Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu Logu seká se net

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
gena17
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 16 čer 2006 10:15
Bydliště: BŘECLAV

Prosím o kontrolu Logu seká se net

#1 Příspěvek od gena17 »

Dobrý den poprosil bych vás o kontrolu logu seká se mě net v noťasu někdy nelze stránky najít :oops: připojení mám WIFI.
Pokud se připojí na kabl je to to samé děkuji za pomoc
Logfile of random's system information tool 1.08 (written by random/random)
Run by Nešpor at 2010-08-31 06:12:19
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 111 GB (47%) free of 238 GB
Total RAM: 3062 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:12:23, on 31.8.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18943)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\taskeng.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\NetLimiter 2 Monitor\NLClient.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Public\Downloads\RSIT(2).exe
C:\Program Files\trend micro\Nešpor.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [Driver Fetch] "C:\Program Files\Driver Fetch\Driver Fetch.lnk" --start-trayed
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: PRTG Windows GUI.lnk = C:\Program Files\PRTG Network Monitor\PRTG Windows GUI.exe
O4 - Global Startup: FancyStart daemon.lnk = ?
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate1cabfb7c098d968) (gupdate1cabfb7c098d968) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Program Files\NetLimiter 2 Monitor\nlsvc.exe
O23 - Service: PRTG 7 Core Server Service (PRTG7CoreService) - Paessler AG - C:\Program Files\PRTG Network Monitor\PRTG Server.exe
O23 - Service: PRTG 7 Probe Service (PRTG7ProbeService) - Paessler AG - C:\Program Files\PRTG Network Monitor\PRTG Probe.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 10952 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Driver Fetch.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Nešpor.job
C:\Windows\tasks\User_Feed_Synchronization-{CD7537E4-AFDE-4F8C-B01B-81CE5E3D08A3}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-06-17 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-06-05 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-07-21 1619296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-04-19 2117704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2008-01-12 98304]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-11-20 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-11-20 173592]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-11-20 150552]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2008-12-23 6707744]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2009-08-05 37232]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2009-08-05 33136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-05 1029416]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"P2Go_Menu"=C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2008-06-14 210216]
"Driver Fetch"=C:\Program Files\Driver Fetch\Driver Fetch.lnk [2010-08-07 828]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-07-17 2065760]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-08-10 421888]
"NBAgent"=C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-08-20 1164584]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-06-05 202256]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{DC905847-D537-427F-BF91-47CC7ACCDE58}\_DF3A81D17C478A2A6C60A5.exe

C:\Users\Nešpor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PRTG Windows GUI.lnk - C:\Program Files\PRTG Network Monitor\PRTG Windows GUI.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-11-14 210432]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
C:\Program Files\ASUS\ASUS Data Security Manager\ASPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-08-31 06:05:38 ----D---- C:\rsit
2010-08-28 21:16:12 ----D---- C:\Program Files\Microsoft.NET
2010-08-28 18:18:07 ----D---- C:\Program Files\TuneUpMedia
2010-08-28 10:44:04 ----D---- C:\Program Files\phenomedia
2010-08-28 00:12:45 ----A---- C:\Windows\system32\drivers\pssdk42.sys
2010-08-28 00:12:22 ----D---- C:\ProgramData\Paessler
2010-08-28 00:11:17 ----D---- C:\Windows\system32\ABCpdf6
2010-08-28 00:11:16 ----A---- C:\Windows\system32\ABCpdf6.dll
2010-08-28 00:11:12 ----D---- C:\Program Files\PRTG Network Monitor
2010-08-27 23:58:11 ----D---- C:\Users\Nešpor\AppData\Roaming\Locktime
2010-08-27 23:56:21 ----D---- C:\ProgramData\Locktime
2010-08-27 23:56:20 ----D---- C:\Program Files\NetLimiter 2 Monitor
2010-08-24 16:44:35 ----D---- C:\Fraps
2010-08-24 16:39:52 ----D---- C:\Program Files\Game Cam V2
2010-08-16 10:06:36 ----A---- C:\Windows\system32\javaws.exe
2010-08-16 10:06:36 ----A---- C:\Windows\system32\javaw.exe
2010-08-16 10:06:36 ----A---- C:\Windows\system32\java.exe
2010-08-15 22:57:08 ----D---- C:\Program Files\Safari
2010-08-15 22:54:02 ----A---- C:\Windows\system32\GEARAspi.dll
2010-08-15 22:54:02 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2010-08-15 22:53:08 ----D---- C:\Program Files\iPod
2010-08-15 22:53:06 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-15 22:53:06 ----D---- C:\Program Files\iTunes
2010-08-15 22:51:02 ----D---- C:\Program Files\Bonjour
2010-08-15 22:45:57 ----D---- C:\Program Files\QuickTime
2010-08-15 22:45:56 ----D---- C:\ProgramData\Apple Computer
2010-08-11 16:43:31 ----A---- C:\Windows\system32\schannel.dll
2010-08-11 16:43:30 ----A---- C:\Windows\system32\mshtml.dll
2010-08-11 16:43:30 ----A---- C:\Windows\system32\iertutil.dll
2010-08-11 16:43:29 ----A---- C:\Windows\system32\ieframe.dll
2010-08-11 16:43:28 ----A---- C:\Windows\system32\wininet.dll
2010-08-11 16:43:28 ----A---- C:\Windows\system32\urlmon.dll
2010-08-11 16:43:28 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-11 16:43:28 ----A---- C:\Windows\system32\ie4uinit.exe
2010-08-11 16:43:27 ----A---- C:\Windows\system32\occache.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\mstime.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-11 16:43:27 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\ieUnatt.exe
2010-08-11 16:43:27 ----A---- C:\Windows\system32\ieui.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\iesysprep.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\iesetup.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\iernonce.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\iepeers.dll
2010-08-11 16:43:27 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-11 16:43:26 ----A---- C:\Windows\system32\iccvid.dll
2010-08-11 16:43:24 ----A---- C:\Windows\system32\win32k.sys
2010-08-11 16:43:21 ----A---- C:\Windows\system32\rtutils.dll
2010-08-11 16:43:15 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-11 16:43:15 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-11 16:43:14 ----A---- C:\Windows\system32\msxml3.dll
2010-08-11 16:43:13 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-11 16:43:13 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-11 16:43:11 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-09 19:06:19 ----D---- C:\Users\Nešpor\AppData\Roaming\Apple Computer
2010-08-07 17:39:21 ----A---- C:\Windows\ntbtlog.txt
2010-08-07 13:45:07 ----D---- C:\Program Files\Mashed
2010-08-03 05:39:03 ----A---- C:\Windows\system32\shell32.dll

======List of files/folders modified in the last 1 months======

2010-08-31 06:12:23 ----D---- C:\Program Files\trend micro
2010-08-31 06:12:09 ----D---- C:\Windows\Temp
2010-08-31 06:12:09 ----D---- C:\Windows\Prefetch
2010-08-31 00:00:18 ----SHD---- C:\System Volume Information
2010-08-30 18:29:13 ----A---- C:\Windows\system32\acovcnt.exe
2010-08-30 18:25:28 ----D---- C:\Windows\system32\drivers\Avg
2010-08-30 18:12:09 ----D---- C:\Windows\system32\Tasks
2010-08-30 17:46:17 ----HD---- C:\ProgramData
2010-08-30 15:01:54 ----SD---- C:\Users\Nešpor\AppData\Roaming\Microsoft
2010-08-30 12:59:23 ----AD---- C:\ProgramData\Temp
2010-08-29 13:21:19 ----D---- C:\Windows\System32
2010-08-29 13:21:19 ----D---- C:\Windows\inf
2010-08-29 13:21:19 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-29 13:20:11 ----D---- C:\Windows
2010-08-29 10:21:30 ----D---- C:\Windows\system32\Macromed
2010-08-29 01:10:39 ----D---- C:\ProgramData\DivX
2010-08-29 01:10:39 ----D---- C:\Program Files\DivX
2010-08-28 21:28:51 ----D---- C:\Users\Nešpor\AppData\Roaming\Nero
2010-08-28 21:27:13 ----SHD---- C:\Windows\Installer
2010-08-28 21:25:00 ----D---- C:\ProgramData\Nero
2010-08-28 21:24:59 ----D---- C:\Program Files\Nero
2010-08-28 21:20:09 ----D---- C:\Program Files\Common Files\Nero
2010-08-28 21:16:18 ----RSD---- C:\Windows\assembly
2010-08-28 21:16:12 ----RD---- C:\Program Files
2010-08-28 21:15:58 ----D---- C:\Windows\winsxs
2010-08-28 18:18:29 ----D---- C:\Users\Nešpor\AppData\Roaming\ICQ
2010-08-28 18:18:04 ----D---- C:\Users\Nešpor\AppData\Roaming\Mozilla
2010-08-28 18:17:04 ----D---- C:\Users\Nešpor\AppData\Roaming\TuneUpMedia
2010-08-28 18:15:52 ----D---- C:\Program Files\Driver Fetch
2010-08-28 18:12:48 ----D---- C:\Program Files\ICQ7.0
2010-08-28 10:44:04 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-28 00:12:45 ----D---- C:\Windows\system32\drivers
2010-08-25 15:01:44 ----D---- C:\Windows\system32\catroot2
2010-08-22 22:19:18 ----D---- C:\Users\Nešpor\AppData\Roaming\Skype
2010-08-22 16:09:46 ----D---- C:\Users\Nešpor\AppData\Roaming\skypePM
2010-08-22 08:40:31 ----D---- C:\Program Files\Mozilla Firefox
2010-08-18 01:18:38 ----D---- C:\Windows\Minidump
2010-08-16 10:06:35 ----D---- C:\Program Files\Java
2010-08-15 22:54:02 ----DC---- C:\Windows\system32\DRVSTORE
2010-08-15 22:54:02 ----D---- C:\Windows\system32\catroot
2010-08-15 22:53:07 ----D---- C:\Program Files\Common Files\Apple
2010-08-13 19:01:18 ----SD---- C:\ProgramData\Microsoft
2010-08-12 03:29:58 ----D---- C:\Windows\Microsoft.NET
2010-08-12 03:18:47 ----D---- C:\Windows\system32\migration
2010-08-12 03:18:47 ----D---- C:\Program Files\Movie Maker
2010-08-12 03:18:47 ----D---- C:\Program Files\Internet Explorer
2010-08-12 03:00:58 ----D---- C:\Windows\Debug
2010-08-12 03:00:24 ----D---- C:\Program Files\Windows Mail
2010-08-09 19:05:21 ----D---- C:\Users\Nešpor\AppData\Roaming\FreeBurner
2010-08-09 19:03:46 ----D---- C:\Program Files\Free Easy Burner
2010-08-07 13:40:46 ----D---- C:\Program Files\TopCD
2010-08-07 13:36:44 ----D---- C:\Program Files\Hry.cz
2010-08-05 13:58:56 ----D---- C:\Users\Nešpor\AppData\Roaming\Vso
2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2007-08-11 29752]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2010-07-17 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2010-06-12 29584]
R1 AvgTdiX;AVG Free Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2010-07-17 243024]
R1 nltdi;nltdi; \??\C:\Windows\system32\drivers\nltdi.sys [2010-03-25 82360]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2009-10-21 50704]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-06-25 47104]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-11-14 4560384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-12-23 2256976]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-13 7680]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-03-09 47360]
R3 PSSDK42;PSSDK42; \??\C:\Windows\system32\Drivers\pssdk42.sys [2010-08-30 38976]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-12 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2008-07-23 1772544]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-05 196400]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2010-03-30 23456]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 VDSDK;VDSDK; \??\C:\Users\NEPOR~1\AppData\Local\Temp\vdsdk.sys []
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-07-21 921952]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-07-17 308136]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-06-09 73728]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 nlsvc;NetLimiter; C:\Program Files\NetLimiter 2 Monitor\nlsvc.exe [2010-03-25 495616]
R2 PRTG7CoreService;PRTG 7 Core Server Service; C:\Program Files\PRTG Network Monitor\PRTG Server.exe [2010-03-02 3310376]
R2 PRTG7ProbeService;PRTG 7 Probe Service; C:\Program Files\PRTG Network Monitor\PRTG Probe.exe [2010-03-02 3396392]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S2 gupdate1cabfb7c098d968;Služba Google Update (gupdate1cabfb7c098d968); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-09 133104]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-04-19 430152]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 fsssvc;Služba Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 getPlusHelper;@C:\Program Files\NOS\bin\getPlus_Helper.dll,-101; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-21 540968]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe -d -f C:\Program Files\WinPcap\rpcapd.ini []
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S3 Symantec Core LC;Symantec Core LC; C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe [2009-08-05 1245064]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-03-09 435016]

-----------------EOF-----------------
Antitalent na PC
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu Logu seká se net

#2 Příspěvek od vyosek »

Zdravim a pekny vecer preji :)

:arrow: Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy - mate tam &Windows Live Toolbar a AVG Security Toolbar - dle meho nic potrebneho :o

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Vložte do PC vsechny USB klice (flash disky, ext.disky apod.)
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
gena17
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 16 čer 2006 10:15
Bydliště: BŘECLAV

Re: Prosím o kontrolu Logu seká se net

#3 Příspěvek od gena17 »

Tak zde je ten LOG
ComboFix 10-08-31.01 - Nešpor 01.09.2010 0:31.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3062.1834 [GMT 2:00]
Spuštěný z: c:\users\Nešpor\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\npf.sys
c:\windows\system32\Packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\WanPacket.dll
c:\windows\system32\wpcap.dll
D:\install.exe

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_NPF
-------\Service_NPF


((((((((((((((((((((((((( Soubory vytvořené od 2010-08-01 do 2010-09-01 )))))))))))))))))))))))))))))))
.

2010-08-31 22:55 . 2010-08-31 22:55 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-08-31 22:55 . 2010-08-31 22:55 -------- d-----w- c:\users\Mamka\AppData\Local\temp
2010-08-31 13:06 . 2010-08-31 13:06 -------- d-----w- c:\program files\Gromada
2010-08-31 04:46 . 2010-08-31 04:46 -------- d-----w- c:\program files\HWiNFO32
2010-08-31 04:05 . 2010-08-31 04:06 -------- d-----w- C:\rsit
2010-08-29 05:15 . 2010-08-29 05:15 -------- d-----w- c:\users\Laura\AppData\Roaming\Nero
2010-08-29 05:15 . 2010-08-29 05:15 -------- d-----w- c:\users\Laura\AppData\Roaming\Locktime
2010-08-28 19:16 . 2010-08-28 19:16 -------- d-----w- c:\program files\Microsoft.NET
2010-08-28 16:18 . 2010-08-28 16:18 -------- d-----w- c:\program files\TuneUpMedia
2010-08-28 13:59 . 2010-08-28 13:59 -------- d-----w- c:\users\Mamka\AppData\Roaming\Locktime
2010-08-28 08:44 . 2010-08-28 08:44 -------- d-----w- c:\program files\phenomedia
2010-08-27 22:12 . 2010-08-31 23:07 38976 ----a-w- c:\windows\system32\drivers\pssdk42.sys
2010-08-27 22:12 . 2010-08-27 22:12 -------- d-----w- c:\progra~2\Paessler
2010-08-27 22:11 . 2010-08-27 22:11 -------- d-----w- c:\windows\system32\ABCpdf6
2010-08-27 22:11 . 2007-11-07 15:38 10080200 ----a-w- c:\windows\system32\ABCpdf6.dll
2010-08-27 22:11 . 2010-08-27 22:12 -------- d-----w- c:\program files\PRTG Network Monitor
2010-08-27 21:56 . 2010-08-27 21:56 -------- d-----w- c:\progra~2\Locktime
2010-08-27 21:56 . 2010-08-27 21:56 -------- d-----w- c:\program files\NetLimiter 2 Monitor
2010-08-25 09:13 . 2010-08-25 09:13 -------- d-----w- c:\users\Mamka\AppData\Local\Apple Computer
2010-08-24 14:44 . 2010-08-24 14:53 -------- d-----w- C:\Fraps
2010-08-24 14:39 . 2010-08-24 14:40 -------- d-----w- c:\program files\Game Cam V2
2010-08-24 08:45 . 2010-08-24 08:45 -------- d-----w- c:\users\Laura\AppData\Roaming\Vivox
2010-08-24 06:41 . 2010-08-31 11:08 -------- d-----w- c:\users\Laura\AppData\Roaming\IMVU
2010-08-24 06:41 . 2010-08-24 06:41 77384 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\Uninstall.exe
2010-08-24 06:41 . 2010-08-24 06:41 -------- d-----w- c:\users\Laura\AppData\Roaming\IMVUClient
2010-08-15 20:57 . 2010-08-15 20:57 -------- d-----w- c:\program files\Safari
2010-08-15 20:54 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2010-08-15 20:54 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2010-08-15 20:53 . 2010-08-15 20:53 -------- d-----w- c:\program files\iPod
2010-08-15 20:53 . 2010-08-28 16:18 -------- d-----w- c:\program files\iTunes
2010-08-15 20:53 . 2010-08-15 20:53 -------- d-----w- c:\progra~2\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-08-15 20:51 . 2010-08-15 20:51 -------- d-----w- c:\program files\Bonjour
2010-08-15 20:45 . 2010-08-15 20:46 -------- d-----w- c:\program files\QuickTime
2010-08-15 20:45 . 2010-08-15 20:53 -------- d-----w- c:\progra~2\Apple Computer
2010-08-13 08:10 . 2010-08-13 08:10 7377592 ----a-w- c:\users\Mamka\AppData\Roaming\Zoner\NLMDB\product.0032\autoupdate.cz\ZPS12_Update_Build09.exe
2010-08-07 11:45 . 2010-08-07 11:45 -------- d-----w- c:\program files\Mashed
2010-08-05 18:19 . 2010-08-05 18:19 97200 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\IMVUupdater.exe
2010-08-05 18:19 . 2010-08-05 18:19 52992 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\IMVUClient.exe
2010-08-05 18:19 . 2010-08-05 18:19 21760 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\IMVUQualityAgent.exe
2010-08-03 07:46 . 2010-08-03 07:47 -------- d-----w- c:\users\Mamka\AppData\Local\NeroGadget
2010-08-02 21:17 . 2010-08-02 21:17 1347584 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\SceneWindow.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-01 03:25 . 2009-08-05 01:08 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-08-31 14:21 . 2010-03-25 12:24 -------- d-----w- c:\users\Mamka\AppData\Roaming\Skype
2010-08-31 14:07 . 2010-03-31 11:49 -------- d-----w- c:\users\Mamka\AppData\Roaming\skypePM
2010-08-31 13:27 . 2010-03-25 12:25 -------- d-----w- c:\users\Mamka\AppData\Roaming\Software Informer
2010-08-31 12:23 . 2010-03-13 10:30 -------- d-----w- c:\users\Laura\AppData\Roaming\Skype
2010-08-31 08:39 . 2010-03-25 17:43 -------- d-----w- c:\users\Laura\AppData\Roaming\Software Informer
2010-08-31 08:39 . 2010-03-13 14:17 -------- d-----w- c:\users\Laura\AppData\Roaming\skypePM
2010-08-31 04:12 . 2010-04-15 06:51 -------- d-----w- c:\program files\trend micro
2010-08-29 11:21 . 2008-04-17 10:34 598832 ----a-w- c:\windows\system32\perfh005.dat
2010-08-29 11:21 . 2008-04-17 10:34 114992 ----a-w- c:\windows\system32\perfc005.dat
2010-08-29 08:47 . 2010-03-30 11:41 -------- d-----w- c:\users\Mamka\AppData\Roaming\Nero
2010-08-28 23:10 . 2010-05-16 22:29 -------- d-----w- c:\program files\DivX
2010-08-28 23:10 . 2010-05-16 22:29 -------- d-----w- c:\progra~2\DivX
2010-08-28 19:25 . 2010-03-16 10:49 -------- d-----w- c:\progra~2\Nero
2010-08-28 19:24 . 2010-03-16 10:50 -------- d-----w- c:\program files\Nero
2010-08-28 19:20 . 2010-03-16 10:49 -------- d-----w- c:\program files\Common Files\Nero
2010-08-28 16:15 . 2010-04-11 16:06 -------- d-----w- c:\program files\Driver Fetch
2010-08-28 16:12 . 2010-03-09 16:58 -------- d-----w- c:\program files\ICQ7.0
2010-08-28 08:44 . 2009-08-05 00:15 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-27 07:46 . 2010-03-13 18:20 -------- d-----w- c:\users\Laura\AppData\Roaming\ICQ
2010-08-25 09:13 . 2010-04-15 07:17 -------- d-----w- c:\users\Mamka\AppData\Roaming\Apple Computer
2010-08-23 10:58 . 2010-07-23 08:09 99 ----a-w- c:\users\Mamka\jagex_runescape_preferences2.dat
2010-08-23 10:58 . 2010-07-23 08:09 51 ----a-w- c:\users\Mamka\jagex__preferences3.dat
2010-08-23 10:58 . 2010-07-23 08:08 46 ----a-w- c:\users\Mamka\jagex_runescape_preferences.dat
2010-08-16 08:06 . 2010-07-23 08:07 -------- d-----w- c:\program files\Java
2010-08-15 20:53 . 2010-03-10 20:53 -------- d-----w- c:\program files\Common Files\Apple
2010-08-12 01:00 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-08-09 17:03 . 2010-04-13 22:38 -------- d-----w- c:\program files\Free Easy Burner
2010-08-07 11:40 . 2010-03-30 06:32 -------- d-----w- c:\program files\TopCD
2010-08-07 11:36 . 2010-04-02 20:49 -------- d-----w- c:\program files\Hry.cz
2010-07-30 23:37 . 2010-07-30 23:37 121856 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\WriteMiniDump.exe
2010-07-30 23:35 . 2010-07-30 23:35 46592 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\ui\plugins\npvivoxproxy.dll
2010-07-30 23:35 . 2010-07-30 23:35 54784 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\ui\plugins\nphwndproxy.dll
2010-07-30 23:34 . 2010-07-30 23:34 81408 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\ParticleLib.dll
2010-07-30 23:34 . 2010-07-30 23:34 16896 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\MemoryHook.dll
2010-07-30 23:34 . 2010-07-30 23:34 297984 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\cal3d.dll
2010-07-30 23:33 . 2010-07-30 23:33 202752 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\boost_python.dll
2010-07-30 23:33 . 2010-07-30 23:33 32256 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\CallStack.dll
2010-07-30 23:33 . 2010-07-30 23:33 224768 ----a-w- c:\users\Laura\AppData\Roaming\IMVUClient\audiere.dll
2010-07-26 15:16 . 2010-07-26 15:16 -------- d-----w- c:\program files\BIG CITY RACER
2010-07-23 11:12 . 2010-07-23 11:12 -------- d-----w- c:\users\Laura\AppData\Roaming\Apple Computer
2010-07-23 10:22 . 2010-06-11 18:45 -------- d-----w- c:\progra~2\AVG Security Toolbar
2010-07-23 08:07 . 2010-07-23 08:07 -------- d-----w- c:\program files\Common Files\Java
2010-07-23 08:04 . 2010-07-23 08:04 33982 ----a-r- c:\users\Mamka\AppData\Roaming\Microsoft\Installer\{8EE72D39-DE32-4069-9E72-C1974546EFDD}\runescape.exe
2010-07-17 06:49 . 2010-06-11 18:45 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-07-17 06:49 . 2010-07-17 06:49 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-07-17 06:48 . 2010-06-11 18:45 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-07-17 03:00 . 2010-07-23 08:07 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-14 13:53 . 2010-07-14 13:53 -------- d-----w- c:\program files\Stabenfeldt
2010-07-13 17:30 . 2010-07-13 17:30 -------- d-----w- c:\program files\Makayama Interactive
2010-07-05 08:27 . 2010-07-05 08:27 -------- d-----w- c:\users\Laura\AppData\Roaming\OpenOffice.org
2010-06-26 06:05 . 2010-08-11 14:43 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-26 06:02 . 2010-08-11 14:43 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-06-26 06:02 . 2010-08-11 14:43 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-06-26 04:25 . 2010-08-11 14:43 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-06-21 13:37 . 2010-08-11 14:43 2037760 ----a-w- c:\windows\system32\win32k.sys
2010-06-18 17:31 . 2010-08-11 14:43 36864 ----a-w- c:\windows\system32\rtutils.dll
2010-06-18 15:04 . 2010-08-11 14:43 302080 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-18 15:04 . 2010-08-11 14:43 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-06-16 16:04 . 2010-08-11 14:43 905088 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-06-15 02:16 . 2010-06-15 02:16 86016 ----a-w- c:\windows\system32\frapsvid.dll
2010-06-12 06:39 . 2010-06-11 18:45 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-06-11 16:16 . 2010-08-11 14:43 274944 ----a-w- c:\windows\system32\schannel.dll
2010-06-11 16:15 . 2010-08-11 14:43 1248768 ----a-w- c:\windows\system32\msxml3.dll
2010-06-08 17:35 . 2010-08-11 14:43 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-06-08 17:35 . 2010-08-11 14:43 3600768 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-06-08 17:18 . 2010-04-26 17:43 1 ----a-w- c:\users\Mamka\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-04-19 08:25 2117704 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-04-19 2117704]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-01-12 98304]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2007-10-18 7737344]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-11-20 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-11-20 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-11-20 150552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-12-23 6707744]
"ASUS Camera ScreenSaver"="c:\windows\ASScrProlog.exe" [2009-08-05 37232]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2009-08-05 33136]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-05 1029416]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"Driver Fetch"="c:\program files\Driver Fetch\Driver Fetch.lnk" [2010-08-07 828]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-08-20 1164584]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-06-05 202256]

c:\users\Mamka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-2-16 384512]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{DC905847-D537-427F-BF91-47CC7ACCDE58}\_DF3A81D17C478A2A6C60A5.exe [2009-8-5 12862]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ICQ"="c:\program files\ICQ7.0\ICQ.exe" silent loginmode=4
"LightScribe Control Panel"=c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
"Skype"="c:\program files\Skype\Phone\Skype.exe" /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"ADSMTray"=c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe"
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"AVG9_TRAY"=c:\progra~1\AVG\AVG9\avgtray.exe
"NBAgent"="c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):c4,70,d6,9d,02,c3,ca,01

R2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
R2 gupdate1cabfb7c098d968;Služba Google Update (gupdate1cabfb7c098d968);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-09 133104]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-04-19 430152]
R3 DrvAgent32;DrvAgent32;c:\windows\system32\Drivers\DrvAgent32.sys [2010-03-30 23456]
R3 VDSDK;VDSDK;c:\users\NEPOR~1\AppData\Local\Temp\vdsdk.sys [x]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2010-07-17 216400]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2010-07-17 243024]
S1 HWiNFO32;HWiNFO32 Kernel Driver;c:\program files\HWiNFO32\HWiNFO32.SYS [2010-07-25 20088]
S1 nltdi;nltdi;c:\windows\system32\drivers\nltdi.sys [2010-03-25 82360]
S2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-07-21 921952]
S2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-07-17 308136]
S2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2010-03-25 490280]
S2 PRTG7CoreService;PRTG 7 Core Server Service;c:\program files\PRTG Network Monitor\PRTG Server.exe [2010-03-02 3310376]
S2 PRTG7ProbeService;PRTG 7 Probe Service;c:\program files\PRTG Network Monitor\PRTG Probe.exe [2010-03-02 3396392]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256]
S3 PSSDK42;PSSDK42;c:\windows\system32\Drivers\pssdk42.sys [2010-08-31 38976]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2010-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-09 18:38]

2010-09-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-09 18:38]

2010-08-31 c:\windows\Tasks\Norton Security Scan for Nešpor.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-17 07:48]

2010-09-01 c:\windows\Tasks\User_Feed_Synchronization-{CD7537E4-AFDE-4F8C-B01B-81CE5E3D08A3}.job
- c:\windows\system32\msfeedssync.exe [2010-08-11 04:24]
.
.
------- Doplňkový sken -------
.
uInternet Settings,ProxyOverride = *.local
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk
LSP: c:\windows\system32\wpclsp.dll
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2583727&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrecordext.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\{ca9aeaa0-4588-4bbe-99af-8fb0a0a9e5e1}\components\FFExternalAlert.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\{ca9aeaa0-4588-4bbe-99af-8fb0a0a9e5e1}\components\RadioWMPCore.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\{eebc5c3f-ec4b-4ad4-b5d1-fa51b3c42c58}\components\sehLibGlue_stub.dll
FF - component: c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

URLSearchHooks-{00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-01 05:26
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


C:\ADSM_PData_0150

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-3524426304-1737470713-3755686768-1000\Software\SecuROM\License information*]
"datasecu"=hex:e3,38,cb,11,50,36,d0,ee,7f,57,9a,41,d2,9a,95,de,22,90,09,86,a1,
c0,88,79,e9,8b,51,4f,96,7c,29,62,a0,22,5d,b3,0a,44,ab,a8,23,41,d4,5d,ef,64,\
"rkeysecu"=hex:8b,67,ad,b9,a7,99,c3,b4,3e,7d,60,44,9d,77,65,94
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3880)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\windows\system32\WLANExt.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\NetLimiter 2 Monitor\nlsvc.exe
c:\program files\Google\Update\1.2.183.29\GoogleCrashHandler.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\ASUS\NB Probe\SPM\spmgr.exe
c:\windows\system32\WUDFHost.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
c:\program files\P4G\BatteryLife.exe
c:\program files\ASUS\SmartLogon\sensorsrv.exe
c:\windows\system32\conime.exe
c:\program files\NetLimiter 2 Monitor\NLClient.exe
c:\program files\ASUS\ATK Hotkey\MsgTranAgt.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\Wireless Console 2\wcourier.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Internet Explorer\IELowutil.exe
.
**************************************************************************
.
Celkový čas: 2010-09-01 05:30:41 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-09-01 03:30

Před spuštěním: Volných bajtů: 119 582 756 864
Po spuštění: Volných bajtů: 121 112 600 576

- - End Of File - - C86AB4BB1DDF7BC0EF44340EDCBAD349
Antitalent na PC
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu Logu seká se net

#4 Příspěvek od vyosek »

:arrow: Pri skenu CF Vam bezel Windows Defender.

:arrow: Pred nasledujicim krokem vypnete rezidentni stity vsech bez.prvku (antivir, antispyware(win defender)

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Registry::
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
"DivXUpdate"=-
"TkBellExe"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ICQ"=-
"Skype"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"=-
"QuickTime Task"=-
"CLMLServer"=-
"TkBellExe"=-
"SunJavaUpdateSched"=-
"iTunesHelper"=-
"NBAgent"=-

File::
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
c:\windows\Tasks\Norton Security Scan for Nešpor.job

Driver::
VDSDK

Folder::
c:\users\NEPOR~1\AppData\Local\Temp

Firefox::
FF - ProfilePath - c:\users\Nešpor\AppData\Roaming\Mozilla\Firefox\Profiles\17zipwhv.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
FF - prefs.js: keyword.URL - hxxp://www.webhledani.cz/results.aspx?i=39&tp=ab&q=
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“