Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Velmi pekne prosim o kontrolu logu :o)

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
adus07
Návštěvník
Návštěvník
Příspěvky: 41
Registrován: 02 úno 2009 12:41

Velmi pekne prosim o kontrolu logu :o)

#1 Příspěvek od adus07 »

Kód: Vybrat vše

ComboFix 09-07-25.08 - Adriana . 01. 2010 19:51.2.2 - NTFSx86 MINIMAL
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1250.421.1051.18.2038.1609 [GMT 1:00]
Running from: c:\users\Adriana\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
- REDUCED FUNCTIONALITY MODE -
.
	/wow section not completed

(((((((((((((((((((((((((   Files Created from 2009-12-07 to 2010-01-07  )))))))))))))))))))))))))))))))
.

2010-01-06 17:10 . 2010-01-06 17:10	--------	d-----w-	c:\windows\LastGood
2010-01-06 17:09 . 2008-01-09 11:28	27632	----a-w-	c:\windows\system32\drivers\seehcri.sys
2010-01-05 18:52 . 2010-01-05 18:52	99864	----a-w-	c:\users\Adriana\AppData\Local\GDIPFONTCACHEV1.DAT
2009-12-25 13:06 . 2009-12-25 13:06	--------	d-----w-	c:\progra~2\WindowsSearch
2009-12-13 17:33 . 2009-11-09 12:31	24064	----a-w-	c:\windows\system32\nshhttp.dll
2009-12-13 17:33 . 2009-11-09 10:36	411648	----a-w-	c:\windows\system32\drivers\http.sys
2009-12-13 17:33 . 2009-11-09 12:30	30720	----a-w-	c:\windows\system32\httpapi.dll
2009-12-13 17:13 . 2009-08-24 11:36	377344	----a-w-	c:\windows\system32\winhttp.dll
2009-12-13 17:12 . 2009-10-27 14:11	834048	----a-w-	c:\windows\system32\wininet.dll
2009-12-13 17:12 . 2009-10-27 13:16	78336	----a-w-	c:\windows\system32\ieencode.dll
2009-12-13 17:11 . 2009-10-07 11:36	243712	----a-w-	c:\windows\system32\rastls.dll

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-07 18:48 . 2008-08-19 10:27	5332	----a-w-	c:\windows\bthservsdp.dat
2010-01-07 18:23 . 2009-02-21 10:58	--------	d-----w-	c:\users\Adriana\AppData\Roaming\Skype
2010-01-06 17:09 . 2010-01-06 17:09	148736	----a-w-	c:\progra~2\hpe5D55.dll
2010-01-06 17:08 . 2009-05-27 16:51	--------	d-----w-	c:\program files\Sony Ericsson
2010-01-06 17:08 . 2008-08-19 09:59	--------	d--h--w-	c:\program files\InstallShield Installation Information
2010-01-06 17:07 . 2009-05-27 18:12	--------	d-----w-	c:\program files\Avanquest update
2010-01-02 18:53 . 2009-02-02 11:38	45056	----a-w-	c:\windows\system32\acovcnt.exe
2009-12-24 10:22 . 2008-10-14 12:59	--------	d-----w-	c:\program files\Google
2009-12-13 19:12 . 2006-11-02 11:18	--------	d-----w-	c:\program files\Windows Mail
2009-11-30 18:52 . 2009-11-30 18:52	--------	d-----w-	c:\program files\CCleaner
2009-11-27 11:36 . 2009-04-26 15:04	--------	d-----w-	c:\users\Adriana\AppData\Roaming\Vso
2009-11-09 21:05 . 2009-11-09 21:05	--------	d-----w-	c:\program files\Skype
2009-11-09 21:05 . 2008-10-09 17:46	--------	d-----w-	c:\progra~2\Skype
2009-11-09 21:05 . 2009-11-09 21:05	--------	d-----w-	c:\program files\Common Files\Skype
2009-11-02 19:42 . 2009-10-03 00:29	195456	------w-	c:\windows\system32\MpSigStub.exe
2009-10-29 18:48 . 2006-11-02 10:25	665600	----a-w-	c:\windows\inf\drvindex.dat
2009-10-29 09:17 . 2009-11-26 07:52	2048	----a-w-	c:\windows\system32\tzres.dll
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08	143360	----a-w-	c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2008-04-23 22058792]
"ares"="d:\software\Inštalované\Ares\Ares.exe" [2007-12-31 962560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-22 166424]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1029416]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-10-11 1826816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):d5,27,60,b8,20,32,ca,01

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"TCP Query User{D958FE21-53B5-458C-99C3-0D7F973F7175}d:\\software\\inštalované\\ares\\ares.exe"= UDP:d:\software\inštalované\ares\ares.exe:Ares p2p for windows
"UDP Query User{BCE0F982-3A3A-4FEC-8F95-D6092F59F842}d:\\software\\inštalované\\ares\\ares.exe"= TCP:d:\software\inštalované\ares\ares.exe:Ares p2p for windows
"TCP Query User{0AACA50C-01C2-43F6-B058-DC80A977EA36}d:\\software\\inštalované\\icq\\icq6\\icq.exe"= UDP:d:\software\inštalované\icq\icq6\icq.exe:ICQ Library
"UDP Query User{003237C8-1115-4AD7-87FC-D6CA2771DE56}d:\\software\\inštalované\\icq\\icq6\\icq.exe"= TCP:d:\software\inštalované\icq\icq6\icq.exe:ICQ Library
"TCP Query User{99FC7ED3-43EF-4FA3-BDAC-59EBBCF098E0}d:\\software\\inštalované\\ares\\ares.exe"= UDP:d:\software\inštalované\ares\ares.exe:Ares p2p for windows
"UDP Query User{F25C78B9-8CB8-4C5C-BA9B-EF936FBF9525}d:\\software\\inštalované\\ares\\ares.exe"= TCP:d:\software\inštalované\ares\ares.exe:Ares p2p for windows
"{8869FB01-CB18-4F46-817C-03634A5F6B49}"= UDP:c:\program files\7-Zip\7zFM.exe:7-Zip File Manager
"{85BDF544-2227-422F-B98B-D490BD42C525}"= TCP:c:\program files\7-Zip\7zFM.exe:7-Zip File Manager
"{E2DD4DE3-4212-4D91-818C-C083C64219CE}"= Disabled:UDP:d:\software\Inštalované\Bs Player\BSplayer\bsplayer.exe:BSplayer
"{338923E4-CBED-4A8C-9B92-A920DE4B6DFB}"= Disabled:TCP:d:\software\Inštalované\Bs Player\BSplayer\bsplayer.exe:BSplayer
"TCP Query User{17F6BAF3-E412-4FC2-9BAE-1829FEF43221}d:\\software\\inštalované\\icq\\icq6.5\\icq.exe"= UDP:d:\software\inštalované\icq\icq6.5\icq.exe:ICQ
"UDP Query User{E83169BD-EB01-424C-94B2-B5A332869AF9}d:\\software\\inštalované\\icq\\icq6.5\\icq.exe"= TCP:d:\software\inštalované\icq\icq6.5\icq.exe:ICQ
"{24E94C89-2E74-493B-BAC6-B28689B06D0C}"= UDP:c:\program files\CCleaner\CCleaner.exe:CCleaner
"{04889C36-E99A-4DD0-89A6-17C07033C2FB}"= TCP:c:\program files\CCleaner\CCleaner.exe:CCleaner
"{9F6E91D8-2375-4AFE-901C-DD01F30C265B}"= c:\program files\Skype\Phone\Skype.exe:Skype

R1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2009-02-06 92800]
R2 gupdate1c98c3ec39b0382;Služba Google Update (gupdate1c98c3ec39b0382);c:\program files\Google\Update\GoogleUpdate.exe [2009-02-11 133104]
R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R3 BthAvrcp;Bluetooth AVRCP Profile;c:\windows\system32\DRIVERS\BthAvrcp.sys [2008-08-19 12800]
R3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe [2008-01-21 21504]
R3 s0016bus;Sony Ericsson Device 0016 driver (WDM);c:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
R3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
R3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
R3 s0017bus;Sony Ericsson Device 0017 driver (WDM);c:\windows\system32\DRIVERS\s0017bus.sys [2008-05-27 90536]
R3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s0017mdfl.sys [2008-05-27 15016]
R3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s0017mdm.sys [2008-05-27 122152]
R3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s0017mgmt.sys [2008-05-27 115496]
R3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS);c:\windows\system32\DRIVERS\s0017nd5.sys [2008-05-27 25768]
R3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s0017obex.sys [2008-05-27 111912]
R3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM);c:\windows\system32\DRIVERS\s0017unic.sys [2008-05-27 117672]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632]


--- Other Services/Drivers In Memory ---

*NewlyCreated* - ECACHE

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs	REG_MULTI_SZ   	BthServ
HPZ12	REG_MULTI_SZ   	Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
LocalServiceAndNoImpersonation	REG_MULTI_SZ   	FontCache

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
- - - - ORPHANS REMOVED - - - -

HKLM-RunOnce-<NO NAME> - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.atlas.cz/?from=icqhp
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovať do programu Microsoft Excel - d:\software\INTALO~1\MSOFFI~1\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Adriana\AppData\Roaming\Mozilla\Firefox\Profiles\h4q2dbe2.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - www.google.sk
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("media.enforce_same_site_origin", false);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("media.cache_size", 51200);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("media.ogg.enabled", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("media.wave.enabled", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("media.autoplay.enabled", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("dom.storage.default_quota",      5120);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("layout.css.dpi", -1);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
d:\software\Inçtalovan‚\Mozilla\greprefs\all.js - pref("geo.enabled", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
d:\software\Inçtalovan‚\Mozilla\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history",     true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata",    true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords",   false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads",   true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies",     true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache",       true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions",    true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.history",                 true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.formdata",                true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.passwords",               false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.downloads",               true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.cookies",                 true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.cache",                   true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.sessions",                true);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps",             false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings",            false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs",    false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
d:\software\Inçtalovan‚\Mozilla\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-07 19:52
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes ...  

scanning hidden autostart entries ... 

scanning hidden files ...  


C:\ADSM_PData_0150

scan completed successfully
hidden files: 1

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'Explorer.exe'(1212)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
Completion time: 2010-01-07 19:56
ComboFix-quarantined-files.txt  2010-01-07 18:56
ComboFix2.txt  2009-07-26 19:23
ComboFix3.txt  2009-02-02 11:31

Pre-Run: Systém nenašiel žiadne hlásenie pod číslom 0x2379 v súbore hlásenia Application.
Post-Run: 40 200 671 232 bytes free

246	--- E O F ---	2010-01-05 08:12
Dakujem pekne :)
Nahoru
Uživatelský avatar
JaRon
Moderátor
Moderátor
Příspěvky: 15645
Registrován: 29 bře 2005 13:39
Bydliště: BB-SK

Re: Velmi pekne prosim o kontrolu logu :o)

#2 Příspěvek od JaRon »

log vypada OK
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“