Preventivní kontrola

Zpráva

Max_cz · #1 Příspěvek od **Max_cz** » 18 čer 2010 15:28

Prosím o preventivní kontrolu...

Logfile of random's system information tool 1.07 (written by random/random)
Run by Max_cz at 2010-06-18 16:15:22
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 23 GB (13%) free of 175 GB
Total RAM: 2046 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:16:36, on 18.6.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\WhatPulse\WhatPulse.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\conime.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\mobsync.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Max_cz.Uživatel-PC\Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Max_cz.exe
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Chrome\Application\chrome.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [StartCCC] c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe -p
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Startup: Obsah aplikace OneNote.onetoc2
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {49CD73D5-CBE2-4FAA-B70F-0252C74809AB} (IPCamera Control) - http://dyndnsset.dyndns.org/classes/PLANETCamV.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 7682 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{39366205-3F98-4DFE-A1FB-F769A26CC77C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-02 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-12 6965792]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-02-21 1093208]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2009-05-05 1466368]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-02-26 153136]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-04-28 142120]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WebcamMaxunstall"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WhatPulse"=C:\Program Files\WhatPulse\WhatPulse.exe [2006-08-21 665600]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-18 125952]
"QIP2005"=C:\Program Files\QIP\qip.exe [2009-08-13 3276288]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]
""= []
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-18 202240]
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"FlashPlayerUpdate"=C:\Windows\system32\Macromed\Flash\NPSWF32_FlashUtil.exe [2010-01-27 256280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [2009-01-30 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Max_cz.Uživatel-PC\AppData\Local\Google\Update\GoogleUpdate.exe [2008-11-15 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-04-28 142120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSERIAL]
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2009-05-05 1466368]

C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Obsah aplikace OneNote.onetoc2
Stardock ObjectDock.lnk - C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{533a1479-b8f5-11dd-9d72-00030d73c928}]
shell\AutoRun\command - F:\SETUP.EXE
shell\configure\command - F:\SETUP.EXE
shell\install\command - F:\SETUP.EXE

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-06-18 16:15:24 ----D---- C:\Program Files\trend micro
2010-06-18 16:15:22 ----D---- C:\rsit
2010-06-14 22:29:51 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2010-06-13 12:18:39 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Nokia Ovi Suite
2010-06-13 10:23:16 ----D---- C:\ProgramData\OviInstallerCache
2010-06-13 10:20:51 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2010-06-13 10:20:50 ----A---- C:\Windows\system32\WUDFSvc.dll
2010-06-13 10:20:49 ----A---- C:\Windows\system32\WUDFPlatform.dll
2010-06-13 10:20:48 ----A---- C:\Windows\system32\WUDFHost.exe
2010-06-13 10:20:46 ----A---- C:\Windows\system32\WUDFx.dll
2010-06-13 10:10:38 ----D---- C:\Program Files\Common Files\PCSuite
2010-06-13 10:03:47 ----D---- C:\Program Files\PC Connectivity Solution
2010-06-10 16:54:57 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-10 16:54:55 ----A---- C:\Windows\system32\atmfd.dll
2010-06-10 16:54:54 ----A---- C:\Windows\system32\atmlib.dll
2010-06-10 16:54:49 ----A---- C:\Windows\system32\mshtml.dll
2010-06-10 16:54:47 ----A---- C:\Windows\system32\ieframe.dll
2010-06-10 16:54:46 ----A---- C:\Windows\system32\iertutil.dll
2010-06-10 16:54:45 ----A---- C:\Windows\system32\wininet.dll
2010-06-10 16:54:45 ----A---- C:\Windows\system32\urlmon.dll
2010-06-10 16:54:44 ----A---- C:\Windows\system32\occache.dll
2010-06-10 16:54:44 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-10 16:54:44 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-10 16:54:43 ----A---- C:\Windows\system32\mstime.dll
2010-06-10 16:54:42 ----A---- C:\Windows\system32\ieui.dll
2010-06-10 16:54:41 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-10 16:54:41 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-10 16:54:41 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-10 16:54:41 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-10 16:54:41 ----A---- C:\Windows\system32\iepeers.dll
2010-06-10 16:54:40 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-10 16:54:40 ----A---- C:\Windows\system32\iesetup.dll
2010-06-10 16:54:40 ----A---- C:\Windows\system32\iernonce.dll
2010-06-10 16:54:40 ----A---- C:\Windows\system32\ie4uinit.exe
2010-05-31 12:35:43 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\CyberLink
2010-05-30 12:47:23 ----D---- C:\ProgramData\Nokia
2010-05-30 12:44:11 ----D---- C:\Program Files\DIFX
2010-05-27 12:25:28 ----D---- C:\Program Files\Microsoft Visual Studio
2010-05-27 12:21:43 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-05-27 12:18:26 ----D---- C:\ProgramData\Hewlett-Packard
2010-05-27 12:16:20 ----A---- C:\Windows\system32\hpz3l4v2.dll
2010-05-26 10:26:46 ----A---- C:\Windows\system32\tzres.dll
2010-05-24 15:45:16 ----D---- C:\Program Files\iPod
2010-05-24 13:27:41 ----A---- C:\Windows\system32\WgaLogon.dll
2010-05-24 13:27:37 ----A---- C:\Windows\system32\WgaTray.exe
2010-05-24 12:56:11 ----D---- C:\Program Files\Common Files\PS
2010-05-24 12:46:55 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\.oit
2010-05-24 12:44:58 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Global Graphics
2010-05-24 12:34:02 ----D---- C:\ProgramData\Global Graphics
2010-05-24 12:33:32 ----A---- C:\Windows\system32\doccreatorpm.dll

======List of files/folders modified in the last 1 months======

2010-06-18 16:15:44 ----D---- C:\Windows\Prefetch
2010-06-18 16:15:24 ----RD---- C:\Program Files
2010-06-18 16:04:05 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Skype
2010-06-18 12:59:46 ----D---- C:\Windows\temp
2010-06-18 12:50:04 ----SHD---- C:\System Volume Information
2010-06-18 12:49:11 ----SHD---- C:\Windows\Installer
2010-06-16 11:24:13 ----RD---- C:\Program Files\web stránky
2010-06-16 11:23:50 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Adobe
2010-06-16 11:23:50 ----D---- C:\ProgramData
2010-06-16 11:23:50 ----D---- C:\Program Files\Adobe
2010-06-16 11:20:40 ----D---- C:\Windows\System32
2010-06-16 10:58:49 ----RD---- C:\Users
2010-06-14 16:14:11 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\BSplayer
2010-06-14 10:37:39 ----A---- C:\Windows\NeroDigital.ini
2010-06-14 07:27:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-14 07:27:34 ----D---- C:\Windows\inf
2010-06-13 12:18:35 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Nokia
2010-06-13 11:17:59 ----D---- C:\Windows\rescache
2010-06-13 10:36:58 ----D---- C:\Windows\system32\drivers
2010-06-13 10:33:48 ----D---- C:\Windows\system32\cs-CZ
2010-06-13 10:32:33 ----AD---- C:\Windows
2010-06-13 10:26:13 ----D---- C:\Program Files\Common Files\Nokia
2010-06-13 10:25:17 ----D---- C:\Program Files\Nokia
2010-06-13 10:25:02 ----D---- C:\Windows\winsxs
2010-06-13 10:22:25 ----D---- C:\Windows\system32\catroot
2010-06-13 10:10:38 ----D---- C:\Program Files\Common Files
2010-06-13 10:05:33 ----DC---- C:\Windows\system32\DRVSTORE
2010-06-13 10:02:23 ----D---- C:\ProgramData\Installations
2010-06-12 18:07:06 ----D---- C:\Windows\system32\catroot2
2010-06-12 18:06:37 ----D---- C:\Windows\Minidump
2010-06-12 17:38:33 ----D---- C:\Windows\Microsoft.NET
2010-06-12 17:38:27 ----RSD---- C:\Windows\assembly
2010-06-12 17:13:53 ----D---- C:\Windows\system32\migration
2010-06-12 17:13:53 ----D---- C:\Program Files\Windows Mail
2010-06-12 17:13:53 ----D---- C:\Program Files\Internet Explorer
2010-06-12 17:13:49 ----D---- C:\Windows\system32\wbem
2010-06-12 17:13:45 ----D---- C:\Program Files\Microsoft Silverlight
2010-06-11 19:46:54 ----D---- C:\ProgramData\Microsoft Help
2010-06-05 15:11:12 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Azureus
2010-06-05 09:44:58 ----SD---- C:\ProgramData\Microsoft
2010-05-31 12:38:26 ----D---- C:\Program Files\Common Files\InstallShield
2010-05-31 12:38:25 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-30 12:51:13 ----D---- C:\Windows\SoftwareDistribution
2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 16:43:35 ----SD---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Microsoft
2010-05-27 15:04:56 ----D---- C:\Program Files\Common Files\microsoft shared
2010-05-27 15:01:57 ----A---- C:\Windows\win.ini
2010-05-27 15:01:56 ----D---- C:\Program Files\Common Files\System
2010-05-27 12:31:44 ----D---- C:\Windows\ShellNew
2010-05-27 12:25:57 ----D---- C:\Program Files\MSBuild
2010-05-27 12:24:46 ----D---- C:\Program Files\Microsoft Office
2010-05-27 12:24:45 ----RSD---- C:\Windows\Fonts
2010-05-26 11:23:59 ----D---- C:\Program Files\totalcmd
2010-05-26 11:13:19 ----D---- C:\Users\Max_cz.Uživatel-PC\AppData\Roaming\Mozilla
2010-05-25 18:24:46 ----D---- C:\temp
2010-05-24 15:46:18 ----D---- C:\Program Files\iTunes
2010-05-24 15:45:15 ----D---- C:\Program Files\Common Files\Apple
2010-05-24 15:41:31 ----D---- C:\Program Files\Bonjour
2010-05-24 13:39:47 ----D---- C:\Windows\system32\zh-TW
2010-05-24 13:39:47 ----D---- C:\Windows\system32\zh-HK
2010-05-24 13:39:47 ----D---- C:\Windows\system32\tr-TR
2010-05-24 13:39:47 ----D---- C:\Windows\system32\sv-SE
2010-05-24 13:39:46 ----D---- C:\Windows\system32\pt-BR
2010-05-24 13:39:46 ----D---- C:\Windows\system32\nl-NL
2010-05-24 13:39:46 ----D---- C:\Windows\system32\nb-NO
2010-05-24 13:39:46 ----D---- C:\Windows\system32\ko-KR
2010-05-24 13:39:46 ----D---- C:\Windows\system32\it-IT
2010-05-24 13:39:46 ----D---- C:\Windows\system32\he-IL
2010-05-24 13:39:46 ----D---- C:\Windows\system32\fr-FR
2010-05-24 13:39:46 ----D---- C:\Windows\system32\fi-FI
2010-05-24 13:39:46 ----D---- C:\Windows\system32\es-ES
2010-05-24 13:39:46 ----D---- C:\Windows\system32\en-US
2010-05-24 13:39:46 ----D---- C:\Windows\system32\el-GR
2010-05-24 13:39:46 ----D---- C:\Windows\system32\de-DE
2010-05-24 13:39:46 ----D---- C:\Windows\system32\da-DK
2010-05-24 13:39:46 ----D---- C:\Windows\system32\ar-SA
2010-05-24 13:06:13 ----D---- C:\Windows\system32\Tasks
2010-05-21 14:14:28 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2009-12-02 149040]
R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2007-12-11 27648]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-04-11 2589696]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-18 14208]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-12 2342688]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-04-04 46592]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-18 18432]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2009-12-02 42368]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2009-10-26 4247552]
R3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys [2008-06-15 10368]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2010-03-04 261152]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2009-05-05 1095808]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-18 9216]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-18 11264]
R3 WudfPf;User Mode Driver Frameworks Platform Driver; C:\Windows\system32\drivers\WudfPf.sys [2009-07-14 92672]
S2 Hardlock;Hardlock; C:\Windows\system32\drivers\hardlock.sys []
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS [2008-11-23 97792]
S3 a52chbe5;a52chbe5; C:\Windows\system32\drivers\a52chbe5.sys []
S3 Cam5603D;WebCam; C:\Windows\System32\Drivers\BisonCam.sys [2007-04-19 788400]
S3 catchme;catchme; \??\C:\Users\MAX_CZ~1.UIV\AppData\Local\Temp\catchme.sys []
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-18 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-18 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-18 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 FIXUSTOR;FIXUSTOR; C:\Windows\system32\DRIVERS\fixustor.sys [2009-04-23 15360]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-02 1781760]
S3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-02-25 2216448]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 tap0901_2gm;VPN Anonymizer Adapter; C:\Windows\system32\DRIVERS\tap0901_2gm.sys [2007-06-21 30720]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2008-02-18 30464]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-18 134016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2009-07-14 132224]
S4 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2007-04-03 47872]
S4 nvatabus;nvatabus; C:\Windows\system32\drivers\nvatabus.sys [2006-07-14 105088]
S4 viamraid;viamraid; C:\Windows\system32\drivers\viamraid.sys [2006-03-31 100992]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-04-16 144672]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-04-11 593920]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-04-08 345376]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-12-09 17904]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-09-23 935208]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 204800]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-04-28 545576]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-05-25 613888]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-06-14 654848]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 getPlusHelper;@C:\Program Files\NOS\bin\getPlus_Helper.dll,-101; C:\Windows\System32\svchost.exe [2008-01-18 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

předem děkuji

#2 Příspěvek od **vyosek** » 18 čer 2010 17:37

Zdravim a preji pekny vecer

Otevrete si poznamkovy blok

Start->spustit->notepad
Vlozte text nize

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WebcamMaxunstall"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{533a1479-b8f5-11dd-9d72-00030d73c928}]
[HKCU\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http:\\www.seznam.cz"

Soubor ulozte jako oprava.reg :idea:Pri ukladani dejte ulozit jako typ Vsechny soubory
Zavrit notepad a spustit oprava.reg
Okno jen problikne a opravi regsitry - soubor muzete smazat

Z logu je patrno, ze nepouzivate firewall - doporucuji doinstalovat

k cemu je dobry http://www.viry.cz/forum/viewtopic.php?f=41&t=20980
prehled osobnich firewallu http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Po startu se Vam spousti zbytecne programy - na jejich zastaveni muzete pouzit StartUpLite (viz muj podpis)

Program stahnete, ulozte treba na plochu a spustte
Vypise se Vam seznam zbytecnych programu spoustenych po startu
Kliknete na Disable cimz zamezite jejich spousteni
Nasledne kliknete na Continue a je hotovo
Nemusite se bat ze si odstrelite neco nutneho pro beh Windows - program vypisuje jen zbytecne programy
Po pouziti muzete programek smazat

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

Jinak je log OK, jsou s PC nejake problemy

Max_cz · #3 Příspěvek od **Max_cz** » 20 čer 2010 19:02

Vše provedeno s PC problémy nejsou, používám Microsoft Security Essentials.
Firewall mám integrovaný co je ve Vistách, chtěl jsem dát kdysi Kerio, ale to mi nešlo nainstalovat na Visty a od té doby jsem to nezkoušel, takže to zkusím, k čemu slouží samozřejmě vim, nejsem uplný zelenáč

Jaký je teď dobrý?

Ještě jednou moc děkuji za zkontrolování logu

#4 Příspěvek od **vyosek** » 20 čer 2010 19:37

Visty maji sice daleko lepsi FW jak XP ale preci jen je lepsi mit jiny nez od microsoftu...

Doporucuji ZoneAlarm

Nemate zac, rad jsem pomohl

Max_cz · #5 Příspěvek od **Max_cz** » 20 čer 2010 20:53

Ještě se optám, nainstaloval jsem Kerio a mám ho na 30 dní, po těch 30 dnech bude fungovat normálně dál?

Díky

#6 Příspěvek od **vyosek** » 21 čer 2010 05:34

S keriem nemam zkusenosti, ale kolega sudanec na nej udelal navod zde http://viry.cz/forum/viewtopic.php?f=41&t=43143 - dle meho mate ted na tech 30 dni i pokrocile funkce, pak budete mit jen zakladni fw, ale pro domaci pouziti zcela dostacujici...
V pripade dotazu ohledne keria prosim kontaktujte kolegu sudance, ma s nim zkusenosti

VIRY.CZ

Preventivní kontrola

Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola

Re: Preventivní kontrola