Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu z CF, thx

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Uživatelský avatar
tomly
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 18 zář 2010 10:51

Prosím o kontrolu logu z CF, thx

#1 Příspěvek od tomly »

Prosím o kontrolu logu z CF. NB samovolne stahuje obrovske data cez mobilný internet. Na počítadle to nevidno, ale na fakture áno

Logfile of random's system information tool 1.09 (written by random/random)
Run by ZK at 2011-09-23 17:59:33
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 12 GB (23%) free of 51 GB
Total RAM: 1791 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:59:49, on 23. 9. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Windows\System32\StikyNot.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\HTC Home\HTCHome.exe
C:\Program Files\Mobile Partner\Mobile Partner.exe
C:\Program Files\Opera\opera.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\ZK\Desktop\RSIT.exe
C:\Program Files\trend micro\ZK.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - Global Startup: NDrive Update Agent.lnk = ?
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&oslať do programu OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Previesť cieľ odkazu do formátu Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Previesť do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Prepojené poznámky programu OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/select/asusTek_sys_ctrl3.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX Control) - http://195.28.70.134/kapor2/lib/mgaxctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{06543D95-DA3D-46FB-B639-E923A84A1843}: NameServer = 213.151.200.30 213.151.208.161
O17 - HKLM\System\CCS\Services\Tcpip\..\{61F17D37-EAA9-4C17-A570-B5CEF35811E6}: NameServer = 213.151.200.30 213.151.208.161
O17 - HKLM\System\CCS\Services\Tcpip\..\{623F3370-5EE3-4109-A528-E6D628EBE7BF}: NameServer = 213.151.200.30 213.151.208.161
O17 - HKLM\System\CCS\Services\Tcpip\..\{C377ADE1-87EB-47EB-BAC2-EF740FD594D2}: NameServer = 213.151.200.30 213.151.208.161
O17 - HKLM\System\CS1\Services\Tcpip\..\{06543D95-DA3D-46FB-B639-E923A84A1843}: NameServer = 213.151.200.30 213.151.208.161
O17 - HKLM\System\CS2\Services\Tcpip\..\{06543D95-DA3D-46FB-B639-E923A84A1843}: NameServer = 213.151.200.30 213.151.208.161
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: DCService.exe - Unknown owner - C:\ProgramData\DatacardService\DCService.exe
O23 - Service: eISIS PostgreSQL Database Server (eISISPostgreSQL) - PostgreSQL Global Development Group - c:\eISIS\servers\postgresql\bin\pg_ctl.exe
O23 - Service: eISIS Tomcat (eISISTomcat) - Apache Software Foundation - c:\eISIS\servers\tomcat\bin\tomcat5.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - D:\Program Files\Nero\Nero8\Nero Home\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 9327 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\bin\jp2ssv.dll [2011-06-12 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-10-18 1485112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-07-26 1493160]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-10-18 1485112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-07-26 397992]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2010-10-13 111928]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304]
"Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2011-02-04 2346496]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-12-21 1483264]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
NDrive Update Agent.lnk - C:\Windows\Installer\{243DF7D1-ADD9-45CC-B007-C223E70721C8}\_4B7F7D4C64276D2714173C.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-05-20 203776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-09-23 17:59:33 ----D---- C:\Program Files\trend micro
2011-09-23 15:10:09 ----A---- C:\ComboFix.txt
2011-09-23 15:06:36 ----SHD---- C:\$RECYCLE.BIN
2011-09-23 14:55:05 ----A---- C:\Windows\zip.exe
2011-09-23 14:55:05 ----A---- C:\Windows\SWSC.exe
2011-09-23 14:55:05 ----A---- C:\Windows\SWREG.exe
2011-09-23 14:55:05 ----A---- C:\Windows\sed.exe
2011-09-23 14:55:05 ----A---- C:\Windows\PEV.exe
2011-09-23 14:55:05 ----A---- C:\Windows\NIRCMD.exe
2011-09-23 14:55:05 ----A---- C:\Windows\MBR.exe
2011-09-23 14:55:05 ----A---- C:\Windows\grep.exe
2011-09-23 14:54:59 ----D---- C:\Windows\ERDNT
2011-09-23 14:54:58 ----D---- C:\ComboFix
2011-09-23 14:54:54 ----D---- C:\Qoobox
2011-09-17 21:40:34 ----A---- C:\Windows\system32\SER9PL.sys
2011-09-17 21:03:10 ----A---- C:\Windows\system32\_shfoldr.dll
2011-09-17 21:03:08 ----D---- C:\Program Files\Software Installation Information
2011-09-17 18:19:03 ----D---- C:\Program Files\ODEON
2011-09-15 09:31:51 ----D---- C:\Program Files\HTC Home
2011-09-09 14:44:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-09-09 14:44:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-09-09 14:44:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-09-09 14:44:31 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-09-09 14:44:31 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-09-09 14:44:31 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-09-09 14:44:30 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-09-09 14:44:30 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-09-09 14:44:29 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-09-09 14:44:28 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-09-09 14:44:28 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-09-09 14:44:28 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-09-09 14:44:28 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-09-09 14:44:27 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-09-09 14:44:27 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-09-09 14:44:27 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-09-09 14:44:27 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-09-09 14:44:26 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-09-09 14:44:26 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-09-09 14:44:26 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-09-09 14:44:26 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-09-09 14:44:26 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-09-09 14:44:25 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-09-09 14:44:25 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-09-09 14:44:25 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-09-09 14:44:25 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-09-09 14:44:24 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-09-09 14:44:24 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-09-09 14:44:24 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-09-09 14:44:24 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-09-09 14:44:24 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-09-09 14:44:23 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-09-09 14:44:23 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-09-09 14:44:23 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-09-09 14:44:22 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-09-09 14:44:22 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-09-09 14:44:22 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-09-09 14:44:22 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-09-09 14:44:22 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-09-09 14:44:21 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-09-09 14:44:21 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-09-09 14:44:21 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-09-09 14:44:21 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-09-09 14:44:21 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-09-09 14:44:20 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-09-09 14:44:20 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-09-09 14:44:19 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-09-09 14:44:19 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-09-09 14:44:19 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-09-09 14:44:19 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-09-09 14:44:18 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-09-09 14:44:18 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-09-09 14:44:18 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-09-09 14:44:18 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-09-09 14:44:18 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\xinput1_3.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-09-09 14:44:17 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-09-09 14:44:16 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-09-09 14:44:16 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-09-09 14:44:16 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-09-09 14:44:15 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-09-09 14:44:15 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-09-09 14:44:15 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-09-09 14:44:15 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-09-09 14:44:15 ----A---- C:\Windows\system32\d3dx10.dll
2011-09-09 14:44:14 ----A---- C:\Windows\system32\xinput1_2.dll
2011-09-09 14:44:14 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-09-09 14:44:14 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-09-09 14:44:13 ----A---- C:\Windows\system32\xinput1_1.dll
2011-09-09 14:44:13 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-09-09 14:44:13 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-09-09 14:44:10 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-09-09 14:44:10 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-09-09 14:44:10 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-09-09 14:44:10 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-09-09 14:44:10 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-09-09 14:44:09 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-09-09 14:44:09 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-09-09 14:41:11 ----D---- C:\Windows\system32\directx
2011-09-03 09:15:01 ----D---- C:\Users\ZK\AppData\Roaming\Stealth Software
2011-09-03 09:06:33 ----D---- C:\ProgramData\SweetIM
2011-09-03 09:06:33 ----D---- C:\Program Files\SweetIM
2011-08-30 14:43:48 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-30 14:43:48 ----A---- C:\Windows\system32\iertutil.dll
2011-08-30 14:43:47 ----A---- C:\Windows\system32\jscript.dll
2011-08-30 14:43:47 ----A---- C:\Windows\system32\ieui.dll
2011-08-30 14:43:46 ----A---- C:\Windows\system32\wininet.dll
2011-08-30 14:43:46 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-30 14:43:46 ----A---- C:\Windows\system32\jscript9.dll
2011-08-30 14:43:45 ----A---- C:\Windows\system32\urlmon.dll
2011-08-30 14:43:45 ----A---- C:\Windows\system32\url.dll
2011-08-30 14:43:45 ----A---- C:\Windows\system32\ieframe.dll
2011-08-30 14:43:43 ----A---- C:\Windows\system32\mshtml.dll
2011-08-30 14:40:51 ----A---- C:\Windows\system32\tzres.dll
2011-08-30 14:40:32 ----A---- C:\Windows\system32\xmllite.dll
2011-08-30 14:40:31 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-30 14:40:30 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2011-08-30 14:40:30 ----A---- C:\Windows\system32\drivers\bthport.sys
2011-08-30 14:40:27 ----A---- C:\Windows\system32\esent.dll
2011-08-30 14:40:26 ----A---- C:\Windows\system32\fsutil.exe
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\storport.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\amdxata.sys
2011-08-30 14:40:26 ----A---- C:\Windows\system32\drivers\amdsata.sys
2011-08-30 14:40:25 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2011-08-30 14:40:14 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-30 14:40:13 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-08-30 14:40:12 ----A---- C:\Windows\system32\drivers\usbehci.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbport.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbohci.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbhub.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbd.sys
2011-08-30 14:40:11 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2011-08-30 14:40:09 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-30 14:40:06 ----A---- C:\Windows\system32\win32k.sys
2011-08-30 14:39:43 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-30 14:39:43 ----A---- C:\Windows\system32\kernel32.dll
2011-08-30 14:39:42 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-30 14:39:42 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-30 14:39:42 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-30 14:39:42 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-30 14:39:42 ----A---- C:\Windows\system32\winsrv.dll
2011-08-30 14:39:42 ----A---- C:\Windows\system32\conhost.exe
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-30 14:39:41 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-30 14:38:34 ----A---- C:\Windows\system32\odbcjt32.dll
2011-08-30 14:38:34 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-30 14:38:34 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-30 14:38:33 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-30 14:38:33 ----A---- C:\Windows\system32\odbccp32.dll

======List of files/folders modified in the last 1 month======

2011-09-23 17:59:49 ----D---- C:\Windows\Prefetch
2011-09-23 17:59:40 ----D---- C:\Windows\Temp
2011-09-23 17:59:33 ----RD---- C:\Program Files
2011-09-23 15:43:29 ----D---- C:\Windows\system32\config
2011-09-23 15:10:11 ----D---- C:\Windows\system32\drivers
2011-09-23 15:05:48 ----D---- C:\Windows
2011-09-23 15:05:48 ----A---- C:\Windows\system.ini
2011-09-23 15:05:37 ----D---- C:\Windows\system32\drivers\etc
2011-09-23 15:03:01 ----D---- C:\Windows\System32
2011-09-23 15:00:01 ----D---- C:\Windows\AppPatch
2011-09-23 14:59:59 ----D---- C:\Program Files\Common Files
2011-09-23 14:46:49 ----D---- C:\Windows\tracing
2011-09-23 13:15:57 ----D---- C:\Windows\inf
2011-09-23 13:15:57 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-23 13:06:48 ----D---- C:\ProgramData
2011-09-22 22:02:12 ----D---- C:\ProgramData\Nokia
2011-09-22 21:54:26 ----SHD---- C:\Windows\Installer
2011-09-22 21:54:25 ----D---- C:\Config.Msi
2011-09-22 21:54:23 ----D---- C:\Program Files\Nokia
2011-09-22 21:32:50 ----D---- C:\Users\ZK\AppData\Roaming\Skype
2011-09-21 23:05:07 ----A---- C:\Windows\wdict32.INI
2011-09-20 18:53:23 ----D---- C:\Windows\ModemLogs
2011-09-19 20:31:53 ----A---- C:\Windows\NeroDigital.ini
2011-09-19 17:50:57 ----D---- C:\Windows\system32\catroot2
2011-09-18 09:42:34 ----D---- C:\Users\ZK\AppData\Roaming\dvdcss
2011-09-18 01:23:10 ----D---- C:\Windows\system32\Tasks
2011-09-17 23:14:14 ----D---- C:\Program Files\Common Files\InstallShield
2011-09-17 23:11:41 ----D---- C:\MCHYW
2011-09-17 21:59:08 ----D---- C:\Windows\system32\catroot
2011-09-17 21:52:31 ----D---- C:\Windows\system32\DriverStore
2011-09-17 21:43:51 ----RSD---- C:\Windows\Fonts
2011-09-17 21:43:12 ----D---- C:\Program Files\Common Files\Nokia
2011-09-17 21:41:45 ----D---- C:\Windows\winsxs
2011-09-17 21:40:34 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-17 20:24:18 ----A---- C:\Windows\wtran32.INI
2011-09-17 18:11:53 ----D---- C:\Users\ZK\AppData\Roaming\Nokia
2011-09-16 12:37:21 ----D---- C:\Projection
2011-09-15 09:29:46 ----SD---- C:\Users\ZK\AppData\Roaming\Microsoft
2011-09-15 09:29:46 ----D---- C:\Windows\system32\appmgmt
2011-09-12 19:31:10 ----D---- C:\Windows\Downloaded Program Files
2011-09-10 18:48:30 ----D---- C:\Program Files\Mozilla Thunderbird
2011-09-10 07:09:26 ----A---- C:\fftrlog.txt
2011-09-10 07:04:07 ----D---- C:\Program Files\Klienti
2011-09-09 14:51:11 ----D---- C:\Program Files\Zaloha_Klienti
2011-09-09 14:44:13 ----RSD---- C:\Windows\assembly
2011-09-09 14:44:06 ----D---- C:\Windows\Microsoft.NET
2011-09-09 14:41:11 ----D---- C:\Windows\Logs
2011-09-05 19:19:37 ----D---- C:\Users\ZK\AppData\Roaming\Opera
2011-09-03 07:35:36 ----D---- C:\Program Files\Opera
2011-08-31 17:45:42 ----D---- C:\Users\ZK\AppData\Roaming\PC Suite
2011-08-31 10:42:47 ----D---- C:\Windows\rescache
2011-08-30 15:01:17 ----D---- C:\Windows\system32\sk-SK
2011-08-30 15:01:17 ----D---- C:\Windows\system32\en-US
2011-08-30 15:01:16 ----D---- C:\Windows\system32\migration
2011-08-30 15:01:16 ----D---- C:\Program Files\Internet Explorer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2009-08-04 213024]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-07-20 218688]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2005-07-28 685056]
R2 Haspnt;Haspnt; \??\C:\Windows\system32\drivers\Haspnt.sys [2011-08-11 47616]
R2 MicroGuard;MicroGuard Copy Protection; \??\C:\Windows\system32\drivers\mgnt.sys [1998-03-03 40480]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-14 1035776]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
R3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys [2010-04-30 206336]
R3 huawei_enumerator;huawei_enumerator; C:\Windows\system32\DRIVERS\ew_jubusenum.sys [2010-05-22 70656]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2010-03-25 105984]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2007-07-31 7680]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2009-07-30 287392]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2009-06-29 17920]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]
R3 vsbus;Virtual Serial Bus Enumerator; C:\Windows\system32\DRIVERS\vsb.sys [2008-07-24 15264]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 catchme;catchme; \??\C:\Users\ZK\AppData\Local\Temp\catchme.sys []
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; C:\Windows\system32\DRIVERS\ew_hwusbdev.sys [2010-03-20 101504]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2010-12-02 18304]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2010-12-02 23168]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-12-02 8192]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-12-02 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 vserial;ELTIMA Virtual Serial Ports Driver; C:\Windows\System32\DRIVERS\vserial.sys [2008-07-24 47744]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-15 84536]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-01 582944]
R2 DCService.exe;DCService.exe; C:\ProgramData\DatacardService\DCService.exe [2010-05-08 229376]
R2 eISISPostgreSQL;eISIS PostgreSQL Database Server; c:\eISIS\servers\postgresql\bin\pg_ctl.exe [2008-01-04 79948]
R2 eISISTomcat;eISIS Tomcat; c:\eISIS\servers\tomcat\bin\tomcat5.exe [2007-08-24 57344]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; D:\Program Files\Nero\Nero8\Nero Home\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-07-02 211488]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-11-23 1483072]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-01 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-05-21 651720]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-01 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-05-20 1343400]

-----------------EOF-----------------
Asus F5GL, W7
AMD Sempron, XP SP2
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119508
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu z CF, thx

#2 Příspěvek od Rudy »

Odinstalujte AskToolbar a SweetIM. Jinak čisto. Pro vaši informaci: Toto je log RSIT, nikoli ComboFix. Combofix by laik neměl spouštět bez předchozí kontroly logu RSIT. Teď dejte log z ComboFix, najdete ho v C:\combofix.txt.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
tomly
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 18 zář 2010 10:51

Re: Prosím o kontrolu logu z CF, thx

#3 Příspěvek od tomly »

Lenze, ja som daval logy z dvoch roznych pocitacov: Notebook a pevný PC, preto som aj nazvy tém odlíšil: NB a PC. Viem, pomylil som sa a potom som upravil log z RSIT, aj ked je v nazve log z CF. Sorry za mensie zmetky
Asus F5GL, W7
AMD Sempron, XP SP2
Nahoru
Uživatelský avatar
tomly
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 18 zář 2010 10:51

Re: Prosím o kontrolu logu z CF, thx

#4 Příspěvek od tomly »

Tu je log z ComboFix.
Prepacte, uz som upravil aj podpisy. Tým som mal začať, ešte raz sory

ComboFix 11-09-23.03 - ZK . 09. 2011 7:09.2.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.421.1051.18.1791.1020 [GMT 2:00]
Running from: c:\users\ZK\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2011-08-24 to 2011-09-24 )))))))))))))))))))))))))))))))
.
.
2011-09-24 05:17 . 2011-09-24 05:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-17 19:40 . 2005-08-03 14:05 35892 ----a-w- c:\windows\system32\SER9PL.sys
2011-09-17 19:40 . 2005-08-03 14:04 26719 ----a-w- c:\windows\system32\SERSPL.VXD
2011-09-17 19:03 . 2011-09-17 19:03 23312 ----a-w- c:\windows\system32\_shfoldr.dll
2011-09-17 19:03 . 2011-09-17 19:03 -------- d-----w- c:\program files\Software Installation Information
2011-09-17 16:19 . 2011-09-18 08:10 -------- d-----w- c:\program files\ODEON
2011-09-15 07:31 . 2011-09-23 15:23 -------- d-----w- c:\program files\HTC Home
2011-09-03 07:18 . 2011-09-15 07:32 -------- d-----w- c:\users\ZK\AppData\Local\Stealth_Software
2011-09-03 07:15 . 2011-09-03 07:15 -------- d-----w- c:\users\ZK\AppData\Roaming\Stealth Software
2011-09-02 14:03 . 2011-09-02 14:03 -------- d-----w- c:\users\ZK\AppData\Local\Deployment
2011-09-02 14:03 . 2011-09-02 14:03 -------- d-----w- c:\users\ZK\AppData\Local\Apps
2011-08-30 12:44 . 2011-08-12 02:44 7152464 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{26E0416E-6D1C-4F4F-8CB1-98E85697B7B2}\mpengine.dll
2011-08-30 12:40 . 2011-07-09 04:29 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-30 12:38 . 2011-06-15 08:55 86016 ----a-w- c:\windows\system32\odbccu32.dll
2011-08-30 12:38 . 2011-06-15 08:55 81920 ----a-w- c:\windows\system32\odbccr32.dll
2011-08-30 12:38 . 2011-06-15 08:55 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2011-08-30 12:38 . 2011-06-15 08:55 163840 ----a-w- c:\windows\system32\odbctrac.dll
2011-08-30 12:38 . 2011-06-15 08:55 122880 ----a-w- c:\windows\system32\odbccp32.dll
2011-08-30 12:38 . 2011-06-15 08:54 94208 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-11 17:02 . 2011-08-11 17:02 191488 ----a-w- c:\windows\system32\hlvdd.dll
2011-08-11 17:02 . 2011-08-11 17:02 6656 ----a-w- c:\windows\system32\haspvdd.dll
2011-08-11 17:02 . 2011-08-11 17:02 47616 ----a-w- c:\windows\system32\drivers\Haspnt.sys
2011-08-01 21:19 . 2011-05-20 21:55 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-20 16:30 . 2011-07-20 16:30 218688 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RESTART_STICKY_NOTES"="c:\windows\System32\StikyNot.exe" [2009-07-14 354304]
"Rainlendar2"="c:\program files\Rainlendar2\Rainlendar2.exe" [2011-02-04 2346496]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-12-21 1483264]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NDrive Update Agent.lnk - c:\windows\Installer\{243DF7D1-ADD9-45CC-B007-C223E70721C8}\_4B7F7D4C64276D2714173C.exe [2011-6-21 140206]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE"
"ooVoo.exe"=c:\program files\ooVoo\oovoo.exe /minimized
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"MyWebSearch Email Plugin"=c:\progra~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
"HTC Home"="c:\program files\HTC Home\HTCHome.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"NvCplDaemon"=RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
"AutoKMS"=c:\windows\AutoKMS.exe
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"facemoods"="c:\program files\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe" /md I
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"MyWebSearch Email Plugin"=c:\progra~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
"My Web Search Bar Search Scope Monitor"="c:\progra~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
"PWRISOVM.EXE"=c:\program files\PowerISO\PWRISOVM.EXE
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-01 136176]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2010-03-20 101504]
R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [2010-04-30 206336]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-08-01 136176]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-20 1343400]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-07-20 218688]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 DCService.exe;DCService.exe;c:\programdata\DatacardService\DCService.exe [2010-05-08 229376]
S2 eISISPostgreSQL;eISIS PostgreSQL Database Server;c:\eisis\servers\postgresql\bin\pg_ctl.exe [2008-01-04 79948]
S2 eISISTomcat;eISIS Tomcat;c:\eisis\servers\tomcat\bin\tomcat5.exe [2007-08-24 57344]
S2 MicroGuard;MicroGuard Copy Protection;c:\windows\system32\drivers\mgnt.sys [1998-03-03 40480]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-11-23 1483072]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 29472]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2010-05-22 70656]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder
.
2011-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-01 21:20]
.
2011-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-08-01 21:20]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://eu.ask.com/?l=dis&o=14672
uInternet Settings,ProxyOverride = <local>
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&oslať do programu OneNote - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105
IE: Previesť cieľ odkazu do formátu Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Previesť do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Pridať cieľ odkazu do existujúceho súboru PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Pridať do existujúceho súboru PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: Interfaces\{06543D95-DA3D-46FB-B639-E923A84A1843}: NameServer = 213.151.200.30 213.151.208.161
TCP: Interfaces\{61F17D37-EAA9-4C17-A570-B5CEF35811E6}: NameServer = 213.151.200.30 213.151.208.161
TCP: Interfaces\{623F3370-5EE3-4109-A528-E6D628EBE7BF}: NameServer = 213.151.200.30 213.151.208.161
TCP: Interfaces\{C377ADE1-87EB-47EB-BAC2-EF740FD594D2}: NameServer = 213.151.200.30 213.151.208.161
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-09-24 07:21:35
ComboFix-quarantined-files.txt 2011-09-24 05:21
ComboFix2.txt 2011-09-23 13:10
.
Pre-Run: 12 258 865 152 bytes free
Post-Run: 12 201 443 328 bytes free
.
- - End Of File - - DA6B9E3B6EBE6F5BFC089965EC7BAB48
Asus F5GL, W7
AMD Sempron, XP SP2
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119508
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu z CF, thx

#5 Příspěvek od Rudy »

Nejdříve jednu otázku: Je instalace vašeho OS legální?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Uživatelský avatar
tomly
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 18 zář 2010 10:51

Re: Prosím o kontrolu logu z CF, thx

#6 Příspěvek od tomly »

Nie
Asus F5GL, W7
AMD Sempron, XP SP2
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119508
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu z CF, thx

#7 Příspěvek od Rudy »

tomly píše:Nie
Takový OS se pak může chovat zcela nestandardně. Kromě toho je jeho pozžití protizákonné. Na základě dohody modrátorů se zde nelegálním softwarem nezabýváme.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“