Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosim o preventivku

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

prosim o preventivku

#1 Příspěvek od karolinka »

Dobrý den, prosím o preventivku. Teď jsem dělala uplný scan awastem a pokaždé mi to našlo nějaké trojany.
Předem dík Karolína

Logfile of random's system information tool 1.08 (written by random/random)
Run by vincek at 2010-11-02 09:28:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (11%) free of 30 GB
Total RAM: 255 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:28:44, on 2.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\vincek\Dokumenty\Stažené soubory\RSIT(2).exe
C:\Program Files\trend micro\vincek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - c:\TRANSLAT\WEBIE.DLL
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3948793937
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AutorunsDisabled - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 6964 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B71B15CF-3093-459C-B764-AEB2486F2273} - &S-Rank - C:\Program Files\Seznam\Postak\SRank.dll [2005-05-17 266240]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - c:\TRANSLAT\WEBIE.DLL [2007-03-03 114688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2005-12-06 77824]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2005-11-29 40960]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2005-11-29 57344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe:*:Enabled:Kerio Personal Firewall 4 - GUI"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - "%1" /S "%3"

======List of files/folders created in the last 1 months======

2010-11-02 09:28:31 ----D---- C:\Program Files\trend micro
2010-11-02 09:28:26 ----D---- C:\rsit
2010-11-01 17:41:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-11-01 17:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-31 21:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-31 21:52:41 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-10-31 21:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-31 21:52:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-10-31 21:51:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-10-31 21:51:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-31 21:51:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-10-31 21:51:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-10-31 21:51:13 ----D---- C:\WINDOWS\system32\KB905474
2010-10-31 21:50:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-31 21:50:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-10-31 21:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-31 21:50:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-10-31 21:50:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-10-31 21:49:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-10-31 21:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-10-31 21:49:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-31 21:49:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-10-31 21:48:04 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-10-31 21:47:55 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-10-31 21:47:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-10-31 21:47:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-10-31 21:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-10-31 21:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-10-31 21:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-10-31 21:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-10-31 21:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-10-30 10:06:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-10-30 10:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-10-30 10:05:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-10-30 10:05:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-10-30 10:04:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-10-30 10:04:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-10-30 10:04:32 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-10-30 10:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-10-30 10:03:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-10-30 10:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-10-30 10:03:13 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-10-30 10:02:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-10-30 10:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-10-30 10:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-10-30 10:01:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-10-30 10:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-10-30 10:01:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-10-30 10:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-10-30 10:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-10-30 10:00:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-10-30 09:59:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-10-30 09:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-10-30 09:48:00 ----A---- C:\WINDOWS\OEWABLog.txt
2010-10-30 09:45:53 ----D---- C:\WINDOWS\Prefetch
2010-10-30 09:41:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-10-30 09:41:17 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-10-30 09:40:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-10-30 09:39:02 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-10-30 09:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-10-30 09:38:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-10-30 09:38:06 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-10-30 09:37:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-10-30 09:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-10-30 09:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-10-30 09:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-10-30 09:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-10-30 09:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-10-30 09:32:00 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-10-30 09:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-10-30 09:30:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-10-30 09:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-10-30 09:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-10-30 09:29:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-10-30 09:28:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-10-30 09:27:36 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-10-30 09:26:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-10-30 09:26:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-10-30 09:25:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-10-30 09:24:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-10-30 09:23:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-10-30 09:23:11 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-10-30 09:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-10-30 09:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-10-30 09:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-10-30 09:21:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-10-30 09:20:51 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-10-30 09:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-10-30 09:19:10 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-10-30 09:17:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-10-30 09:11:51 ----A---- C:\WINDOWS\setuplog.txt
2010-10-30 09:09:11 ----D---- C:\WINDOWS\l2schemas
2010-10-30 09:09:10 ----D---- C:\WINDOWS\system32\cs
2010-10-30 09:09:10 ----D---- C:\WINDOWS\system32\bits
2010-10-30 09:02:13 ----D---- C:\WINDOWS\network diagnostic
2010-10-30 08:55:12 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-10-30 08:36:53 ----D---- C:\WINDOWS\ie8updates
2010-10-30 08:35:07 ----D---- C:\WINDOWS\WBEM
2010-10-30 08:33:50 ----HDC---- C:\WINDOWS\ie8
2010-10-30 08:33:50 ----D---- C:\WINDOWS\system32\cs-CZ
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-10-30 07:34:21 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-10-30 07:34:20 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2010-10-30 07:34:17 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-10-30 07:34:13 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2010-10-30 07:34:07 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-10-30 07:34:06 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-10-30 07:34:06 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys

======List of files/folders modified in the last 1 months======

2010-11-02 09:28:31 ----RD---- C:\Program Files
2010-11-02 08:37:12 ----D---- C:\WINDOWS\Temp
2010-11-02 08:21:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-01 23:11:08 ----D---- C:\Documents and Settings\vincek\Data aplikací\Skype
2010-11-01 20:31:29 ----D---- C:\WINDOWS
2010-11-01 20:30:44 ----D---- C:\WINDOWS\system32
2010-11-01 17:42:02 ----HD---- C:\WINDOWS\inf
2010-11-01 17:41:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-01 17:41:42 ----A---- C:\WINDOWS\imsins.BAK
2010-11-01 07:04:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-01 07:02:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-31 21:52:47 ----HD---- C:\WINDOWS\$hf_mig$
2010-10-31 21:52:24 ----D---- C:\WINDOWS\system32\drivers
2010-10-31 21:51:47 ----D---- C:\WINDOWS\WinSxS
2010-10-31 21:51:13 ----SD---- C:\WINDOWS\Tasks
2010-10-31 21:48:39 ----D---- C:\Program Files\Internet Explorer
2010-10-31 21:46:56 ----D---- C:\Program Files\Movie Maker
2010-10-30 10:02:32 ----D---- C:\Program Files\Outlook Express
2010-10-30 09:45:18 ----D---- C:\WINDOWS\AppPatch
2010-10-30 09:45:17 ----D---- C:\WINDOWS\system32\wbem
2010-10-30 09:45:17 ----D---- C:\WINDOWS\system32\Setup
2010-10-30 09:45:16 ----RSD---- C:\WINDOWS\Fonts
2010-10-30 09:44:45 ----D---- C:\WINDOWS\security
2010-10-30 09:42:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-10-30 09:19:57 ----D---- C:\Program Files\Messenger
2010-10-30 09:09:42 ----D---- C:\WINDOWS\ehome
2010-10-30 09:09:40 ----D---- C:\WINDOWS\system32\inetsrv
2010-10-30 09:09:39 ----D---- C:\WINDOWS\ime
2010-10-30 09:09:39 ----D---- C:\WINDOWS\Help
2010-10-30 09:09:14 ----D---- C:\WINDOWS\system32\usmt
2010-10-30 09:09:11 ----SHD---- C:\WINDOWS\Installer
2010-10-30 09:09:10 ----D---- C:\WINDOWS\PeerNet
2010-10-30 09:05:23 ----D---- C:\WINDOWS\ServicePackFiles
2010-10-30 09:04:57 ----D---- C:\WINDOWS\system32\Restore
2010-10-30 09:04:57 ----D---- C:\WINDOWS\system32\npp
2010-10-30 09:04:55 ----D---- C:\WINDOWS\msagent
2010-10-30 09:04:54 ----D---- C:\WINDOWS\srchasst
2010-10-30 09:04:53 ----D---- C:\Program Files\NetMeeting
2010-10-30 09:04:52 ----D---- C:\WINDOWS\system32\Com
2010-10-30 09:04:50 ----D---- C:\Program Files\Windows Media Player
2010-10-30 09:04:49 ----D---- C:\Program Files\Windows NT
2010-10-30 09:04:46 ----D---- C:\Program Files\Common Files\System
2010-10-30 09:04:22 ----D---- C:\WINDOWS\system32\oobe
2010-10-30 09:04:20 ----D---- C:\WINDOWS\system
2010-10-30 08:59:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-10-30 08:35:15 ----D---- C:\WINDOWS\system32\config
2010-10-30 08:34:58 ----D---- C:\WINDOWS\Media
2010-10-30 07:10:39 ----D---- C:\WINDOWS\Debug
2010-10-24 15:08:35 ----D---- C:\Documents and Settings\vincek\Data aplikací\skypePM
2010-10-07 09:46:20 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Copystar;Copystar; C:\WINDOWS\system32\DRIVERS\copystar.sys [2002-06-01 82400]
R0 Imagedrv;Imagedrv; C:\WINDOWS\system32\DRIVERS\imagedrv.sys [2003-12-19 89184]
R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2003-03-19 18688]
R0 PxHelp20;PxHelp20; C:\WINDOWS\system32\DRIVERS\PxHelp20.sys [2005-09-14 20016]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2004-03-08 13567]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 302000]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 72624]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-06-17 30336]
R3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2002-11-27 80896]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-06-17 286976]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S0 IFP800;iriver Internet Audio Player IFP-800; C:\WINDOWS\system32\drivers\ifp800.sys []
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys [2006-10-23 93440]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 K320bus;Sony Ericsson K320 driver (WDM); C:\WINDOWS\system32\DRIVERS\K320bus.sys [2006-08-18 61504]
S3 K320mdfl;Sony Ericsson K320 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\K320mdfl.sys [2006-08-18 9328]
S3 K320mdm;Sony Ericsson K320 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\K320mdm.sys [2006-08-18 97056]
S3 K320mgmt;Sony Ericsson K320 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\K320mgmt.sys [2006-08-18 88560]
S3 K320obex;Sony Ericsson K320 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\K320obex.sys [2006-08-18 86368]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2006-03-13 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2006-03-13 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2006-03-13 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2006-03-13 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2006-03-13 79488]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2007-04-26 1234480]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TUWinStylerThemeSvc;TuneUp WinStyler Theme Service; C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe [2004-03-15 112128]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#2 Příspěvek od vyosek »

Zdravim a pekny den preji :)

:arrow: Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R
  • Vyskoci na Vas okenko, do ktereho zkopirujte text nize

  • Kód: Vybrat vše

    services.msc
  • Kliknete na OK
  • Najdete sluzby nize
  • Java Quick Starter
  • U kazde provedte toto
    • Klik na ni pravym mysidlem a zvolit Vlastnosti
    • Nyní klik na Zastavit
    • Typ spousteni nastavit na Zakazano
    • Potvrdte kliknutim na OK
:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize

  • Kód: Vybrat vše

    Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
"OM_Monitor"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"=-
  • Soubor ulozte jako oprava.reg
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem oprava.reg
  • Pripadny dotaz na zmenu registru potvrdte
  • Okno jen problikne a opravi regsitry - soubor muzete smazat
:arrow: Kde Vam Avast hlasil trojany :???: Dokazal je smazat :???:

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)
  • Provedte aktualizaci - treti zalozka
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#3 Příspěvek od karolinka »

Dobrý den tak jsem postupovala podle plánu a posílam log.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 5021

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2.11.2010 16:27:52
mbam-log-2010-11-02 (16-27-52).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 219606
Uplynulý čas: 54 minuta(y), 54 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 1
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 3

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\web translator (Trojan.Agent) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
D:\System Volume Information\_restore{4D8AAD3C-B835-43B0-A691-8C780B7D1D89}\RP1\A0000155.exe (Hacktool.KeySteal) -> No action taken.
C:\Documents and Settings\vincek\Local Settings\Temporary Internet Files\REG.EXE (Trojan.Agent) -> No action taken.
C:\Documents and Settings\vincek\Local Settings\Temporary Internet Files\UN32.EXE (Trojan.Agent) -> No action taken.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#4 Příspěvek od vyosek »

:arrow: Vse co nasel MBAM smazte

:arrow: Havet se usadila v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040

:arrow: Stahnete OTM (viz muj podpis)
  • Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

  • Kód: Vybrat vše

    :files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
  • Kliknete na cervene tlacitko MoveIt!
  • Sem pote dejte obsah okna Results (pod zelenou carou)
  • Pokud budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#5 Příspěvek od karolinka »

dobrý den, tak jsem to snad vše udelala. Ted mi samovolne vyskakuje porad ovladani monitoru a nejde to vypnout. Přikládam ten log.

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\002849_.tmp moved successfully.
C:\WINDOWS\system32\CONFIG.TMP moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Guest
->Temp folder emptied: 286 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: vincek
->Temp folder emptied: 604854 bytes
->Temporary Internet Files folder emptied: 51572024 bytes
->Java cache emptied: 2237308 bytes
->FireFox cache emptied: 43655950 bytes
->Flash cache emptied: 14267 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 568187 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 94,00 mb


Restore points cleared and new OTM Restore Point set!

OTM by OldTimer - Version 3.1.17.2 log created on 11022010_192043

Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...



A jeste log z RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by vincek at 2010-11-02 19:29:30
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 6 GB (20%) free of 30 GB
Total RAM: 255 MB (12% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:29:44, on 2.11.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\vincek\Dokumenty\Stažené soubory\RSIT(2).exe
C:\Program Files\trend micro\vincek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - c:\TRANSLAT\WEBIE.DLL
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: WebTran - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3948793937
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AutorunsDisabled - Invalid registry found
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 6409 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 5.0 CE\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 37808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B71B15CF-3093-459C-B764-AEB2486F2273} - &S-Rank - C:\Program Files\Seznam\Postak\SRank.dll [2005-05-17 266240]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - c:\TRANSLAT\WEBIE.DLL [2007-03-03 114688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AutorunsDisabled]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe:*:Enabled:Kerio Personal Firewall 4 - GUI"
"C:\Program Files\ICQLite\ICQLite.exe"="C:\Program Files\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - "%1" /S "%3"

======List of files/folders created in the last 1 months======

2010-11-02 19:20:43 ----D---- C:\_OTM
2010-11-02 14:10:31 ----D---- C:\Documents and Settings\vincek\Data aplikací\Malwarebytes
2010-11-02 14:10:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-11-02 14:10:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-11-02 14:10:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-11-02 14:10:05 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-11-02 09:28:31 ----D---- C:\Program Files\trend micro
2010-11-02 09:28:26 ----D---- C:\rsit
2010-11-01 17:41:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-11-01 17:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-31 21:52:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-31 21:52:41 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-10-31 21:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-31 21:52:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-10-31 21:51:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-10-31 21:51:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-31 21:51:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-10-31 21:51:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-10-31 21:51:13 ----D---- C:\WINDOWS\system32\KB905474
2010-10-31 21:50:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-31 21:50:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-10-31 21:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-31 21:50:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-10-31 21:50:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-10-31 21:49:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-10-31 21:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-10-31 21:49:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-31 21:49:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-10-31 21:48:04 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-10-31 21:47:55 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-10-31 21:47:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-10-31 21:47:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-10-31 21:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-10-31 21:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-10-31 21:46:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-10-31 21:46:15 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-10-31 21:46:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-10-30 10:06:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-10-30 10:06:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-10-30 10:05:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-10-30 10:05:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-10-30 10:04:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-10-30 10:04:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-10-30 10:04:32 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-10-30 10:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-10-30 10:03:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-10-30 10:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-10-30 10:03:13 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-10-30 10:02:44 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-10-30 10:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-10-30 10:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-10-30 10:01:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-10-30 10:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-10-30 10:01:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-10-30 10:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-10-30 10:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-10-30 10:00:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-10-30 09:59:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-10-30 09:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-10-30 09:48:00 ----A---- C:\WINDOWS\OEWABLog.txt
2010-10-30 09:45:53 ----D---- C:\WINDOWS\Prefetch
2010-10-30 09:41:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-10-30 09:41:17 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-10-30 09:40:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-10-30 09:39:02 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-10-30 09:38:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-10-30 09:38:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-10-30 09:38:06 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-10-30 09:37:40 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-10-30 09:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-10-30 09:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-10-30 09:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-10-30 09:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-10-30 09:32:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-10-30 09:32:00 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-10-30 09:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-10-30 09:30:30 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-10-30 09:29:47 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-10-30 09:29:26 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-10-30 09:29:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-10-30 09:28:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-10-30 09:27:36 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-10-30 09:26:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-10-30 09:26:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-10-30 09:25:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-10-30 09:24:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-10-30 09:23:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-10-30 09:23:11 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-10-30 09:22:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-10-30 09:22:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-10-30 09:22:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-10-30 09:21:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-10-30 09:20:51 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-10-30 09:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-10-30 09:19:10 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-10-30 09:17:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-10-30 09:11:51 ----A---- C:\WINDOWS\setuplog.txt
2010-10-30 09:09:11 ----D---- C:\WINDOWS\l2schemas
2010-10-30 09:09:10 ----D---- C:\WINDOWS\system32\cs
2010-10-30 09:09:10 ----D---- C:\WINDOWS\system32\bits
2010-10-30 09:02:13 ----D---- C:\WINDOWS\network diagnostic
2010-10-30 08:55:12 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-10-30 08:36:53 ----D---- C:\WINDOWS\ie8updates
2010-10-30 08:35:07 ----D---- C:\WINDOWS\WBEM
2010-10-30 08:33:50 ----HDC---- C:\WINDOWS\ie8
2010-10-30 08:33:50 ----D---- C:\WINDOWS\system32\cs-CZ
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2010-10-30 07:34:32 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2010-10-30 07:34:23 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2010-10-30 07:34:21 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2010-10-30 07:34:20 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2010-10-30 07:34:17 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2010-10-30 07:34:15 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2010-10-30 07:34:13 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2010-10-30 07:34:07 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2010-10-30 07:34:06 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2010-10-30 07:34:06 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2010-10-30 07:31:36 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2010-10-30 07:31:35 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys

======List of files/folders modified in the last 1 months======

2010-11-02 19:24:31 ----D---- C:\WINDOWS\Temp
2010-11-02 19:22:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-11-02 19:21:08 ----D---- C:\WINDOWS\system32\drivers\etc
2010-11-02 19:21:07 ----D---- C:\WINDOWS\system32
2010-11-02 19:20:46 ----D---- C:\WINDOWS
2010-11-02 19:12:59 ----SHD---- C:\System Volume Information
2010-11-02 19:12:59 ----D---- C:\WINDOWS\system32\Restore
2010-11-02 17:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB929338$
2010-11-02 17:12:22 ----D---- C:\WINDOWS\system32\drivers
2010-11-02 15:22:38 ----SHD---- C:\WINDOWS\Installer
2010-11-02 15:22:38 ----RD---- C:\Program Files
2010-11-02 13:39:41 ----A---- C:\WINDOWS\TextSpy.ini
2010-11-01 23:11:08 ----D---- C:\Documents and Settings\vincek\Data aplikací\Skype
2010-11-01 17:42:02 ----HD---- C:\WINDOWS\inf
2010-11-01 17:41:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-01 17:41:42 ----A---- C:\WINDOWS\imsins.BAK
2010-11-01 07:04:48 ----D---- C:\WINDOWS\system32\CatRoot2
2010-11-01 07:02:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-31 21:52:47 ----HD---- C:\WINDOWS\$hf_mig$
2010-10-31 21:51:47 ----D---- C:\WINDOWS\WinSxS
2010-10-31 21:51:13 ----SD---- C:\WINDOWS\Tasks
2010-10-31 21:48:39 ----D---- C:\Program Files\Internet Explorer
2010-10-31 21:46:56 ----D---- C:\Program Files\Movie Maker
2010-10-30 10:02:32 ----D---- C:\Program Files\Outlook Express
2010-10-30 09:45:18 ----D---- C:\WINDOWS\AppPatch
2010-10-30 09:45:17 ----D---- C:\WINDOWS\system32\wbem
2010-10-30 09:45:17 ----D---- C:\WINDOWS\system32\Setup
2010-10-30 09:45:16 ----RSD---- C:\WINDOWS\Fonts
2010-10-30 09:44:45 ----D---- C:\WINDOWS\security
2010-10-30 09:42:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-10-30 09:19:57 ----D---- C:\Program Files\Messenger
2010-10-30 09:09:42 ----D---- C:\WINDOWS\ehome
2010-10-30 09:09:40 ----D---- C:\WINDOWS\system32\inetsrv
2010-10-30 09:09:39 ----D---- C:\WINDOWS\ime
2010-10-30 09:09:39 ----D---- C:\WINDOWS\Help
2010-10-30 09:09:14 ----D---- C:\WINDOWS\system32\usmt
2010-10-30 09:09:10 ----D---- C:\WINDOWS\PeerNet
2010-10-30 09:05:23 ----D---- C:\WINDOWS\ServicePackFiles
2010-10-30 09:04:57 ----D---- C:\WINDOWS\system32\npp
2010-10-30 09:04:55 ----D---- C:\WINDOWS\msagent
2010-10-30 09:04:54 ----D---- C:\WINDOWS\srchasst
2010-10-30 09:04:53 ----D---- C:\Program Files\NetMeeting
2010-10-30 09:04:52 ----D---- C:\WINDOWS\system32\Com
2010-10-30 09:04:50 ----D---- C:\Program Files\Windows Media Player
2010-10-30 09:04:49 ----D---- C:\Program Files\Windows NT
2010-10-30 09:04:46 ----D---- C:\Program Files\Common Files\System
2010-10-30 09:04:22 ----D---- C:\WINDOWS\system32\oobe
2010-10-30 09:04:20 ----D---- C:\WINDOWS\system
2010-10-30 08:59:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-10-30 08:35:15 ----D---- C:\WINDOWS\system32\config
2010-10-30 08:34:58 ----D---- C:\WINDOWS\Media
2010-10-30 07:10:39 ----D---- C:\WINDOWS\Debug
2010-10-24 15:08:35 ----D---- C:\Documents and Settings\vincek\Data aplikací\skypePM
2010-10-07 09:46:20 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Copystar;Copystar; C:\WINDOWS\system32\DRIVERS\copystar.sys [2002-06-01 82400]
R0 Imagedrv;Imagedrv; C:\WINDOWS\system32\DRIVERS\imagedrv.sys [2003-12-19 89184]
R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2003-03-19 18688]
R0 PxHelp20;PxHelp20; C:\WINDOWS\system32\DRIVERS\PxHelp20.sys [2005-09-14 20016]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cdrbsdrv;cdrbsdrv; C:\WINDOWS\system32\drivers\cdrbsdrv.sys [2004-03-08 13567]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2007-04-26 302000]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2007-04-26 72624]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2001-10-25 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2001-10-25 55936]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
R3 nvax;Service for NVIDIA(R) nForce(TM) Audio Enumerator; C:\WINDOWS\system32\drivers\nvax.sys [2003-06-17 30336]
R3 NVENET;NVIDIA nForce MCP Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENET.sys [2002-11-27 80896]
R3 nvnforce;Service for NVIDIA(R) nForce(TM) Audio; C:\WINDOWS\system32\drivers\nvapu.sys [2003-06-17 286976]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S0 IFP800;iriver Internet Audio Player IFP-800; C:\WINDOWS\system32\drivers\ifp800.sys []
S3 adusbser;AnyDATA USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\adusbser.sys [2006-10-23 93440]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 K320bus;Sony Ericsson K320 driver (WDM); C:\WINDOWS\system32\DRIVERS\K320bus.sys [2006-08-18 61504]
S3 K320mdfl;Sony Ericsson K320 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\K320mdfl.sys [2006-08-18 9328]
S3 K320mdm;Sony Ericsson K320 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\K320mdm.sys [2006-08-18 97056]
S3 K320mgmt;Sony Ericsson K320 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\K320mgmt.sys [2006-08-18 88560]
S3 K320obex;Sony Ericsson K320 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\K320obex.sys [2006-08-18 86368]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2006-03-13 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2006-03-13 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2006-03-13 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2006-03-13 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2006-03-13 79488]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe [2007-04-26 1234480]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-10 38912]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TUWinStylerThemeSvc;TuneUp WinStyler Theme Service; C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe [2004-03-15 112128]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-17 153376]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#6 Příspěvek od vyosek »

:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: Muzete mi sem prosim dat screen toho co Vam vyskakuje, mate monitor OLYMPUS :???: (navod na screen http://www.viry.cz/forum/viewtopic.php?f=15&t=14114)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#7 Příspěvek od karolinka »

Dobrý den, tak jsem postupovala podle navodu všechny kroky. Vypadá to že i počítač se trochu zrychlil. Jen pořad vyskauje ladění monitoru. monitor mam AOC. Vyskakuje okno ladení monitoru, které se dá vypnout tlačítkem na monitoru, ale vyskočí to hnedle znova. Vypadá to jako kdyby se to tlačítko samovolně pořád mačkalo.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#8 Příspěvek od vyosek »

:arrow: Otevrete si poznamkovy blok
  • Start->spustit->notepad
  • Vlozte text nize

  • Kód: Vybrat vše

    Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe [2005-11-29 40960]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe [2005-11-29 57344]
  • Soubor ulozte jako oprava.reg
  • Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
  • Obrázek
  • Zavrit notepad a spustit dvojklikem oprava.reg
  • Pripadny dotaz na zmenu registru potvrdte
  • Okno jen problikne a opravi regsitry - soubor muzete smazat
:arrow: Restart PC a napiste ci to pomohlo

:arrow: Pripadne dejte screen (fotku) co na Vas skace jak jsem psal vyse
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#9 Příspěvek od vyosek »

Omlouvam se za mou chybu :oops: Obsah toho souboru oprava.reg ma byt jen co je nize - zkuste to tedy s nim (vytvorte soubor oprava.reg, spustte, restart PC a napiste chovani)

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"="C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"OM_Monitor"="C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe"
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#10 Příspěvek od karolinka »

Tak to nepomohlo myslela jsem jestli to neni hardwarová chyba, tak jsem zkusila odpojit a připojit monitor. Vypnout monitor a zkontrolovala jsem kabely, ale dělá to pořád.
Posílám link
http://img178.imageshack.us/img178/5120/obrazovka.jpg

Asi se mi ten monitor zbláznil. Je to strašnej oumrd když vám ve středu obrazovky todle pořád vyskakuje :boxed:
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#11 Příspěvek od vyosek »

No to verim ze je opravdu vice nez otravne :boxed: Zacalo to delat az jsme se zacali v PC "vrtat" nebo to delalo i predtim :???: Zkuste jej na chvili vypojit z el. site...Co jsem ale prochazel strejdu googla, tak nejste jedina, bohuzel reseni jsem jeste neobjevil, ale poptam se i kolegu co se na foru zabyvaji spise HW nez haveti...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#12 Příspěvek od karolinka »

Začalo to již ráno. Tak jsem myslela jestli to neni nějak zavirovaný. Zkusila scan awastem ten našel nějaké trojany tak jsem je dala do truhly, ale nepomohlo to. Další scan awastem ještě něco našel, tak jsem to smazala a obrátila se na profíky. Takže na vás. Jinak i po vypojení z el. to pokračuje. Pokud se něco dozvíte budu vděčná za pomoc.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#13 Příspěvek od vyosek »

:arrow: Kontaktoval jsem kolegu, tak uvidime

:arrow: Ale asi bych to videl spise na hw zavadu nez na havet

:arrow: Jinak profici nejsme, jsme jen tym nadsencu - forum mame jako konicek ve svem volnem case (a zadarmo :D )
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: prosim o preventivku

#14 Příspěvek od vyosek »

Takze mam zde prvni radu od kolegy
Čarls píše:Takže stahnout a nainstalovat ovladač (2218.INF pravým a nainstalovat) Podle typu Monitoru
http://www.aoc-europe.com/en/service/drivers.php
ftp://ftp.aoc-europe.com/Drivers/

pak nastavit (jen prolízt) a vylízt přes EXIT na obrázku
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
karolinka
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 02 lis 2010 09:31

Re: prosim o preventivku

#15 Příspěvek od karolinka »

Dobrý večer,
Tak se to zatím celkem uklidnilo. občas to vyskočí, ale ne tak často. Jen doufám že se to znova nezblázní.
Díky moc za radu. Pokud by to zacalo vyskakovat tak začnu zase otravovat :D
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“