Zdravim, chcel by som vas poprosit o radu.
Aktualizacie mojho antivirusoveho programu ESET (legalneho) su zablokovane, v programe hlasi ze je problem s internetovym pripojenim, ale vsetko funguje ako ma. PC je pripojeny cez Wi-fi siet. V ten isty den, kedy začali problemy s Esetom mi odišli aj programy Instant Messagingu (ICQ, Skype) - nemozno sa prihlasit. Navyse vypisuje ze su problemy s Firewall, avsak program vraví ze je zapnuta a problemy nebadať.
Pripajam log:
Logfile of random's system information tool 1.06 (written by random/random)
Run by Peter at 2010-02-27 18:08:58
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 232 GB (79%) free of 295 GB
Total RAM: 3000 MB (61% free)
HijackThis download failed
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215}]
C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3134413B-49B4-425C-98A5-893C1F195601}]
BHO_Startup Class - C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll [2008-05-02 110592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-06-11 35840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
Credential Manager for HP ProtectTools - c:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll [2008-05-21 58128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0} - McAfee SiteAdvisor - C:\Program Files\SiteAdvisor\6173\SiteAdv.dll [2007-08-28 910624]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-04-18 178712]
"accrdsub"=c:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2007-05-16 293168]
"PTHOSTTR"=c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE [2008-05-08 238984]
"CognizanceTS"=c:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll [2008-05-21 24848]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2008-05-12 318488]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-03-27 1045800]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2008-04-15 488752]
"HP Health Check Scheduler"=c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-04-15 70912]
"MVS Splash"=C:\Program Files\McAfee\Managed VirusScan\Agent\Splash.exe [2008-05-05 550208]
"McAfee Managed Services Tray"=C:\Program Files\McAfee\Managed VirusScan\Agent\StartMyAgtTry.Exe [2008-05-05 91456]
"SiteAdvisor"=C:\Program Files\SiteAdvisor\6173\SiteAdv.exe [2007-08-28 36640]
"File Sanitizer"=C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe [2008-05-02 10244096]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-06-11 148888]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-05-14 177456]
"WatchDog"=C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2008-04-21 197904]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\soundmax.exe [2008-03-19 3842048]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2008-06-10 150040]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2008-06-10 170520]
"Persistence"=C:\windows\system32\igfxpers.exe [2008-06-10 145944]
"HP Software Update"=c:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-09 54840]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-05-14 2029640]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-03 1848648]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-04-04 1314816]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-03-18 2289664]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"ICQ"=C:\Program Files\ICQ7.0\ICQ.exe [2010-02-11 133368]
"Octoshape Streaming Services"=C:\Users\Peter\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
DVD Check.lnk - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2008-05-21 208896]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c7251c6-2f4b-11de-aff8-0022645c4041}]
shell\AutoRun\command - G:\g1ljsm.com
shell\open\command - G:\g1ljsm.com
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e6cc692f-2f48-11de-94c1-0022645c4041}]
shell\AutoRun\command - G:\1ogf.exe
shell\open\command - G:\1ogf.exe
======File associations======
.js - edit - C:\windows\System32\Notepad.exe %1
.js - open - C:\windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2010-02-27 18:08:59 ----D---- C:\Program Files\trend micro
2010-02-27 18:08:58 ----D---- C:\rsit
2010-02-23 15:32:15 ----D---- C:\Program Files\Common Files\Skype
2010-02-23 15:32:10 ----RD---- C:\Program Files\Skype
2010-02-22 01:37:06 ----D---- C:\Program Files\Windows Portable Devices
2010-02-22 01:29:20 ----A---- C:\windows\system32\UIRibbonRes.dll
2010-02-22 01:29:20 ----A---- C:\windows\system32\UIRibbon.dll
2010-02-22 01:29:20 ----A---- C:\windows\system32\UIAnimation.dll
2010-02-22 01:28:53 ----A---- C:\windows\system32\WMPhoto.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\XpsRasterService.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\XpsGdiConverter.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\WindowsCodecsExt.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\WindowsCodecs.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\printfilterpipelineprxy.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\dxdiagn.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\d3d10warp.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\d2d1.dll
2010-02-22 01:28:52 ----A---- C:\windows\system32\cdd.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\xpsservices.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\XpsPrint.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\printfilterpipelinesvc.exe
2010-02-22 01:28:51 ----A---- C:\windows\system32\PhotoMetadataHandler.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\OpcServices.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\FntCache.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\dxgi.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\dxdiag.exe
2010-02-22 01:28:51 ----A---- C:\windows\system32\DWrite.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\d3d11.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\d3d10level9.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\d3d10core.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\d3d10_1core.dll
2010-02-22 01:28:51 ----A---- C:\windows\system32\d3d10_1.dll
2010-02-22 01:28:50 ----A---- C:\windows\system32\d3d10.dll
2010-02-22 01:28:32 ----A---- C:\windows\system32\WPDShextAutoplay.exe
2010-02-22 01:28:32 ----A---- C:\windows\system32\wpdbusenum.dll
2010-02-22 01:28:32 ----A---- C:\windows\system32\BthMtpContextHandler.dll
2010-02-22 01:28:29 ----A---- C:\windows\system32\PortableDeviceConnectApi.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\WPDSp.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\WPDShServiceObj.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\wpdshext.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\WpdMtpUS.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\WpdMtp.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\WpdConns.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\wpd_ci.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\PortableDeviceWMDRM.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\PortableDeviceTypes.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\PortableDeviceClassExtension.dll
2010-02-22 01:28:27 ----A---- C:\windows\system32\PortableDeviceApi.dll
2010-02-22 01:27:44 ----A---- C:\windows\system32\UIAutomationCore.dll
2010-02-22 01:27:44 ----A---- C:\windows\system32\oleaccrc.dll
2010-02-22 01:27:44 ----A---- C:\windows\system32\oleacc.dll
2010-02-21 18:06:41 ----D---- C:\windows\system32\eu-ES
2010-02-21 18:06:41 ----D---- C:\windows\system32\ca-ES
2010-02-21 18:06:38 ----D---- C:\windows\system32\vi-VN
2010-02-21 17:48:05 ----D---- C:\windows\system32\EventProviders
2010-02-15 21:27:28 ----D---- C:\WinRozvrhy
2010-02-10 20:11:32 ----A---- C:\windows\system32\ntkrnlpa.exe
2010-02-10 20:11:31 ----A---- C:\windows\system32\ntoskrnl.exe
2010-02-10 20:10:41 ----A---- C:\windows\system32\quartz.dll
2010-02-10 20:10:39 ----A---- C:\windows\system32\tsbyuv.dll
2010-02-10 20:10:39 ----A---- C:\windows\system32\msyuv.dll
2010-02-10 20:10:39 ----A---- C:\windows\system32\msvidc32.dll
2010-02-10 20:10:38 ----A---- C:\windows\system32\msrle32.dll
2010-02-10 20:10:38 ----A---- C:\windows\system32\iyuv_32.dll
2010-02-10 20:10:37 ----A---- C:\windows\system32\mciavi32.dll
2010-02-10 20:10:36 ----A---- C:\windows\system32\msvfw32.dll
2010-02-10 20:10:35 ----A---- C:\windows\system32\avifil32.dll
======List of files/folders modified in the last 1 months======
2010-02-27 18:09:00 ----D---- C:\windows\Temp
2010-02-27 18:08:59 ----RD---- C:\Program Files
2010-02-27 18:08:59 ----D---- C:\windows\Prefetch
2010-02-27 18:05:36 ----A---- C:\windows\system32\rpcnetp.exe
2010-02-27 16:18:29 ----SHD---- C:\System Volume Information
2010-02-27 16:17:29 ----D---- C:\windows\winsxs
2010-02-27 16:16:40 ----D---- C:\windows\System32
2010-02-27 16:16:40 ----D---- C:\windows\inf
2010-02-27 16:16:40 ----A---- C:\windows\system32\PerfStringBackup.INI
2010-02-27 16:15:00 ----D---- C:\windows\system32\catroot
2010-02-27 16:10:53 ----D---- C:\Users\Peter\AppData\Roaming\Skype
2010-02-27 16:10:11 ----A---- C:\windows\system32\rpcnet.dll
2010-02-27 16:10:10 ----D---- C:\ProgramData\hpqLog
2010-02-24 16:44:54 ----D---- C:\windows\system32\catroot2
2010-02-24 09:16:06 ----N---- C:\windows\system32\MpSigStub.exe
2010-02-23 15:44:33 ----D---- C:\Users\Peter\AppData\Roaming\HPQLOG
2010-02-23 15:32:31 ----SHD---- C:\windows\Installer
2010-02-23 15:32:29 ----D---- C:\windows\system32\Tasks
2010-02-23 15:32:15 ----D---- C:\Program Files\Common Files
2010-02-23 15:32:10 ----D---- C:\ProgramData\Skype
2010-02-22 14:23:11 ----D---- C:\Omega
2010-02-22 01:46:34 ----D---- C:\windows\Microsoft.NET
2010-02-22 01:46:17 ----RSD---- C:\windows\assembly
2010-02-22 01:37:19 ----D---- C:\Windows
2010-02-22 01:37:08 ----AD---- C:\windows\system32\sk-SK
2010-02-22 01:37:07 ----D---- C:\windows\system32\drivers
2010-02-22 01:37:06 ----D---- C:\windows\system32\wbem
2010-02-22 01:37:04 ----D---- C:\windows\system32\zh-TW
2010-02-22 01:37:04 ----D---- C:\windows\system32\zh-HK
2010-02-22 01:37:04 ----D---- C:\windows\system32\zh-CN
2010-02-22 01:37:04 ----D---- C:\windows\system32\uk-UA
2010-02-22 01:37:04 ----D---- C:\windows\system32\tr-TR
2010-02-22 01:37:04 ----D---- C:\windows\system32\th-TH
2010-02-22 01:37:04 ----D---- C:\windows\system32\sv-SE
2010-02-22 01:37:04 ----D---- C:\windows\system32\sr-Latn-CS
2010-02-22 01:37:04 ----D---- C:\windows\system32\ru-RU
2010-02-22 01:37:04 ----D---- C:\windows\system32\pt-PT
2010-02-22 01:37:04 ----D---- C:\windows\system32\pt-BR
2010-02-22 01:37:04 ----D---- C:\windows\system32\pl-PL
2010-02-22 01:37:04 ----D---- C:\windows\system32\nl-NL
2010-02-22 01:37:04 ----D---- C:\windows\system32\nb-NO
2010-02-22 01:37:04 ----D---- C:\windows\system32\ko-KR
2010-02-22 01:37:04 ----D---- C:\windows\system32\ja-JP
2010-02-22 01:37:04 ----D---- C:\windows\system32\it-IT
2010-02-22 01:37:04 ----D---- C:\windows\system32\hu-HU
2010-02-22 01:37:04 ----D---- C:\windows\system32\he-IL
2010-02-22 01:37:04 ----D---- C:\windows\system32\fr-FR
2010-02-22 01:37:04 ----D---- C:\windows\system32\fi-FI
2010-02-22 01:37:04 ----D---- C:\windows\system32\es-ES
2010-02-22 01:37:04 ----D---- C:\windows\system32\en-US
2010-02-22 01:37:04 ----D---- C:\windows\system32\el-GR
2010-02-22 01:37:04 ----D---- C:\windows\system32\de-DE
2010-02-22 01:37:04 ----D---- C:\windows\system32\da-DK
2010-02-22 01:37:04 ----D---- C:\windows\system32\ar-SA
2010-02-22 01:37:04 ----AD---- C:\windows\system32\sl-SI
2010-02-22 01:37:04 ----AD---- C:\windows\system32\ro-RO
2010-02-22 01:37:04 ----AD---- C:\windows\system32\lv-LV
2010-02-22 01:37:04 ----AD---- C:\windows\system32\lt-LT
2010-02-22 01:37:04 ----AD---- C:\windows\system32\hr-HR
2010-02-22 01:37:04 ----AD---- C:\windows\system32\et-EE
2010-02-22 01:37:04 ----AD---- C:\windows\system32\cs-CZ
2010-02-22 01:37:04 ----AD---- C:\windows\system32\bg-BG
2010-02-21 19:01:28 ----SHD---- C:\$Recycle.Bin
2010-02-21 18:27:13 ----D---- C:\windows\rescache
2010-02-21 18:14:39 ----SHD---- C:\boot
2010-02-21 18:07:57 ----D---- C:\Program Files\Windows Calendar
2010-02-21 18:07:57 ----D---- C:\Program Files\Movie Maker
2010-02-21 18:07:56 ----D---- C:\Program Files\Windows Sidebar
2010-02-21 18:07:56 ----D---- C:\Program Files\Windows Media Player
2010-02-21 18:07:56 ----D---- C:\Program Files\Windows Mail
2010-02-21 18:07:56 ----D---- C:\Program Files\Internet Explorer
2010-02-21 18:07:54 ----D---- C:\Program Files\Windows Photo Gallery
2010-02-21 18:07:54 ----D---- C:\Program Files\Windows Collaboration
2010-02-21 18:07:54 ----D---- C:\Program Files\Common Files\System
2010-02-21 18:07:43 ----D---- C:\windows\servicing
2010-02-21 18:07:43 ----D---- C:\Program Files\Windows Defender
2010-02-21 18:07:35 ----D---- C:\windows\IME
2010-02-21 18:07:34 ----D---- C:\windows\system32\XPSViewer
2010-02-21 18:07:30 ----D---- C:\windows\system32\oobe
2010-02-21 18:07:30 ----D---- C:\windows\system32\migration
2010-02-21 18:07:28 ----D---- C:\windows\system32\AdvancedInstallers
2010-02-21 18:07:27 ----D---- C:\windows\system32\SLUI
2010-02-21 18:07:27 ----D---- C:\windows\system32\setup
2010-02-21 18:07:26 ----D---- C:\windows\system32\manifeststore
2010-02-21 18:07:26 ----D---- C:\windows\system32\en
2010-02-21 18:07:21 ----D---- C:\windows\system32\migwiz
2010-02-21 18:06:48 ----RSD---- C:\windows\Fonts
2010-02-21 18:06:47 ----D---- C:\windows\AppPatch
2010-02-21 18:06:38 ----D---- C:\windows\system32\Boot
2010-02-21 17:38:11 ----A---- C:\windows\system32\rpcnetp.dll
2010-02-18 19:13:56 ----D---- C:\Users\Peter\AppData\Roaming\skypePM
2010-02-18 18:38:41 ----D---- C:\Program Files\ICQ7.0
2010-02-15 21:22:11 ----D---- C:\Users\Peter\AppData\Roaming\ICQ
2010-02-07 14:47:33 ----SD---- C:\Users\Peter\AppData\Roaming\Microsoft
2010-02-01 20:26:20 ----A---- C:\windows\system32\mrt.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2009-05-14 107256]
R1 MPFP;MPFP; C:\windows\System32\Drivers\Mpfp.sys [2007-03-02 120360]
R1 RsvLock;RsvLock; C:\windows\system32\drivers\RsvLock.sys [2008-05-14 12496]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2009-05-14 114472]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2009-05-14 133000]
R2 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2009-05-14 38240]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2008-04-07 34664]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys [2008-04-11 382464]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2008-02-29 1202560]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\windows\system32\DRIVERS\bcmwl6.sys [2008-03-21 1207288]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 Epfwndis;Eset Personal Firewall; C:\windows\system32\DRIVERS\Epfwndis.sys [2009-05-14 33096]
R3 HBtnKey;HBtnKey; C:\windows\system32\DRIVERS\cpqbttn.sys [2008-04-14 9344]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2008-05-21 2369536]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-03-27 1810992]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2008-03-27 199472]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\windows\system32\DRIVERS\yk60x86.sys [2008-01-17 298496]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2008-01-21 179712]
S3 BthEnum;Bluetooth Enumerator Service; C:\windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2008-02-01 80424]
S3 btwavdt;Bluetooth AVDT; C:\windows\system32\drivers\btwavdt.sys [2008-02-01 80936]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2008-02-01 16168]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ErrDev;Microsoft Hardware Error Device Driver; C:\windows\system32\drivers\errdev.sys [2008-01-21 6656]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2008-01-21 45624]
S3 usbscan;USB Scanner Driver; C:\windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 accoca;ActivClient Middleware Service; c:\Program Files\ActivIdentity\ActivClient\accoca.exe [2007-05-16 182576]
R2 AEADIFilters;Andrea ADI Filters Service; C:\windows\system32\AEADISRV.EXE [2007-10-19 86016]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2007-12-11 12800]
R2 ASBroker;Logon Session Broker; C:\windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\windows\System32\svchost.exe [2008-01-21 21504]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\windows\system32\svchost.exe [2008-01-21 21504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-05-14 731840]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-04-15 94208]
R2 HP ProtectTools Service;HP ProtectTools Service; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [2008-05-14 34184]
R2 HpFkCryptService;Drive Encryption Service; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2008-05-14 256512]
R2 HPFSService;File Sanitizer for HP ProtectTools; C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe [2008-05-02 77824]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2008-04-07 24936]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-04-18 354840]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-18 73728]
R2 McAfee HackerWatch Service;McAfee HackerWatch Service; C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe [2007-02-13 540776]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2007-05-23 841256]
R2 myAgtSvc;McAfee Virus and Spyware Protection Service; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe [2008-05-05 202048]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2008-05-12 576024]
R2 rpcnet;Remote Procedure Call (RPC) Net; C:\windows\system32\rpcnet.exe [2009-11-25 56680]
R2 SiteAdvisor Service;SiteAdvisor Service; C:\Program Files\SiteAdvisor\6173\SAService.exe [2008-08-06 341280]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-04-16 165192]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\windows\System32\svchost.exe [2008-01-21 21504]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\windows\System32\svchost.exe [2008-01-21 21504]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-05-14 20680]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\windows\system32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-04-08 1112560]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2008-03-24 74384]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service; C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 97136]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zablokovane aktualizacie, podivny firewall
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zablokovane aktualizacie, podivny firewall
Dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
pote spustte aplikaci pod uctem s administratorskym opravnenim
hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.
v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho
behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)
upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zablokovane aktualizacie, podivny firewall
Zapol som na notebooku Combofix podla Vasich instrukcii, ale nic sa nedeje uz viac ako 15 min. Stale svieti modra obrazovka s upozornenim, ze prebieha skenovanie atd, ale ziadna zmena od zaciatku. Je to v poriadku?
- Rudy
- Site Admin
- Příspěvky: 119405
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zablokovane aktualizacie, podivny firewall
Chvilku ještě vyčkejte, pokud se ni nezmění, restartujte do nouz. režimu a spusťte CF znovu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.