-08-06 13:45:40 1,798,144 ----a-w c:\windows\system32\Adobe\Shockwave 11\dirapi.dll
+ 2008-08-06 14:22:44 9,216 ----a-w c:\windows\system32\Adobe\Shockwave 11\DynaPlayer.dll
+ 2008-08-06 13:35:52 706,048 ----a-w c:\windows\system32\Adobe\Shockwave 11\gi.dll
+ 2008-09-27 13:19:26 1,145,896 ----atw c:\windows\system32\Adobe\Shockwave 11\gt.exe
+ 2008-08-06 13:35:52 52,288 ----a-w c:\windows\system32\Adobe\Shockwave 11\gtapi.dll
+ 2008-08-06 13:42:04 892,928 ----a-w c:\windows\system32\Adobe\Shockwave 11\iml32.dll
+ 2008-08-06 13:35:52 54,656 ----a-w c:\windows\system32\Adobe\Shockwave 11\pccuapi.dll
+ 2008-08-06 14:21:14 266,240 ----a-w c:\windows\system32\Adobe\Shockwave 11\Plugin.dll
+ 2008-08-06 14:24:14 446,464 ----a-w c:\windows\system32\Adobe\Shockwave 11\Proj.dll
+ 2008-08-06 14:30:30 447,928 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwHelper_1100465.exe
+ 2008-08-06 14:24:56 114,688 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwInit.exe
+ 2008-08-06 14:21:04 94,208 ----a-w c:\windows\system32\Adobe\Shockwave 11\SwMenu.dll
+ 2008-08-06 13:35:52 50,808 ----a-w c:\windows\system32\Adobe\Shockwave 11\SYMCCHECKER.DLL
+ 1999-06-25 08:55:30 149,504 ----a-w c:\windows\system32\Adobe\Shockwave 11\UNWISE.EXE
+ 1998-03-18 23:00:00 3,584 ----a-w c:\windows\system32\Ahqcpres.dll
- 2008-04-21 07:03:48 1,023,488 ----a-w c:\windows\system32\browseui.dll
+ 2008-08-20 05:38:45 1,023,488 ----a-w c:\windows\system32\browseui.dll
- 2008-04-21 07:03:48 151,552 ----a-w c:\windows\system32\cdfview.dll
+ 2008-08-20 05:38:38 151,552 ----a-w c:\windows\system32\cdfview.dll
- 2007-07-30 18:19:20 92,504 ----a-w c:\windows\system32\cdm.dll
+ 2008-07-18 20:10:48 94,920 ----a-w c:\windows\system32\cdm.dll
+ 2008-08-05 19:11:56 1,638,400 ----a-w c:\windows\system32\config\systemprofile\ntuser.dat
+ 1999-08-29 23:55:00 57,856 ------w c:\windows\system32\CTDetres.dll
+ 2000-09-03 23:00:00 12,288 ------w c:\windows\system32\CTDrmRes.dll
+ 2000-07-03 23:00:00 98,304 ------w c:\windows\system32\CTDrmUI.dll
+ 2000-05-23 23:00:00 28,672 ------w c:\windows\system32\CTIntRes.dll
- 1995-07-13 01:01:00 26,768 ----a-w c:\windows\system32\ctl3d.dll
+ 1995-07-13 00:01:00 26,768 ----a-w c:\windows\system32\ctl3d.dll
+ 2000-09-01 23:10:00 258,048 ------w c:\windows\system32\CTMedEng.dll
+ 2000-04-19 23:00:00 24,576 ------w c:\windows\system32\CTMERes.DLL
- 2000-09-11 00:03:00 120,320 ------w c:\windows\system32\ctmp3io2.dll
+ 2000-09-10 23:03:00 120,320 ------w c:\windows\system32\ctmp3io2.dll
- 2000-08-22 00:01:00 290,816 ------w c:\windows\system32\CtMp3Lib.dll
+ 2000-08-21 23:01:00 290,816 ------w c:\windows\system32\CtMp3Lib.dll
+ 1999-12-12 23:01:00 44,032 ----a-w c:\windows\system32\CTSVCCDA.EXE
+ 1999-11-17 23:00:00 25,088 ----a-w c:\windows\system32\CTSVCCTL.EXE
- 1999-11-15 14:00:20 3,944 ----a-w c:\windows\system32\ctwdm32.dll
+ 2001-10-26 15:29:30 4,096 ----a-w c:\windows\system32\ctwdm32.dll
- 1995-08-30 01:02:00 82,432 ----a-w c:\windows\system32\ctwflt32.dll
+ 1995-08-30 00:02:00 82,432 ----a-w c:\windows\system32\ctwflt32.dll
- 2008-04-21 07:03:50 1,055,744 ----a-w c:\windows\system32\danim.dll
+ 2008-08-20 05:38:39 1,055,744 ----a-w c:\windows\system32\danim.dll
- 2000-12-12 10:36:02 339,968 ----a-w c:\windows\system32\devcon32.dll
+ 2001-10-26 15:29:30 256,512 ----a-w c:\windows\system32\devcon32.dll
- 2000-06-05 14:32:46 38,912 ----a-w c:\windows\system32\devldr32.exe
+ 2001-10-26 15:29:52 24,064 ----a-w c:\windows\system32\devldr32.exe
- 2004-08-03 21:14:16 138,496 -c--a-w c:\windows\system32\dllcache\afd.sys
+ 2008-08-14 09:51:43 138,368 -c--a-w c:\windows\system32\dllcache\afd.sys
- 2008-04-21 07:03:48 1,023,488 -c--a-w c:\windows\system32\dllcache\browseui.dll
+ 2008-08-20 05:38:45 1,023,488 -c--a-w c:\windows\system32\dllcache\browseui.dll
+ 2004-08-03 21:10:18 17,024 -c--a-w c:\windows\system32\dllcache\ccdecode.sys
- 2008-04-21 07:03:48 151,552 -c--a-w c:\windows\system32\dllcache\cdfview.dll
+ 2008-08-20 05:38:38 151,552 -c--a-w c:\windows\system32\dllcache\cdfview.dll
- 2007-07-30 18:19:20 92,504 -c--a-w c:\windows\system32\dllcache\cdm.dll
+ 2008-07-18 20:10:48 94,920 -c--a-w c:\windows\system32\dllcache\cdm.dll
- 1999-11-15 14:00:20 3,944 -c--a-w c:\windows\system32\dllcache\ctwdm32.dll
+ 2001-10-26 15:29:30 4,096 -c--a-w c:\windows\system32\dllcache\ctwdm32.dll
- 2008-04-21 07:03:50 1,055,744 -c--a-w c:\windows\system32\dllcache\danim.dll
+ 2008-08-20 05:38:39 1,055,744 -c--a-w c:\windows\system32\dllcache\danim.dll
- 2008-02-20 05:38:07 148,992 -c--a-w c:\windows\system32\dllcache\dnsapi.dll
+ 2008-06-20 17:42:20 148,992 -c--a-w c:\windows\system32\dllcache\dnsapi.dll
- 2004-08-03 22:08:00 60,288 -c--a-w c:\windows\system32\dllcache\drmk.sys
+ 2004-08-03 21:08:00 60,288 -c--a-w c:\windows\system32\dllcache\drmk.sys
- 2008-04-21 07:03:50 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
+ 2008-08-20 05:38:39 357,888 -c--a-w c:\windows\system32\dllcache\dxtmsft.dll
- 2008-04-21 07:03:50 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
+ 2008-08-20 05:38:39 205,312 -c--a-w c:\windows\system32\dllcache\dxtrans.dll
- 2005-07-26 04:42:34 243,200 -c--a-w c:\windows\system32\dllcache\es.dll
+ 2008-07-07 20:33:22 253,952 -c--a-w c:\windows\system32\dllcache\es.dll
- 2008-04-21 07:03:50 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
+ 2008-08-20 05:38:39 55,808 -c--a-w c:\windows\system32\dllcache\extmgr.dll
- 2008-04-17 10:52:54 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
+ 2008-08-19 09:30:39 18,432 -c--a-w c:\windows\system32\dllcache\iedw.exe
- 2008-04-21 07:03:51 251,392 -c--a-w c:\windows\system32\dllcache\iepeers.dll
+ 2008-08-20 05:38:40 251,392 -c--a-w c:\windows\system32\dllcache\iepeers.dll
- 2007-08-21 06:18:06 683,520 -c--a-w c:\windows\system32\dllcache\inetcomm.dll
+ 2008-04-11 18:51:52 683,520 -c--a-w c:\windows\system32\dllcache\inetcomm.dll
- 2008-04-21 07:03:51 96,768 -c--a-w c:\windows\system32\dllcache\inseng.dll
+ 2008-08-20 05:38:40 96,768 -c--a-w c:\windows\system32\dllcache\inseng.dll
- 2008-04-21 07:03:51 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
+ 2008-08-20 05:38:43 16,384 -c--a-w c:\windows\system32\dllcache\jsproxy.dll
- 2004-08-03 22:15:22 140,928 -c--a-w c:\windows\system32\dllcache\ks.sys
+ 2004-08-03 21:15:22 140,928 -c--a-w c:\windows\system32\dllcache\ks.sys
- 2004-08-03 22:44:04 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
+ 2008-05-01 14:33:01 331,776 -c--a-w c:\windows\system32\dllcache\msadce.dll
- 2005-06-29 01:52:57 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll
+ 2008-06-24 16:24:26 74,240 -c--a-w c:\windows\system32\dllcache\mscms.dll
- 2008-04-21 07:03:55 3,080,704 -c--a-w c:\windows\system32\dllcache\mshtml.dll
+ 2008-08-20 05:38:48 3,081,216 -c--a-w c:\windows\system32\dllcache\mshtml.dll
- 2008-04-21 07:03:56 449,024 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
+ 2008-08-20 05:38:43 449,024 -c--a-w c:\windows\system32\dllcache\mshtmled.dll
- 2008-04-21 07:03:56 146,432 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2008-08-20 05:38:40 146,432 -c--a-w c:\windows\system32\dllcache\msrating.dll
+ 2004-08-03 20:58:40 5,504 -c--a-w c:\windows\system32\dllcache\mstee.sys
- 2008-04-21 07:03:56 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
+ 2008-08-20 05:38:41 532,480 -c--a-w c:\windows\system32\dllcache\mstime.dll
- 2004-08-03 22:44:06 246,784 -c--a-w c:\windows\system32\dllcache\mswsock.dll
+ 2008-06-20 17:42:21 246,784 -c--a-w c:\windows\system32\dllcache\mswsock.dll
+ 2004-08-03 21:10:30 85,376 -c--a-w c:\windows\system32\dllcache\nabtsfec.sys
+ 2004-08-03 21:10:14 10,880 -c--a-w c:\windows\system32\dllcache\ndisip.sys
- 2006-08-17 12:30:06 332,288 -c--a-w c:\windows\system32\dllcache\netapi32.dll
+ 2008-10-15 17:00:47 332,800 -c--a-w c:\windows\system32\dllcache\netapi32.dll
- 2007-02-28 16:04:45 2,137,600 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
+ 2008-08-14 13:46:46 2,137,600 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
- 2007-02-28 16:04:56 2,058,880 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe
+ 2008-08-14 13:46:58 2,059,008 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe
- 2007-02-28 16:04:47 2,017,280 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
+ 2008-08-14 13:46:44 2,017,280 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
- 2007-02-28 16:04:58 2,181,632 -c----w c:\windows\system32\dllcache\ntoskrnl.exe
+ 2008-08-14 13:46:56 2,181,632 -c----w c:\windows\system32\dllcache\ntoskrnl.exe
- 2008-04-21 07:03:56 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
+ 2008-08-20 05:38:41 39,424 -c--a-w c:\windows\system32\dllcache\pngfilt.dll
- 2004-08-03 22:15:50 145,792 -c--a-w c:\windows\system32\dllcache\portcls.sys
+ 2004-08-03 21:15:50 145,792 -c--a-w c:\windows\system32\dllcache\portcls.sys
- 2000-10-09 10:48:46 495,616 -c--a-w c:\windows\system32\dllcache\sblfx.dll
+ 2001-10-26 15:28:46 495,616 -c--a-w c:\windows\system32\dllcache\sblfx.dll
- 2008-04-21 07:03:57 1,494,528 -c--a-w c:\windows\system32\dllcache\shdocvw.dll
+ 2008-08-20 05:38:42 1,494,528 -c--a-w c:\windows\system32\dllcache\shdocvw.dll
- 2008-04-21 07:03:58 474,112 -c--a-w c:\windows\system32\dllcache\shlwapi.dll
+ 2008-08-20 05:38:44 474,112 -c--a-w c:\windows\system32\dllcache\shlwapi.dll
+ 2004-08-03 21:10:18 11,136 -c--a-w c:\windows\system32\dllcache\slip.sys
- 2006-08-14 10:34:41 332,928 -c--a-w c:\windows\system32\dllcache\srv.sys
+ 2008-08-28 10:04:17 333,056 -c--a-w c:\windows\system32\dllcache\srv.sys
- 2004-08-03 22:08:04 48,640 -c--a-w c:\windows\system32\dllcache\stream.sys
+ 2004-08-03 21:08:04 48,640 -c--a-w c:\windows\system32\dllcache\stream.sys
+ 2004-08-03 21:10:14 15,360 -c--a-w c:\windows\system32\dllcache\streamip.sys
- 2007-10-30 17:20:55 360,064 -c--a-w c:\windows\system32\dllcache\tcpip.sys
+ 2008-06-20 10:45:13 360,320 -c--a-w c:\windows\system32\dllcache\tcpip.sys
- 2006-08-16 09:37:30 225,664 -c--a-w c:\windows\system32\dllcache\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 -c--a-w c:\windows\system32\dllcache\tcpip6.sys
- 2008-04-21 07:03:58 616,960 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2008-08-20 05:38:45 616,960 -c--a-w c:\windows\system32\dllcache\urlmon.dll
+ 2004-08-03 22:44:14 54,784 -c--a-w c:\windows\system32\dllcache\vfwwdm32.dll
- 2008-03-20 08:09:45 1,845,504 -c--a-w c:\windows\system32\dllcache\win32k.sys
+ 2008-09-15 15:40:58 1,846,272 -c--a-w c:\windows\system32\dllcache\win32k.sys
- 2008-04-21 07:03:59 662,016 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2008-08-20 05:38:43 662,016 -c--a-w c:\windows\system32\dllcache\wininet.dll
+ 2004-08-03 21:10:22 19,328 -c--a-w c:\windows\system32\dllcache\wstcodec.sys
- 2007-07-30 18:19:36 549,720 -c--a-w c:\windows\system32\dllcache\wuapi.dll
+ 2008-07-18 20:09:44 563,912 -c--a-w c:\windows\system32\dllcache\wuapi.dll
- 2007-07-30 18:19:16 53,080 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
+ 2008-07-18 20:10:42 53,448 -c--a-w c:\windows\system32\dllcache\wuauclt.exe
- 2007-07-30 18:19:42 1,712,984 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
+ 2008-07-18 20:09:42 1,811,656 -c--a-w c:\windows\system32\dllcache\wuaueng.dll
- 2007-07-30 18:19:32 325,976 -c--a-w c:\windows\system32\dllcache\wucltui.dll
+ 2008-07-18 20:09:46 325,832 -c--a-w c:\windows\system32\dllcache\wucltui.dll
- 2007-07-30 18:18:40 33,624 -c--a-w c:\windows\system32\dllcache\wups.dll
+ 2008-07-18 20:10:20 36,552 -c--a-w c:\windows\system32\dllcache\wups.dll
- 2007-07-30 18:19:28 203,096 -c--a-w c:\windows\system32\dllcache\wuweb.dll
+ 2008-07-18 20:09:44 205,000 -c--a-w c:\windows\system32\dllcache\wuweb.dll
- 2008-02-20 05:38:07 148,992 ----a-w c:\windows\system32\dnsapi.dll
+ 2008-06-20 17:42:20 148,992 ----a-w c:\windows\system32\dnsapi.dll
- 2004-08-03 21:14:16 138,496 ----a-w c:\windows\system32\drivers\afd.sys
+ 2008-08-14 09:51:43 138,368 ----a-w c:\windows\system32\drivers\afd.sys
+ 2004-08-03 21:10:18 17,024 ----a-w c:\windows\system32\drivers\CCDECODE.sys
- 2004-08-03 22:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
+ 2004-08-03 21:08:00 60,288 ----a-w c:\windows\system32\drivers\drmk.sys
- 2004-08-03 22:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys
+ 2004-08-03 21:15:22 140,928 ----a-w c:\windows\system32\drivers\ks.sys
+ 2004-08-03 20:58:40 5,504 ----a-w c:\windows\system32\drivers\MSTEE.sys
+ 2004-08-03 21:10:30 85,376 ----a-w c:\windows\system32\drivers\NABTSFEC.sys
+ 2004-08-03 21:10:14 10,880 ----a-w c:\windows\system32\drivers\NdisIP.sys
- 2004-08-03 22:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys
+ 2004-08-03 21:15:50 145,792 ----a-w c:\windows\system32\drivers\portcls.sys
+ 2004-08-03 21:10:18 11,136 ----a-w c:\windows\system32\drivers\SLIP.sys
- 2006-08-14 10:34:41 332,928 ----a-w c:\windows\system32\drivers\srv.sys
+ 2008-08-28 10:04:17 333,056 ----a-w c:\windows\system32\drivers\srv.sys
- 2004-08-03 22:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
+ 2004-08-03 21:08:04 48,640 ----a-w c:\windows\system32\drivers\stream.sys
+ 2004-08-03 21:10:14 15,360 ----a-w c:\windows\system32\drivers\StreamIP.sys
- 2007-10-30 17:20:55 360,064 ----a-w c:\windows\system32\drivers\tcpip.sys
+ 2008-06-20 10:45:13 360,320 ----a-w c:\windows\system32\drivers\tcpip.sys
- 2006-08-16 09:37:30 225,664 ----a-w c:\windows\system32\drivers\tcpip6.sys
+ 2008-06-20 09:52:06 225,920 ----a-w c:\windows\system32\drivers\tcpip6.sys
+ 2004-08-03 21:10:22 19,328 ----a-w c:\windows\system32\drivers\WSTCODEC.SYS
- 2008-04-21 07:03:50 357,888 ----a-w c:\windows\system32\dxtmsft.dll
+ 2008-08-20 05:38:39 357,888 ----a-w c:\windows\system32\dxtmsft.dll
- 2008-04-21 07:03:50 205,312 ----a-w c:\windows\system32\dxtrans.dll
+ 2008-08-20 05:38:39 205,312 ----a-w c:\windows\system32\dxtrans.dll
- 2005-07-26 04:42:34 243,200 ----a-w c:\windows\system32\es.dll
+ 2008-07-07 20:33:22 253,952 ----a-w c:\windows\system32\es.dll
- 2008-04-21 07:03:50 55,808 ----a-w c:\windows\system32\extmgr.dll
+ 2008-08-20 05:38:39 55,808 ----a-w c:\windows\system32\extmgr.dll
- 2008-06-26 18:32:55 119,744 ----a-w c:\windows\system32\FNTCACHE.DAT
+ 2008-10-17 16:47:27 159,544 ----a-w c:\windows\system32\FNTCACHE.DAT
- 1996-10-15 08:53:16 14,160 ----a-w c:\windows\system32\HLINKPRX.DLL
+ 1996-10-15 07:53:16 14,160 ----a-w c:\windows\system32\HLINKPRX.DLL
- 2008-04-21 07:03:51 251,392 ----a-w c:\windows\system32\iepeers.dll
+ 2008-08-20 05:38:40 251,392 ----a-w c:\windows\system32\iepeers.dll
- 2007-08-21 06:18:06 683,520 ----a-w c:\windows\system32\inetcomm.dll
+ 2008-04-11 18:51:52 683,520 ----a-w c:\windows\system32\inetcomm.dll
+ 1998-10-20 14:05:42 54,784 ----a-w c:\windows\system32\Inetwh32.dll
- 1996-10-15 08:53:16 78,848 ----a-w c:\windows\system32\INLOADER.DLL
+ 1996-10-15 07:53:16 78,848 ----a-w c:\windows\system32\INLOADER.DLL
- 2008-04-21 07:03:51 96,768 ----a-w c:\windows\system32\inseng.dll
+ 2008-08-20 05:38:40 96,768 ----a-w c:\windows\system32\inseng.dll
- 2008-04-21 07:03:51 16,384 ----a-w c:\windows\system32\jsproxy.dll
+ 2008-08-20 05:38:43 16,384 ----a-w c:\windows\system32\jsproxy.dll
- 2004-08-04 00:44:02 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2004-08-03 22:44:02 4,096 ----a-w c:\windows\system32\ksuser.dll
+ 2008-03-14 21:31:26 57,344 ----a-w c:\windows\system32\Macromed\Common\SwSupport.dll
+ 2008-03-14 21:29:22 581,632 ----a-w c:\windows\system32\Macromed\Shockwave 10\Control.dll
+ 2008-03-14 21:12:30 1,490,944 ----a-w c:\windows\system32\Macromed\Shockwave 10\dirapiX.dll
+ 2008-03-14 21:29:58 24,576 ----a-w c:\windows\system32\Macromed\Shockwave 10\DynaPlayer.dll
+ 2008-03-14 21:10:06 606,208 ----a-w c:\windows\system32\Macromed\Shockwave 10\iml32X.dll
+ 2008-03-14 21:28:48 339,968 ----a-w c:\windows\system32\Macromed\Shockwave 10\Plugin.dll
+ 2008-03-14 21:28:56 475,136 ----a-w c:\windows\system32\Macromed\Shockwave 10\PluginPing.dll
+ 2008-03-14 21:21:52 180,224 ----a-w c:\windows\system32\Macromed\Shockwave 10\Proj.dll
+ 2008-03-14 21:31:28 77,824 ----a-w c:\windows\system32\Macromed\Shockwave 10\SwInit.exe
+ 2008-03-15 09:38:08 86,016 ----a-w c:\windows\system32\Macromed\Shockwave 10\SwMenuX.dll
+ 2008-03-14 21:31:28 98,304 ----a-w c:\windows\system32\Macromed\Shockwave 10\SwOnce.dll
+ 1995-05-19 12:44:06 322,832 ------w c:\windows\system32\mfc30.dll
- 1995-01-13 13:10:00 149,504 ----a-w c:\windows\system32\mfcans32.dll
+ 1995-05-19 11:49:20 133,904 ------w c:\windows\system32\mfcans32.dll
- 1995-01-13 13:10:00 108,032 ----a-w c:\windows\system32\mfcuia32.dll
+ 1995-05-22 11:05:42 108,032 ------w c:\windows\system32\mfcuia32.dll
- 2008-05-09 21:35:04 16,863,864 ----a-w c:\windows\system32\MRT.exe
+ 2008-10-07 19:19:40 16,721,856 ----a-w c:\windows\system32\MRT.exe
- 2005-06-29 01:52:57 74,240 ----a-w c:\windows\system32\mscms.dll
+ 2008-06-24 16:24:26 74,240 ----a-w c:\windows\system32\mscms.dll
- 2008-04-21 07:03:55 3,080,704 ----a-w c:\windows\system32\mshtml.dll
+ 2008-08-20 05:38:48 3,081,216 ----a-w c:\windows\system32\mshtml.dll
- 2008-04-21 07:03:56 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 2008-08-20 05:38:43 449,024 ----a-w c:\windows\system32\mshtmled.dll
+ 1996-03-15 15:15:52 33,552 ----a-r c:\windows\system32\MSJINT32.DLL
+ 1996-04-11 14:34:12 965,904 ----a-r c:\windows\system32\MSJT3032.DLL
+ 1996-03-15 15:47:32 98,356 ----a-r c:\windows\system32\MSJTER32.DLL
+ 1995-08-14 22:00:00 144,144 ----a-r c:\windows\system32\MSLT3032.DLL
+ 1995-08-07 03:33:00 43,008 ----a-r c:\windows\system32\MSOC95.DLL
+ 1995-07-19 22:00:00 240,912 ----a-r c:\windows\system32\MSPX3032.DLL
- 2008-04-21 07:03:56 146,432 ----a-w c:\windows\system32\msrating.dll
+ 2008-08-20 05:38:40 146,432 ----a-w c:\windows\system32\msrating.dll
+ 1995-09-20 14:16:30 245,520 ----a-r c:\windows\system32\MSRD2X32.DLL
- 2008-04-21 07:03:56 532,480 ----a-w c:\windows\system32\mstime.dll
+ 2008-08-20 05:38:41 532,480 ----a-w c:\windows\system32\mstime.dll
+ 1995-07-19 22:00:00 121,104 ----a-r c:\windows\system32\MSTX3032.DLL
- 2004-08-03 22:44:06 246,784 ----a-w c:\windows\system32\mswsock.dll
+ 2008-06-20 17:42:21 246,784 ----a-w c:\windows\system32\mswsock.dll
+ 1995-05-11 22:00:00 260,368 ----a-r c:\windows\system32\MSXB3032.DLL
+ 1995-07-19 22:00:00 220,944 ----a-r c:\windows\system32\MSXL3032.DLL
- 2006-08-17 12:30:06 332,288 ----a-w c:\windows\system32\netapi32.dll
+ 2008-10-15 17:00:47 332,800 ----a-w c:\windows\system32\netapi32.dll
+ 2005-01-14 08:32:38 53,248 ----a-w c:\windows\system32\PAStiSvc.exe
- 2008-07-04 18:58:05 51,396 ----a-w c:\windows\system32\perfc009.dat
+ 2008-10-26 14:14:16 51,396 ----a-w c:\windows\system32\perfc009.dat
- 2008-07-04 18:58:05 64,858 ----a-w c:\windows\system32\perfc015.dat
+ 2008-10-26 14:14:16 64,858 ----a-w c:\windows\system32\perfc015.dat
- 2008-07-04 18:58:05 337,052 ----a-w c:\windows\system32\perfh009.dat
+ 2008-10-26 14:14:16 337,052 ----a-w c:\windows\system32\perfh009.dat
- 2008-07-04 18:58:05 383,238 ----a-w c:\windows\system32\perfh015.dat
+ 2008-10-26 14:14:16 383,238 ----a-w c:\windows\system32\perfh015.dat
- 1999-12-17 00:00:00 6,752 ----a-w c:\windows\system32\PfModNT.sys
+ 1999-12-16 23:00:00 6,752 ----a-w c:\windows\system32\PfModNT.sys
- 2008-04-21 07:03:56 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 2008-08-20 05:38:41 39,424 ----a-w c:\windows\system32\pngfilt.dll
+ 1998-10-14 08:03:00 59,392 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\a3d.dll
+ 2000-10-18 12:16:04 7,001 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\ctlface.sys
+ 1999-11-15 14:00:20 3,944 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\ctwdm32.dll
+ 2000-12-12 10:36:02 339,968 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\devcon32.dll
+ 2000-06-05 14:32:46 38,912 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\devldr32.exe
+ 2000-12-13 01:00:00 404,335 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\emu10k1f.sys
+ 2004-08-03 21:08:00 60,288 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\drmk.sys
+ 2004-08-03 21:15:22 140,928 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\ks.sys
+ 2004-08-03 22:44:02 4,096 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\ksuser.dll
+ 2004-08-03 21:15:50 145,792 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\portcls.sys
+ 2004-08-03 21:08:04 48,640 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\stream.sys
+ 2004-08-03 22:54:52 23,552 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\i386\wdmaud.drv
+ 2000-10-09 10:48:46 495,616 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\sblfx.dll
+ 2000-07-27 01:00:00 37,260 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\sfman.sys
+ 1999-01-13 02:00:00 111,104 ----a-w c:\windows\system32\ReinstallBackups\0003\DriverFiles\sfman32.dll
+ 2008-11-04 22:09:22 41,036 ----a-w c:\windows\system32\Restore\rstrlog.dat
- 2000-10-09 10:48:46 495,616 ----a-w c:\windows\system32\sblfx.dll
+ 2001-10-26 15:28:46 495,616 ----a-w c:\windows\system32\sblfx.dll
+ 1997-04-24 01:56:50 409,600 ------w c:\windows\system32\scint70.dll
+ 1996-10-01 13:26:04 21,504 ------w c:\windows\system32\scpext.dll
- 1998-06-05 01:00:00 84,992 ----a-w c:\windows\system32\sfcvrt32.dll
+ 1998-06-05 00:00:00 84,992 ----a-w c:\windows\system32\sfcvrt32.dll
- 1999-01-13 02:00:00 111,104 ----a-w c:\windows\system32\sfman32.dll
+ 2001-10-26 15:29:44 51,200 ----a-w c:\windows\system32\sfman32.dll
- 2008-04-21 07:03:57 1,494,528 ----a-w c:\windows\system32\shdocvw.dll
+ 2008-08-20 05:38:42 1,494,528 ----a-w c:\windows\system32\shdocvw.dll
- 2008-04-21 07:03:58 474,112 ----a-w c:\windows\system32\shlwapi.dll
+ 2008-08-20 05:38:44 474,112 ----a-w c:\windows\system32\shlwapi.dll
+ 2008-07-18 20:10:20 36,552 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-18 20:10:40 45,768 ----a-w c:\windows\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
- 2007-11-13 11:31:11 60,416 ------w c:\windows\system32\tzchange.exe
+ 2008-07-14 11:09:18 62,976 ------w c:\windows\system32\tzchange.exe
- 2008-04-21 07:03:58 616,960 ----a-w c:\windows\system32\urlmon.dll
+ 2008-08-20 05:38:45 616,960 ----a-w c:\windows\system32\urlmon.dll
+ 1995-07-19 22:00:00 816,720 ----a-r c:\windows\system32\VBA32.DLL
+ 1995-07-19 22:00:00 8,976 ----a-r c:\windows\system32\VBAEN32.DLL
+ 1995-07-19 22:00:00 1,371,436 ----a-r c:\windows\system32\VBAR2132.DLL
+ 1995-09-24 09:02:52 243,472 ----a-r c:\windows\system32\VBAR2232.DLL
+ 1994-04-12 21:00:00 95,200 ----a-r c:\windows\system32\VBDB300.DLL
+ 1993-04-27 22:00:00 13,824 ----a-r c:\windows\system32\VBOA300.DLL
+ 1995-07-11 07:50:00 398,416 ----a-r c:\windows\system32\VBRUN300.DLL
+ 2004-08-03 22:44:14 54,784 ----a-w c:\windows\system32\vfwwdm32.dll
- 2007-07-30 18:19:36 549,720 ----a-w c:\windows\system32\wuapi.dll
+ 2008-07-18 20:09:44 563,912 ----a-w c:\windows\system32\wuapi.dll
- 2007-07-30 18:19:16 53,080 ----a-w c:\windows\system32\wuauclt.exe
+ 2008-07-18 20:10:42 53,448 ----a-w c:\windows\system32\wuauclt.exe
- 2007-07-30 18:19:42 1,712,984 ----a-w c:\windows\system32\wuaueng.dll
+ 2008-07-18 20:09:42 1,811,656 ----a-w c:\windows\system32\wuaueng.dll
- 2007-07-30 18:19:32 325,976 ----a-w c:\windows\system32\wucltui.dll
+ 2008-07-18 20:09:46 325,832 ----a-w c:\windows\system32\wucltui.dll
- 2007-07-30 18:18:40 33,624 ----a-w c:\windows\system32\wups.dll
+ 2008-07-18 20:10:20 36,552 ----a-w c:\windows\system32\wups.dll
- 2007-07-30 18:19:12 43,352 ----a-w c:\windows\system32\wups2.dll
+ 2008-07-18 20:10:40 45,768 ----a-w c:\windows\system32\wups2.dll
- 2007-07-30 18:19:28 203,096 ----a-w c:\windows\system32\wuweb.dll
+ 2008-07-18 20:09:44 205,000 ----a-w c:\windows\system32\wuweb.dll
- 2008-04-17 11:03:57 369,152 ----a-w c:\windows\system32\xpsp3res.dll
+ 2008-08-19 09:51:53 369,152 ----a-w c:\windows\system32\xpsp3res.dll
- 2000-05-11 00:00:00 90,112 ----a-w c:\windows\Updreg.exe
+ 2000-05-10 23:00:00 90,112 ----a-w c:\windows\Updreg.exe
- 2000-08-31 06:00:00 49,152 ----a-w c:\windows\VFind.exe
+ 2000-08-31 07:00:00 49,152 ----a-w c:\windows\VFIND.exe
+ 2008-04-15 18:01:31 1,724,416 ----a-w c:\windows\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.3352_x-ww_81af8e88\GdiPlus.dll
- 2000-08-31 06:00:00 68,096 ----a-w c:\windows\zip.exe
+ 2000-08-31 07:00:00 68,096 ----a-w c:\windows\zip.exe
.
-- Migawka wyzerowana --
.
((((((((((((((((((((((((((((((((((((( Wpisy startowe rejestru ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Uwaga* puste wpisy oraz domyślne, prawidłowe wpisy nie są pokazane
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-08-11 21741864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Disc Detector"="c:\program files\Creative\ShareDLL\CtNotify.exe" [1999-08-30 189952]
"CTAvTray"="c:\program files\Creative\SBLive2k\Program\CTAvTray.EXE" [2000-09-01 21504]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programy^Autostart^Microsoft Office.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Start\Programy\Autostart\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\^brpinfo.dll]
path=\brpinfo.dll
backup=c:\windows\pss\brpinfo.dllCommon Startup

[HKLM\~\startupfolder\^HCAppRes.dll]
path=\HCAppRes.dll
backup=c:\windows\pss\HCAppRes.dllCommon Startup

[HKLM\~\startupfolder\^HelpCtr.exe]
path=\HelpCtr.exe
backup=c:\windows\pss\HelpCtr.exeCommon Startup

[HKLM\~\startupfolder\^HelpHost.exe]
path=\HelpHost.exe
backup=c:\windows\pss\HelpHost.exeCommon Startup

[HKLM\~\startupfolder\^HelpSvc.exe]
path=\HelpSvc.exe
backup=c:\windows\pss\HelpSvc.exeCommon Startup

[HKLM\~\startupfolder\^hscsp_w3.cab]
path=\hscsp_w3.cab
backup=c:\windows\pss\hscsp_w3.cabCommon Startup

[HKLM\~\startupfolder\^HscUpd.exe]
path=\HscUpd.exe
backup=c:\windows\pss\HscUpd.exeCommon Startup

[HKLM\~\startupfolder\^msconfig.exe]
path=\msconfig.exe
backup=c:\windows\pss\msconfig.exeCommon Startup

[HKLM\~\startupfolder\^msinfo.dll]
path=\msinfo.dll
backup=c:\windows\pss\msinfo.dllCommon Startup

[HKLM\~\startupfolder\^notiflag.exe]
path=\notiflag.exe
backup=c:\windows\pss\notiflag.exeCommon Startup

[HKLM\~\startupfolder\^pchdt_w3.cab]
path=\pchdt_w3.cab
backup=c:\windows\pss\pchdt_w3.cabCommon Startup

[HKLM\~\startupfolder\^pchshell.dll]
path=\pchshell.dll
backup=c:\windows\pss\pchshell.dllCommon Startup

[HKLM\~\startupfolder\^pchsvc.dll]
path=\pchsvc.dll
backup=c:\windows\pss\pchsvc.dllCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\48c93143]
c:\windows\system32\rduixkfn.dll [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2007-10-10 19:51 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AudioHQ]
--a------ 2000-05-11 00:00 205312 c:\program files\Creative\SBLive2k\AudioHQ\ahqtb.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative Launcher]
--a------ 2000-02-16 00:52 257536 c:\program files\Creative\SBLive2k\Launcher\CTLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-03 23:44 15360 c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTRegRun]
--a------ 1999-10-11 02:01 41984 c:\windows\CTREGRUN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Disc Detector]
--------- 1999-08-30 00:55 189952 c:\program files\Creative\ShareDLL\CTNotify.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Gadu-Gadu]
--a------ 2007-11-14 11:54 2131392 c:\program files\Internet Explorer\Gadu-Gadu\gg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
--a------ 2001-07-09 11:50 155648 c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NewsUpd]
--a------ 2000-08-04 02:50 44032 c:\program files\Creative\News\NewsUpd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 2008-08-11 16:46 21741864 c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
-rahs---- 2008-01-28 10:43 2097488 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe [BU]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
--a------ 2000-05-11 00:00 90112 c:\windows\Updreg.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast_2K]
--a------ 2001-06-26 16:55 2142208 c:\windows\system32\Wf2k.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast2KLoadDefault]
--a------ 2001-05-31 15:06 637440 c:\windows\system32\WF2KCPL.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\svchost.exe"=
"c:\\Program Files\\Internet Explorer\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\Gadu-Gadu\\gg.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\DRIVERS\pfc027.sys [2005-02-24 162176]
R3 WFsys;WinFox Control I/O Driver;c:\windows\system32\DRIVERS\wfsys.sys [2001-05-23 9676]
.
.
------- Skan uzupełniający -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.pl/advanced_search?hl=pl
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-05 18:14:56
Windows 5.1.2600 Dodatek Service Pack 2 NTFS

skanowanie ukrytych procesów ...

skanowanie ukrytych wpisów autostartu ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Disc Detector = c:\program files\Creative\ShareDLL\CtNotify.exe?X???????????????? C?????Disc Detector?B???A???????A?? ????B???@?$?@?? C?????U?@?????????@?B???A???????A?? ????B???@?????P???$?@?? ????????6~??????????@???????????????????B?????? ???????????????????@????????B
CTAvTray = c:\program files\Creative\SBLive2k\Program\CTAvTray.EXE?$?????6~????$???Z?6~????*?6~?????W_??X_???????????????????????????@?????????????????d???????W?9~???sx??s@????????L??D??sh??s$??????????s????(????&?s?????L???L??????(????B?s?8?? @@????? @@??L???B?s??

skanowanie ukrytych plików ...

skanowanie pomyślnie ukończone
ukryte pliki: 0

**************************************************************************
.
Czas ukończenia: 2008-11-05 18:19:01
ComboFix-quarantined-files.txt 2008-11-05 17:18:56
ComboFix2.txt 2008-07-10 18:46:55
ComboFix3.txt 2008-07-09 15:58:51

Przed: 715,321,344 bajtów wolnych
Po: 1,781,014,528 bajtów wolnych

692 --- E O F --- 2008-10-24 19:58:15

[huber2t]

Pobierz ComboFix, ale nie uruchamiaj
Wklej do notatnika:

Kod: Zaznacz wszystko

File::
c:\windows\system32\eaexec.exe
c:\windows\system32\ealtest.exe

Folder::
C:\found.000

Registry::
[-HKLM\~\startupfolder\^brpinfo.dll]
[-HKLM\~\startupfolder\^HCAppRes.dll]
[-HKLM\~\startupfolder\^HelpCtr.exe]
[-HKLM\~\startupfolder\^HelpHost.exe]
[-HKLM\~\startupfolder\^HelpSvc.exe]
[-HKLM\~\startupfolder\^hscsp_w3.cab]
[-HKLM\~\startupfolder\^HscUpd.exe]
[-HKLM\~\startupfolder\^msconfig.exe]
[-HKLM\~\startupfolder\^msinfo.dll]
[-HKLM\~\startupfolder\^notiflag.exe]
[-HKLM\~\startupfolder\^pchdt_w3.cab]
[-HKLM\~\startupfolder\^pchshell.dll]
[-HKLM\~\startupfolder\^pchsvc.dll]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\48c93143]


Plik zapisz jako CFScript.txt.
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu->
[obrazek nie jest już dostępny]
Rozpocznie się usuwanie i powstanie log, który dasz na forum.

Logi dajesz na http://www.wklej.eu a w poście dajesz tylko link

[piotr tomczyk]

http://www.wklej.eu/index.php?id=589e7da3c2

[huber2t]

Pobierz ComboFix, ale nie uruchamiaj
Wklej do notatnika:

Kod: Zaznacz wszystko

Folder::
C:\found.003
C:\found.002
C:\found.001

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"=-


Plik zapisz jako CFScript.txt.
Przeciągnij i upuść ikonkę CFScript.txt na ikonkę ComboFix.exe tak jak tu->
[obrazek nie jest już dostępny]
Rozpocznie się usuwanie i powstanie log, który dasz na forum.

Logi dajesz na http://www.wklej.eu a w poście dajesz tylko link