preventivka....

Zpráva

klim11 · #1 Příspěvek od **klim11** » 25 čer 2011 19:53

Zdravím.....jen prevence..

)děkuji

Logfile of random's system information tool 1.08 (written by random/random)
Run by Libas at 2011-06-25 20:49:51
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 207 GB (89%) free of 234 GB
Total RAM: 1023 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:50:03, on 25.6.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Libas\Desktop\RSIT.exe
C:\Program Files\trend micro\Libas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: (no name) - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - (no file)
O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe
O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe
O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

--
End of file - 3679 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GlaryInitialize.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-05-10 819840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{312105C4-2E13-4E10-AF72-F9D79BA077E6}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenuEx"=C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-05-10 3459712]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-05-13 2552648]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoSecCpl"=0
"DisableChangePassword"=0
"DisableLockWorkstation"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=255
"NoStartMenuPinnedList"=0
"NoStartMenuMFUprogramsList"=0
"NoUserNameInStartMenu"=0
"NoStartMenuSubFolders"=0
"NoCommonGroups"=0
"NoPrinterTabs"=0
"NoDeletePrinter"=0
"NoAddPrinter"=0
"NoPrinters"=0
"NoFavoritesMenu"=0
"NoRecentDocsNetHood"=0
"NoChangeAnimation"=0
"NoChangeKeyboardNavigationIndicators"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe"="C:\Acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu"
"C:\Acer\Empowering Technology\eDataSecurity\encryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption"
"C:\Acer\Empowering Technology\eDataSecurity\decryption.exe"="C:\Acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2011-06-25 20:41:25 ----D---- C:\Windows\LastGood
2011-06-25 20:27:33 ----A---- C:\SensApi.dll
2011-06-25 20:27:33 ----A---- C:\msimg32.dll
2011-06-25 20:23:16 ----D---- C:\Windows\system32\RTCOM
2011-06-25 20:22:03 ----A---- C:\Windows\system32\WavesLib.dll
2011-06-25 20:22:03 ----A---- C:\Windows\system32\WavesGUILib.dll
2011-06-25 20:22:02 ----A---- C:\Windows\system32\SRSWOW.dll
2011-06-25 20:22:02 ----A---- C:\Windows\system32\SRSTSXT.dll
2011-06-25 20:22:02 ----A---- C:\Windows\system32\SRSTSHD.dll
2011-06-25 20:22:02 ----A---- C:\Windows\system32\SRSHP360.dll
2011-06-25 20:22:02 ----A---- C:\Windows\system32\SFNHK.dll
2011-06-25 20:22:01 ----A---- C:\Windows\system32\SFCOM.dll
2011-06-25 20:22:01 ----A---- C:\Windows\system32\SFAPO.dll
2011-06-25 20:22:01 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2011-06-25 20:22:00 ----A---- C:\Windows\system32\RtkPgExt.dll
2011-06-25 20:22:00 ----A---- C:\Windows\system32\RtkCoInst.dll
2011-06-25 20:22:00 ----A---- C:\Windows\system32\RtkApoApi.dll
2011-06-25 20:22:00 ----A---- C:\Windows\system32\RtkAPO.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RTEEP32A.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RTEEL32A.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RTEEG32A.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RTEED32A.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RP3DHT32.dll
2011-06-25 20:21:59 ----A---- C:\Windows\system32\RP3DAA32.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\R4EEP32A.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\R4EEL32A.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\R4EEG32A.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\R4EED32A.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\R4EEA32A.dll
2011-06-25 20:21:58 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2011-06-25 20:21:57 ----A---- C:\Windows\system32\KAAPORT.dll
2011-06-25 20:21:52 ----A---- C:\Windows\system32\FMAPO.dll
2011-06-25 20:21:52 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2011-06-25 20:21:52 ----A---- C:\Windows\system32\DTSSymmetryDLL.dll
2011-06-25 20:21:52 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSGFXAPONS.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2011-06-25 20:21:51 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2011-06-25 20:21:50 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2011-06-25 20:21:49 ----A---- C:\Windows\system32\AERTARen.dll
2011-06-25 20:21:49 ----A---- C:\Windows\system32\AERTACap.dll
2011-06-25 20:17:52 ----HD---- C:\Program Files\Temp
2011-06-25 19:46:23 ----HD---- C:\VritualRoot
2011-06-25 19:17:09 ----D---- C:\Program Files\Common Files\ATI Technologies
2011-06-25 19:16:47 ----D---- C:\Program Files\USB TV
2011-06-25 19:16:45 ----D---- C:\Users\Libas\AppData\Roaming\InstallShield
2011-06-25 19:11:46 ----D---- C:\ProgramData\ATI
2011-06-25 19:04:46 ----D---- C:\ATI
2011-06-16 15:38:29 ----A---- C:\Windows\system32\mshtmled.dll
2011-06-16 15:38:29 ----A---- C:\Windows\system32\iertutil.dll
2011-06-16 15:38:28 ----A---- C:\Windows\system32\jscript9.dll
2011-06-16 15:38:28 ----A---- C:\Windows\system32\jscript.dll
2011-06-16 15:38:28 ----A---- C:\Windows\system32\ieui.dll
2011-06-16 15:38:26 ----A---- C:\Windows\system32\mshtml.dll
2011-06-16 15:38:26 ----A---- C:\Windows\system32\ieframe.dll
2011-06-16 15:38:25 ----A---- C:\Windows\system32\urlmon.dll
2011-06-16 15:36:42 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-06-16 15:36:42 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-06-16 15:36:41 ----A---- C:\Windows\system32\inetcomm.dll
2011-06-16 15:36:28 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-06-16 15:36:27 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2011-06-16 15:36:27 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2011-06-16 15:36:26 ----A---- C:\Windows\system32\drivers\afd.sys
2011-06-16 15:36:25 ----A---- C:\Windows\system32\oleaut32.dll
2011-06-16 15:36:23 ----A---- C:\Windows\system32\drivers\dfsc.sys
2011-06-09 13:18:20 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2011-06-09 10:45:16 ----ASH---- C:\pagefile.sys
2011-05-30 09:53:14 ----D---- C:\Program Files\Google
2011-05-26 11:29:24 ----A---- C:\Windows\system32\drivers\yk60x86.sys

======List of files/folders modified in the last 1 months======

2011-06-25 20:49:55 ----D---- C:\Program Files\trend micro
2011-06-25 20:49:51 ----D---- C:\Windows\temp
2011-06-25 20:47:43 ----D---- C:\Windows
2011-06-25 20:45:58 ----D---- C:\Windows\System32
2011-06-25 20:45:56 ----D---- C:\Windows\system32\drivers
2011-06-25 20:45:09 ----D---- C:\Windows\inf
2011-06-25 20:45:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-06-25 20:43:42 ----D---- C:\Windows\system32\catroot
2011-06-25 20:22:57 ----D---- C:\Windows\system32\catroot2
2011-06-25 20:22:11 ----A---- C:\Windows\DIFxAPI.dll
2011-06-25 20:21:48 ----HD---- C:\Program Files\InstallShield Installation Information
2011-06-25 20:17:52 ----RD---- C:\Program Files
2011-06-25 20:13:30 ----SHD---- C:\Windows\Installer
2011-06-25 20:12:51 ----D---- C:\Windows\Prefetch
2011-06-25 19:23:03 ----D---- C:\Windows\SoftwareDistribution
2011-06-25 19:22:34 ----D---- C:\Windows\pss
2011-06-25 19:17:11 ----SD---- C:\Users\Libas\AppData\Roaming\Microsoft
2011-06-25 19:17:09 ----D---- C:\Program Files\Common Files
2011-06-25 19:11:46 ----D---- C:\ProgramData
2011-06-25 19:11:34 ----RSD---- C:\Windows\assembly
2011-06-25 19:11:11 ----D---- C:\Program Files\ATI Technologies
2011-06-25 19:07:32 ----D---- C:\Windows\winsxs
2011-06-24 12:41:11 ----D---- C:\Windows\Microsoft.NET
2011-06-24 09:58:01 ----D---- C:\Program Files\Mozilla Firefox
2011-06-20 11:25:33 ----D---- C:\ProgramData\CanonIJPLM
2011-06-16 15:51:07 ----D---- C:\Windows\Debug
2011-06-16 15:46:30 ----D---- C:\Program Files\Microsoft Silverlight
2011-06-16 15:44:59 ----D---- C:\Program Files\Internet Explorer
2011-06-16 15:44:18 ----D---- C:\ProgramData\Microsoft Help
2011-06-16 15:41:46 ----A---- C:\Windows\system32\mrt.exe
2011-06-16 15:39:46 ----SD---- C:\ProgramData\Microsoft
2011-06-16 15:37:39 ----D---- C:\Program Files\Windows Mail
2011-06-10 12:38:35 ----D---- C:\Windows\system32\WDI
2011-06-10 12:20:31 ----D---- C:\Users\Libas\AppData\Roaming\Vso
2011-06-09 13:05:49 ----A---- C:\Windows\CRC.INI
2011-06-09 10:03:42 ----SHD---- C:\RECYCLER
2011-06-09 09:53:52 ----SHD---- C:\System Volume Information
2011-05-30 09:58:01 ----D---- C:\Windows\Logs
2011-05-30 09:55:34 ----D---- C:\Program Files\CCleaner
2011-05-30 09:53:37 ----D---- C:\Windows\Tasks
2011-05-30 09:53:37 ----D---- C:\Windows\system32\Tasks
2011-05-27 17:58:00 ----A---- C:\Windows\RtlExUpd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2010-03-10 14392]
R0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver; C:\Windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048]
R0 PSDFilter;PSDFilter; C:\Windows\system32\DRIVERS\psdfilter.sys [2008-05-09 18992]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-05-10 25432]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-05-10 441176]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-05-10 307928]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-05-10 49240]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-05-02 238960]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-05-02 36568]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-05-13 82400]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-05-10 19544]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-05-10 53592]
R2 eLock2FSCTLDriver;eLock2FSCTLDriver; C:\Windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-10-07 15392]
R2 PSDNServ;PSDNServ; C:\Windows\system32\drivers\PSDNServ.sys [2008-05-09 16944]
R2 psdvdisk;PSDVdisk; C:\Windows\system32\drivers\psdvdisk.sys [2008-05-09 60464]
R2 tvicport;tvicport; \??\C:\Windows\system32\drivers\tvicport.sys [2008-10-07 14544]
R2 zntport;zntport; \??\C:\Windows\system32\drivers\zntport.sys [2008-10-07 6080]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-03-14 2427392]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-06-14 3520168]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-06-22 47360]
R3 Ph3xIB32;Philips 713x VU PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2011-05-26 312096]
S1 MpKsl055b5493;MpKsl055b5493; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{E8F30275-5CD8-4AA4-97E7-97467FC33068}\MpKsl055b5493.sys []
S1 MpKsl18f03bab;MpKsl18f03bab; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9CF395F7-5850-4E34-8548-A908E399BE7D}\MpKsl18f03bab.sys []
S1 MpKsl30fafffe;MpKsl30fafffe; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4A01F54D-3544-45FB-835F-F7E106C54631}\MpKsl30fafffe.sys []
S1 MpKsl33b694c5;MpKsl33b694c5; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DC211060-5137-4660-8490-E02D5EDFF968}\MpKsl33b694c5.sys []
S1 MpKslab7dd8ea;MpKslab7dd8ea; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B81295AA-CE13-46BA-99DC-6F8480A1C67D}\MpKslab7dd8ea.sys []
S1 MpKsleae1866a;MpKsleae1866a; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4EED1F94-BCA3-429F-B617-0E34C1EF56EF}\MpKsleae1866a.sys []
S1 MpKslfe3959bf;MpKslfe3959bf; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{09D14A32-A911-458F-8763-80E2ED422F5C}\MpKslfe3959bf.sys []
S1 SuperMounter;SuperMounter; C:\Windows\system32\drivers\SuperMounter.sys []
S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys []
S3 catchme;catchme; \??\C:\Users\Libas\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2007-05-10 6144]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WSVD;WSVD; \??\C:\Windows\system32\drivers\WSVD.sys [2006-09-19 80744]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-03-14 569344]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-05-10 42184]
R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe [2011-04-29 154424]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-05-13 1779792]
R2 eDataSecurity Service;eDataSecurity Service; C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-05-09 500784]
R2 eLockService;eLock Service; C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe [2007-04-09 24576]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 IJPLMSVC;Canon Inkjet Printer/Scanner/Fax Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2010-04-05 116104]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-30 136176]
S3 AcerMemUsageCheckService;ePerformance Service; C:\Acer\Empowering Technology\ePerformance\MemCheck.exe [2007-10-17 28672]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-02-28 183560]
S3 eRecoveryService;eRecovery Service; C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe [2007-09-10 57344]
S3 eSettingsService;eSettings Service; C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe [2008-11-03 24576]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service; C:\Program Files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2007-04-04 266343]
S4 Acer TV Share Service;Acer TV Share Service; C:\Program Files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe [2007-04-04 269424]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-04-09 143360]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S4 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]

-----------------EOF-----------------

#2 Příspěvek od **Márty84** » 26 čer 2011 09:16

Dobry den

Na logu se pracuje

#3 Příspěvek od **Márty84** » 26 čer 2011 10:08

Dopracovano

Nic nebezpecneho tam neni, jen par zbytecnosti

1) Otevrte Poznamkovy blok (pokud ho nemate na plose, tak kliknete na Start, pak programy a prislusenstvi)
2) Zkopirujte do nej ten zeleny text
3) Vlevo nahore kliknete na napis Soubor
4) Kliknete na napis Ulozit jako...
5) Napiste spravne nazev oprava.reg a pak vyberte u moznosti Ulozit jako typ : Vsechny soubory
6) Ulozte, nejlepe na plochu
7) No a na to, co jste prave ulozil, pak 2x kliknete, ono se to spusti a pak to jen potvrdte

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{312105C4-2E13-4E10-AF72-F9D79BA077E6}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-

U toho Comodo Internet Security mate zapnuty jen firewall doufam

Pokud ne, mohl by se tlouct s Avastem

klim11 · #4 Příspěvek od **klim11** » 26 čer 2011 10:38

Zdravím.... vše Ok...:

u Comoda mám jen(naistalováný) Firewall...jinak Avast...)))

#5 Příspěvek od **Márty84** » 26 čer 2011 10:47

V tom pripade je to v poradku

Hezky zbytek vikendu

VIRY.CZ

preventivka....

preventivka....

Re: preventivka....

Re: preventivka....

Re: preventivka....

Re: preventivka....