prosim o kontrolu logu.dekuji

Zpráva

1danab · #31 Příspěvek od **1danab** » 10 čer 2010 22:43

omlouvám se, napsala jsem to zřejmě ne dost srozumitelně

uděláme to krok po kroku...takže spusťte HJT odtud C:\Program Files\trend micro\amorek.exe, nechte proběhnout sken, až doběhne fixněte (klikněte do čtverečku, který je před příslušným řádkem) toto

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (file missing)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... p=ZRman000
poté klikněte na Fix checked, až toto uděláte, napíšu co dál

Marián · #32 Příspěvek od **Marián** » 10 čer 2010 22:49

1danab · #33 Příspěvek od **1danab** » 10 čer 2010 22:51

super

tak dál...znovu spusťte OTL a do spodního okna zkopírujte tento skript

Kód: Vybrat vše

:Files
C:\Windows\tasks\IZOHHXNBHU.job

:Reg
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin]

poté klikněte na tlačítko Opravit, kliknutím na Ok vygenerujete protokol, jehož obsah mi sem vložte

znovu restartujte pc a opět mi sem vložte nový log z RSITu

Marián · #34 Příspěvek od **Marián** » 10 čer 2010 22:55

obdivuji vase zalibeni a ochotu pomahat takovym jako ja,co vyrustal na Atari a dnes je rad,ze posle mejla,obcas neco zkopiruje a tot vse.asi se mi z toho rozstreli hlava

1danab · #35 Příspěvek od **1danab** » 10 čer 2010 22:59

to zatím zvládáte v poho

udělejte tedy co jsem vám psala a já pak mrknu jestli je to už čisté

Marián · #36 Příspěvek od **Marián** » 10 čer 2010 23:02

Logfile of random's system information tool 1.07 (written by random/random)
Run by amorek at 2010-06-11 00:00:22
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 28 GB (27%) free of 103 GB
Total RAM: 2037 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:00:28, on 11.6.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hp\QuickPlay\QPService.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\FinePixViewer\QuickDCF2.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Users\amorek\Desktop\RSIT.exe
C:\Program Files\trend micro\amorek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: (no name) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - (no file)
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Exif Launcher 2.lnk = ?
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (file missing)
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.ostrava.unas.cz/kamery/AxisCamControl.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: Služba Google Update (gupdate1c99a77bef74b38) (gupdate1c99a77bef74b38) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9378 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForamorek.job
C:\Windows\tasks\User_Feed_Synchronization-{8D77B03D-D197-4E7C-831E-2C47985CE75B}.job
C:\Windows\tasks\User_Feed_Synchronization-{BFB672AF-1487-49B9-B120-F202ABACAEDD}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-09-23 1088296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-04-04 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-05-28 278128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-13 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046}
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-05-28 278128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-08-28 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-08-28 154136]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-08-28 137752]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-06-30 159744]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-10-04 178712]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-12-20 468264]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-12-06 202032]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"HP Health Check Scheduler"=[ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe []
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2007-05-09 54840]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-10-04 480560]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-04-04 202256]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-08-23 455968]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-12-10 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher]
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2006-11-28 2658304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-12-10 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]
C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-09-14 222504]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Exif Launcher 2.lnk - C:\Program Files\FinePixViewer\QuickDCF2.exe

C:\Users\amorek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OneNote 2007 Screen Clipper and Launcher.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-08-20 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=157

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{09096182-37d6-11de-b551-001eec85487e}]
shell\AutoRun\command - G:\LaunchU3.exe -a

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-06-10 23:33:45 ----D---- C:\Program Files\RegCleaner
2010-06-10 22:08:46 ----D---- C:\_OTL
2010-06-10 20:27:55 ----SD---- C:\trotl.exe1884t
2010-06-10 20:27:10 ----D---- C:\trotl.exe
2010-06-10 20:26:27 ----A---- C:\Windows\SWXCACLS.exe
2010-06-10 20:26:19 ----D---- C:\32788R22FWJFW
2010-06-09 05:29:58 ----A---- C:\Windows\ntbtlog.txt
2010-06-08 13:35:57 ----A---- C:\Windows\NIRCMD.exe
2010-06-08 13:35:57 ----A---- C:\Windows\MBR.exe
2010-06-08 13:35:56 ----A---- C:\Windows\zip.exe
2010-06-08 13:35:56 ----A---- C:\Windows\SWSC.exe
2010-06-08 13:35:56 ----A---- C:\Windows\SWREG.exe
2010-06-08 13:35:56 ----A---- C:\Windows\sed.exe
2010-06-08 13:35:56 ----A---- C:\Windows\PEV.exe
2010-06-08 13:35:56 ----A---- C:\Windows\grep.exe
2010-06-08 13:35:38 ----D---- C:\Windows\ERDNT
2010-06-08 13:32:39 ----D---- C:\Qoobox
2010-06-08 13:01:50 ----D---- C:\Program Files\Microsoft Keyboard Layout Creator 1.4
2010-06-08 11:02:53 ----D---- C:\Program Files\trend micro
2010-06-08 11:02:52 ----D---- C:\rsit
2010-06-07 13:44:08 ----D---- C:\Windows\Minidump
2010-06-04 19:54:31 ----D---- C:\ProgramData\Alwil Software
2010-06-04 18:05:43 ----D---- C:\Windows\system32\0405
2010-06-04 18:05:38 ----D---- C:\Windows\cs-CZ
2010-06-04 18:05:04 ----D---- C:\Windows\system32\cs
2010-06-04 18:02:57 ----D---- C:\Windows\system32\Vistalizator
2010-05-26 12:58:31 ----A---- C:\Windows\system32\tzres.dll
2010-05-12 13:56:29 ----A---- C:\Windows\system32\inetcomm.dll

======List of files/folders modified in the last 1 months======

2010-06-11 00:00:20 ----D---- C:\Windows\Temp
2010-06-10 23:59:50 ----D---- C:\Windows\Tasks
2010-06-10 23:38:13 ----D---- C:\Windows\system32\Tasks
2010-06-10 23:33:45 ----RD---- C:\Program Files
2010-06-10 20:28:09 ----D---- C:\Windows\Prefetch
2010-06-10 20:24:25 ----D---- C:\Users\amorek\AppData\Roaming\Skype
2010-06-10 19:09:24 ----D---- C:\ProgramData\Google Updater
2010-06-10 18:35:54 ----D---- C:\Users\amorek\AppData\Roaming\skypePM
2010-06-10 18:16:14 ----D---- C:\Users\amorek\AppData\Roaming\WinRAR
2010-06-10 16:55:30 ----D---- C:\Users\amorek\AppData\Roaming\dvdcss
2010-06-10 05:48:14 ----D---- C:\Windows\winsxs
2010-06-10 05:48:14 ----D---- C:\Windows\system32\catroot
2010-06-10 05:47:48 ----D---- C:\Windows\system32\catroot2
2010-06-09 21:48:01 ----D---- C:\Windows\System32
2010-06-09 21:48:01 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-09 21:48:00 ----D---- C:\Windows\inf
2010-06-09 05:29:58 ----D---- C:\Windows
2010-06-08 13:35:03 ----D---- C:\Program Files\WinRAR
2010-06-08 13:01:55 ----SHD---- C:\Windows\Installer
2010-06-07 20:43:05 ----D---- C:\Users\amorek\AppData\Roaming\Real
2010-06-07 13:51:21 ----D---- C:\Program Files\Mozilla Firefox
2010-06-05 15:11:20 ----D---- C:\Windows\SoftwareDistribution
2010-06-04 19:57:06 ----D---- C:\Program Files\Alwil Software
2010-06-04 19:54:31 ----HD---- C:\ProgramData
2010-06-04 18:07:29 ----D---- C:\Windows\system32\cs-CZ
2010-06-04 18:07:28 ----D---- C:\Windows\WindowsMobile
2010-06-04 18:07:27 ----D---- C:\Windows\system32\en-US
2010-06-04 18:07:27 ----D---- C:\Windows\en-US
2010-06-04 18:07:24 ----D---- C:\Program Files\Windows Defender
2010-06-04 18:07:10 ----D---- C:\Program Files\Common Files\System
2010-06-04 18:07:08 ----D---- C:\Windows\system32\WCN
2010-06-04 18:07:02 ----D---- C:\Program Files\Windows Journal
2010-06-04 18:07:00 ----D---- C:\Windows\system32\migration
2010-06-04 18:06:59 ----D---- C:\Windows\IME
2010-06-04 18:06:59 ----D---- C:\Windows\Help
2010-06-04 18:06:57 ----D---- C:\Windows\system32\inetsrv
2010-06-04 18:06:50 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2010-06-04 18:06:50 ----D---- C:\Program Files\Windows Collaboration
2010-06-04 18:06:42 ----D---- C:\Windows\system32\migwiz
2010-06-04 18:06:41 ----D---- C:\Program Files\Windows Media Player
2010-06-04 18:06:38 ----D---- C:\Program Files\Internet Explorer
2010-06-04 18:06:07 ----D---- C:\Windows\DigitalLocker
2010-06-04 18:06:04 ----D---- C:\Program Files\Windows Calendar
2010-06-04 18:06:03 ----D---- C:\Windows\system32\com
2010-06-04 18:06:03 ----D---- C:\Program Files\Movie Maker
2010-06-04 18:06:02 ----D---- C:\Windows\MSAgent
2010-06-04 18:05:53 ----SD---- C:\ProgramData\Microsoft
2010-06-04 18:05:50 ----D---- C:\Program Files\Windows Sidebar
2010-06-04 18:05:48 ----D---- C:\Windows\system32\winrm
2010-06-04 18:05:46 ----D---- C:\Program Files\Windows Photo Gallery
2010-06-04 18:05:43 ----D---- C:\Windows\servicing
2010-06-04 18:05:42 ----D---- C:\Windows\system32\sysprep
2010-06-04 18:05:40 ----D---- C:\Windows\AppPatch
2010-06-04 18:05:39 ----D---- C:\Windows\system32\Boot
2010-06-04 18:05:38 ----D---- C:\Windows\system32\wbem
2010-06-04 18:05:34 ----D---- C:\Windows\ehome
2010-06-04 18:05:32 ----D---- C:\Windows\system32\oobe
2010-06-04 18:05:31 ----D---- C:\Windows\system32\slmgr
2010-06-04 18:05:30 ----D---- C:\Windows\system32\MUI
2010-06-04 18:05:29 ----D---- C:\Program Files\Windows Mail
2010-06-04 18:05:28 ----D---- C:\Windows\system32\DriverStore
2010-06-04 18:05:04 ----D---- C:\Windows\system32\XPSViewer
2010-06-04 18:05:04 ----D---- C:\Windows\system32\drivers
2010-06-04 18:05:04 ----D---- C:\Windows\PolicyDefinitions
2010-06-02 09:53:29 ----D---- C:\Windows\Debug
2010-05-12 20:45:55 ----SHD---- C:\System Volume Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2007-07-10 8704]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-06-25 155136]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-05-31 735232]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-10-11 176640]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-19 16768]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2007-06-20 984064]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2007-06-20 208896]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-08-20 1790976]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-04-23 50176]
R3 RTSTOR;USB Mass Storage Device; C:\Windows\system32\drivers\RTSTOR.SYS [2007-09-28 56832]
R3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2007-06-20 660480]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2006-11-02 464384]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 Nokia USB Generic;Nokia USB Generic; C:\Windows\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\Windows\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 Nokia USB Port;Nokia USB Port; C:\Windows\system32\drivers\nmwcdcj.sys [2006-05-29 13312]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-10-31 721904]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-24 183280]
R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-09-20 65536]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2007-12-06 144688]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-10-04 358936]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-08-23 79136]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2007-07-10 386560]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 gupdate1c99a77bef74b38;Služba Google Update (gupdate1c99a77bef74b38); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-01 133104]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe []
S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-03-05 110592]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2009-11-13 238328]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]

-----------------EOF-----------------

1danab · #37 Příspěvek od **1danab** » 10 čer 2010 23:08

vypadá to, že už to bude ok, ale podívám se na to pořádně zítra...ehm tedy dneska

oči stávkují a musím se vyspat do práce

pak to ještě určitě pročistíme

Marián · #38 Příspěvek od **Marián** » 10 čer 2010 23:12

to je dobry napad.taky uz me pali oci.mockrat dekuji.dneska se ke compu nedostanu kvuli praci.a ted mam pred sebou 4 dny odpoledni.nevim jakou mate vy pracovni dobu.tudiz se tu asi nesejdem a budete mi nechavat ukol co mamudelat.jeste jednou dekuji a dobrou noc

1danab · #39 Příspěvek od **1danab** » 11 čer 2010 11:40

v logu už nic špatného nevidím

uklidíme po programech a vyčistíme pc od zbytečností

http://sweb.cz/Marinus/T-Cleaner.bat stáhněte, spusťte, potvrďte A, program sám uklidí po použitých programech

tady máte odkaz a návod na CCleaner http://www.viry.cz/forum/viewtopic.php?f=46&t=7478, tím vyčistíte pc

pokud budete mít ještě problémy s pc, dejte vědět

Marián · #40 Příspěvek od **Marián** » 15 čer 2010 06:46

zdravim.tak snad jsme to nejak vycistili,ale stejne dale pozoruji,ze jde internet pomaleji.nevite cim by to mohlo byt?je to tak asi poslednich 14dni.vlastne od te doby co jsem zacal resit to cisteni pocitace.

Marián · #41 Příspěvek od **Marián** » 15 čer 2010 19:05

pekny vecer.ten t-cleaner je momentalne mimo provoz.muze to nejak souviset s tou pomalosti?

1danab · #42 Příspěvek od **1danab** » 16 čer 2010 09:46

Marián píše:pekny vecer.ten t-cleaner je momentalne mimo provoz.muze to nejak souviset s tou pomalosti?

nesouvisí

nainstalujte si firewall, zde si můžete vybrat http://www.viry.cz/forum/viewtopic.php?f=41&t=6523
až ho budete mít nainstalovaný podívejte se do výpisu komunikace co odesílá a co přichází

Marián · #43 Příspěvek od **Marián** » 17 čer 2010 12:05

zdravim.dekuji za tip.o vikendu se na to vrhnu.netroufam si sam,tak mi prijde pomoc kamarad a pak napisu co a jak

1danab · #44 Příspěvek od **1danab** » 17 čer 2010 17:15

ok

o víkendu budu mít dost času, tak uvidíme

Marián · #45 Příspěvek od **Marián** » 19 čer 2010 17:17

Preji pekne sobotni odpoledne.tak jsme zvladli urychlit internet a i Firewall nainstalovat a i Terminatora

zatim to tedy bezi jak ma a snad i bude

proto jestli uz Vy nemate co k tomu ted dodat,tak Vam chci moc podekovat za pomoc a cas s tim straveny a ted nevi jestli poprat vic takovych pripadu nebo min,kdyz je to Vase hobby

jeste jednou dekuji a nekdy na netu pa

VIRY.CZ

prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji

Re: prosim o kontrolu logu.dekuji