VIRY.CZ

Ano, kontroloval. Kdyby v něm bylo něco nelegitimního, problém bych řešil. Obě vámi uváděné knihovny jsou legitimní.

Zdravím přijel jsem dneska z dovolené a chtěl bysom opět zkontrolovat log díky.


Logfile of HijackThis v1.99.1
Scan saved at 15:16:33, on 14.8.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\hnizdil\AppData\Local\Temp\Rar$EX00.868\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ssm&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe" /md I
O4 - HKCU\..\Run: [Google Update] "C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "C:\Windows\TEMP\E_SEB5D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

Můžete fixnout v HijackThis:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)

jen zbytečnosti, zbytek čistý.

Logfile of HijackThis v1.99.1
Scan saved at 15:58:10, on 19.8.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Users\hnizdil\AppData\Local\Temp\Rar$EX00.617\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ssm&s={searchTerms}&f=4
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe" /md I
O4 - HKCU\..\Run: [Google Update] "C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "C:\Windows\TEMP\E_SEB5D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

Prosím o kontrolu mého logu , sice to sem dávám po 5 dnech,proto že moje sestra mě neposlouchá a stahuje si co chce. Díky za pochopení,i za odpověd.

Log vypadá čistý.

Zdravím.

Opět žádám o kontrolu logu díky.

Logfile of HijackThis v1.99.1
Scan saved at 16:27:20, on 27.8.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\hnizdil\AppData\Local\Temp\Rar$EX00.373\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ssm&s={searchTerms}&f=4
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe" /md I
O4 - HKCU\..\Run: [Google Update] "C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "C:\Windows\TEMP\E_SEB5D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

Log vypadá čistý.

Prosím o další kontrolu logu díky. Ještě taková otázečka,asi před 3 dny mi našel můj antivir trojana a od té doby se mi můj PC seká , i net myslíte si že za to může ten vir ? Díky za odpověd


Logfile of HijackThis v1.99.1
Scan saved at 11:16:51, on 1.9.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Users\hnizdil\AppData\Local\Temp\Rar$EX00.734\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ssm&s={searchTerms}&f=4
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe" /md I
O4 - HKCU\..\Run: [Google Update] "C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "C:\Windows\TEMP\E_SEB5D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International
O13 - Gopher Prefix:
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

Uvedu příjklad:Když zapnu hru tak mi nenaskočí a napíšemi toto:

LOG


Systém.py(line:273)RunMainScript
System.py(line:192)execfile
System.py(line:163)Run
Prototype.py(line:3)?
System.py(line:130)_pack_import
System.py(line:110)_process_result
Locale.py(line:189)?
Locale.py(line:137)LoadLocaleFile
System.py(line:64)_init_

Run - exceptions.AttributeError:NoteType object has no attribute split.

Problémy her, ani jejich chybové výpisy zde neřešíme. Chcete-li zkontrolovat log, dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 .

Zde je výsledek:

Logfile of random's system information tool 1.08 (written by random/random)
Run by hnizdil at 2010-09-01 19:34:02
Microsoft Windows 7 Home Premium
System drive C: has 7 GB (7%) free of 100 GB
Total RAM: 1024 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:34:25, on 1.9.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Epson Software\Event Manager\EEventManager.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIFBE.EXE
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Metin2\metin2.bin
C:\Windows\system32\taskeng.exe
C:\Users\hnizdil\Downloads\RSIT.exe
C:\Program Files\trend micro\hnizdil.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/?pc=AVBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ssm&s={searchTerms}&f=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe" /md I
O4 - HKCU\..\Run: [Google Update] "C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE /FU "C:\Windows\TEMP\E_SEB5D.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

--
End of file - 5143 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-886626186-4199107485-4221113157-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-886626186-4199107485-4221113157-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files\facemoods.com\facemoods\1.4.8.1\bh\facemoods.dll [2010-07-06 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodsTlbr.dll [2010-07-06 217088]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2054360]
"EEventManager"=C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe [2008-12-04 665424]
"facemoods"=C:\Program Files\facemoods.com\facemoods\1.4.8.1\facemoodssrv.exe [2010-07-06 323584]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\hnizdil\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-25 136176]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"EPSON SX110 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFBE.EXE [2008-09-27 199680]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe -scheduler []
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-01 19:34:05 ----D---- C:\Program Files\trend micro
2010-09-01 19:34:02 ----D---- C:\rsit
2010-08-27 17:35:34 ----D---- C:\Program Files\Metin2
2010-08-25 07:25:59 ----A---- C:\Windows\system32\oleaut32.dll
2010-08-24 19:20:41 ----D---- C:\ProgramData\Blizzard Entertainment.temp
2010-08-24 19:20:41 ----D---- C:\Program Files\Common Files\Blizzard Entertainment.temp
2010-08-23 10:54:49 ----D---- C:\Program Files\Cenega
2010-08-22 12:55:09 ----ASH---- C:\pagefile.sys
2010-08-19 20:32:31 ----A---- C:\Windows\Burnout(TM) Paradise The Ultimate Box Patch Log.txt
2010-08-19 20:13:53 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-08-19 20:13:53 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-08-19 20:13:52 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-08-19 20:13:52 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-08-19 20:13:52 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-08-19 20:13:51 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-08-19 20:13:51 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-08-19 20:13:50 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-08-19 20:13:50 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-08-19 20:13:50 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-08-19 20:13:49 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-08-19 20:13:49 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-08-19 20:13:49 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-08-19 14:18:04 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-08-19 14:18:04 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-08-19 14:17:57 ----D---- C:\Windows\system32\xlive
2010-08-19 14:17:48 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-08-19 14:03:02 ----D---- C:\Users\hnizdil\AppData\Roaming\uTorrent
2010-08-14 21:24:44 ----A---- C:\Windows\flow.tmp
2010-08-14 21:16:51 ----A---- C:\Windows\system32\HSEngine.dll
2010-08-14 21:16:51 ----A---- C:\Windows\system32\eJ_Autor.dll
2010-08-14 21:16:50 ----A---- C:\Windows\system32\FXStudioDLL.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\RapBoxDSP.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\NewWaveAnzeige.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\loadimage.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\fader.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\eJ_Tool.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\DartWeb.dll
2010-08-14 21:16:48 ----A---- C:\Windows\system32\DartSock.dll
2010-08-14 21:16:46 ----A---- C:\Windows\system32\WndRgn.dll
2010-08-14 21:16:46 ----A---- C:\Windows\system32\fxstudio.dll
2010-08-14 21:16:46 ----A---- C:\Windows\system32\devil.dll
2010-08-14 21:16:45 ----A---- C:\Windows\system32\Bassdec.dll
2010-08-14 21:16:44 ----A---- C:\Windows\system32\pxd32d5.dll
2010-08-14 21:16:44 ----A---- C:\Windows\system32\pthread.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\Msvbvm50.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\Lvgl13n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\Lvdx13n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\lvdlg13n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\LTWND13n.DLL
2010-08-14 21:16:43 ----A---- C:\Windows\system32\LTWEB13n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\lttwn13n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\lttw213n.dll
2010-08-14 21:16:43 ----A---- C:\Windows\system32\lttls13n.dll
2010-08-14 21:16:42 ----A---- C:\Windows\system32\LTTLB13n.dll
2010-08-14 21:16:42 ----A---- C:\Windows\system32\Ltsgm13n.dll
2010-08-14 21:16:42 ----A---- C:\Windows\system32\LTRTN13n.DLL
2010-08-14 21:16:42 ----A---- C:\Windows\system32\Ltpnt13n.dll
2010-08-14 21:16:41 ----A---- C:\Windows\system32\ltpdg13n.dll
2010-08-14 21:16:41 ----A---- C:\Windows\system32\ltkrn13n.dll
2010-08-14 21:16:41 ----A---- C:\Windows\system32\ltisi13n.dll
2010-08-14 21:16:41 ----A---- C:\Windows\system32\ltimg13n.dll
2010-08-14 21:16:41 ----A---- C:\Windows\system32\ltfil13n.DLL
2010-08-14 21:16:40 ----A---- C:\Windows\system32\ltefx13n.dll
2010-08-14 21:16:40 ----A---- C:\Windows\system32\LtDlgRes13n.dll
2010-08-14 21:16:39 ----A---- C:\Windows\system32\ltdlg13n.dll
2010-08-14 21:16:39 ----A---- C:\Windows\system32\LTDIS13n.dll
2010-08-14 21:16:39 ----A---- C:\Windows\system32\ltdic13n.dll
2010-08-14 21:16:38 ----A---- C:\Windows\system32\ltcry13n.dll
2010-08-14 21:16:38 ----A---- C:\Windows\system32\LTCON13n.dll
2010-08-14 21:16:37 ----A---- C:\Windows\system32\LTCLR13n.dll
2010-08-14 21:16:37 ----A---- C:\Windows\system32\LTAUT13n.dll
2010-08-14 21:16:37 ----A---- C:\Windows\system32\ltann13n.dll
2010-08-14 21:16:37 ----A---- C:\Windows\system32\lfwmp13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\Lfwmf13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfvpg13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfvec13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lftif13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lftga13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\LFSMP13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfshp13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfsgi13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfsct13n.dll
2010-08-14 21:16:36 ----A---- C:\Windows\system32\lfRaw13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\LFPTK13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfpsd13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfpdf13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfPCL13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfpcd13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfmsp13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lflmb13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lflma13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfkodak.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\lfjbg13n.dll
2010-08-14 21:16:35 ----A---- C:\Windows\system32\LFJ2K13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfiff13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfgif13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfgbr13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lffpx7.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lffpx13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfflc13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfeps13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfdxf13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfdrw13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\lfCUT13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\Lfcmx13n.dll
2010-08-14 21:16:34 ----A---- C:\Windows\system32\LFCMP13n.DLL
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfclp13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfcal13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfbmp13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfawd13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfavi13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfAFP13n.dll
2010-08-14 21:16:33 ----A---- C:\Windows\system32\lfacs13n.dll
2010-08-14 21:15:35 ----A---- C:\Windows\system32\ccrpbds5.dll
2010-08-12 12:01:51 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-12 12:01:37 ----A---- C:\Windows\system32\ir32_32.dll
2010-08-12 12:01:37 ----A---- C:\Windows\system32\iccvid.dll
2010-08-12 12:01:36 ----A---- C:\Windows\system32\rtutils.dll
2010-08-12 12:01:35 ----A---- C:\Windows\system32\msxml3.dll
2010-08-12 12:01:34 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-08-12 12:01:34 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-12 12:01:34 ----A---- C:\Windows\system32\drivers\srv.sys
2010-08-12 12:01:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-12 12:01:29 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-12 12:01:20 ----A---- C:\Windows\system32\mshtml.dll
2010-08-12 12:01:17 ----A---- C:\Windows\system32\ieframe.dll
2010-08-12 12:01:16 ----A---- C:\Windows\system32\wininet.dll
2010-08-12 12:01:16 ----A---- C:\Windows\system32\urlmon.dll
2010-08-12 12:01:15 ----A---- C:\Windows\system32\mstime.dll
2010-08-12 12:01:15 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-12 12:01:15 ----A---- C:\Windows\system32\ieui.dll
2010-08-12 12:01:15 ----A---- C:\Windows\system32\iepeers.dll
2010-08-12 12:01:15 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-12 12:01:14 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-12 12:01:14 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-12 12:01:11 ----A---- C:\Windows\system32\win32k.sys
2010-08-12 12:01:11 ----A---- C:\Windows\system32\schannel.dll
2010-08-06 22:28:59 ----D---- C:\Program Files\Windows Live SkyDrive
2010-08-06 22:28:51 ----D---- C:\Program Files\Windows Live
2010-08-06 22:28:32 ----D---- C:\Windows\PCHEALTH
2010-08-06 22:26:58 ----D---- C:\Program Files\Common Files\Windows Live
2010-08-06 12:53:13 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-08-06 12:52:45 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-08-06 12:52:22 ----D---- C:\Program Files\DAEMON Tools Lite
2010-08-06 12:51:52 ----D---- C:\Users\hnizdil\AppData\Roaming\DAEMON Tools Lite
2010-08-06 12:51:49 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-08-04 10:55:37 ----D---- C:\Program Files\Gameforge4D
2010-08-03 16:56:00 ----D---- C:\Program Files\EA Sports
2010-08-03 09:32:47 ----A---- C:\Windows\system32\shell32.dll

======List of files/folders modified in the last 1 months======

2010-09-01 19:34:26 ----D---- C:\Windows\Temp
2010-09-01 19:34:16 ----D---- C:\Windows\Prefetch
2010-09-01 19:34:05 ----RD---- C:\Program Files
2010-09-01 15:31:39 ----D---- C:\Windows\system32\config
2010-09-01 15:27:51 ----D---- C:\Windows\System32
2010-09-01 15:27:50 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-01 15:27:49 ----D---- C:\Windows\inf
2010-09-01 15:17:42 ----D---- C:\Windows\LiveKernelReports
2010-09-01 13:21:58 ----D---- C:\Windows\system32\Tasks
2010-08-31 11:45:16 ----SHD---- C:\System Volume Information
2010-08-31 10:22:57 ----D---- C:\Windows\system32\catroot2
2010-08-27 11:21:32 ----D---- C:\Windows\system32\NDF
2010-08-27 11:14:57 ----SHD---- C:\Windows\Installer
2010-08-27 11:04:09 ----D---- C:\Users\hnizdil\AppData\Roaming\ICQ
2010-08-27 07:58:18 ----D---- C:\Program Files\ICQ7.2
2010-08-26 10:28:37 ----D---- C:\Windows\winsxs
2010-08-25 22:14:31 ----D---- C:\Windows\AppPatch
2010-08-25 07:25:45 ----D---- C:\Windows\system32\catroot
2010-08-24 19:20:41 ----HD---- C:\ProgramData
2010-08-24 19:20:41 ----D---- C:\Program Files\Common Files
2010-08-23 10:54:47 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-23 08:01:46 ----D---- C:\Windows\Downloaded Program Files
2010-08-22 17:06:54 ----D---- C:\Windows
2010-08-20 09:57:47 ----SD---- C:\Users\hnizdil\AppData\Roaming\Microsoft
2010-08-20 09:12:16 ----D---- C:\ProgramData\Electronic Arts
2010-08-19 20:13:54 ----D---- C:\Program Files\Electronic Arts
2010-08-19 20:13:29 ----RSD---- C:\Windows\assembly
2010-08-17 11:19:31 ----D---- C:\Users\hnizdil\AppData\Roaming\Epson
2010-08-14 09:44:46 ----D---- C:\Windows\system32\drivers
2010-08-14 09:44:42 ----D---- C:\Windows\system32\drivers\UMDF
2010-08-14 07:54:29 ----D---- C:\Windows\Microsoft.NET
2010-08-14 07:26:09 ----D---- C:\Windows\system32\migration
2010-08-14 07:26:09 ----D---- C:\Program Files\Internet Explorer
2010-08-06 22:29:04 ----D---- C:\Program Files\Common Files\microsoft shared
2010-08-06 22:26:42 ----SD---- C:\ProgramData\Microsoft
2010-08-04 22:25:18 ----D---- C:\ProgramData\Apple Computer
2010-08-04 10:49:40 ----D---- C:\Windows\Logs
2010-08-03 20:09:31 ----A---- C:\Windows\system32\MRT.exe
2010-08-03 19:42:36 ----D---- C:\Program Files\WinRAR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-06 691696]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-11-16 135048]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-11-16 38240]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-14 4194816]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-06-19 33096]
R3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
R3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2007-02-05 1122304]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-14 43008]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 ayfmg9y8;ayfmg9y8; C:\Windows\system32\drivers\ayfmg9y8.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-11-16 735960]
R2 EPSON_EB_RPCV4_01;EPSON V5 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [2007-12-17 143872]
R2 EPSON_PM_RPCV4_01;EPSON V3 Service4(01); C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [2007-01-11 113664]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-07-25 1343400]

-----------------EOF-----------------

I tento log vypadá čistý.

Ještě jedna věc která mi nejde vyřešit,V centru akcí mám problém ze Zálohováním.

Mě to nejprve upozorní že mám zálohovat historii ale když kliknu na zálohovat tak to chvíli jede ale pak se to přeruší a napíše mi to že je málo místa na disku nevíte co stím ? Díky za odpověd.

Je to docela možné, máte téměř plný disk (7% volného místa).

Ano,stím bych souhlasil že mám skoro plnou pamět,ale ted jsem pár místa vymazal, znovu skusil ale bez výsledku.