Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosim o kontrolu logu

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpráva
Autor
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#16 Příspěvek od Caroprd111 »

Obrázek Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
  • Spusťte program, poté klikněte na Run Scan
  • Po dokončení, sem vložte logy OTL.Txt a Extras.txt
Obrázek

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#17 Příspěvek od Blluemartin »

No, neviem nejak to nefunguje...
ked kliknem na "run scan" tak sa nic nestane

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#18 Příspěvek od Caroprd111 »

Měl by se začít skenovat PC a po chvíli by měly vyskočit logy. :)
Obrázek

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#19 Příspěvek od Blluemartin »

O.k už ide ale predtým sa nič nedialo, iba som klikol a nič, ale až po 3. krát na mňa "vybehol" log ale iba jeden, a preskenoval som PC SASom (rad skenujem :D ) a našiel "trojan.Dropper... Tu je log:
http://leteckaposta.cz/344842660

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#20 Příspěvek od Caroprd111 »

Log vložte do příspěvku.
Obrázek


Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#22 Příspěvek od Caroprd111 »

Tak ho rozdělte do více příspěvků.
Obrázek

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#23 Příspěvek od Blluemartin »

OTL logfile created on: 25.3.2010 14:07:26 - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = D:\Moje dokumenty\Preberanie
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000041B | Country: Slovakia | Language: SKY | Date Format: d.M.yyyy

1 014,00 Mb Total Physical Memory | 487,00 Mb Available Physical Memory | 48,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 40,20 Gb Total Space | 28,55 Gb Free Space | 71,01% Space Free | Partition Type: NTFS
Drive D: | 108,85 Gb Total Space | 99,13 Gb Free Space | 91,07% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: CINKANC
Current User Name: Lenovo
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.03.24 23:12:34 | 340,910,242 | ---- | M] (Borland Software Corporation ) -- D:\Moje dokumenty\Preberanie\turbodelphi_en.exe
PRC - [2010.03.24 21:46:38 | 000,555,520 | ---- | M] (OldTimer Tools) -- D:\Moje dokumenty\Preberanie\OTL.exe
PRC - [2010.02.25 23:46:06 | 001,702,400 | ---- | M] (Production Studio & Media, s.r.o.) -- D:\Program files\Production Studio & Media\Pub & Store\PubStore.exe
PRC - [2009.11.25 00:51:40 | 000,081,000 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashDisp.exe
PRC - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashServ.exe
PRC - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashMaiSv.exe
PRC - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\ashWebSv.exe
PRC - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) -- C:\Program Files\Avast4\aswUpdSv.exe
PRC - [2009.11.06 14:38:36 | 001,041,712 | ---- | M] (LanSchool Technologies, llc) -- C:\Program Files\LanSchool\student.exe
PRC - [2009.01.17 01:56:42 | 000,346,720 | ---- | M] (Broadcom Corporation.) -- C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe
PRC - [2008.11.20 17:15:06 | 000,307,200 | -H-- | M] (DeviceVM) -- C:\QSTART.SYS\config\DVMExportService.exe
PRC - [2008.08.28 23:10:18 | 001,283,984 | ---- | M] (Lenovo (Beijing) Limited) -- C:\Program Files\Lenovo\Energy Management\Energy Management.exe
PRC - [2008.07.10 00:21:20 | 004,456,448 | ---- | M] (Lenovo(Beijing)Limited) -- C:\Program Files\Lenovo\Energy Management\utility.exe
PRC - [2008.04.14 13:00:00 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2010.03.24 21:46:38 | 000,555,520 | ---- | M] (OldTimer Tools) -- D:\Moje dokumenty\Preberanie\OTL.exe
MOD - [2009.05.24 22:41:34 | 000,304,128 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
MOD - [2008.05.13 09:13:36 | 000,077,824 | ---- | M] (SuperAdBlocker.com) -- D:\Program files\superantispyware\SASSEH.DLL


========== Win32 Services (SafeList) ==========

SRV - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.11.22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [On_Demand | Stopped] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2009.11.06 14:38:36 | 001,041,712 | ---- | M] (LanSchool Technologies, llc) [Auto | Running] -- C:\Program Files\LanSchool\student.exe -- (LanSchoolStudent)
SRV - [2009.01.17 01:56:42 | 000,346,720 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2008.11.20 17:15:06 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\QSTART.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2005.05.24 17:22:16 | 002,027,520 | ---- | M] (Borland Software Corporation) [On_Demand | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibserver.exe -- (IBS_gds_db)
SRV - [2005.05.24 17:22:14 | 000,036,864 | ---- | M] (Borland Software Corporation) [Auto | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibguard.exe -- (IBG_gds_db)


========== Driver Services (SafeList) ==========

DRV - [2010.02.22 10:54:44 | 000,066,632 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Running] -- D:\Program files\superantispyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.12.25 12:14:14 | 000,022,528 | ---- | M] (pBUS-167 Software - http://www.pbus-167.com) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nhcDriver.sys -- (nhcDriverDevice)
DRV - [2009.11.25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.11.25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009.11.25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009.11.22 15:42:54 | 000,486,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2009.09.15 12:56:14 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009.09.15 12:55:30 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.09.15 12:55:19 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.02.18 11:31:04 | 005,028,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.01.07 23:18:58 | 000,991,784 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008.10.30 21:19:14 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008.09.11 03:14:48 | 001,386,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2008.08.05 13:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2008.07.24 09:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008.07.23 03:03:24 | 000,157,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTS5121.sys -- (RSUSBSTOR)
DRV - [2008.06.20 04:43:36 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008.05.30 03:46:12 | 000,534,568 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008.05.23 03:21:26 | 000,225,280 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008.04.14 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.04.14 08:06:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008.04.14 08:06:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008.03.10 10:18:42 | 000,057,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2008.02.15 06:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008.02.04 09:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008.02.04 09:57:30 | 000,037,032 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2008.01.11 22:58:42 | 000,009,472 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV - [2007.02.19 06:56:46 | 000,021,376 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd)
DRV - [2006.04.23 06:33:52 | 000,007,012 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PMEMNT.SYS -- (PMEM)
DRV - [2006.01.04 08:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2004.11.18 11:49:14 | 000,024,786 | ---- | M] (EUTRON) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
DRV - [2001.08.17 22:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001.08.17 22:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001.08.17 22:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001.08.17 22:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001.08.17 22:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001.08.17 21:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001.08.17 21:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001.08.17 21:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001.08.17 21:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001.08.17 21:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001.08.17 21:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001.08.17 21:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001.08.17 21:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001.08.17 21:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001.08.17 21:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001.08.17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "iMesh Web Search"
FF - prefs.js..browser.search.order.1: "iMesh Web Search"
FF - prefs.js..browser.search.selectedEngine: "Wikipédia (sk)"
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: foxyproxy@eric.h.jung:2.19.1
FF - prefs.js..keyword.URL: "http://search.imesh.com/webResults.html?src=ffb&q="
FF - prefs.js..network.proxy.no_proxies_on: ""

FF - user.js..network.proxy.type: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port: 0
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.socks: ""
FF - user.js..network.proxy.socks_port: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin File not found
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: D:\Program files\Mozilla Firefox\components [2010.03.25 13:02:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: D:\Program files\Mozilla Firefox\plugins [2010.03.25 13:02:48 | 000,000,000 | ---D | M]

[2010.01.17 15:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions
[2010.01.11 17:54:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions-BackupByFirefoxPortable
[2010.01.11 17:54:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions-BackupByFirefoxPortable\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2010.03.24 21:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions
[2010.01.11 18:40:55 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.03.17 11:42:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions\foxyproxy@eric.h.jung

O1 HOSTS File: ([2010.03.05 13:58:07 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O4 - HKLM..\Run: [avast!] C:\Program Files\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(Beijing)Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftup ... 6559585796 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 9162241593 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - Reg Error: Key error. File not found

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#24 Příspěvek od Blluemartin »

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Program files\superantispyware\SASWINLO.dll - D:\Program files\superantispyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program files\superantispyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.03.25 13:54:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\.borland
[2010.03.25 13:52:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared
[2010.03.25 13:46:12 | 000,036,864 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\ibxml.dll
[2010.03.25 13:46:09 | 000,425,984 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\gds32.dll
[2010.03.25 13:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Borland
[2010.03.24 09:56:47 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok (2)
[2010.03.23 17:00:14 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.03.23 16:36:20 | 000,000,000 | ---D | C] -- C:\Program Files\Bradbury
[2010.03.23 15:50:32 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.03.17 17:24:24 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.17 17:18:36 | 000,000,000 | ---D | C] -- C:\novazlozka
[2010.03.17 11:03:12 | 000,484,885 | ---- | C] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.16 16:50:56 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok
[2010.03.15 14:36:24 | 000,000,000 | ---D | C] -- C:\COMLOGO
[2010.03.15 14:31:47 | 000,000,000 | ---D | C] -- C:\D
[2010.03.15 14:05:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Advanced Chemistry Development
[2010.03.14 17:21:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\FreeScreenToVideo
[2010.03.11 08:00:06 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2010.03.09 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\PhotoFiltre
[2010.03.05 13:48:45 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.03.05 13:48:45 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.03.05 13:48:45 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.03.05 13:48:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.03.05 13:48:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.03.05 12:43:58 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe
[2010.03.04 18:08:09 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Bluetooth Exchange Folder
[2010.03.02 14:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\Hide IP NG
[2010.02.27 18:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.02.27 18:30:04 | 000,000,000 | ---D | C] -- C:\rsit
[2010.02.27 10:47:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\Digital Minds Software
[2010.02.26 18:29:07 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.02.26 14:17:25 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2010.02.25 18:27:09 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.02.25 18:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.02.25 18:27:05 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.02.25 08:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010.02.25 08:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010.02.24 20:34:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.02.24 07:55:37 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2009.12.15 17:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\TuneUp Software
[2009.12.14 09:31:26 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009.12.12 12:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2009.08.07 02:47:25 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008.07.21 20:18:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008.07.21 20:18:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft

========== Files - Modified Within 30 Days ==========

[2010.03.25 14:10:00 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
[2010.03.25 13:53:10 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.25 13:52:57 | 012,058,624 | ---- | M] () -- C:\Documents and Settings\Lenovo\ntuser.dat
[2010.03.25 13:46:10 | 000,007,188 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\services
[2010.03.24 15:52:10 | 000,000,492 | ---- | M] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 14:45:50 | 000,000,024 | ---- | M] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 11:47:45 | 000,002,617 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.03.24 10:50:11 | 000,240,357 | ---- | M] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 19:14:44 | 000,084,727 | ---- | M] () -- D:\Moje dokumenty\Desktop\Zaklady programovani v Turbo Pascalu.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | M] () -- C:\WINDOWS\SHED.INI
[2010.03.23 18:21:30 | 000,000,218 | ---- | M] () -- C:\WINDOWS\TDW.INI
[2010.03.23 18:21:29 | 000,000,815 | ---- | M] () -- C:\WINDOWS\WIN.INI
[2010.03.23 18:21:29 | 000,000,767 | ---- | M] () -- C:\WINDOWS\GROUPS.B$$
[2010.03.23 18:21:29 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSTEM.INI
[2010.03.23 18:14:54 | 000,000,201 | ---- | M] () -- C:\WINDOWS\BPWINI.OLD
[2010.03.23 16:36:17 | 000,000,735 | ---- | M] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.23 15:56:19 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSINI.OLD
[2010.03.17 14:28:22 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 12:35:28 | 003,716,161 | ---- | M] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.17 11:03:14 | 000,484,885 | ---- | M] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.15 14:28:15 | 000,000,584 | ---- | M] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | M] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | M] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:57 | 000,013,444 | ---- | M] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | M] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | M] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 17:21:14 | 000,020,920 | ---- | M] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.14 15:31:07 | 000,034,053 | ---- | M] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:43 | 000,018,055 | ---- | M] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 14:11:29 | 000,000,144 | ---- | M] () -- C:\WINDOWS\Eudcedit.ini
[2010.03.13 13:57:46 | 000,014,556 | ---- | M] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.12 18:02:38 | 000,261,632 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010.03.12 14:04:50 | 000,010,555 | ---- | M] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.12 10:44:03 | 002,330,194 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.11 15:11:08 | 000,215,011 | ---- | M] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.11 15:07:47 | 000,385,106 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.03.09 14:26:13 | 000,001,968 | ---- | M] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.08 12:46:18 | 000,039,329 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.07 11:46:25 | 000,010,533 | ---- | M] () -- D:\Moje dokumenty\Z.docx
[2010.03.07 11:04:05 | 000,001,908 | ---- | M] () -- C:\WINDOWS\ARCHPR.INI
[2010.03.06 18:26:47 | 000,000,489 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010.03.06 17:54:38 | 000,011,338 | ---- | M] () -- D:\Moje dokumenty\LZ.docx
[2010.03.05 13:58:07 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.03.05 13:48:20 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.05 10:46:05 | 000,015,437 | ---- | M] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.03 09:59:48 | 000,214,957 | ---- | M] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | M] () -- D:\Moje dokumenty\Dok1.docx
[2010.02.28 08:43:31 | 000,106,584 | ---- | M] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010.02.27 16:12:54 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:05:51 | 001,669,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.02.26 18:29:11 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.02.25 08:02:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

========== Files Created - No Company Name ==========

[2010.03.24 15:52:10 | 000,000,492 | ---- | C] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 15:51:16 | 000,000,062 | ---- | C] () -- D:\Moje dokumenty\Desktop\winmenu.pas.dp
[2010.03.24 14:45:50 | 000,000,024 | ---- | C] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 10:50:09 | 000,240,357 | ---- | C] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | C] () -- C:\WINDOWS\SHED.INI
[2010.03.23 16:36:22 | 000,067,584 | ---- | C] () -- C:\WINDOWS\unlite25.exe
[2010.03.23 16:36:17 | 000,000,735 | ---- | C] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.17 17:24:24 | 000,077,312 | ---- | C] () -- C:\Documents and Settings\Lenovo\mbr.cfxxe
[2010.03.17 14:28:22 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 14:26:49 | 1063,702,528 | -HS- | C] () -- C:\hiberfil.sys
[2010.03.17 12:13:01 | 003,716,161 | ---- | C] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.15 14:15:40 | 000,000,584 | ---- | C] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | C] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | C] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:56 | 000,013,444 | ---- | C] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | C] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | C] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 15:31:06 | 000,034,053 | ---- | C] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:42 | 000,018,055 | ---- | C] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 12:26:15 | 000,014,556 | ---- | C] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.13 12:01:55 | 000,020,920 | ---- | C] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.12 14:04:50 | 000,010,555 | ---- | C] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.11 15:11:07 | 000,215,011 | ---- | C] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.09 14:26:13 | 000,001,968 | ---- | C] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.09 12:45:46 | 012,045,818 | ---- | C] () -- D:\Moje dokumenty\dskgfhfsg.pptx
[2010.03.08 12:46:17 | 000,039,329 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.06 12:12:08 | 000,011,338 | ---- | C] () -- D:\Moje dokumenty\LZ.docx
[2010.03.06 10:23:04 | 000,010,533 | ---- | C] () -- D:\Moje dokumenty\Z.docx
[2010.03.05 13:48:45 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.03.05 13:48:45 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.03.05 13:48:45 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.03.05 13:48:45 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.03.05 13:48:45 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.03.05 10:46:05 | 000,015,437 | ---- | C] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.05 10:44:41 | 002,330,194 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.03 09:59:48 | 000,214,957 | ---- | C] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | C] () -- D:\Moje dokumenty\Dok1.docx
[2010.03.02 12:58:38 | 000,385,106 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.02.27 16:12:54 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:47:03 | 000,972,800 | ---- | C] () -- C:\WINDOWS\System32\Scary_Halloween_3D_Screensaver.scr
[2010.02.26 18:29:11 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.02.26 18:29:09 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010.02.25 08:43:48 | 000,001,000 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.02.25 08:43:47 | 000,000,996 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.02.14 15:21:06 | 000,000,128 | ---- | C] () -- C:\WINDOWS\System32\EUSOFT.SYS
[2010.02.05 16:15:08 | 000,000,052 | -H-- | C] () -- C:\WINDOWS\family007.ini
[2010.02.04 19:10:26 | 000,000,055 | ---- | C] () -- C:\WINDOWS\SpeederXP.INI
[2010.01.29 15:04:54 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2010.01.29 15:04:53 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2010.01.29 15:04:53 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\LFFPX90N.DLL
[2010.01.25 09:50:17 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI_SETUP.ini
[2010.01.21 19:33:39 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2010.01.17 11:05:43 | 000,000,111 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
[2010.01.11 14:38:45 | 000,000,146 | ---- | C] () -- C:\WINDOWS\didakta.ini
[2010.01.07 13:55:01 | 000,001,908 | ---- | C] () -- C:\WINDOWS\ARCHPR.INI
[2010.01.02 17:17:25 | 000,000,144 | ---- | C] () -- C:\WINDOWS\Eudcedit.ini
[2009.12.25 16:47:40 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\fusioncache.dat
[2009.12.24 09:18:38 | 000,000,265 | ---- | C] () -- C:\WINDOWS\Ikony.ini
[2009.12.13 19:35:52 | 000,401,928 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009.12.13 13:28:38 | 000,000,489 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.12.05 19:01:52 | 000,003,140 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2009.12.05 19:01:52 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\87F9D435FF.sys
[2009.12.05 14:33:19 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.05 13:35:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009.11.06 14:36:48 | 000,066,352 | ---- | C] () -- C:\WINDOWS\System32\lskhook64.dll
[2009.11.06 14:36:46 | 000,075,056 | ---- | C] () -- C:\WINDOWS\System32\lskhook.dll
[2009.10.26 16:03:22 | 000,003,636 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.10.26 16:00:44 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.10.26 16:00:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009.10.26 16:00:41 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.10.26 16:00:41 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.10.26 16:00:40 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009.10.26 16:00:38 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009.10.26 16:00:37 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.08.07 02:58:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009.08.07 02:29:51 | 009,338,880 | ---- | C] () -- C:\WINDOWS\System32\Facev.dll
[2009.08.07 02:29:51 | 000,491,520 | ---- | C] () -- C:\WINDOWS\System32\picn.dll
[2009.08.07 02:29:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\FunFrm.dll
[2009.08.07 02:29:49 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\EncIcons.dll
[2009.08.07 02:29:49 | 000,507,904 | ---- | C] () -- C:\WINDOWS\System32\SimpleExt.dll
[2009.08.07 02:29:49 | 000,241,752 | ---- | C] () -- C:\WINDOWS\System32\IcnOvrly.dll
[2009.08.07 02:29:48 | 009,502,720 | ---- | C] () -- C:\WINDOWS\System32\FaceVerify.dll
[2009.08.07 02:29:48 | 001,974,272 | ---- | C] () -- C:\WINDOWS\System32\Imagereog.dll
[2009.08.07 02:29:48 | 001,564,672 | ---- | C] () -- C:\WINDOWS\System32\MainOp.dll
[2009.08.07 02:29:48 | 001,167,360 | ---- | C] () -- C:\WINDOWS\System32\PicNotify.dll
[2009.08.07 02:29:48 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\Apblend.dll
[2009.08.07 02:29:48 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\SetDev.dll
[2009.08.07 02:29:48 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\VideoOp.dll
[2009.08.07 02:29:48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\Momo.dll
[2009.08.07 02:29:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\DevFilt.dll
[2009.08.07 02:29:45 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\3DImageRenderer.dll
[2009.08.07 02:23:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009.01.17 10:11:04 | 000,002,045 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\whlprd32a.dll
[2009.01.17 01:55:38 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2008.10.28 19:17:50 | 000,012,240 | ---- | C] () -- C:\WINDOWS\System32\dvmio.sys
[2008.08.13 15:16:45 | 000,000,218 | ---- | C] () -- C:\WINDOWS\TDW.INI
[2008.08.13 15:16:45 | 000,000,201 | ---- | C] () -- C:\WINDOWS\BPW.INI
[2008.07.21 22:08:39 | 000,005,398 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007.09.27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007.09.27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007.09.27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2005.02.17 19:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005.02.17 19:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001.11.14 20:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:319E7F0B
@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8178B8D6
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:302A9871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B7461410
< End of report >
SRV - [2009.11.25 00:51:35 | 000,138,680 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\ashServ.exe -- (avast! Antivirus)
SRV - [2009.11.25 00:51:21 | 000,254,040 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashMaiSv.exe -- (avast! Mail Scanner)
SRV - [2009.11.25 00:48:48 | 000,352,920 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Avast4\ashWebSv.exe -- (avast! Web Scanner)
SRV - [2009.11.25 00:43:56 | 000,018,752 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Avast4\aswUpdSv.exe -- (aswUpdSv)
SRV - [2009.11.22 15:44:16 | 002,384,240 | ---- | M] (Check Point Software Technologies LTD) [On_Demand | Stopped] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2009.11.06 14:38:36 | 001,041,712 | ---- | M] (LanSchool Technologies, llc) [Auto | Running] -- C:\Program Files\LanSchool\student.exe -- (LanSchoolStudent)
SRV - [2009.01.17 01:56:42 | 000,346,720 | ---- | M] (Broadcom Corporation.) [Auto | Running] -- C:\Program Files\Lenovo\Bluetooth Software\bin\btwdins.exe -- (btwdins)
SRV - [2008.11.20 17:15:06 | 000,307,200 | -H-- | M] (DeviceVM) [Auto | Running] -- C:\QSTART.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2005.05.24 17:22:16 | 002,027,520 | ---- | M] (Borland Software Corporation) [On_Demand | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibserver.exe -- (IBS_gds_db)
SRV - [2005.05.24 17:22:14 | 000,036,864 | ---- | M] (Borland Software Corporation) [Auto | Stopped] -- C:\Program Files\Borland\InterBase\bin\ibguard.exe -- (IBG_gds_db)


========== Driver Services (SafeList) ==========

DRV - [2010.02.22 10:54:44 | 000,066,632 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- D:\Program files\superantispyware\SASDIFSV.SYS -- (SASDIFSV)
DRV - [2010.02.22 10:54:44 | 000,012,872 | ---- | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Running] -- D:\Program files\superantispyware\SASENUM.SYS -- (SASENUM)
DRV - [2009.12.25 12:14:14 | 000,022,528 | ---- | M] (pBUS-167 Software - http://www.pbus-167.com) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nhcDriver.sys -- (nhcDriverDevice)
DRV - [2009.11.25 00:49:07 | 000,048,560 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2009.11.25 00:48:57 | 000,023,120 | ---- | M] (ALWIL Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2009.11.25 00:47:54 | 000,027,408 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2009.11.22 15:42:54 | 000,486,280 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (vsdatant)
DRV - [2009.09.15 12:56:14 | 000,094,160 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2009.09.15 12:55:30 | 000,114,768 | ---- | M] (ALWIL Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2009.09.15 12:55:19 | 000,020,560 | ---- | M] (ALWIL Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2009.02.18 11:31:04 | 005,028,352 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2009.01.07 23:18:58 | 000,991,784 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008.10.30 21:19:14 | 000,047,272 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008.09.11 03:14:48 | 001,386,624 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\BCMWL5.SYS -- (BCM43XX)
DRV - [2008.08.05 13:10:12 | 001,684,736 | ---- | M] (Creative) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Ambfilt.sys -- (Ambfilt)
DRV - [2008.07.24 09:37:10 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008.07.23 03:03:24 | 000,157,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTS5121.sys -- (RSUSBSTOR)
DRV - [2008.06.20 04:43:36 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008.05.30 03:46:12 | 000,534,568 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008.05.23 03:21:26 | 000,225,280 | ---- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2008.04.14 13:00:00 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2008.04.14 08:06:40 | 000,043,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\amdagp.sys -- (amdagp)
DRV - [2008.04.14 08:06:40 | 000,040,960 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sisagp.sys -- (sisagp)
DRV - [2008.04.14 00:15:14 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB Audio Driver (WDM)
DRV - [2008.03.10 10:18:42 | 000,057,384 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwhid.sys -- (btwhid)
DRV - [2008.02.15 06:12:06 | 005,854,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\igxpmp32.sys -- (ialm)
DRV - [2008.02.04 09:57:44 | 000,037,160 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008.02.04 09:57:30 | 000,037,032 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwmodem.sys -- (btwmodem)
DRV - [2008.01.11 22:58:42 | 000,009,472 | ---- | M] (Lenovo Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AcpiVpc.sys -- (ACPIVPC)
DRV - [2007.02.19 06:56:46 | 000,021,376 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\psadd.sys -- (psadd)
DRV - [2006.04.23 06:33:52 | 000,007,012 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\PMEMNT.SYS -- (PMEM)
DRV - [2006.01.04 08:41:48 | 001,389,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Monfilt.sys -- (Monfilt)
DRV - [2004.11.18 11:49:14 | 000,024,786 | ---- | M] (EUTRON) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
DRV - [2001.08.17 22:07:44 | 000,019,072 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sparrow.sys -- (Sparrow)
DRV - [2001.08.17 22:07:42 | 000,030,688 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys -- (sym_u3)
DRV - [2001.08.17 22:07:40 | 000,028,384 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys -- (sym_hi)
DRV - [2001.08.17 22:07:36 | 000,032,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys -- (symc8xx)
DRV - [2001.08.17 22:07:34 | 000,016,256 | ---- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\symc810.sys -- (symc810)
DRV - [2001.08.17 21:52:22 | 000,036,736 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ultra.sys -- (ultra)
DRV - [2001.08.17 21:52:20 | 000,045,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql12160.sys -- (ql12160)
DRV - [2001.08.17 21:52:20 | 000,040,320 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1080.sys -- (ql1080)
DRV - [2001.08.17 21:52:18 | 000,049,024 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\ql1280.sys -- (ql1280)
DRV - [2001.08.17 21:52:16 | 000,179,584 | ---- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys -- (dac2w2k)
DRV - [2001.08.17 21:52:12 | 000,017,280 | ---- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys -- (mraid35x)
DRV - [2001.08.17 21:52:00 | 000,026,496 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc.sys -- (asc)
DRV - [2001.08.17 21:51:58 | 000,014,848 | ---- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\asc3550.sys -- (asc3550)
DRV - [2001.08.17 21:51:56 | 000,005,248 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\aliide.sys -- (AliIde)
DRV - [2001.08.17 21:51:54 | 000,006,656 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\WINDOWS\system32\DRIVERS\cmdide.sys -- (CmdIde)
DRV - [2001.08.17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)


========== Standard Registry (SafeList) ==========

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#25 Příspěvek od Blluemartin »

========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 16 C6 BB E4 65 BF CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "iMesh Web Search"
FF - prefs.js..browser.search.order.1: "iMesh Web Search"
FF - prefs.js..browser.search.selectedEngine: "Wikipédia (sk)"
FF - prefs.js..browser.startup.homepage: "www.google.sk"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: foxyproxy@eric.h.jung:2.19.1
FF - prefs.js..keyword.URL: "http://search.imesh.com/webResults.html?src=ffb&q="
FF - prefs.js..network.proxy.no_proxies_on: ""

FF - user.js..network.proxy.type: 0
FF - user.js..network.proxy.http: ""
FF - user.js..network.proxy.http_port: 0
FF - user.js..network.proxy.ssl: ""
FF - user.js..network.proxy.ssl_port: 0
FF - user.js..network.proxy.ftp: ""
FF - user.js..network.proxy.ftp_port: 0
FF - user.js..network.proxy.gopher: ""
FF - user.js..network.proxy.gopher_port: 0
FF - user.js..network.proxy.socks_version: 5
FF - user.js..network.proxy.socks: ""
FF - user.js..network.proxy.socks_port: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\m3ffxtbr@mywebsearch.com: C:\Program Files\MyWebSearch\bar\1.bin File not found
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: D:\Program files\Mozilla Firefox\components [2010.03.25 13:02:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: D:\Program files\Mozilla Firefox\plugins [2010.03.25 13:02:48 | 000,000,000 | ---D | M]

[2010.01.17 15:18:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions
[2010.01.11 17:54:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions-BackupByFirefoxPortable
[2010.01.11 17:54:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Extensions-BackupByFirefoxPortable\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2010.03.24 21:53:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions
[2010.01.11 18:40:55 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.03.17 11:42:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Lenovo\Application Data\Mozilla\Firefox\Profiles\o34pe17o.default\extensions\foxyproxy@eric.h.jung

O1 HOSTS File: ([2010.03.05 13:58:07 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O4 - HKLM..\Run: [avast!] C:\Program Files\Avast4\ashDisp.exe (ALWIL Software)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(Beijing)Limited)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableChangePassword = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableLockWorkstation = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideFastUserSwitching = 0
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/microsoftup ... 6559585796 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microso ... 9162241593 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_18)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\vnd.ms.radio {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - Reg Error: Key error. File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Program files\superantispyware\SASWINLO.dll - D:\Program files\superantispyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lenovo\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Program files\superantispyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.03.25 13:54:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\.borland
[2010.03.25 13:52:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Borland Shared
[2010.03.25 13:46:12 | 000,036,864 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\ibxml.dll
[2010.03.25 13:46:09 | 000,425,984 | ---- | C] (Borland Software Corporation) -- C:\WINDOWS\System32\gds32.dll
[2010.03.25 13:46:04 | 000,000,000 | ---D | C] -- C:\Program Files\Borland
[2010.03.24 09:56:47 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok (2)
[2010.03.23 17:00:14 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.03.23 16:36:20 | 000,000,000 | ---D | C] -- C:\Program Files\Bradbury
[2010.03.23 15:50:32 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.03.17 17:24:24 | 000,389,120 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.17 17:18:36 | 000,000,000 | ---D | C] -- C:\novazlozka
[2010.03.17 11:03:12 | 000,484,885 | ---- | C] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.16 16:50:56 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Desktop\Nový priečinok
[2010.03.15 14:36:24 | 000,000,000 | ---D | C] -- C:\COMLOGO
[2010.03.15 14:31:47 | 000,000,000 | ---D | C] -- C:\D
[2010.03.15 14:05:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Advanced Chemistry Development
[2010.03.14 17:21:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\FreeScreenToVideo
[2010.03.11 08:00:06 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe
[2010.03.09 14:46:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\PhotoFiltre
[2010.03.05 13:48:45 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.03.05 13:48:45 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.03.05 13:48:45 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.03.05 13:48:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.03.05 13:48:23 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.03.05 12:43:58 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe
[2010.03.04 18:08:09 | 000,000,000 | ---D | C] -- D:\Moje dokumenty\Bluetooth Exchange Folder
[2010.03.02 14:32:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Application Data\Hide IP NG
[2010.02.27 18:30:06 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.02.27 18:30:04 | 000,000,000 | ---D | C] -- C:\rsit
[2010.02.27 10:47:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\Digital Minds Software
[2010.02.26 18:29:07 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.02.26 14:17:25 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_37.dll
[2010.02.25 18:27:09 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.02.25 18:27:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010.02.25 18:27:05 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.02.25 08:48:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
[2010.02.25 08:43:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Google
[2010.02.24 20:34:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.02.24 07:55:37 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2009.12.15 17:00:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\TuneUp Software
[2009.12.14 09:31:26 | 000,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Application Data\Microsoft
[2009.12.12 12:39:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Adobe
[2009.08.07 02:47:25 | 000,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Application Data\Microsoft
[2008.07.21 20:18:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft
[2008.07.21 20:18:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft

========== Files - Modified Within 30 Days ==========

[2010.03.25 14:10:00 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
[2010.03.25 13:53:10 | 000,001,000 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.03.25 13:52:57 | 012,058,624 | ---- | M] () -- C:\Documents and Settings\Lenovo\ntuser.dat
[2010.03.25 13:46:10 | 000,007,188 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\services
[2010.03.24 15:52:10 | 000,000,492 | ---- | M] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 14:45:50 | 000,000,024 | ---- | M] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 11:47:45 | 000,002,617 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.03.24 10:50:11 | 000,240,357 | ---- | M] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 19:14:44 | 000,084,727 | ---- | M] () -- D:\Moje dokumenty\Desktop\Zaklady programovani v Turbo Pascalu.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | M] () -- C:\WINDOWS\SHED.INI
[2010.03.23 18:21:30 | 000,000,218 | ---- | M] () -- C:\WINDOWS\TDW.INI
[2010.03.23 18:21:29 | 000,000,815 | ---- | M] () -- C:\WINDOWS\WIN.INI
[2010.03.23 18:21:29 | 000,000,767 | ---- | M] () -- C:\WINDOWS\GROUPS.B$$
[2010.03.23 18:21:29 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSTEM.INI
[2010.03.23 18:14:54 | 000,000,201 | ---- | M] () -- C:\WINDOWS\BPWINI.OLD
[2010.03.23 16:36:17 | 000,000,735 | ---- | M] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.23 15:56:19 | 000,000,247 | ---- | M] () -- C:\WINDOWS\SYSINI.OLD
[2010.03.17 14:28:22 | 000,000,548 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 12:35:28 | 003,716,161 | ---- | M] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.17 11:03:14 | 000,484,885 | ---- | M] (Island software ) -- D:\Moje dokumenty\Desktop\PapiiiClock.exe
[2010.03.15 14:28:15 | 000,000,584 | ---- | M] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | M] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | M] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:57 | 000,013,444 | ---- | M] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | M] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | M] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 17:21:14 | 000,020,920 | ---- | M] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.14 15:31:07 | 000,034,053 | ---- | M] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:43 | 000,018,055 | ---- | M] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 14:11:29 | 000,000,144 | ---- | M] () -- C:\WINDOWS\Eudcedit.ini
[2010.03.13 13:57:46 | 000,014,556 | ---- | M] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.12 18:02:38 | 000,261,632 | ---- | M] () -- C:\WINDOWS\PEV.exe
[2010.03.12 14:04:50 | 000,010,555 | ---- | M] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.12 10:44:03 | 002,330,194 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.11 15:11:08 | 000,215,011 | ---- | M] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.11 15:07:47 | 000,385,106 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.03.09 14:26:13 | 000,001,968 | ---- | M] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.08 12:46:18 | 000,039,329 | ---- | M] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.07 11:46:25 | 000,010,533 | ---- | M] () -- D:\Moje dokumenty\Z.docx
[2010.03.07 11:04:05 | 000,001,908 | ---- | M] () -- C:\WINDOWS\ARCHPR.INI
[2010.03.06 18:26:47 | 000,000,489 | ---- | M] () -- C:\WINDOWS\wcx_ftp.ini
[2010.03.06 17:54:38 | 000,011,338 | ---- | M] () -- D:\Moje dokumenty\LZ.docx
[2010.03.05 13:58:07 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.03.05 13:48:20 | 000,389,120 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Lenovo\CF21229.cfxxe
[2010.03.05 10:46:05 | 000,015,437 | ---- | M] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.03 09:59:48 | 000,214,957 | ---- | M] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | M] () -- D:\Moje dokumenty\Dok1.docx
[2010.02.28 08:43:31 | 000,106,584 | ---- | M] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010.02.27 16:12:54 | 000,000,120 | ---- | M] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:05:51 | 001,669,672 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.02.26 18:29:11 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2010.02.25 08:02:01 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

========== Files Created - No Company Name ==========

[2010.03.24 15:52:10 | 000,000,492 | ---- | C] () -- D:\Moje dokumenty\Desktop\Odkaz na BPW.lnk
[2010.03.24 15:51:16 | 000,000,062 | ---- | C] () -- D:\Moje dokumenty\Desktop\winmenu.pas.dp
[2010.03.24 14:45:50 | 000,000,024 | ---- | C] () -- C:\WINDOWS\AM_D8.PRF
[2010.03.24 10:50:09 | 000,240,357 | ---- | C] () -- D:\Moje dokumenty\Začíname s Delphi.docx
[2010.03.23 18:38:28 | 000,000,077 | ---- | C] () -- C:\WINDOWS\SHED.INI
[2010.03.23 16:36:22 | 000,067,584 | ---- | C] () -- C:\WINDOWS\unlite25.exe
[2010.03.23 16:36:17 | 000,000,735 | ---- | C] () -- D:\Moje dokumenty\Desktop\HTML Builder XP v5.6 LITE.lnk
[2010.03.17 17:24:24 | 000,077,312 | ---- | C] () -- C:\Documents and Settings\Lenovo\mbr.cfxxe
[2010.03.17 14:28:22 | 000,000,548 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Student DOG.lnk
[2010.03.17 14:26:49 | 1063,702,528 | -HS- | C] () -- C:\hiberfil.sys
[2010.03.17 12:13:01 | 003,716,161 | ---- | C] () -- D:\Moje dokumenty\Typy chemickej väzby.docx
[2010.03.15 14:15:40 | 000,000,584 | ---- | C] () -- D:\Moje dokumenty\grstyles.stl
[2010.03.15 14:07:05 | 000,000,012 | ---- | C] () -- D:\Moje dokumenty\UserStl.sk
[2010.03.15 14:05:55 | 000,001,921 | ---- | C] () -- D:\Moje dokumenty\template.cfg
[2010.03.15 13:08:56 | 000,013,444 | ---- | C] () -- D:\Moje dokumenty\husľový virtuóz a dirigent Bohdan Warchal.docx
[2010.03.14 17:24:13 | 012,967,419 | ---- | C] () -- D:\Moje dokumenty\WDA.flv
[2010.03.14 17:21:52 | 000,000,788 | ---- | C] () -- D:\Moje dokumenty\Desktop\Free Screen To Video.lnk
[2010.03.14 15:31:06 | 000,034,053 | ---- | C] () -- D:\Moje dokumenty\ZERVAN.docx
[2010.03.13 14:14:42 | 000,018,055 | ---- | C] () -- D:\Moje dokumenty\Logfile of Trend Micro HijackThis v2.docx
[2010.03.13 12:26:15 | 000,014,556 | ---- | C] () -- D:\Moje dokumenty\fYZKA DOPLNOVACKA.docx
[2010.03.13 12:01:55 | 000,020,920 | ---- | C] () -- D:\Moje dokumenty\VNÚTORNÝ ŠKOLSKÝ PORIADOK.docx
[2010.03.12 14:04:50 | 000,010,555 | ---- | C] () -- C:\Documents and Settings\Lenovo\.recently-used.xbel
[2010.03.11 15:11:07 | 000,215,011 | ---- | C] () -- D:\Moje dokumenty\Archimedes word fyzika.docx
[2010.03.09 14:26:13 | 000,001,968 | ---- | C] () -- C:\WINDOWS\System32\ubrps.dll
[2010.03.09 12:45:46 | 012,045,818 | ---- | C] () -- D:\Moje dokumenty\dskgfhfsg.pptx
[2010.03.08 12:46:17 | 000,039,329 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1s.pptx
[2010.03.06 12:12:08 | 000,011,338 | ---- | C] () -- D:\Moje dokumenty\LZ.docx
[2010.03.06 10:23:04 | 000,010,533 | ---- | C] () -- D:\Moje dokumenty\Z.docx
[2010.03.05 13:48:45 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.03.05 13:48:45 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.03.05 13:48:45 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.03.05 13:48:45 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.03.05 13:48:45 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.03.05 10:46:05 | 000,015,437 | ---- | C] () -- D:\Moje dokumenty\Wolfgang Amadeus Mozart.docx
[2010.03.05 10:44:41 | 002,330,194 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1r.pptx
[2010.03.03 09:59:48 | 000,214,957 | ---- | C] () -- D:\Moje dokumenty\Narodil sa v Syrakúzach na Sicílii roku 287 pred Kristom.docx
[2010.03.02 17:38:42 | 000,182,004 | ---- | C] () -- D:\Moje dokumenty\Dok1.docx
[2010.03.02 12:58:38 | 000,385,106 | ---- | C] () -- D:\Moje dokumenty\Prezentácia1.pptx
[2010.02.27 16:12:54 | 000,000,120 | ---- | C] () -- C:\WINDOWS\Winchat.ini
[2010.02.27 10:47:03 | 000,972,800 | ---- | C] () -- C:\WINDOWS\System32\Scary_Halloween_3D_Screensaver.scr
[2010.02.26 18:29:11 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2010.02.26 18:29:09 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010.02.25 08:43:48 | 000,001,000 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.02.25 08:43:47 | 000,000,996 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.02.14 15:21:06 | 000,000,128 | ---- | C] () -- C:\WINDOWS\System32\EUSOFT.SYS
[2010.02.05 16:15:08 | 000,000,052 | -H-- | C] () -- C:\WINDOWS\family007.ini
[2010.02.04 19:10:26 | 000,000,055 | ---- | C] () -- C:\WINDOWS\SpeederXP.INI
[2010.01.29 15:04:54 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\LFKODAK.DLL
[2010.01.29 15:04:53 | 000,344,064 | ---- | C] () -- C:\WINDOWS\System32\LFFPX7.DLL
[2010.01.29 15:04:53 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\LFFPX90N.DLL
[2010.01.25 09:50:17 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PI_SETUP.ini
[2010.01.21 19:33:39 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfmonnt.dll
[2010.01.17 11:05:43 | 000,000,111 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\Microsoft.SqlServer.Compact.351.32.bc
[2010.01.11 14:38:45 | 000,000,146 | ---- | C] () -- C:\WINDOWS\didakta.ini
[2010.01.07 13:55:01 | 000,001,908 | ---- | C] () -- C:\WINDOWS\ARCHPR.INI
[2010.01.02 17:17:25 | 000,000,144 | ---- | C] () -- C:\WINDOWS\Eudcedit.ini
[2009.12.25 16:47:40 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\fusioncache.dat
[2009.12.24 09:18:38 | 000,000,265 | ---- | C] () -- C:\WINDOWS\Ikony.ini
[2009.12.13 19:35:52 | 000,401,928 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009.12.13 13:28:38 | 000,000,489 | ---- | C] () -- C:\WINDOWS\wcx_ftp.ini
[2009.12.05 19:01:52 | 000,003,140 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
[2009.12.05 19:01:52 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\87F9D435FF.sys
[2009.12.05 14:33:19 | 000,021,504 | ---- | C] () -- C:\Documents and Settings\Lenovo\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.05 13:35:54 | 000,000,000 | ---- | C] () -- C:\WINDOWS\WB.ini
[2009.11.06 14:36:48 | 000,066,352 | ---- | C] () -- C:\WINDOWS\System32\lskhook64.dll
[2009.11.06 14:36:46 | 000,075,056 | ---- | C] () -- C:\WINDOWS\System32\lskhook.dll
[2009.10.26 16:03:22 | 000,003,636 | ---- | C] () -- C:\WINDOWS\wincmd.ini
[2009.10.26 16:00:44 | 000,168,448 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.10.26 16:00:43 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2009.10.26 16:00:41 | 000,881,664 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2009.10.26 16:00:41 | 000,205,824 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2009.10.26 16:00:40 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2009.10.26 16:00:38 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2009.10.26 16:00:37 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2009.08.07 02:58:37 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2009.08.07 02:29:51 | 009,338,880 | ---- | C] () -- C:\WINDOWS\System32\Facev.dll
[2009.08.07 02:29:51 | 000,491,520 | ---- | C] () -- C:\WINDOWS\System32\picn.dll
[2009.08.07 02:29:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\FunFrm.dll
[2009.08.07 02:29:49 | 000,655,360 | ---- | C] () -- C:\WINDOWS\System32\EncIcons.dll
[2009.08.07 02:29:49 | 000,507,904 | ---- | C] () -- C:\WINDOWS\System32\SimpleExt.dll
[2009.08.07 02:29:49 | 000,241,752 | ---- | C] () -- C:\WINDOWS\System32\IcnOvrly.dll
[2009.08.07 02:29:48 | 009,502,720 | ---- | C] () -- C:\WINDOWS\System32\FaceVerify.dll
[2009.08.07 02:29:48 | 001,974,272 | ---- | C] () -- C:\WINDOWS\System32\Imagereog.dll
[2009.08.07 02:29:48 | 001,564,672 | ---- | C] () -- C:\WINDOWS\System32\MainOp.dll
[2009.08.07 02:29:48 | 001,167,360 | ---- | C] () -- C:\WINDOWS\System32\PicNotify.dll
[2009.08.07 02:29:48 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\Apblend.dll
[2009.08.07 02:29:48 | 000,221,184 | ---- | C] () -- C:\WINDOWS\System32\SetDev.dll
[2009.08.07 02:29:48 | 000,126,976 | ---- | C] () -- C:\WINDOWS\System32\VideoOp.dll
[2009.08.07 02:29:48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\Momo.dll
[2009.08.07 02:29:48 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\DevFilt.dll
[2009.08.07 02:29:45 | 000,241,664 | ---- | C] () -- C:\WINDOWS\System32\3DImageRenderer.dll
[2009.08.07 02:23:51 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2009.01.17 10:11:04 | 000,002,045 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\whlprd32a.dll
[2009.01.17 01:55:38 | 002,854,976 | ---- | C] () -- C:\WINDOWS\System32\btwicons.dll
[2008.10.28 19:17:50 | 000,012,240 | ---- | C] () -- C:\WINDOWS\System32\dvmio.sys
[2008.08.13 15:16:45 | 000,000,218 | ---- | C] () -- C:\WINDOWS\TDW.INI
[2008.08.13 15:16:45 | 000,000,201 | ---- | C] () -- C:\WINDOWS\BPW.INI
[2008.07.21 22:08:39 | 000,005,398 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007.09.27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007.09.27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007.09.27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2005.02.17 19:41:32 | 000,000,603 | ---- | C] () -- C:\WINDOWS\System32\BTNeighborhood.dll.manifest
[2005.02.17 19:41:30 | 000,000,593 | ---- | C] () -- C:\WINDOWS\System32\btcss.dll.manifest
[2001.11.14 20:56:00 | 001,802,240 | ---- | C] () -- C:\WINDOWS\System32\lcppn21.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:319E7F0B
@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8178B8D6
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:302A9871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B7461410

< End of report >

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#26 Příspěvek od Caroprd111 »

Obrázek Spusťte OTL a do spodního okna vložte následující skript.

Kód: Vybrat vše

:OTL
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
[2010.03.25 14:10:00 | 000,000,468 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job
[2009.12.05 19:01:52 | 000,000,088 | RHS- | C] () -- C:\Documents and Settings\All Users\Application Data\87F9D435FF.sys
@Alternate Data Stream - 166 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:319E7F0B
@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8178B8D6
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:302A9871
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 103 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 101 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B7461410

:Commands
[EMPTYTEMP] 
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[CREATERESTOREPOINT]
[REBOOT] 
Poté klikněte na Run fix, PC se restartuje, log vložte sem.



Obrázek Tohle otestujte na http://www.virustotal.com/cs/
C:\WINDOWS\System32\ubrps.dll
C:\WINDOWS\System32\dvmio.sys
C:\Documents and Settings\All Users\Application Data\KGyGaAvL.sys
C:\WINDOWS\System32\Facev.dll
C:\WINDOWS\System32\lskhook.dll


(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)
Obrázek


Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#28 Příspěvek od Caroprd111 »

OK :)
Obrázek

Uživatelský avatar
Blluemartin
Návštěvník
Návštěvník
Příspěvky: 160
Registrován: 12 led 2010 14:18

Re: Prosim o kontrolu logu

#29 Příspěvek od Blluemartin »

Ostatne subory som dal na analýzu ale nejak sa to pomiešalo..
ale ani jeden nebol infikovaný.
tu je log:


All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{35065594-9169-4A34-B167-FC4865038E53} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{35065594-9169-4A34-B167-FC4865038E53}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Infodelivery\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
C:\WINDOWS\tasks\User_Feed_Synchronization-{695F01B1-5DF4-4A48-A411-74C692A807C6}.job moved successfully.
C:\Documents and Settings\All Users\Application Data\87F9D435FF.sys moved successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:319E7F0B deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:8178B8D6 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:302A9871 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:B7461410 deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator

User: Administrator.CINKANC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Administrator.POCITAC
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Lenovo
->Temp folder emptied: 2844809 bytes
->Temporary Internet Files folder emptied: 5988846 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 76101466 bytes
->Flash cache emptied: 1656 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 262912 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 1150899447 bytes

Total Files Cleaned = 1 179,00 mb


[EMPTYFLASH]

User: Administrator

User: Administrator.Lenovo

User: Administrator.POCITAC

User: All Users

User: Default User

User: Guest

User: Lenovo
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore points cleared and new OTL Restore Point set!
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.

OTL by OldTimer - Version 3.1.37.3 log created on 03302010_155732

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_234.dat moved successfully.

Registry entries deleted on Reboot...

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13493
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#30 Příspěvek od Caroprd111 »

Poprosím o nový log z RSIT.
Obrázek

Odpovědět