Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Security master AV
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Security master AV
Fajn, zkuste nyni udelat kontrolu MBAM
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.
Re: Security master AV
pořád se to vypíná
Re: Security master AV
Tak jej odinstalujte, udelame kontrolu necim jinym
Pouzijte AVPTool dle navodu kolegy Tempesta http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 sken bude travt asi delsi dobu ale je to velmi kvalitni skener...
Dle meho by Vas ale uz Security Master nemel otravovat - mel by byt uz fuc...
Odjizdim do prace na nocni, budu tu az v noci tak snad tu na me bude koukat log z AVPToolu
Pouzijte AVPTool dle navodu kolegy Tempesta http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 sken bude travt asi delsi dobu ale je to velmi kvalitni skener...
Dle meho by Vas ale uz Security Master nemel otravovat - mel by byt uz fuc...
Odjizdim do prace na nocni, budu tu az v noci tak snad tu na me bude koukat log z AVPToolu
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Security master AV
bohužel sken tady na Vás čekat nebude, jelikož daný odkaz je nefunkční a nikde to nemůžu ke stažení najít 
Re: Security master AV
Dekuji za upozorneni, preposlu kolegovi...
My to snad nicim neprojedem
Takze to projedte SuperAntiSpywarem dle riffa http://www.viry.cz/forum/viewtopic.php?t=51359 Log opet sem
My to snad nicim neprojedem
Takze to projedte SuperAntiSpywarem dle riffa http://www.viry.cz/forum/viewtopic.php?t=51359 Log opet sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Security master AV
děkuji za pomoc a přeji rychlé utíkání práce 
program už skenuje, tak snad to bude dobrý 
program už skenuje, tak snad to bude dobrý Re: Security master AV
tak tam mám dva logy
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 02:35 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Complete Scan
Total Scan Time : 00:19:41
Memory items scanned : 392
Memory threats detected : 0
Registry items scanned : 6672
Registry threats detected : 0
File items scanned : 19998
File threats detected : 50
Adware.Tracking Cookie
C:\Documents and Settings\Pepa\Cookies\pepa@apmebf[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.1001hry[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tns-counter[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@jizdnirady.idnes[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@idnes[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@www.hookedmediagroup[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@fastclick[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@www.googleadservices[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@yadro[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@bs.serving-sys[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@atdmt[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.gamesxl[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@media.photobucket[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@hookedmediagroup[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@medialand.relax[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@count.rbc[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tacoda[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@rambler[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@serving-sys[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tribalfusion[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ad.yieldmanager[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@jizdnirady.idnes[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ad.play[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@atwola[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@host.oddcast[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@webads.hookedmediagroup[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@doubleclick[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@toplist[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ar.atwola[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.gamesbannernet[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@toplist[1].txt
C:\Documents and Settings\Admin\Cookies\admin@ad2.bbmedia[2].txt
C:\Documents and Settings\Admin\Cookies\admin@2o7[2].txt
C:\Documents and Settings\Admin\Cookies\admin@doubleclick[1].txt
C:\Documents and Settings\Admin\Cookies\admin@ad2.billboard[1].txt
C:\Documents and Settings\Admin\Cookies\admin@indextools[2].txt
C:\Documents and Settings\Admin\Cookies\admin@counter.cnw[1].txt
C:\Documents and Settings\Admin\Cookies\admin@toplist[1].txt
C:\Documents and Settings\Admin\Cookies\admin@adultfriendfinder[2].txt
C:\Documents and Settings\Admin\Cookies\admin@mediaplex[1].txt
C:\Documents and Settings\Admin\Cookies\admin@apmebf[2].txt
C:\Documents and Settings\Admin\Cookies\admin@ad.crazytomato[1].txt
C:\Documents and Settings\Guest\Cookies\guest@ad2.billboard[2].txt
C:\Documents and Settings\Guest\Cookies\guest@adfarm1.adition[1].txt
C:\Documents and Settings\Guest\Cookies\guest@counter.cnw[2].txt
C:\Documents and Settings\Guest\Cookies\guest@toplist[2].txt
C:\Documents and Settings\Guest\Cookies\guest@ad2.bbmedia[1].txt
C:\Documents and Settings\Guest\Cookies\guest@doubleclick[2].txt
C:\Documents and Settings\Zuzka\Cookies\zuzka@atdmt[1].txt
Trojan.Agent/Gen-Falcomp
C:\_OTM\MOVEDFILES\08162010_092546\C_DOCUMENTS AND SETTINGS\ALL USERS\DATA APLIKACí\7D1A629\SM7D1A_231.EXE
a druhý:
UPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 02:14 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Quick Scan
Total Scan Time : 00:00:02
Memory items scanned : 32
Memory threats detected : 0
Registry items scanned : 0
Registry threats detected : 0
File items scanned : 0
File threats detected : 0
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 02:35 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Complete Scan
Total Scan Time : 00:19:41
Memory items scanned : 392
Memory threats detected : 0
Registry items scanned : 6672
Registry threats detected : 0
File items scanned : 19998
File threats detected : 50
Adware.Tracking Cookie
C:\Documents and Settings\Pepa\Cookies\pepa@apmebf[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.1001hry[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tns-counter[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@jizdnirady.idnes[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@idnes[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@www.hookedmediagroup[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@fastclick[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@www.googleadservices[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@yadro[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@bs.serving-sys[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@atdmt[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.gamesxl[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@media.photobucket[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@hookedmediagroup[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@medialand.relax[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@count.rbc[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tacoda[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@rambler[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@serving-sys[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@tribalfusion[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ad.yieldmanager[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@jizdnirady.idnes[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ad.play[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@atwola[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@host.oddcast[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@webads.hookedmediagroup[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@doubleclick[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@toplist[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ar.atwola[2].txt
C:\Documents and Settings\Pepa\Cookies\pepa@ads.gamesbannernet[1].txt
C:\Documents and Settings\Pepa\Cookies\pepa@toplist[1].txt
C:\Documents and Settings\Admin\Cookies\admin@ad2.bbmedia[2].txt
C:\Documents and Settings\Admin\Cookies\admin@2o7[2].txt
C:\Documents and Settings\Admin\Cookies\admin@doubleclick[1].txt
C:\Documents and Settings\Admin\Cookies\admin@ad2.billboard[1].txt
C:\Documents and Settings\Admin\Cookies\admin@indextools[2].txt
C:\Documents and Settings\Admin\Cookies\admin@counter.cnw[1].txt
C:\Documents and Settings\Admin\Cookies\admin@toplist[1].txt
C:\Documents and Settings\Admin\Cookies\admin@adultfriendfinder[2].txt
C:\Documents and Settings\Admin\Cookies\admin@mediaplex[1].txt
C:\Documents and Settings\Admin\Cookies\admin@apmebf[2].txt
C:\Documents and Settings\Admin\Cookies\admin@ad.crazytomato[1].txt
C:\Documents and Settings\Guest\Cookies\guest@ad2.billboard[2].txt
C:\Documents and Settings\Guest\Cookies\guest@adfarm1.adition[1].txt
C:\Documents and Settings\Guest\Cookies\guest@counter.cnw[2].txt
C:\Documents and Settings\Guest\Cookies\guest@toplist[2].txt
C:\Documents and Settings\Guest\Cookies\guest@ad2.bbmedia[1].txt
C:\Documents and Settings\Guest\Cookies\guest@doubleclick[2].txt
C:\Documents and Settings\Zuzka\Cookies\zuzka@atdmt[1].txt
Trojan.Agent/Gen-Falcomp
C:\_OTM\MOVEDFILES\08162010_092546\C_DOCUMENTS AND SETTINGS\ALL USERS\DATA APLIKACí\7D1A629\SM7D1A_231.EXE
a druhý:
UPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 02:14 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Quick Scan
Total Scan Time : 00:00:02
Memory items scanned : 32
Memory threats detected : 0
Registry items scanned : 0
Registry threats detected : 0
File items scanned : 0
File threats detected : 0
Re: Security master AV
dělala jsem pak ještě jednu kontrolu a log je takový:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 03:10 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Complete Scan
Total Scan Time : 00:19:06
Memory items scanned : 439
Memory threats detected : 0
Registry items scanned : 6677
Registry threats detected : 0
File items scanned : 20023
File threats detected : 2
Adware.Tracking Cookie
C:\Documents and Settings\Pepa\Cookies\pepa@atwola[1].txt
Trojan.Agent/Gen-Falcomp
C:\SYSTEM VOLUME INFORMATION\_RESTORE{208A8F8A-1F6F-4324-8459-1F6E2F38CDB7}\RP510\A0078678.EXE
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 08/16/2010 at 03:10 PM
Application Version : 4.41.1000
Core Rules Database Version : 5347
Trace Rules Database Version: 3159
Scan type : Complete Scan
Total Scan Time : 00:19:06
Memory items scanned : 439
Memory threats detected : 0
Registry items scanned : 6677
Registry threats detected : 0
File items scanned : 20023
File threats detected : 2
Adware.Tracking Cookie
C:\Documents and Settings\Pepa\Cookies\pepa@atwola[1].txt
Trojan.Agent/Gen-Falcomp
C:\SYSTEM VOLUME INFORMATION\_RESTORE{208A8F8A-1F6F-4324-8459-1F6E2F38CDB7}\RP510\A0078678.EXE
Re: Security master AV
Fajn, SAS nenasel nic noveho - jen body obnovy a zalohu OTM...
Jak se chova PC, je uz v poradku - Security Master neotravuje
Jak se chova PC, je uz v poradku - Security Master neotravuje
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Security master AV
ne, už neotravuje vůbec a PC se zdá být v pořádku, tak jestli to je všechno, tak mockrát děkuji za pomoc
Re: Security master AV
No jeste Vam pokoj nedam Tak lehce se me nezbavite Uklidim po utilitach a udelame zaverecnou kontrolku
Jelikoz MBAM nesel, tak jej odinstalujte, neni treba mit nefunkcni vec v PC
SAS muzete nechat nainstalovany, ale vypnuty, at se Vam nepere s antivirem. Jen jim obcas udelejte sken...
Odinstalujte Combofix
T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaru
Panel čistič
Havet se zrejme usadila i v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040
Zmente veskera hesla, ktera jste pouzivala. Security Master byl povoleny ve firewallu, takze mohl "kecat" do sveta...
Vlozte novy log ze RSITu
Tak lehce se me nezbavite Uklidim po utilitach a udelame zaverecnou kontrolku Jelikoz MBAM nesel, tak jej odinstalujte, neni treba mit nefunkcni vec v PC SAS muzete nechat nainstalovany, ale vypnuty, at se Vam nepere s antivirem. Jen jim obcas udelejte sken... Odinstalujte Combofix
- Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
- Napiste ComboFix /Uninstall
- Stisknete Enter
- Tohle smaze Combofix a jeho slozky
T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u yahoo toolbaruPanel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Havet se zrejme usadila i v bodech obnoveni - smazte je dle navodu kolegy riffa http://www.viry.cz/forum/viewtopic.php?f=11&t=47040 Zmente veskera hesla, ktera jste pouzivala. Security Master byl povoleny ve firewallu, takze mohl "kecat" do sveta... Vlozte novy log ze RSITu"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Security master AV
Logfile of random's system information tool 1.08 (written by random/random)
Run by Pepa at 2010-08-17 09:20:53
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 99 GB (82%) free of 120 GB
Total RAM: 997 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:21:05, on 17.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\Documents and Settings\Pepa\Plocha\RSIT.exe
C:\Program Files\trend micro\Pepa.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 6101226437
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{41B557F1-9EF1-45F0-A77A-11E0BFAF1B0F}: NameServer = 62.204.224.2,62.204.224.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
--
End of file - 7643 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2C688203-7EB3-4327-9995-1CB417BA23F9} - BS.Player ControlBar - C:\Program Files\BS.Player ControlBar\BSToolbar.dll [2008-10-08 859592]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-05 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-05 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-05 137752]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-20 16384512]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-09-29 2054360]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-12-23 143360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-08-09 133432]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-07-19 2403568]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-08-24 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Disabled:Průvodce přenesením souborů a nastavení"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Documents and Settings\Pepa\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Documents and Settings\Pepa\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
======List of files/folders created in the last 1 months======
2010-08-17 09:20:53 ----D---- C:\rsit
2010-08-17 08:54:36 ----D---- C:\Program Files\CCleaner
2010-08-16 14:04:45 ----D---- C:\Documents and Settings\Pepa\Data aplikací\SUPERAntiSpyware.com
2010-08-16 14:04:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-08-16 14:04:33 ----D---- C:\Program Files\SUPERAntiSpyware
2010-08-16 13:43:34 ----SHD---- C:\RECYCLER
2010-08-16 13:12:05 ----D---- C:\WINDOWS\temp
2010-08-16 11:01:06 ----A---- C:\Boot.bak
2010-08-16 11:01:00 ----RASHD---- C:\cmdcons
2010-08-16 10:11:47 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Malwarebytes
2010-08-16 10:11:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-08-16 09:36:56 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-08-16 09:36:44 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-08-16 09:36:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-08-16 09:35:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-08-16 09:35:38 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-08-16 09:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-08-16 09:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-08-16 09:25:46 ----D---- C:\_OTM
2010-08-16 08:59:36 ----D---- C:\Program Files\trend micro
2010-08-05 10:20:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-07-27 10:57:19 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
======List of files/folders modified in the last 1 months======
2010-08-17 09:20:09 ----D---- C:\WINDOWS\Prefetch
2010-08-17 09:05:50 ----SHD---- C:\System Volume Information
2010-08-17 09:05:50 ----D---- C:\WINDOWS\system32\Restore
2010-08-17 09:04:59 ----D---- C:\Program Files\Mozilla Firefox
2010-08-17 09:04:37 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Skype
2010-08-17 09:03:45 ----D---- C:\WINDOWS
2010-08-17 09:02:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-17 08:59:01 ----SHD---- C:\WINDOWS\Installer
2010-08-17 08:59:01 ----RD---- C:\Program Files\Skype
2010-08-17 08:55:50 ----D---- C:\WINDOWS\Debug
2010-08-17 08:54:36 ----D---- C:\Program Files
2010-08-17 08:41:52 ----D---- C:\WINDOWS\Minidump
2010-08-17 08:40:12 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-17 08:05:14 ----D---- C:\Documents and Settings\Pepa\Data aplikací\skypePM
2010-08-17 08:05:14 ----D---- C:\Documents and Settings\Pepa\Data aplikací\ICQ
2010-08-16 13:43:11 ----D---- C:\WINDOWS\system32\drivers
2010-08-16 13:10:08 ----A---- C:\WINDOWS\system.ini
2010-08-16 13:07:39 ----D---- C:\WINDOWS\system32
2010-08-16 13:07:39 ----D---- C:\WINDOWS\AppPatch
2010-08-16 13:07:36 ----D---- C:\Program Files\Common Files
2010-08-16 11:15:23 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-16 11:14:51 ----D---- C:\WINDOWS\system
2010-08-16 11:01:06 ----RASH---- C:\boot.ini
2010-08-16 09:49:37 ----D---- C:\WINDOWS\system32\CatRoot
2010-08-16 09:49:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-16 09:49:25 ----HD---- C:\WINDOWS\inf
2010-08-16 09:49:24 ----D---- C:\WINDOWS\system32\cs-cz
2010-08-16 09:37:33 ----D---- C:\Program Files\Internet Explorer
2010-08-16 09:36:55 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-16 09:36:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-08-16 09:35:19 ----D---- C:\Program Files\Movie Maker
2010-08-16 09:30:16 ----D---- C:\Program Files\ICQ7.2
2010-08-16 09:26:09 ----SD---- C:\WINDOWS\Tasks
2010-08-03 20:09:31 ----A---- C:\WINDOWS\system32\MRT.exe
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-26 10:30:19 ----D---- C:\Program Files\ICQToolbar
2010-07-21 09:25:23 ----SD---- C:\Documents and Settings\Pepa\Data aplikací\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2007-11-15 441760]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-09-29 96408]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-29 116008]
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2007-11-15 44384]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-06-15 254872]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HECI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2007-03-13 44672]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-08-24 5776928]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-28 4609024]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-11 136176]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 20680]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-05 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------
Run by Pepa at 2010-08-17 09:20:53
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 99 GB (82%) free of 120 GB
Total RAM: 997 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:21:05, on 17.8.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17080)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.6.0_03\bin\jucheck.exe
C:\Documents and Settings\Pepa\Plocha\RSIT.exe
C:\Program Files\trend micro\Pepa.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 6101226437
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{41B557F1-9EF1-45F0-A77A-11E0BFAF1B0F}: NameServer = 62.204.224.2,62.204.224.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
--
End of file - 7643 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2C688203-7EB3-4327-9995-1CB417BA23F9} - BS.Player ControlBar - C:\Program Files\BS.Player ControlBar\BSToolbar.dll [2008-10-08 859592]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-05 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-05 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-05 137752]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-20 16384512]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-09-29 2054360]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-12-23 143360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2010-08-09 133432]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-07-19 2403568]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-08-24 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Disabled:Průvodce přenesením souborů a nastavení"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\Documents and Settings\Pepa\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Documents and Settings\Pepa\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
======List of files/folders created in the last 1 months======
2010-08-17 09:20:53 ----D---- C:\rsit
2010-08-17 08:54:36 ----D---- C:\Program Files\CCleaner
2010-08-16 14:04:45 ----D---- C:\Documents and Settings\Pepa\Data aplikací\SUPERAntiSpyware.com
2010-08-16 14:04:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-08-16 14:04:33 ----D---- C:\Program Files\SUPERAntiSpyware
2010-08-16 13:43:34 ----SHD---- C:\RECYCLER
2010-08-16 13:12:05 ----D---- C:\WINDOWS\temp
2010-08-16 11:01:06 ----A---- C:\Boot.bak
2010-08-16 11:01:00 ----RASHD---- C:\cmdcons
2010-08-16 10:11:47 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Malwarebytes
2010-08-16 10:11:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-08-16 09:36:56 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-08-16 09:36:44 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-08-16 09:36:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-08-16 09:35:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-08-16 09:35:38 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-08-16 09:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-08-16 09:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-08-16 09:25:46 ----D---- C:\_OTM
2010-08-16 08:59:36 ----D---- C:\Program Files\trend micro
2010-08-05 10:20:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-07-27 10:57:19 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
======List of files/folders modified in the last 1 months======
2010-08-17 09:20:09 ----D---- C:\WINDOWS\Prefetch
2010-08-17 09:05:50 ----SHD---- C:\System Volume Information
2010-08-17 09:05:50 ----D---- C:\WINDOWS\system32\Restore
2010-08-17 09:04:59 ----D---- C:\Program Files\Mozilla Firefox
2010-08-17 09:04:37 ----D---- C:\Documents and Settings\Pepa\Data aplikací\Skype
2010-08-17 09:03:45 ----D---- C:\WINDOWS
2010-08-17 09:02:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-08-17 08:59:01 ----SHD---- C:\WINDOWS\Installer
2010-08-17 08:59:01 ----RD---- C:\Program Files\Skype
2010-08-17 08:55:50 ----D---- C:\WINDOWS\Debug
2010-08-17 08:54:36 ----D---- C:\Program Files
2010-08-17 08:41:52 ----D---- C:\WINDOWS\Minidump
2010-08-17 08:40:12 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-17 08:05:14 ----D---- C:\Documents and Settings\Pepa\Data aplikací\skypePM
2010-08-17 08:05:14 ----D---- C:\Documents and Settings\Pepa\Data aplikací\ICQ
2010-08-16 13:43:11 ----D---- C:\WINDOWS\system32\drivers
2010-08-16 13:10:08 ----A---- C:\WINDOWS\system.ini
2010-08-16 13:07:39 ----D---- C:\WINDOWS\system32
2010-08-16 13:07:39 ----D---- C:\WINDOWS\AppPatch
2010-08-16 13:07:36 ----D---- C:\Program Files\Common Files
2010-08-16 11:15:23 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-16 11:14:51 ----D---- C:\WINDOWS\system
2010-08-16 11:01:06 ----RASH---- C:\boot.ini
2010-08-16 09:49:37 ----D---- C:\WINDOWS\system32\CatRoot
2010-08-16 09:49:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-16 09:49:25 ----HD---- C:\WINDOWS\inf
2010-08-16 09:49:24 ----D---- C:\WINDOWS\system32\cs-cz
2010-08-16 09:37:33 ----D---- C:\Program Files\Internet Explorer
2010-08-16 09:36:55 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-16 09:36:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-08-16 09:35:19 ----D---- C:\Program Files\Movie Maker
2010-08-16 09:30:16 ----D---- C:\Program Files\ICQ7.2
2010-08-16 09:26:09 ----SD---- C:\WINDOWS\Tasks
2010-08-03 20:09:31 ----A---- C:\WINDOWS\system32\MRT.exe
2010-07-27 08:30:31 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-26 10:30:19 ----D---- C:\Program Files\ICQToolbar
2010-07-21 09:25:23 ----SD---- C:\Documents and Settings\Pepa\Data aplikací\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2007-11-15 441760]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-09-29 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-09-29 96408]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-09-29 116008]
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2007-11-15 44384]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-06-15 254872]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HECI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2007-03-13 44672]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-08-24 5776928]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-28 4609024]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-09-29 735960]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-06-11 136176]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-09-29 20680]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-05 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------
Re: Security master AV
Vsechny kroky na cisteni probehly v poradku Doporucuji odinstalovat (pokud nepouzivate) toolbary (listy prohlizecu) v Přidat nebo odebrat programy Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R
- Vyskoci na Vas okenko, do ktereho zkopirujte text nize
Kód: Vybrat vše
services.msc- Kliknete na OK
- Najdete sluzby nize
- Služba Google Update
- U kazde provedte toto
- Klik na ni pravym mysidlem a zvolit Vlastnosti
- Nyní klik na Zastavit
- Typ spousteni nastavit na Zakazano
- Potvrdte kliknutim na OK
Otevrete si poznamkovy blok
- Start->spustit->notepad
- Vlozte text nize
Kód: Vybrat vše
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=- "NeroFilterCheck"=- "SSBkgdUpdate"=- "Adobe Reader Speed Launcher"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=- "Skype"=- "ICQ"=- "SUPERAntiSpyware"=- "MSMSGS"=-- Soubor ulozte jako oprava.reg
- Pri ukladani dejte ulozit jako typ Vsechny soubory (nastevni je uvedeno na obrazku nize)
- Zavrit notepad a spustit dvojklikem oprava.reg
- Pripadny dotaz na zmenu registru potvrdte
- Okno jen problikne a opravi regsitry - soubor muzete smazat
Z logu je patrno, ze nepouzivate firewall - doporucuji doinstalovat
- k cemu je dobry http://www.viry.cz/forum/viewtopic.php?f=41&t=20980
- prehled osobnich firewallu http://www.viry.cz/forum/viewtopic.php?f=41&t=6523
Z logu je patrno, ze nemate aktualni verzi Internet Exploreru - aktualizujte jej
- Aktualizaci najdete zde (pod tlacitkem "Ke stazeni") http://www.microsoft.com/cze/windows/internet-explorer/
- Doporucuji vsak pouzivat alternativni prohlizece - vice zde http://www.viry.cz/forum/viewtopic.php?f=19&t=6116
Doporucuji provest defragmentaci disku
- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Start a pote Spustit, pripadne pouzijte klavesou zkratku Win+R
- Vyskoci na Vas okenko, do ktereho zkopirujte text nize
Kód: Vybrat vše
dfrg.msc- Kliknete na OK
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace
Jinak je log OK "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Security master AV
veškeré čustění proběhlo v pořádku, toolbar zůstává akorát icq, protože mi nejde odstranit, teď jdu na další kroky.
Re: Security master AV
pardon, čištění 
Přispějete na provoz fóra?