Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Security tool

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#61 Příspěvek od Hanka.Palkova »

Logfile of random's system information tool 1.06 (written by random/random)
Run by NB - Fujitsu at 2010-02-20 15:41:25
Microsoft® Windows Vista™ Home Premium
System drive C: has 96 GB (63%) free of 152 GB
Total RAM: 2038 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:41:39, on 20.2.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
D:\Ares\Ares.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\QIP\qip.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\NB - Fujitsu\Desktop\RSIT.exe
C:\Program Files\trend micro\NB - Fujitsu.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ares] "D:\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{B1FF332D-D34D-4D07-8E6B-BFE75C78E8D3}: NameServer = 10.154.86.1,10.154.96.6
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 5721 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{DC217D56-CBE3-45DB-81A7-2449F2D9D9D8}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-12-09 958200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-11-04 1006264]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-04-04 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-04-04 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-04-04 133912]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-13 4399104]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-02-26 153136]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2006-11-28 2658304]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2007-12-16 1232896]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]
"ares"=D:\Ares\Ares.exe [2007-12-31 962560]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
"QIP2005"=C:\Program Files\QIP\qip.exe [2009-08-13 3276288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-03-30 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-02-20 15:41:25 ----D---- C:\rsit
2010-02-20 15:14:41 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\Malwarebytes
2010-02-20 15:14:26 ----D---- C:\ProgramData\Malwarebytes
2010-02-20 15:14:23 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-20 12:10:57 ----D---- C:\Windows\temp
2010-02-20 12:09:51 ----SHD---- C:\$RECYCLE.BIN
2010-02-20 11:14:05 ----A---- C:\Windows\MBR.exe
2010-02-20 11:14:04 ----A---- C:\Windows\PEV.exe
2010-02-20 11:13:49 ----D---- C:\Windows\ERDNT
2010-02-19 22:09:07 ----A---- C:\Windows\ntbtlog.txt
2010-02-19 20:32:39 ----D---- C:\Program Files\trend micro
2010-02-10 19:16:44 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-02-10 19:16:43 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-02-10 19:16:09 ----A---- C:\Windows\system32\IKEEXT.DLL
2010-02-10 19:16:07 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2010-02-10 19:16:07 ----A---- C:\Windows\system32\BFE.DLL
2010-02-10 19:16:06 ----A---- C:\Windows\system32\tcpipcfg.dll
2010-02-10 19:16:06 ----A---- C:\Windows\system32\netiougc.exe
2010-02-10 19:15:50 ----A---- C:\Windows\system32\quartz.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msyuv.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msvidc32.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msrle32.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\tsbyuv.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\mciavi32.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\iyuv_32.dll
2010-02-10 19:15:48 ----A---- C:\Windows\system32\msvfw32.dll
2010-02-10 19:15:48 ----A---- C:\Windows\system32\avifil32.dll
2010-02-10 19:15:47 ----A---- C:\Windows\system32\avicap32.dll
2010-01-21 22:17:27 ----A---- C:\Windows\system32\mshtml.dll
2010-01-21 22:17:22 ----A---- C:\Windows\system32\wininet.dll
2010-01-21 22:17:20 ----A---- C:\Windows\system32\urlmon.dll
2010-01-21 22:17:19 ----A---- C:\Windows\system32\ieframe.dll
2010-01-21 22:17:17 ----A---- C:\Windows\system32\mstime.dll
2010-01-21 22:17:16 ----A---- C:\Windows\system32\ieapfltr.dll
2010-01-21 22:17:14 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\occache.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\iertutil.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\dxtmsft.dll
2010-01-21 22:17:12 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-21 22:17:12 ----A---- C:\Windows\system32\ieaksie.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\mshtmled.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\icardie.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\dxtrans.dll
2010-01-21 22:17:10 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-21 22:17:10 ----A---- C:\Windows\system32\ieencode.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\ieui.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\advpack.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\admparse.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-21 22:17:08 ----A---- C:\Windows\system32\iesetup.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\iernonce.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-21 22:17:07 ----A---- C:\Windows\system32\pngfilt.dll
2010-01-21 22:17:07 ----A---- C:\Windows\system32\ieakui.dll
2010-01-21 22:17:06 ----A---- C:\Windows\system32\mshtmler.dll

======List of files/folders modified in the last 1 months======

2010-02-20 15:14:31 ----D---- C:\Windows\system32\drivers
2010-02-20 15:14:26 ----D---- C:\ProgramData
2010-02-20 15:14:23 ----RD---- C:\Program Files
2010-02-20 14:34:59 ----D---- C:\Windows
2010-02-20 12:40:28 ----D---- C:\Windows\Minidump
2010-02-20 12:07:05 ----A---- C:\Windows\system.ini
2010-02-20 12:02:38 ----D---- C:\Windows\System32
2010-02-20 12:02:38 ----D---- C:\Windows\AppPatch
2010-02-20 12:02:36 ----D---- C:\Program Files\Common Files
2010-02-20 11:32:49 ----D---- C:\Program Files\Mozilla Firefox
2010-02-20 11:09:14 ----D---- C:\Windows\Prefetch
2010-02-19 20:55:44 ----D---- C:\Windows\winsxs
2010-02-19 20:55:28 ----D---- C:\Windows\system32\catroot
2010-02-19 20:52:08 ----D---- C:\Windows\system32\migration
2010-02-19 20:52:08 ----D---- C:\Program Files\Windows Mail
2010-02-19 18:23:46 ----SHD---- C:\System Volume Information
2010-02-10 20:29:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-02-10 20:29:24 ----D---- C:\Windows\inf
2010-02-10 19:15:33 ----D---- C:\Windows\system32\catroot2
2010-02-01 20:26:20 ----A---- C:\Windows\system32\mrt.exe
2010-01-22 00:33:32 ----D---- C:\Program Files\Internet Explorer
2010-01-21 22:29:11 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\Skype
2010-01-21 16:43:48 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\skypePM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-11-25 23120]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-11-25 48560]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-09-15 53328]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-06-18 737280]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2007-11-04 14208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-13 1749152]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-15 70144]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 GT72NDISIPXP;GT 72 IP NDIS; C:\Windows\system32\DRIVERS\Gt51Ip.sys [2008-02-18 106624]
S3 GT72UBUS;GT 72 U BUS; C:\Windows\system32\DRIVERS\gt72ubus.sys [2008-02-08 59648]
S3 GTPTSER;GT PT SER; C:\Windows\system32\DRIVERS\gtptser.sys [2007-03-30 8064]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Nokia USB Generic;Nokia USB Generic; C:\Windows\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\Windows\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 Nokia USB Port;Nokia USB Port; C:\Windows\system32\drivers\nmwcdcj.sys [2006-05-29 13312]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2007-11-04 82688]
S4 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2007-06-13 48256]
S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys [2007-07-02 131616]
S4 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2007-07-02 110112]
S4 viamraid;viamraid; C:\Windows\system32\drivers\viamraid.sys [2006-11-08 102912]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2007-11-04 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 204800]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 AresChatServer;Ares Chatroom server; D:\Ares\chatServer.exe [2007-03-20 263168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-02-26 267824]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#62 Příspěvek od Hanka.Palkova »

jestli se ti chce :) budu rada.... diky moc za vsechno
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#63 Příspěvek od Hanka.Palkova »

========== REGISTRY ==========
HKCU\Software\Microsoft\Internet Explorer\Search\\"SearchAssistant"|"" /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\\"(Default)"|"" /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
========== FILES ==========
C:\Windows\MBR.exe moved successfully.
C:\Windows\PEV.exe moved successfully.

OTM by OldTimer - Version 3.1.9.0 log created on 02202010_162642
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#64 Příspěvek od Hanka.Palkova »

i když se sam nerestartoval mam ho ted restartovat?
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#65 Příspěvek od Hanka.Palkova »

Logfile of random's system information tool 1.06 (written by random/random)
Run by NB - Fujitsu at 2010-02-20 16:35:39
Microsoft® Windows Vista™ Home Premium
System drive C: has 96 GB (63%) free of 152 GB
Total RAM: 2038 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:36:00, on 20.2.2010
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\igfxsrvc.exe
D:\Ares\Ares.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\NB - Fujitsu\Desktop\RSIT.exe
C:\Program Files\trend micro\NB - Fujitsu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [ares] "D:\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [QIP2005] C:\Program Files\QIP\qip.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{B1FF332D-D34D-4D07-8E6B-BFE75C78E8D3}: NameServer = 10.154.86.1,10.154.96.6
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D:\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 5281 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{DC217D56-CBE3-45DB-81A7-2449F2D9D9D8}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-11-04 1006264]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-04-04 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-04-04 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-04-04 133912]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-03-13 4399104]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-02-26 153136]
"NSLauncher"=C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe [2006-11-28 2658304]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2007-12-16 1232896]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]
"ares"=D:\Ares\Ares.exe [2007-12-31 962560]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [2006-06-27 1449984]
"QIP2005"=C:\Program Files\QIP\qip.exe [2009-08-13 3276288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-03-30 204800]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-02-20 16:26:42 ----D---- C:\_OTM
2010-02-20 15:41:25 ----D---- C:\rsit
2010-02-20 15:14:41 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\Malwarebytes
2010-02-20 15:14:26 ----D---- C:\ProgramData\Malwarebytes
2010-02-20 15:14:23 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-02-20 12:10:57 ----D---- C:\Windows\temp
2010-02-20 12:09:51 ----SHD---- C:\$RECYCLE.BIN
2010-02-20 11:13:49 ----D---- C:\Windows\ERDNT
2010-02-19 22:09:07 ----A---- C:\Windows\ntbtlog.txt
2010-02-19 20:32:39 ----D---- C:\Program Files\trend micro
2010-02-10 19:16:44 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-02-10 19:16:43 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-02-10 19:16:09 ----A---- C:\Windows\system32\IKEEXT.DLL
2010-02-10 19:16:07 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2010-02-10 19:16:07 ----A---- C:\Windows\system32\BFE.DLL
2010-02-10 19:16:06 ----A---- C:\Windows\system32\tcpipcfg.dll
2010-02-10 19:16:06 ----A---- C:\Windows\system32\netiougc.exe
2010-02-10 19:15:50 ----A---- C:\Windows\system32\quartz.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msyuv.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msvidc32.dll
2010-02-10 19:15:50 ----A---- C:\Windows\system32\msrle32.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\tsbyuv.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\mciavi32.dll
2010-02-10 19:15:49 ----A---- C:\Windows\system32\iyuv_32.dll
2010-02-10 19:15:48 ----A---- C:\Windows\system32\msvfw32.dll
2010-02-10 19:15:48 ----A---- C:\Windows\system32\avifil32.dll
2010-02-10 19:15:47 ----A---- C:\Windows\system32\avicap32.dll
2010-01-21 22:17:27 ----A---- C:\Windows\system32\mshtml.dll
2010-01-21 22:17:22 ----A---- C:\Windows\system32\wininet.dll
2010-01-21 22:17:20 ----A---- C:\Windows\system32\urlmon.dll
2010-01-21 22:17:19 ----A---- C:\Windows\system32\ieframe.dll
2010-01-21 22:17:17 ----A---- C:\Windows\system32\mstime.dll
2010-01-21 22:17:16 ----A---- C:\Windows\system32\ieapfltr.dll
2010-01-21 22:17:14 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\occache.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\iertutil.dll
2010-01-21 22:17:13 ----A---- C:\Windows\system32\dxtmsft.dll
2010-01-21 22:17:12 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-21 22:17:12 ----A---- C:\Windows\system32\ieaksie.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\mshtmled.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\icardie.dll
2010-01-21 22:17:11 ----A---- C:\Windows\system32\dxtrans.dll
2010-01-21 22:17:10 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-21 22:17:10 ----A---- C:\Windows\system32\ieencode.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\ieui.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\advpack.dll
2010-01-21 22:17:09 ----A---- C:\Windows\system32\admparse.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-21 22:17:08 ----A---- C:\Windows\system32\iesetup.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\iernonce.dll
2010-01-21 22:17:08 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-21 22:17:07 ----A---- C:\Windows\system32\pngfilt.dll
2010-01-21 22:17:07 ----A---- C:\Windows\system32\ieakui.dll
2010-01-21 22:17:06 ----A---- C:\Windows\system32\mshtmler.dll

======List of files/folders modified in the last 1 months======

2010-02-20 16:26:49 ----D---- C:\Windows
2010-02-20 15:14:31 ----D---- C:\Windows\system32\drivers
2010-02-20 15:14:26 ----D---- C:\ProgramData
2010-02-20 15:14:23 ----RD---- C:\Program Files
2010-02-20 12:40:28 ----D---- C:\Windows\Minidump
2010-02-20 12:07:05 ----A---- C:\Windows\system.ini
2010-02-20 12:02:38 ----D---- C:\Windows\System32
2010-02-20 12:02:38 ----D---- C:\Windows\AppPatch
2010-02-20 12:02:36 ----D---- C:\Program Files\Common Files
2010-02-20 11:32:49 ----D---- C:\Program Files\Mozilla Firefox
2010-02-20 11:09:14 ----D---- C:\Windows\Prefetch
2010-02-19 20:55:44 ----D---- C:\Windows\winsxs
2010-02-19 20:55:28 ----D---- C:\Windows\system32\catroot
2010-02-19 20:52:08 ----D---- C:\Windows\system32\migration
2010-02-19 20:52:08 ----D---- C:\Program Files\Windows Mail
2010-02-19 18:23:46 ----SHD---- C:\System Volume Information
2010-02-10 20:29:25 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-02-10 20:29:24 ----D---- C:\Windows\inf
2010-02-10 19:15:33 ----D---- C:\Windows\system32\catroot2
2010-02-01 20:26:20 ----A---- C:\Windows\system32\mrt.exe
2010-01-22 00:33:32 ----D---- C:\Program Files\Internet Explorer
2010-01-21 22:29:11 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\Skype
2010-01-21 16:43:48 ----D---- C:\Users\NB - Fujitsu\AppData\Roaming\skypePM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-11-25 23120]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-11-25 48560]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-09-15 53328]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-06-18 737280]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2007-11-04 14208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-03-30 1671680]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-03-13 1749152]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-15 70144]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 GT72NDISIPXP;GT 72 IP NDIS; C:\Windows\system32\DRIVERS\Gt51Ip.sys [2008-02-18 106624]
S3 GT72UBUS;GT 72 U BUS; C:\Windows\system32\DRIVERS\gt72ubus.sys [2008-02-08 59648]
S3 GTPTSER;GT PT SER; C:\Windows\system32\DRIVERS\gtptser.sys [2007-03-30 8064]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Nokia USB Generic;Nokia USB Generic; C:\Windows\system32\drivers\nmwcdc.sys [2006-05-29 8704]
S3 Nokia USB Modem;Nokia USB Modem; C:\Windows\system32\drivers\nmwcdcm.sys [2006-05-29 13312]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcd.sys [2006-05-29 127488]
S3 Nokia USB Port;Nokia USB Port; C:\Windows\system32\drivers\nmwcdcj.sys [2006-05-29 13312]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2007-11-04 82688]
S4 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2007-06-13 48256]
S4 nvrd32;NVIDIA nForce RAID Driver; C:\Windows\system32\drivers\nvrd32.sys [2007-07-02 131616]
S4 nvstor32;nvstor32; C:\Windows\system32\drivers\nvstor32.sys [2007-07-02 110112]
S4 viamraid;viamraid; C:\Windows\system32\drivers\viamraid.sys [2006-11-08 102912]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2007-11-04 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe [2006-12-08 204800]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 ServiceLayer;ServiceLayer; C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [2006-06-05 174080]
S3 AresChatServer;Ares Chatroom server; D:\Ares\chatServer.exe [2007-03-20 263168]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-02-26 267824]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#66 Příspěvek od Hanka.Palkova »

nemuzu to najit, mam tady HKEY .... ale HKCU ?
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#67 Příspěvek od Hanka.Palkova »

po objasneni :) uz sem to nasla smazala jdu na restart a pak tam znova kouknu :)
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#68 Příspěvek od Hanka.Palkova »

po restartu jsem se na to koukla znova a je to smazane :D ... jak se ti odvdecim za tvou pomoc :)
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#69 Příspěvek od Hanka.Palkova »

jo a pls mam tu jeste programy T cleaner, SysProt, RSIT, TFC, MBAM a OTM ... co z toho mám smazat a co se mi bude jeste hodit (co mam nechat?) dikyyyyyyyyyyyyyy
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#70 Příspěvek od Hanka.Palkova »

ok vse sem udelala podle pokynu.... neskonale diky za vse :) .... muzu pro tebe neco udelat?
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#71 Příspěvek od Hanka.Palkova »

ok diky moc ... chystam se na ples ... taky preju hezky zbytek vikendu :)
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#72 Příspěvek od Hanka.Palkova »

:) díky moc :worship:
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#73 Příspěvek od Hanka.Palkova »

nooooo myslim ze nikdo :) .... ale uplne perfektne sem si zatancila jive s mojim muzem :)
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#74 Příspěvek od Hanka.Palkova »

jo vsechno super .... v patek vecer sem byla uplne zoufala (bez zalohy systemu) .... sem ti fakt hrozne vdecna ze simi pomohl
Nahoru
Hanka.Palkova
Návštěvník
Návštěvník
Příspěvky: 76
Registrován: 19 úno 2010 21:02

Re: Security tool

#75 Příspěvek od Hanka.Palkova »

ahaa to je pro me nova informace .. skolni soubory si zalohuju prubezne .. o zbytek bych prisla, ale to by me tak nebolelo ..... :) pa
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“