Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola logu - ciste preventivne

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Kontrola logu - ciste preventivne

#1 Příspěvek od helenya »

Prosim o kontrolu - problemy zadne nejsou, jen pro klid dusicky :)
Vrely diky!

PS: Omlouvam se, omylem jsem zadala dobu 3 mesicu misto jednoho! Perdon!

Logfile of random's system information tool 1.06 (written by random/random)
Run by Helenya at 2010-05-21 17:40:00
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 94 GB (62%) free of 153 GB
Total RAM: 3070 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:40:11, on 21.5.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\ASScrPro.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Infineon\Security Platform Software\PSDrt.exe
C:\Program Files\Infineon\Security Platform Software\SpTna.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Helenya\Desktop\RSIT.exe
C:\Program Files\trend micro\Helenya.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EndNote Web - {82D2E569-25A7-4E4D-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: EndNote Web - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ChkMail] C:\Program Files\ChkMail\ChkMail\ChkMail.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [IFXSPMGT] C:\Windows\system32\ifxspmgt.exe /NotifyLogon
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\Helenya\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ASUS Security Protect Manager e-Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra 'Tools' menuitem: ASUS Security Protect Manager e-&Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: APSHook.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Windows\system32\ifxspmgt.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Windows\system32\ifxtcs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Windows\system32\IfxPsdSv.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 8770 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000UA.job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-18 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D2E569-25A7-4E4D-9FA3-C5025B4B7912}]
EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
{945C8270-A848-11D5-A805-00B0D092F45B} - EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-21 17920]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-11-16 1029416]
"ChkMail"=C:\Program Files\ChkMail\ChkMail\ChkMail.exe [2007-07-14 741376]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2008-06-03 37232]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2008-06-03 33136]
"IFXSPMGT"=C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2010-05-21 840416]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-18 202256]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-03-18 2289664]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"Google Update"=C:\Users\Helenya\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-19 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2010-05-12 10:31:16 ----A---- C:\Windows\system32\inetcomm.dll
2010-05-07 15:09:14 ----A---- C:\mbam-error.txt
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaws.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaw.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\java.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\deployJava1.dll
2010-04-14 19:26:05 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-14 19:21:17 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 18:59:16 ----A---- C:\Windows\system32\cabview.dll
2010-04-14 18:59:01 ----A---- C:\Windows\system32\wintrust.dll
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files\Java
2010-04-01 21:03:24 ----D---- C:\ProgramData\Apple Computer
2010-04-01 21:03:24 ----D---- C:\Program Files\QuickTime
2010-03-31 23:41:22 ----D---- C:\Users\Helenya\AppData\Roaming\CoSoSys
2010-03-31 11:13:04 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 11:13:03 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\occache.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\iertutil.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\mstime.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iesetup.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iernonce.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-18 19:51:01 ----D---- C:\Program Files\Common Files\xing shared
2010-03-11 22:11:33 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-10 23:55:06 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-10 23:55:04 ----A---- C:\Windows\system32\httpapi.dll
2010-02-26 22:29:13 ----D---- C:\Users\Helenya\AppData\Roaming\EndNote
2010-02-26 22:28:44 ----D---- C:\Program Files\Common Files\Risxtd
2010-02-26 22:28:40 ----D---- C:\Program Files\Common Files\ResearchSoft
2010-02-26 22:28:39 ----D---- C:\ProgramData\Thomson.ResearchSoft.Installers
2010-02-26 22:28:33 ----D---- C:\Program Files\Common Files\MSSoap
2010-02-26 22:28:32 ----D---- C:\Program Files\EndNote Web
2010-02-24 16:57:04 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 16:57:00 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 16:56:37 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 16:56:36 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 16:56:33 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 16:56:31 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\msdrm.dll
2010-02-24 16:56:02 ----A---- C:\Windows\system32\gameux.dll
2010-02-24 16:56:02 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-02-24 16:56:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

======List of files/folders modified in the last 3 months======

2010-05-21 17:40:12 ----D---- C:\Windows\Prefetch
2010-05-21 17:40:02 ----D---- C:\Program Files\Trend Micro
2010-05-21 17:39:56 ----D---- C:\Windows\temp
2010-05-21 17:00:01 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-05-21 15:07:40 ----D---- C:\Windows\system32\Tasks
2010-05-21 15:07:39 ----D---- C:\Windows\Debug
2010-05-21 02:08:36 ----SHD---- C:\System Volume Information
2010-05-21 02:04:20 ----D---- C:\Windows\system32\catroot2
2010-05-20 16:17:24 ----D---- C:\Windows\System32
2010-05-20 16:17:24 ----D---- C:\Windows\inf
2010-05-20 16:17:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-05-15 18:35:23 ----D---- C:\Users\Helenya\AppData\Roaming\Skype
2010-05-15 15:32:43 ----D---- C:\Program Files\Recuva
2010-05-13 11:38:58 ----D---- C:\Windows\Tasks
2010-05-12 19:10:38 ----D---- C:\Windows\winsxs
2010-05-12 11:21:16 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-12 11:02:27 ----SHD---- C:\Windows\Installer
2010-05-12 11:00:56 ----D---- C:\Program Files\Windows Mail
2010-05-12 11:00:28 ----D---- C:\Windows\system32\catroot
2010-05-07 15:11:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-07 15:11:10 ----D---- C:\Windows\system32\drivers
2010-05-06 22:59:36 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-30 20:51:06 ----A---- C:\Windows\system32\mrt.exe
2010-04-28 20:02:16 ----D---- C:\Program Files\CCleaner
2010-04-28 20:01:47 ----A---- C:\Windows\system32\lsdelete.exe
2010-04-28 19:46:07 ----A---- C:\Windows\system32\acovcnt.exe
2010-04-28 19:43:09 ----RSD---- C:\Windows\Fonts
2010-04-16 17:33:26 ----D---- C:\Program Files\Java
2010-04-16 14:05:11 ----D---- C:\Windows\system32\WDI
2010-04-04 22:25:28 ----D---- C:\Windows
2010-04-03 23:04:19 ----D---- C:\Program Files\Mozilla Firefox
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files
2010-04-01 21:03:24 ----RD---- C:\Program Files
2010-04-01 21:03:24 ----HD---- C:\ProgramData
2010-03-31 22:57:01 ----D---- C:\Windows\system32\migration
2010-03-31 22:57:01 ----D---- C:\Program Files\Internet Explorer
2010-03-22 19:25:29 ----D---- C:\ProgramData\Real
2010-03-18 19:56:15 ----D---- C:\Users\Helenya\AppData\Roaming\Real
2010-03-18 19:54:03 ----D---- C:\Program Files\Common Files\Real
2010-03-18 19:53:32 ----A---- C:\Windows\system32\rmoc3260.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5032.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5016.dll
2010-03-18 19:51:31 ----D---- C:\Program Files\Real
2010-03-18 19:43:40 ----A---- C:\Windows\system32\pncrt.dll
2010-03-14 22:00:44 ----RD---- C:\Program Files\Skype
2010-03-14 22:00:38 ----D---- C:\ProgramData\Skype
2010-03-13 18:45:41 ----D---- C:\Users\Helenya\AppData\Roaming\skypePM
2010-03-11 18:12:59 ----D---- C:\Program Files\Movie Maker
2010-03-10 23:57:51 ----A---- C:\Windows\win.ini
2010-02-26 22:26:44 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-24 22:11:01 ----D---- C:\ProgramData\Adobe
2010-02-24 22:10:59 ----D---- C:\Program Files\Common Files\Adobe
2010-02-24 17:32:28 ----D---- C:\Windows\rescache
2010-02-24 17:14:41 ----D---- C:\Windows\system32\cs-CZ
2010-02-24 17:14:41 ----D---- C:\Windows\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 PersonalSecureDrive;PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [2007-01-23 39080]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-09 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-12-20 3478528]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DCamUSBET;USB2.0 1.3M UVC WebCam; C:\Windows\system32\DRIVERS\etDevice.sys [2007-09-06 474624]
R3 FiltUSBET;ET USB Device Lower Filter; C:\Windows\system32\DRIVERS\etFilter.sys [2007-10-15 206336]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-06-20 49664]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 Ltn_hyd7700pc;TV tuner device ; C:\Windows\System32\Drivers\Ltn_hyd7700pc.sys [2007-05-18 374144]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 ScanUSBET;ET USB Still Image Capture Device; C:\Windows\system32\DRIVERS\etScan.sys [2007-09-06 6656]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-11-16 195760]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-05-24 246784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 catchme;catchme; \??\C:\Users\Helenya\AppData\Local\Temp\catchme.sys []
S3 CVirtA;Cisco Systems VPN Adapter; C:\Windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 lvupdtio;lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2008-03-29 21248]
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2008-03-29 20096]
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-12-20 643072]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 IFXSpMgtSrv;Security Platform Management Service; C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
R2 IFXTCS;Trusted Platform Core Service; C:\Windows\system32\ifxtcs.exe [2007-02-22 849440]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-05-21 1314704]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-18 73728]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 PersonalSecureDriveService;Personal Secure Drive Service; C:\Windows\system32\IfxPsdSv.exe [2007-02-22 140832]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Unlimited_Killer
Přítel fóra
Přítel fóra
Příspěvky: 1969
Registrován: 24 srp 2009 16:18

Re: Kontrola logu - ciste preventivne

#2 Příspěvek od Unlimited_Killer »

Dobrý večer, na logu se pracuje. :welcome:
inactive
Nahoru
Uživatelský avatar
Unlimited_Killer
Přítel fóra
Přítel fóra
Příspěvky: 1969
Registrován: 24 srp 2009 16:18

Re: Kontrola logu - ciste preventivne

#3 Příspěvek od Unlimited_Killer »

Jdeme na to. :James008:

1) OTMoveit3
  • Stáhněte OTM3 na Plochu.
  • Spusťte ho dvojklikem na OTM.exe, pokud to nepůjde, zkuste to s adminskými právy.
  • Do levého okna 'Paste Instructions for Items to be Moved' vkopírujte následující skript:

    Kód: Vybrat vše

    :reg
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"TkBellExe"=-
"QuickTime Task"=-
"SunJavaUpdateSched"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-

:files
%systemroot%\system32\*.tmp.dll /s
%systemroot%\*.tmp /s
%TMP%\*.*
%ALLUSERSPROFILE%\Data aplikací\TEMP\*.*
C:\Program Files\ICQ6Toolbar
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000UA.job

:services
ICQ Service

:commands
[emptytemp]
[emptyflash]
  • Poté klikněte na červené tlačítko 'MoveIt!'.
  • V zeleném okně vpravo by se měl zobrazit log, ten vkopírujete sem do fóra.
  • Pokud se zobrazí hláška k restartování, klikněte na 'Yes'.
  • Po restartu se log otevře sám, nebo ho najdete v C:\_OTM\MovedFiles
2) Fixnutí v HJT
  • Spusťte přejmenované HijackThis - C:\Program Files\Trend Micro\HijackThis\jmeno_uzivatele.exe
  • Následně klikněte na 'Do a system scan only'.
  • U níže uvedených položek udělejte fajfku do čtverečku a poté klikněte na 'Fix Checked'.

    Kód: Vybrat vše

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
  • Pokud by tam nějaká položka nebyla, vynechte ji.
3) Malwarebytes' Anti-Malware
  • Stáhněte MbAM a postupujte podle popisu.
  • Zatím nic nemažte, MbAM má občas falešné detekce.
  • Poté mi sem vložte log ve formě textu.
inactive
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#4 Příspěvek od helenya »

Omlouvam se za pozdni provedeni..uz to sem hrnu :)

log z OTM

All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TkBellExe deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5C42.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\Windows\Installer\MSIB29B.tmp moved successfully.
C:\Windows\Installer\MSID55C.tmp moved successfully.
C:\Users\Helenya\AppData\Local\Temp\2010519_2_DNI.-test-vsledky2.termn19.5.2010.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\AdobeARM.log moved successfully.
C:\Users\Helenya\AppData\Local\Temp\aI3pKOsh.doc.part moved successfully.
C:\Users\Helenya\AppData\Local\Temp\akvihaNG.doc.part moved successfully.
C:\Users\Helenya\AppData\Local\Temp\amline_data.xml moved successfully.
C:\Users\Helenya\AppData\Local\Temp\amline_settings.xml moved successfully.
C:\Users\Helenya\AppData\Local\Temp\AUCHECK_CORE.txt moved successfully.
C:\Users\Helenya\AppData\Local\Temp\AUCHECK_PARSER.txt moved successfully.
C:\Users\Helenya\AppData\Local\Temp\cache.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\chrome_shutdown_ms.txt moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-1430-version1-Seznam_SZZK_kveten09.xls moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-673-version1-Fulbright.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-8291-version1-AS21.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-8291-version1-dopissenat_PRAVIDLASTUDIUM.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-8291-version1-Pravidla_org_stud_FF_def.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\FF-8291-version1-Zapis_SK.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Fragebogen_OE.rtf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\inzerat_HS_4_2010.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\jusched.log moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral - Anmeldebogen-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral - Anmeldebogen-2.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral - Anmeldebogen.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral Hinweisblatt-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral Hinweisblatt-2.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\KH München-Zentral Hinweisblatt.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\konzultace_kveten-cerven 2010-1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\konzultace_kveten-cerven 2010.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Kultura 2010.xls moved successfully.
C:\Users\Helenya\AppData\Local\Temp\LMU_Mnchen.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\mch-bewer.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\mch-merk1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\mch-merk2.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\op_ZDNqT.doc.part moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Oznámení o místě konání voleb.PDF moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Referenz_Wohnheim_TamarLewinsky-1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Referenz_Wohnheim_TamarLewinsky.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\REGULÄR Bewerbung.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\SBH_Bewerbungsbogen_V2009-05-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\SBH_Bewerbungsbogen_V2009-05-2.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\SBH_Bewerbungsbogen_V2009-05.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\SBH_Bewerbungsunterlagen_komplett_V2009_05-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\SBH_Bewerbungsunterlagen_komplett_V2009_05.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-bewerbung-1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-bewerbung.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-merkblat1-1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-merkblat1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-merkblatt2-1.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\sch-merkblatt2.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\statnice LS06.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Tipps fuer Prag_Isabel_Mai2010.doc moved successfully.
C:\Users\Helenya\AppData\Local\Temp\verejna sbirka - kostel.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Visio_OrganogramMZV_1._4._2010.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf a-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf a.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf b-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf b-2.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf b.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf c-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN 04_2010.pdf c.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN04_2009_příloha-1.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN04_2009_příloha.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VN10_07.pdf moved successfully.
C:\Users\Helenya\AppData\Local\Temp\VYXoIqrO.ppt.part moved successfully.
C:\Users\Helenya\AppData\Local\Temp\wmplog00.sqm moved successfully.
C:\Users\Helenya\AppData\Local\Temp\wncookie.tmp moved successfully.
C:\Users\Helenya\AppData\Local\Temp\Zaverecna zprava z Mnichova.doc moved successfully.
File/Folder C:\ProgramData\Data aplikací\TEMP\*.* not found.
C:\Program Files\ICQ6Toolbar folder moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-384282222-2033138834-43893064-1000UA.job moved successfully.
========== SERVICES/DRIVERS ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes

User: Default User

User: Guest
->Temp folder emptied: 50999 bytes
->Temporary Internet Files folder emptied: 34066 bytes
->FireFox cache emptied: 30501331 bytes
->Flash cache emptied: 480 bytes

User: Helenya
->Temp folder emptied: 66353 bytes
->Temporary Internet Files folder emptied: 213260 bytes
->Java cache emptied: 82308957 bytes
->FireFox cache emptied: 62132657 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 46678 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 278706 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33176 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 36755433 bytes
RecycleBin emptied: 334336 bytes

Total Files Cleaned = 203,00 mb


OTM by OldTimer - Version 3.1.12.0 log created on 05222010_062146

Files moved on Reboot...
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#5 Příspěvek od helenya »

a log z Malware:

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4129

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

22.5.2010 6:45:39
mbam-log-2010-05-22 (06-45-39).txt

Typ skenu: Rychlý sken
Skenované objekty: 129321
Uplynulý čas: 4 minuta(y), 56 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#6 Příspěvek od helenya »

jeste ponekud hloupy dotaz - jak to ze mam tak preplnenou "temp files", kdyz pouzivam pravidelna CCleaner a prohlizec by mel vse po zavreni smazat? :o

Diky za kontrolu a hezke rano ;)
Nahoru
Uživatelský avatar
Unlimited_Killer
Přítel fóra
Přítel fóra
Příspěvky: 1969
Registrován: 24 srp 2009 16:18

Re: Kontrola logu - ciste preventivne

#7 Příspěvek od Unlimited_Killer »

Jak to myslíte s těmi Tempy? Pošlu Vám klidně screen svého nastavení CCleaneru aby mi čistil to důležité.

Jinak prosím o nový RSIT log.
inactive
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#8 Příspěvek od helenya »

opet zpozdeni - opet omluva :)
No, prijde mi, ze na to, ze jsem predtim vycistila komp CCLeanerem jste tam toho nasel nejak moc :)

Logfile of random's system information tool 1.06 (written by random/random)
Run by Helenya at 2010-05-22 18:33:32
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 93 GB (61%) free of 153 GB
Total RAM: 3070 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:33:42, on 22.5.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ChkMail\ChkMail\ChkMail.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Infineon\Security Platform Software\PSDrt.exe
C:\Program Files\Infineon\Security Platform Software\SpTna.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Users\Helenya\Desktop\RSIT.exe
C:\Program Files\Trend Micro\Helenya.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EndNote Web - {82D2E569-25A7-4E4D-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O3 - Toolbar: EndNote Web - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ChkMail] C:\Program Files\ChkMail\ChkMail\ChkMail.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [IFXSPMGT] C:\Windows\system32\ifxspmgt.exe /NotifyLogon
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ASUS Security Protect Manager e-Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra 'Tools' menuitem: ASUS Security Protect Manager e-&Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O20 - AppInit_DLLs: APSHook.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Windows\system32\ifxspmgt.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Windows\system32\ifxtcs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Windows\system32\IfxPsdSv.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 7382 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-18 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D2E569-25A7-4E4D-9FA3-C5025B4B7912}]
EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{945C8270-A848-11D5-A805-00B0D092F45B} - EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-21 17920]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-11-16 1029416]
"ChkMail"=C:\Program Files\ChkMail\ChkMail\ChkMail.exe [2007-07-14 741376]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2008-06-03 37232]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2008-06-03 33136]
"IFXSPMGT"=C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2010-05-21 840416]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-03-18 2289664]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2010-05-22 06:21:46 ----D---- C:\_OTM
2010-05-12 10:31:16 ----A---- C:\Windows\system32\inetcomm.dll
2010-05-07 15:09:14 ----A---- C:\mbam-error.txt
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaws.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaw.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\java.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\deployJava1.dll
2010-04-14 19:26:05 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-14 19:21:17 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 18:59:16 ----A---- C:\Windows\system32\cabview.dll
2010-04-14 18:59:01 ----A---- C:\Windows\system32\wintrust.dll
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files\Java
2010-04-01 21:03:24 ----D---- C:\ProgramData\Apple Computer
2010-04-01 21:03:24 ----D---- C:\Program Files\QuickTime
2010-03-31 23:41:22 ----D---- C:\Users\Helenya\AppData\Roaming\CoSoSys
2010-03-31 11:13:04 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 11:13:03 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\occache.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\iertutil.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\mstime.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iesetup.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iernonce.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-18 19:51:01 ----D---- C:\Program Files\Common Files\xing shared
2010-03-11 22:11:33 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-10 23:55:06 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-10 23:55:04 ----A---- C:\Windows\system32\httpapi.dll
2010-02-26 22:29:13 ----D---- C:\Users\Helenya\AppData\Roaming\EndNote
2010-02-26 22:28:44 ----D---- C:\Program Files\Common Files\Risxtd
2010-02-26 22:28:40 ----D---- C:\Program Files\Common Files\ResearchSoft
2010-02-26 22:28:39 ----D---- C:\ProgramData\Thomson.ResearchSoft.Installers
2010-02-26 22:28:33 ----D---- C:\Program Files\Common Files\MSSoap
2010-02-26 22:28:32 ----D---- C:\Program Files\EndNote Web
2010-02-24 16:57:04 ----A---- C:\Windows\system32\jscript.dll
2010-02-24 16:57:00 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 16:56:37 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 16:56:36 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 16:56:33 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 16:56:31 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 16:56:31 ----A---- C:\Windows\system32\msdrm.dll
2010-02-24 16:56:02 ----A---- C:\Windows\system32\gameux.dll
2010-02-24 16:56:02 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-02-24 16:56:01 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

======List of files/folders modified in the last 3 months======

2010-05-22 18:33:34 ----D---- C:\Program Files\Trend Micro
2010-05-22 18:33:26 ----D---- C:\Windows\temp
2010-05-22 18:33:00 ----D---- C:\Windows\System32
2010-05-22 18:33:00 ----D---- C:\Windows\inf
2010-05-22 18:33:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-05-22 18:31:09 ----D---- C:\Windows\Prefetch
2010-05-22 18:26:25 ----D---- C:\Windows\Tasks
2010-05-22 08:08:42 ----D---- C:\Windows\system32\Tasks
2010-05-22 06:25:22 ----A---- C:\Windows\system32\acovcnt.exe
2010-05-22 06:24:39 ----D---- C:\Windows
2010-05-22 06:22:40 ----RD---- C:\Program Files
2010-05-22 06:22:07 ----SHD---- C:\Windows\Installer
2010-05-21 19:45:35 ----SHD---- C:\System Volume Information
2010-05-21 17:44:00 ----D---- C:\rsit
2010-05-21 17:00:01 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-05-21 15:07:39 ----D---- C:\Windows\Debug
2010-05-21 02:04:20 ----D---- C:\Windows\system32\catroot2
2010-05-15 18:35:23 ----D---- C:\Users\Helenya\AppData\Roaming\Skype
2010-05-15 15:32:43 ----D---- C:\Program Files\Recuva
2010-05-12 19:10:38 ----D---- C:\Windows\winsxs
2010-05-12 11:21:16 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-12 11:00:56 ----D---- C:\Program Files\Windows Mail
2010-05-12 11:00:28 ----D---- C:\Windows\system32\catroot
2010-05-07 15:11:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-07 15:11:10 ----D---- C:\Windows\system32\drivers
2010-05-06 22:59:36 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-30 20:51:06 ----A---- C:\Windows\system32\mrt.exe
2010-04-28 20:02:16 ----D---- C:\Program Files\CCleaner
2010-04-28 20:01:47 ----A---- C:\Windows\system32\lsdelete.exe
2010-04-28 19:43:09 ----RSD---- C:\Windows\Fonts
2010-04-16 17:33:26 ----D---- C:\Program Files\Java
2010-04-16 14:05:11 ----D---- C:\Windows\system32\WDI
2010-04-03 23:04:19 ----D---- C:\Program Files\Mozilla Firefox
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files
2010-04-01 21:03:24 ----HD---- C:\ProgramData
2010-03-31 22:57:01 ----D---- C:\Windows\system32\migration
2010-03-31 22:57:01 ----D---- C:\Program Files\Internet Explorer
2010-03-22 19:25:29 ----D---- C:\ProgramData\Real
2010-03-18 19:56:15 ----D---- C:\Users\Helenya\AppData\Roaming\Real
2010-03-18 19:54:03 ----D---- C:\Program Files\Common Files\Real
2010-03-18 19:53:32 ----A---- C:\Windows\system32\rmoc3260.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5032.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5016.dll
2010-03-18 19:51:31 ----D---- C:\Program Files\Real
2010-03-18 19:43:40 ----A---- C:\Windows\system32\pncrt.dll
2010-03-14 22:00:44 ----RD---- C:\Program Files\Skype
2010-03-14 22:00:38 ----D---- C:\ProgramData\Skype
2010-03-13 18:45:41 ----D---- C:\Users\Helenya\AppData\Roaming\skypePM
2010-03-11 18:12:59 ----D---- C:\Program Files\Movie Maker
2010-03-10 23:57:51 ----A---- C:\Windows\win.ini
2010-02-26 22:26:44 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-24 22:11:01 ----D---- C:\ProgramData\Adobe
2010-02-24 22:10:59 ----D---- C:\Program Files\Common Files\Adobe
2010-02-24 17:32:28 ----D---- C:\Windows\rescache
2010-02-24 17:14:41 ----D---- C:\Windows\system32\cs-CZ
2010-02-24 17:14:41 ----D---- C:\Windows\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 PersonalSecureDrive;PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [2007-01-23 39080]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-09 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-12-20 3478528]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DCamUSBET;USB2.0 1.3M UVC WebCam; C:\Windows\system32\DRIVERS\etDevice.sys [2007-09-06 474624]
R3 FiltUSBET;ET USB Device Lower Filter; C:\Windows\system32\DRIVERS\etFilter.sys [2007-10-15 206336]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-06-20 49664]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 Ltn_hyd7700pc;TV tuner device ; C:\Windows\System32\Drivers\Ltn_hyd7700pc.sys [2007-05-18 374144]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 ScanUSBET;ET USB Still Image Capture Device; C:\Windows\system32\DRIVERS\etScan.sys [2007-09-06 6656]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-11-16 195760]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-05-24 246784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 catchme;catchme; \??\C:\Users\Helenya\AppData\Local\Temp\catchme.sys []
S3 CVirtA;Cisco Systems VPN Adapter; C:\Windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 lvupdtio;lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2008-03-29 21248]
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2008-03-29 20096]
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-12-20 643072]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 IFXSpMgtSrv;Security Platform Management Service; C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
R2 IFXTCS;Trusted Platform Core Service; C:\Windows\system32\ifxtcs.exe [2007-02-22 849440]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-05-21 1314704]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-18 73728]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 PersonalSecureDriveService;Personal Secure Drive Service; C:\Windows\system32\IfxPsdSv.exe [2007-02-22 140832]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Nahoru
222
5. stupeň - BAN
Příspěvky: 91
Registrován: 05 kvě 2010 17:20

Re: Kontrola logu - ciste preventivne

#9 Příspěvek od 222 »

Dobrý deň, ospravedlňujem sa Unlimited_Killerovi za 1-rázový vstup. Myslím, že by nebolo na škodu spustiť MBAM a dať úplný sken.
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#10 Příspěvek od helenya »

OK, dodam, maly mmnt
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#11 Příspěvek od helenya »

log z uplneho skenu MBAM

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4138

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

24.5.2010 18:20:17
mbam-log-2010-05-24 (18-20-17).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 233045
Uplynulý čas: 50 minuta(y), 12 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)
Nahoru
Uživatelský avatar
Unlimited_Killer
Přítel fóra
Přítel fóra
Příspěvky: 1969
Registrován: 24 srp 2009 16:18

Re: Kontrola logu - ciste preventivne

#12 Příspěvek od Unlimited_Killer »

Neomlouvejte se, já jsem většinou ten, co zdržuje (jako třeba teď :oops: - ale to víte, hokej).

Jinak já mám prostě v OTM šabloně hodně Temp adresářů, aby jsem všechny *.tmp soubory odstranil.

1) OTCleaner
  • Stáhněte OTC a dvojklikem ho spusťte.
  • Vyskočí okénko, kde kliknete na 'CleanUp!'.
  • Potvrdíte kliknutím na 'Yes'.
  • Poté se ještě zeptá, zda chcete restartovat PC - to proveďte opět kliknutím na 'Yes'.
2) Defragmentace
  • Defragmentujte disk.
  • Lze to udělat několika způsoby ↓
    • Přes defragmentaci integrovanou ve Windows [Start → Spustit → dfrg.msc → Enter]. Toto není příliš účinný způsob.
    • Přes jednoduchý a přehledný program jménem Defraggler.
    • Přes geniální program, který se nemusí instalovat a je hodně jednoduchý - JKDefrag.
3) FileHippo.com UpdateChecker
  • Abyste měl/a přehled o aktualizacích, doporučuji stáhnout program FileHippo.com UpdateChecker.
    • Běžně ho nainstalujte.
    • Spouštějte ho například jednou až dvakrát týdně.
    • Přehledně zobrazí všechny programy, které jsou neaktualizované, nabídne stažení novější verze (což doporučuji).
    • Dávejte si pozor,co dané aplikace instalují 's sebou' → například zbytečné toolbary (lišty).
      • Proto se nevyplatí bezmyšlenkovitě klikat na 'Next', popřípadě 'Další'.
4) StartUpLite
  • Stáhněte StartUpLite a spusťte ho.
  • Vypíše seznam zbytečně spouštěných programů po startu.
  • U těch, kterých víte, že je nepotřebujete, zaškrtněte 'Disable'.
  • Klikněte na 'Continue'.
  • Program ukončete a pokud chcete, můžete ho smazat.
5) Nový RSIT log
inactive
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#13 Příspěvek od helenya »

Pokud jde o zdrzovani, myslim, ze si nemame co vycitat ;)
Na aktualizace pouzivam Seucnii - nestaci to?
defragmentace disku je na co? ehmm, se omlouvam, mela bych to rovnou provadet a zbytecne se nevyptavat ;)
JKDefrag muzu pak taky smazat?!
A mohl byste mi poradit nastaveni CCLeaneru, aby mi, potvora, poradne mazal ty docasne soubory, co na mne tady vykoukly?
diky a ja jdu na to...
hezky vecer!
Nahoru
Uživatelský avatar
Unlimited_Killer
Přítel fóra
Přítel fóra
Příspěvky: 1969
Registrován: 24 srp 2009 16:18

Re: Kontrola logu - ciste preventivne

#14 Příspěvek od Unlimited_Killer »

Stačí Secunia.

Defragmentace laicky řečeno srovná soubory na disku. JKDefrag můžete po použití smazat.

Jinak moje nastavení CCleaneru - ale také nemaže vše, můj skript prostě odmaže takřka všechny tmp soubory.

Obrázek

Obrázek
inactive
Nahoru
helenya
Návštěvník
Návštěvník
Příspěvky: 14
Registrován: 23 črc 2009 12:26

Re: Kontrola logu - ciste preventivne

#15 Příspěvek od helenya »

Uz to sem hazim - takze
nakonec jsem pouzila Deflaggler - provedeno, i kdyz nejake fragmentovane soubory tam zustaly - ale to je asi OK. Jinak se mi tim zmensilo volne misto na disku (cca 57 z puvodnich 62%) - to k tomu zrejme tez patri, lec moc se mi to nelibi ;)
StartUpLite nic podezreleho nenasel...

CCleaner mame prekvapive nastaven stejne, ja ho mam narizen jeste o neco prisneji..zvlastni.

RSIT log nize - zase jsem tam omylem zaskrtla 3 mesice misto jednoho - mea culpa, snad jsem vas nezahltila...

doufam, ze to bude uz vse all right ;)

hezke pocteni a dobrou noc!

RSIT log:

Logfile of random's system information tool 1.07 (written by random/random)
Run by Helenya at 2010-05-24 23:38:01
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 87 GB (57%) free of 153 GB
Total RAM: 3070 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:38:13, on 24.5.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\Explorer.EXE
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ChkMail\ChkMail\ChkMail.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Synaptics\SynTP\SynAsus.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Infineon\Security Platform Software\PSDrt.exe
C:\Program Files\Infineon\Security Platform Software\SpTna.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Helenya\Desktop\RSIT.exe
C:\Program Files\trend micro\Helenya.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: EndNote Web - {82D2E569-25A7-4E4D-9FA3-C5025B4B7912} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O3 - Toolbar: EndNote Web - {945C8270-A848-11D5-A805-00B0D092F45B} - C:\Program Files\EndNote Web\ENWIEPlug.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ChkMail] C:\Program Files\ChkMail\ChkMail\ChkMail.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [IFXSPMGT] C:\Windows\system32\ifxspmgt.exe /NotifyLogon
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ASUS Security Protect Manager e-Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra 'Tools' menuitem: ASUS Security Protect Manager e-&Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O16 - DPF: {3860DD98-0549-4D50-AA72-5D17D200EE10} (Windows Live OneCare safety scanner control) - http://cdn.scan.onecare.live.com/resour ... cctrl2.cab
O20 - AppInit_DLLs: APSHook.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Windows\system32\ifxspmgt.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Windows\system32\ifxtcs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Windows\system32\IfxPsdSv.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 7516 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Ad-Aware Update (Weekly).job
C:\Windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-18 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{82D2E569-25A7-4E4D-9FA3-C5025B4B7912}]
EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{945C8270-A848-11D5-A805-00B0D092F45B} - EndNote Web - C:\Program Files\EndNote Web\ENWIEPlug.dll [2010-01-29 268288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-21 17920]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-11-16 1029416]
"ChkMail"=C:\Program Files\ChkMail\ChkMail\ChkMail.exe [2007-07-14 741376]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2008-06-03 37232]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2008-06-03 33136]
"IFXSPMGT"=C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe [2010-05-21 840416]
"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2008-03-18 2289664]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="APSHook.dll"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2010-05-24 23:38:01 ----D---- C:\rsit
2010-05-12 10:31:16 ----A---- C:\Windows\system32\inetcomm.dll
2010-05-07 15:09:14 ----A---- C:\mbam-error.txt
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaws.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\javaw.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\java.exe
2010-04-16 17:33:38 ----A---- C:\Windows\system32\deployJava1.dll
2010-04-14 19:26:05 ----A---- C:\Windows\system32\iphlpsvc.dll
2010-04-14 19:21:17 ----A---- C:\Windows\system32\vbscript.dll
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-04-14 19:15:08 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-04-14 18:59:16 ----A---- C:\Windows\system32\cabview.dll
2010-04-14 18:59:01 ----A---- C:\Windows\system32\wintrust.dll
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files\Java
2010-04-01 21:03:24 ----D---- C:\ProgramData\Apple Computer
2010-04-01 21:03:24 ----D---- C:\Program Files\QuickTime
2010-03-31 23:41:22 ----D---- C:\Users\Helenya\AppData\Roaming\CoSoSys
2010-03-31 11:13:04 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 11:13:03 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\occache.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-31 11:13:02 ----A---- C:\Windows\system32\iertutil.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\mstime.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-31 11:13:01 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 11:13:01 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iesetup.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\iernonce.dll
2010-03-31 11:12:56 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-18 19:51:01 ----D---- C:\Program Files\Common Files\xing shared
2010-03-11 22:11:33 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-10 23:55:06 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-10 23:55:04 ----A---- C:\Windows\system32\httpapi.dll
2010-02-26 22:29:13 ----D---- C:\Users\Helenya\AppData\Roaming\EndNote
2010-02-26 22:28:44 ----D---- C:\Program Files\Common Files\Risxtd
2010-02-26 22:28:40 ----D---- C:\Program Files\Common Files\ResearchSoft
2010-02-26 22:28:39 ----D---- C:\ProgramData\Thomson.ResearchSoft.Installers
2010-02-26 22:28:33 ----D---- C:\Program Files\Common Files\MSSoap
2010-02-26 22:28:32 ----D---- C:\Program Files\EndNote Web

======List of files/folders modified in the last 3 months======

2010-05-24 23:38:04 ----D---- C:\Program Files\Trend Micro
2010-05-24 23:37:58 ----D---- C:\Windows\temp
2010-05-24 23:37:52 ----D---- C:\Windows\system32\Tasks
2010-05-24 23:34:39 ----D---- C:\Windows\Prefetch
2010-05-24 23:29:46 ----RD---- C:\Program Files
2010-05-24 22:03:45 ----D---- C:\Windows\System32
2010-05-24 22:03:45 ----D---- C:\Windows\inf
2010-05-24 22:03:45 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-05-24 21:59:05 ----D---- C:\Windows
2010-05-24 21:58:11 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-05-24 21:58:04 ----D---- C:\Windows\Tasks
2010-05-24 16:58:28 ----SHD---- C:\System Volume Information
2010-05-22 06:25:22 ----A---- C:\Windows\system32\acovcnt.exe
2010-05-22 06:22:07 ----SHD---- C:\Windows\Installer
2010-05-21 15:07:39 ----D---- C:\Windows\Debug
2010-05-21 02:04:20 ----D---- C:\Windows\system32\catroot2
2010-05-15 18:35:23 ----D---- C:\Users\Helenya\AppData\Roaming\Skype
2010-05-15 15:32:43 ----D---- C:\Program Files\Recuva
2010-05-12 19:10:38 ----D---- C:\Windows\winsxs
2010-05-12 11:21:16 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-12 11:00:56 ----D---- C:\Program Files\Windows Mail
2010-05-12 11:00:28 ----D---- C:\Windows\system32\catroot
2010-05-07 15:11:12 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-05-07 15:11:10 ----D---- C:\Windows\system32\drivers
2010-05-06 22:59:36 ----A---- C:\Windows\system32\aswBoot.exe
2010-04-30 20:51:06 ----A---- C:\Windows\system32\mrt.exe
2010-04-28 20:02:16 ----D---- C:\Program Files\CCleaner
2010-04-28 20:01:47 ----A---- C:\Windows\system32\lsdelete.exe
2010-04-28 19:43:09 ----RSD---- C:\Windows\Fonts
2010-04-16 17:33:26 ----D---- C:\Program Files\Java
2010-04-16 14:05:11 ----D---- C:\Windows\system32\WDI
2010-04-03 23:04:19 ----D---- C:\Program Files\Mozilla Firefox
2010-04-01 23:07:34 ----D---- C:\Program Files\Common Files
2010-04-01 21:03:24 ----HD---- C:\ProgramData
2010-03-31 22:57:01 ----D---- C:\Windows\system32\migration
2010-03-31 22:57:01 ----D---- C:\Program Files\Internet Explorer
2010-03-22 19:25:29 ----D---- C:\ProgramData\Real
2010-03-18 19:56:15 ----D---- C:\Users\Helenya\AppData\Roaming\Real
2010-03-18 19:54:03 ----D---- C:\Program Files\Common Files\Real
2010-03-18 19:53:32 ----A---- C:\Windows\system32\rmoc3260.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5032.dll
2010-03-18 19:51:38 ----A---- C:\Windows\system32\pndx5016.dll
2010-03-18 19:51:31 ----D---- C:\Program Files\Real
2010-03-18 19:43:40 ----A---- C:\Windows\system32\pncrt.dll
2010-03-14 22:00:44 ----RD---- C:\Program Files\Skype
2010-03-14 22:00:38 ----D---- C:\ProgramData\Skype
2010-03-13 18:45:41 ----D---- C:\Users\Helenya\AppData\Roaming\skypePM
2010-03-11 18:12:59 ----D---- C:\Program Files\Movie Maker
2010-03-10 23:57:51 ----A---- C:\Windows\win.ini
2010-02-26 22:26:44 ----D---- C:\Program Files\Common Files\Wise Installation Wizard

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 PersonalSecureDrive;PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [2007-01-23 39080]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-09 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-12-20 3478528]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DCamUSBET;USB2.0 1.3M UVC WebCam; C:\Windows\system32\DRIVERS\etDevice.sys [2007-09-06 474624]
R3 FiltUSBET;ET USB Device Lower Filter; C:\Windows\system32\DRIVERS\etFilter.sys [2007-10-15 206336]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-06-20 49664]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 Ltn_hyd7700pc;TV tuner device ; C:\Windows\System32\Drivers\Ltn_hyd7700pc.sys [2007-05-18 374144]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NETw4v32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 ScanUSBET;ET USB Still Image Capture Device; C:\Windows\system32\DRIVERS\etScan.sys [2007-09-06 6656]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-11-16 195760]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-05-24 246784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 CVirtA;Cisco Systems VPN Adapter; C:\Windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 lvupdtio;lvupdtio; \??\C:\Program Files\ASUS\ASUS Live Update\SYS\lvupdtio.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2008-03-29 21248]
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2008-03-29 20096]
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-12-20 643072]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 IFXSpMgtSrv;Security Platform Management Service; C:\Windows\system32\ifxspmgt.exe [2007-02-26 677408]
R2 IFXTCS;Trusted Platform Core Service; C:\Windows\system32\ifxtcs.exe [2007-02-22 849440]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-05-21 1314704]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-18 73728]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 PersonalSecureDriveService;Personal Secure Drive Service; C:\Windows\system32\IfxPsdSv.exe [2007-02-22 140832]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“