Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosim o kontrolu logu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Cumil
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 led 2008 21:35

prosim o kontrolu logu

#1 Příspěvek od Cumil »

Logfile of random's system information tool 1.06 (written by random/random)
Run by Martin at 2010-04-07 21:42:31
Systém Microsoft Windows XP Professional Service Pack 2
System drive E: has 5 GB (23%) free of 20 GB
Total RAM: 2047 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:42:38, on 7.4.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\AVG\AVG9\avgchsvx.exe
E:\Program Files\AVG\AVG9\avgrsx.exe
E:\Program Files\AVG\AVG9\avgcsrvx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe
E:\Program Files\DAEMON Tools\daemon.exe
E:\WINDOWS\SQ931STI.EXE
E:\PROGRA~1\AVG\AVG9\avgtray.exe
E:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe
E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
C:\Program Files\Corel\Graphics8\Programs\MFIndexer.exe
E:\Program Files\MSI\PC Alert 4\PCAlert4.exe
E:\Program Files\AVG\AVG9\avgwdsvc.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\Common Files\LightScribe\LSSrvc.exe
E:\WINDOWS\System32\nvsvc32.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\AVG\AVG9\avgemc.exe
E:\Program Files\AVG\AVG9\avgnsx.exe
E:\Program Files\AVG\AVG9\avgcsrvx.exe
E:\WINDOWS\system32\devldr32.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\rundll32.exe
E:\Program Files\QIP\qip.exe
E:\Program Files\Opera\opera.exe
E:\Program Files\Outlook Express\msimn.exe
E:\Documents and Settings\Martin\Local Settings\Data aplikací\Opera\Opera\temporary_downloads\RSIT.exe
E:\Program Files\Trend Micro\HijackThis\Martin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: 216.107.250.194 nprotect.lineage2.com
O1 - Hosts: 85.239.131.49 l2testauthd.lineage2.com
O1 - Hosts: 85.239.131.49 l2authd.lineage2.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [UpdReg] E:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [NeroFilterCheck] E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [pdfFactory Dispatcher v2] "E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe" /source=HKLM
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DAEMON Tools] "E:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PC Suite for Smartphones] "E:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" /startoptions
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SQ931STI] E:\WINDOWS\SQ931STI.EXE
O4 - HKLM\..\Run: [AVG9_TRAY] E:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [mRouterConfig] "E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Corel MEDIA FOLDERS INDEXER 8.LNK = C:\Program Files\Corel\Graphics8\Programs\MFIndexer.exe
O4 - Global Startup: PC Alert 4.lnk = E:\Program Files\MSI\PC Alert 4\PCAlert4.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - E:\Program Files\QIP\qip.exe (HKCU)
O16 - DPF: {50E43D86-A74D-11D0-98CE-004005249458} (AnimatedGif Control) - https://.....
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://......
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://.......
O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://.....
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://.......
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - E:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - E:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - E:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - E:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\System32\nvsvc32.exe

--
End of file - 8164 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\ghfxxnff.job
E:\WINDOWS\tasks\User_Feed_Synchronization-{6B1DB0FB-5FE5-468D-A443-557D1DE8D497}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - E:\Program Files\AVG\AVG9\avgssie.dll [2010-04-02 1602912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - E:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-01 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-01 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=E:\WINDOWS\System32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"anvshell"=E:\WINDOWS\anvshell.exe [2003-07-24 380928]
"LiveNote"=E:\WINDOWS\livenote.exe [2002-07-11 40960]
"UpdReg"=E:\WINDOWS\Updreg.exe [2000-05-11 90112]
"NeroFilterCheck"=E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"pdfFactory Dispatcher v2"=E:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis2a.exe [2006-01-25 495616]
"NvMediaCenter"=E:\WINDOWS\System32\NvMcTray.dll [2006-10-22 86016]
"DAEMON Tools"=E:\Program Files\DAEMON Tools\daemon.exe [2006-11-12 157592]
"PC Suite for Smartphones"=E:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-05-28 528384]
"Adobe Reader Speed Launcher"=E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"SQ931STI"=E:\WINDOWS\SQ931STI.EXE [2007-01-24 151552]
"AVG9_TRAY"=E:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-04-02 2064224]
"SunJavaUpdateSched"=E:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=E:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"MSMSGS"=E:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]
"mRouterConfig"=E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe [2006-03-02 290816]

E:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Corel MEDIA FOLDERS INDEXER 8.LNK - C:\Program Files\Corel\Graphics8\Programs\MFIndexer.exe
PC Alert 4.lnk - E:\Program Files\MSI\PC Alert 4\PCAlert4.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
E:\WINDOWS\system32\avgrsstx.dll [2010-03-15 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
E:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - E:\WINDOWS\system32\upnpui.dll [2004-08-18 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe"="E:\Program Files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe:*:Enabled:mRouterRuntime Module"
"E:\Program Files\Sony Ericsson\Mobile4\Sync Manager\DXP SyncML.exe"="E:\Program Files\Sony Ericsson\Mobile4\Sync Manager\DXP SyncML.exe:*:Enabled:DXP SyncML Module"
"C:\Dokumenty\Martin\Počítač\Stažené soubory a programy\StrongDC.exe"="C:\Dokumenty\Martin\Počítač\Stažené soubory a programy\StrongDC.exe:*:Enabled:StrongDC++"
"E:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="E:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime"
"C:\Games\uTorrent\utorrent.exe"="C:\Games\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="E:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"E:\Program Files\QIP\qip.exe"="E:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Games\BlueByte\Settlers3\s3.exe"="C:\Games\BlueByte\Settlers3\s3.exe:*:Enabled:Siedler3"
"E:\WINDOWS\system32\dplaysvr.exe"="E:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"E:\Program Files\Hamachi\hamachi.exe"="E:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Westwood\RA2\gamemd.exe"="C:\Westwood\RA2\gamemd.exe:*:Enabled:Main executable for Yuri's Revenge"
"C:\Games\Electronic Arts\Command & Conquer 3\RetailExe\1.0\cnc3game.dat"="C:\Games\Electronic Arts\Command & Conquer 3\RetailExe\1.0\cnc3game.dat:*:Enabled:Command & Conquer 3 Tiberium Wars"
"C:\Games\Electronic Arts\Command & Conquer 3\RetailExe\1.9\cnc3game.dat"="C:\Games\Electronic Arts\Command & Conquer 3\RetailExe\1.9\cnc3game.dat:*:Enabled:Command & Conquer 3 Tiberium Wars"
"E:\Program Files\ICQ6.5\ICQ.exe"="E:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"E:\Program Files\Sony Ericsson\Update Service\Update Service.exe"="E:\Program Files\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Games\Lineage II - CzechGamers\loader.exe"="C:\Games\Lineage II - CzechGamers\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"E:\Documents and Settings\Martin\Local Settings\temp\Rar$EX00.563\loader.exe"="E:\Documents and Settings\Martin\Local Settings\temp\Rar$EX00.563\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"E:\Program Files\AVG\AVG9\avgemc.exe"="E:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"E:\Program Files\AVG\AVG9\avgupd.exe"="E:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"E:\Program Files\AVG\AVG9\avgnsx.exe"="E:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"E:\Documents and Settings\Martin\Local Settings\temp\Rar$EX00.671\loader.exe"="E:\Documents and Settings\Martin\Local Settings\temp\Rar$EX00.671\loader.exe:*:Enabled:CzechGamers Server AutoUpdater"
"E:\Program Files\Opera\opera.exe"="E:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"E:\Program Files\Skype\Plugin Manager\skypePM.exe"="E:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"E:\Program Files\Skype\Phone\Skype.exe"="E:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-04-07 21:42:31 ----D---- E:\rsit
2010-04-06 20:11:52 ----A---- E:\WINDOWS\system32\ADVAPI16.dll
2010-04-06 15:51:35 ----A---- E:\WINDOWS\system32\ADVAPI16.dll.old
2010-04-01 23:52:43 ----A---- E:\WINDOWS\system32\javaws.exe
2010-04-01 23:52:43 ----A---- E:\WINDOWS\system32\javaw.exe
2010-04-01 23:52:43 ----A---- E:\WINDOWS\system32\java.exe
2010-03-26 15:13:52 ----A---- E:\WINDOWS\AKDeInstall.exe
2010-03-15 10:24:07 ----A---- E:\WINDOWS\system32\avgrsstx.dll
2010-03-12 11:50:23 ----D---- E:\Documents and Settings\All Users\Data aplikací\Sun

======List of files/folders modified in the last 1 months======

2010-04-07 21:42:37 ----D---- E:\WINDOWS\Prefetch
2010-04-07 13:55:19 ----D---- E:\WINDOWS\TEMP
2010-04-07 00:18:20 ----A---- E:\WINDOWS\SchedLgU.Txt
2010-04-07 00:17:08 ----D---- E:\WINDOWS
2010-04-06 20:11:52 ----D---- E:\WINDOWS\system32
2010-04-05 18:55:15 ----D---- E:\Program Files\CCleaner
2010-04-05 13:07:42 ----D---- E:\WINDOWS\system32\CatRoot2
2010-04-03 23:10:07 ----D---- E:\Documents and Settings\Martin\Data aplikací\uTorrent
2010-04-01 23:53:12 ----SHD---- E:\WINDOWS\Installer
2010-04-01 23:52:28 ----A---- E:\WINDOWS\system32\deploytk.dll
2010-04-01 23:52:22 ----D---- E:\Program Files\Java
2010-03-30 23:27:48 ----D---- E:\Documents and Settings\Martin\Data aplikací\Skype
2010-03-30 20:18:26 ----D---- E:\Documents and Settings\Martin\Data aplikací\skypePM
2010-03-28 10:18:17 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI
2010-03-27 23:08:53 ----D---- E:\Program Files\Opera
2010-03-24 23:33:47 ----A---- E:\WINDOWS\NeroDigital.ini
2010-03-18 21:45:38 ----D---- E:\TEMP
2010-03-15 21:09:11 ----RSD---- E:\WINDOWS\Fonts
2010-03-15 10:24:33 ----D---- E:\WINDOWS\system32\drivers
2010-03-14 01:04:22 ----D---- E:\Documents and Settings\Martin\Data aplikací\Ventrilo
2010-03-12 11:50:22 ----D---- E:\Program Files\Common Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; E:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-18 41216]
R1 asuskbnt;asuskbnt; E:\WINDOWS\System32\DRIVERS\asuskbnt.sys [2003-04-23 17150]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; E:\WINDOWS\System32\Drivers\avgldx86.sys [2010-03-15 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; E:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-03-15 29512]
R1 AvgTdiX;AVG Free Network Redirector; E:\WINDOWS\System32\Drivers\avgtdix.sys [2010-03-15 242696]
R1 kbdhid;Ovladač klávesnice standardu HID; E:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-18 14848]
R2 EIO;EIO; \??\E:\WINDOWS\system32\drivers\EIO.sys []
R3 ctljystk;Game port pro zařízení Creative SB Live!; E:\WINDOWS\System32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 emu10k;Creative SB Live! (WDM); E:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
R3 emu10k1;Creative Interface Manager Driver (WDM); E:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; E:\WINDOWS\System32\DRIVERS\fetnd5b.sys [2003-04-24 41984]
R3 hamachi;Hamachi Network Interface; E:\WINDOWS\System32\DRIVERS\hamachi.sys [2008-06-26 25280]
R3 HidUsb;Ovladač třídy standardu HID; E:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-10-25 9600]
R3 mouhid;Ovladač myši standardu HID; E:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 npkcrypt;npkcrypt; \??\C:\Games\Lineage II - CzechGamers\system\npkcrypt.sys []
R3 npkcusb;npkcusb; \??\C:\Games\Lineage II - CzechGamers\system\npkcusb.sys []
R3 nv;nv; E:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 PCAlertDriver;PCAlertDriver; \??\E:\Program Files\MSI\PC Alert 4\NTGLM7X.sys []
R3 sfman;Creative SoundFont Manager Driver (WDM); E:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
R3 SQ931;USB 2.0 Video Camera; E:\WINDOWS\System32\Drivers\Capt931a.sys [2007-07-05 523648]
R3 usbaudio;Ovladač zvukové karty USB (WDM); E:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; E:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; E:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Rozbočovač umožnující USB2; E:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; E:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); E:\WINDOWS\system32\DRIVERS\zebrceb.sys [2008-11-22 63360]
S1 ANVIOCTL;ANVIOCTL; E:\WINDOWS\System32\DRIVERS\anvioctl.sys [2004-02-11 231480]
S2 PfModNT;PfModNT; \??\E:\WINDOWS\System32\PfModNT.sys []
S3 a2129dr6;a2129dr6; E:\WINDOWS\system32\drivers\a2129dr6.sys []
S3 catchme;catchme; \??\E:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; E:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 Epiusb;USB Flash; E:\WINDOWS\System32\Drivers\Epiusb.sys [2005-12-09 14940]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; E:\WINDOWS\System32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 ggsemc;Sony Ericsson USB Flash Driver; E:\WINDOWS\system32\DRIVERS\ggsemc.sys [2007-04-30 8704]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 k750bus;Sony Ericsson 750 driver (WDM); E:\WINDOWS\System32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; E:\WINDOWS\System32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; E:\WINDOWS\System32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; E:\WINDOWS\System32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; E:\WINDOWS\System32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; E:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; E:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; E:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nm;Ovladač programu Sledování sítě; E:\WINDOWS\System32\DRIVERS\NMnt.sys [2004-08-04 40320]
S3 nv4;nv4; E:\WINDOWS\System32\DRIVERS\nv4.sys [2001-08-17 731648]
S3 PsSdk40;PsSdk40; \??\E:\WINDOWS\system32\Drivers\pssdk40.sys []
S3 PsSdkLBF;PsSdkLBF; \??\E:\WINDOWS\system32\Drivers\pssdklbf.sys []
S3 SE27bus;Sony Ericsson Device 039 Driver driver (WDM); E:\WINDOWS\System32\DRIVERS\SE27bus.sys [2006-09-18 61600]
S3 SE27mdfl;Sony Ericsson Device 039 USB WMC Modem Filter; E:\WINDOWS\System32\DRIVERS\SE27mdfl.sys [2006-09-18 9360]
S3 SE27mdm;Sony Ericsson Device 039 USB WMC Modem Driver; E:\WINDOWS\System32\DRIVERS\SE27mdm.sys [2006-09-18 97184]
S3 SE27mgmt;Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM); E:\WINDOWS\System32\DRIVERS\SE27mgmt.sys [2006-09-18 88688]
S3 se27nd5;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS); E:\WINDOWS\System32\DRIVERS\se27nd5.sys [2006-09-18 18704]
S3 SE27obex;Sony Ericsson Device 039 USB WMC OBEX Interface; E:\WINDOWS\System32\DRIVERS\SE27obex.sys [2006-09-18 86560]
S3 se27unic;Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM); E:\WINDOWS\System32\DRIVERS\se27unic.sys [2006-09-18 90800]
S3 SLIP;BDA Slip De-Framer; E:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); E:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; E:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 TESTCAP;Studio PCTV (Audio); E:\WINDOWS\system32\DRIVERS\PCTVAud.sys []
S3 usbprint;Třída USB Printer; E:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;Ovladač skeneru USB; E:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; E:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 WSTCODEC;Dálnopisný kodek světového standardu; E:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; E:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; E:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zebrbus;Sony Ericsson Composite Device driver; E:\WINDOWS\system32\DRIVERS\zebrbus.sys [2008-11-22 83200]
S3 zebrmdfl;Sony Ericsson Modem Filter; E:\WINDOWS\system32\DRIVERS\zebrmdfl.sys [2008-11-22 14848]
S3 zebrmdm;Sony Ericsson Port (WDM); E:\WINDOWS\system32\DRIVERS\zebrmdm.sys [2008-11-22 109568]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM); E:\WINDOWS\system32\DRIVERS\zebrmdmc.sys [2008-11-22 109568]
S3 zebrsce;Sony Ericsson PC-Connect Port; E:\WINDOWS\system32\DRIVERS\zebrsce.sys [2008-11-22 91264]
S4 IntelIde;IntelIde; E:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9emc;AVG Free E-mail Scanner; E:\Program Files\AVG\AVG9\avgemc.exe [2010-03-15 916760]
R2 avg9wd;AVG Free WatchDog; E:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-03-15 308064]
R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2010-04-01 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; E:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-07-20 61440]
R2 NVSvc;NVIDIA Display Driver Service; E:\WINDOWS\System32\nvsvc32.exe [2006-10-22 159810]
S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 IDriverT;InstallDriver Table Manager; E:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NBService;NBService; E:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 odserv;Microsoft Office Diagnostics Service; E:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; E:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usprserv;User Privilege Service; E:\WINDOWS\System32\svchost.exe [2004-08-18 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; E:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; E:\WINDOWS\system32\svchost.exe [2004-08-18 14336]

-----------------EOF-----------------

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119403
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu logu

#2 Příspěvek od Rudy »

Log vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Cumil
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 led 2008 21:35

Re: prosim o kontrolu logu

#3 Příspěvek od Cumil »

dekuji, ale i presto mi AVG nachazi viry v sekci System Volume Information

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119403
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: prosim o kontrolu logu

#4 Příspěvek od Rudy »

Vypněte obnovu systému, restartujte PC a obnovu opět zapněte. Vir je v záloze systému.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět