Stránka 1 z 1

Preventivka, niesom si isty či je všetko ok :)

Napsal: 19 črc 2010 11:30
od Devilsvkkalnet
Niesom si istý či je PC na 100% čistý tak ak by ste mohli prosím prekontrolovať log, ďakujem :) Log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Dvl at 2010-07-19 12:27:57
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (8%) free of 40 GB
Total RAM: 2047 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:28:02, on 19.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
E:\steam\steam.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Documents and Settings\Dvl\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Winamp\winamp.exe
C:\Documents and Settings\Dvl\Plocha\RSIT.exe
C:\Program Files\trend micro\Dvl.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: 62.75.165.157 status.wow-europe.com
O1 - Hosts: 62.75.165.157 launcher.worldofwarcraft.com
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\System32\JMRaidSetup.exe boot
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [Steam] "e:\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Documents and Settings\Dvl\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: BORGChat.lnk = E:\Moje Programy\BORGChat\BORGChat.exe
O4 - Startup: Logitech . Registrace produktu.lnk = C:\Program Files\Common Files\Logishrd\eReg\SetPoint\eReg.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 7581 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-20 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-02-04 1197448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-30 36864]
"36X Raid Configurer"=C:\WINDOWS\System32\JMRaidSetup.exe [2006-11-16 1953792]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-08-17 81000]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-11-15 16270848]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-17 2879488]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2007-03-09 919280]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Steam"=e:\steam\steam.exe [2010-05-07 1238352]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168]
"Advanced SystemCare 3"=C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe [2009-06-30 2329224]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-09-15 1998576]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"Octoshape Streaming Services"=C:\Documents and Settings\Dvl\Data aplikací\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"PlayNC Launcher"= []

C:\Documents and Settings\Dvl\Nabídka Start\Programy\Po spuštění
BORGChat.lnk - E:\Moje Programy\BORGChat\BORGChat.exe
Logitech . Registrace produktu.lnk - C:\Program Files\Common Files\Logishrd\eReg\SetPoint\eReg.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"E:\Moje Programy\BORGChat\BORGChat.exe"="E:\Moje Programy\BORGChat\BORGChat.exe:*:Enabled:BORGChat"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"D:\Moje Hry\World of Warcraft\Launcher.exe"="D:\Moje Hry\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"D:\Moje Hry\Medal of Honor Allied Assault\MOHAA.exe"="D:\Moje Hry\Medal of Honor Allied Assault\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
"D:\Moje Hry\Need For Speed Underground\Speed.exe"="D:\Moje Hry\Need For Speed Underground\Speed.exe:*:Enabled:Speed"
"E:\Steam\steam.exe"="E:\Steam\steam.exe:*:Enabled:Steam 732897"
"D:\Moje Hry\Need For Speed Underground 2\speed2.exe"="D:\Moje Hry\Need For Speed Underground 2\speed2.exe:*:Enabled:speed2"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"E:\Steam\SteamApps\devilsvkkalnet\counter-strike\hl.exe"="E:\Steam\SteamApps\devilsvkkalnet\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 3 months======

2010-07-17 20:33:34 ----D---- C:\Program Files\Sony Setup
2010-07-17 19:28:15 ----A---- C:\WINDOWS\eSellerateEngine.dll
2010-07-17 19:27:56 ----D---- C:\Program Files\Common Files\DeskShare Shared
2010-07-17 19:27:54 ----A---- C:\WINDOWS\system32\Unicows.dll
2010-07-17 19:27:47 ----D---- C:\Program Files\Deskshare
2010-07-14 06:40:57 ----D---- C:\Program Files\Common Files\Skype
2010-07-12 14:01:50 ----A---- C:\WINDOWS\War3Unin.exe
2010-07-11 21:19:29 ----D---- C:\Documents and Settings\Dvl\Data aplikací\TS3Client
2010-07-11 21:18:39 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-07-10 21:04:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-07-07 18:51:13 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Logitech
2010-07-07 18:50:53 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Leadertech
2010-07-07 18:49:22 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2010-07-07 18:47:31 ----D---- C:\Program Files\Common Files\Logishrd
2010-07-07 18:46:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogiShrd
2010-07-07 10:38:51 ----D---- C:\Program Files\Common Files\SWF Studio
2010-07-07 10:38:50 ----SHD---- C:\Documents and Settings\Dvl\Data aplikací\.#
2010-06-28 19:28:38 ----D---- C:\Program Files\NCSoft
2010-06-28 19:28:13 ----D---- C:\Documents and Settings\Dvl\Data aplikací\InstallShield
2010-06-28 19:27:24 ----D---- C:\Documents and Settings\Dvl\Data aplikací\GetRightToGo
2010-06-27 19:03:31 ----A---- C:\WINDOWS\system32\dxva_sig.txt
2010-06-25 16:28:44 ----A---- C:\WINDOWS\unvise32.exe
2010-06-21 17:38:00 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-06-21 17:37:27 ----D---- C:\WINDOWS\Prefetch
2010-06-21 17:30:14 ----N---- C:\WINDOWS\system32\smtpapi.dll
2010-06-21 17:30:14 ----N---- C:\WINDOWS\system32\rwnh.dll
2010-06-21 17:30:12 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2010-06-21 17:30:12 ----N---- C:\WINDOWS\system32\azroles.dll
2010-06-21 17:30:12 ----N---- C:\WINDOWS\system32\aaclient.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eapsvc.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eapqec.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eappprxy.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eapphost.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eappgnui.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eappcfg.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\eapolqec.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3ui.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3svc.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3msm.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dot3api.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dimsroam.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2010-06-21 17:30:11 ----N---- C:\WINDOWS\system32\credssp.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\mmcperf.exe
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\mmcex.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\kmsvc.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\kbdpash.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2010-06-21 17:30:09 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\onex.dll
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\napstat.exe
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\napmontr.dll
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\napipsec.dll
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2010-06-21 17:30:08 ----N---- C:\WINDOWS\system32\mssha.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\setupn.exe
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\rasqec.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\qutil.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\qcliprov.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\qagentrt.dll
2010-06-21 17:30:07 ----N---- C:\WINDOWS\system32\qagent.dll
2010-06-21 17:30:06 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2010-06-21 17:30:06 ----N---- C:\WINDOWS\system32\verclsid.exe
2010-06-21 17:30:06 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-06-21 17:30:06 ----N---- C:\WINDOWS\system32\tspkg.dll
2010-06-21 17:30:06 ----N---- C:\WINDOWS\system32\tsgqec.dll
2010-06-21 17:30:05 ----N---- C:\WINDOWS\system32\wlanapi.dll
2010-06-21 17:30:04 ----N---- C:\WINDOWS\system32\xmllite.dll
2010-06-21 17:30:03 ----D---- C:\WINDOWS\system32\cs
2010-06-21 17:30:03 ----D---- C:\WINDOWS\l2schemas
2010-06-21 17:30:02 ----D---- C:\WINDOWS\system32\bits
2010-06-21 17:25:29 ----D---- C:\WINDOWS\network diagnostic
2010-06-21 17:24:27 ----A---- C:\WINDOWS\005449_.tmp
2010-06-16 18:57:12 ----D---- C:\Program Files\Ask.com
2010-06-16 18:56:40 ----D---- C:\Program Files\The KMPlayer
2010-06-16 18:52:00 ----D---- C:\Program Files\Webteh
2010-06-15 20:27:45 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Octoshape
2010-06-06 10:27:06 ----D---- C:\WINDOWS\system32\URTTEMP
2010-06-06 10:07:10 ----D---- C:\Program Files\Electronic Arts
2010-05-31 06:30:54 ----D---- C:\Documents and Settings\Dvl\Data aplikací\id Software
2010-05-31 06:30:53 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-05-31 06:30:46 ----D---- C:\WINDOWS\system32\LogFiles
2010-05-31 06:30:46 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-05-31 06:30:46 ----A---- C:\WINDOWS\system32\pbsvc.exe
2010-05-31 06:30:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\id Software
2010-05-30 13:15:09 ----D---- C:\WINDOWS\Sun
2010-05-24 20:00:19 ----D---- C:\Program Files\Mozilla Firefox
2010-05-20 17:36:13 ----D---- C:\Documents and Settings\Dvl\Data aplikací\VitySoft
2010-05-20 17:33:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-05-20 17:33:12 ----D---- C:\Program Files\Common Files\Java
2010-05-20 17:33:02 ----A---- C:\WINDOWS\system32\javaws.exe
2010-05-20 17:33:02 ----A---- C:\WINDOWS\system32\javaw.exe
2010-05-20 17:33:02 ----A---- C:\WINDOWS\system32\java.exe
2010-05-20 17:33:02 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-05-20 17:32:50 ----D---- C:\Program Files\Java
2010-05-20 17:31:50 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Sun
2010-05-20 17:23:27 ----D---- C:\Program Files\LogMeIn Hamachi
2010-05-19 18:04:28 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2010-05-19 18:04:28 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2010-05-19 18:04:28 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2010-05-19 18:04:26 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2010-05-14 07:50:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2010-05-10 16:18:47 ----D---- C:\Program Files\Ventrilo
2010-04-30 19:16:24 ----D---- C:\Documents and Settings\Dvl\Data aplikací\mc-wow
2010-04-30 08:20:46 ----D---- C:\Program Files\sXe Injected
2010-04-30 07:53:44 ----A---- C:\WINDOWS\system32\TrackerNET.dll
2010-04-30 07:53:44 ----A---- C:\WINDOWS\system32\libmySQL.dll
2010-04-29 17:16:42 ----N---- C:\WINDOWS\system32\SNWValid.dll
2010-04-29 17:16:41 ----N---- C:\WINDOWS\system32\SierraNW.dll
2010-04-29 17:16:40 ----D---- C:\Program Files\Sierra On-Line
2010-04-29 17:16:13 ----A---- C:\WINDOWS\SIERRA.INI
2010-04-29 17:16:06 ----A---- C:\WINDOWS\IsUninst.exe
2010-04-25 19:11:01 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Mumble
2010-04-25 19:10:44 ----D---- C:\Program Files\Mumble

======List of files/folders modified in the last 3 months======

2010-07-19 12:27:58 ----D---- C:\Program Files\trend micro
2010-07-19 12:25:54 ----D---- C:\WINDOWS\Internet Logs
2010-07-19 11:34:39 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Skype
2010-07-19 10:35:14 ----D---- C:\WINDOWS\Temp
2010-07-19 10:34:50 ----D---- C:\Documents and Settings\Dvl\Data aplikací\skypePM
2010-07-19 10:32:37 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-19 10:32:35 ----HD---- C:\WINDOWS\inf
2010-07-19 01:26:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-19 00:44:29 ----A---- C:\WINDOWS\WINCMD.INI
2010-07-18 12:04:58 ----D---- C:\WINDOWS
2010-07-18 01:05:37 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-07-17 20:33:34 ----RD---- C:\Program Files
2010-07-17 19:27:56 ----D---- C:\Program Files\Common Files
2010-07-17 19:27:54 ----D---- C:\WINDOWS\system32
2010-07-14 06:41:00 ----SHD---- C:\WINDOWS\Installer
2010-07-10 21:04:55 ----D---- C:\Documents and Settings\Dvl\Data aplikací\ATI
2010-07-10 20:59:38 ----D---- C:\Program Files\ATI Technologies
2010-07-10 20:59:37 ----RSD---- C:\WINDOWS\assembly
2010-07-10 20:59:29 ----D---- C:\WINDOWS\WinSxS
2010-07-10 20:52:31 ----D---- C:\WINDOWS\system32\drivers
2010-07-10 14:28:44 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-07-10 14:28:34 ----D---- C:\Program Files\DVDVideoSoft
2010-07-07 19:56:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-07 18:49:35 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-07-07 18:47:40 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-06 09:00:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-02 09:01:09 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-06-29 06:17:55 ----D---- C:\WINDOWS\Debug
2010-06-21 17:36:56 ----D---- C:\WINDOWS\system32\wbem
2010-06-21 17:36:56 ----D---- C:\WINDOWS\system32\Setup
2010-06-21 17:36:56 ----D---- C:\WINDOWS\AppPatch
2010-06-21 17:36:56 ----D---- C:\Program Files\Common Files\System
2010-06-21 17:36:55 ----RSD---- C:\WINDOWS\Fonts
2010-06-21 17:36:20 ----D---- C:\WINDOWS\security
2010-06-21 17:33:00 ----D---- C:\WINDOWS\system32\CatRoot
2010-06-21 17:30:26 ----D---- C:\Program Files\Messenger
2010-06-21 17:30:24 ----D---- C:\WINDOWS\ServicePackFiles
2010-06-21 17:30:23 ----D---- C:\Program Files\Windows Media Player
2010-06-21 17:30:22 ----D---- C:\WINDOWS\Help
2010-06-21 17:30:15 ----D---- C:\WINDOWS\EHome
2010-06-21 17:30:14 ----D---- C:\WINDOWS\system32\inetsrv
2010-06-21 17:30:13 ----D---- C:\WINDOWS\ime
2010-06-21 17:30:04 ----D---- C:\WINDOWS\system32\usmt
2010-06-21 17:30:04 ----D---- C:\WINDOWS\system32\cs-CZ
2010-06-21 17:30:03 ----D---- C:\Program Files\Internet Explorer
2010-06-21 17:30:02 ----D---- C:\WINDOWS\peernet
2010-06-21 17:30:02 ----D---- C:\Program Files\Movie Maker
2010-06-21 17:27:23 ----D---- C:\WINDOWS\system32\Restore
2010-06-21 17:27:23 ----D---- C:\WINDOWS\system32\npp
2010-06-21 17:27:22 ----D---- C:\WINDOWS\msagent
2010-06-21 17:27:20 ----D---- C:\WINDOWS\srchasst
2010-06-21 17:27:19 ----D---- C:\Program Files\NetMeeting
2010-06-21 17:27:18 ----D---- C:\WINDOWS\system32\Com
2010-06-21 17:27:15 ----D---- C:\Program Files\Windows NT
2010-06-21 17:27:15 ----D---- C:\Program Files\Outlook Express
2010-06-21 17:26:55 ----D---- C:\WINDOWS\system32\oobe
2010-06-21 17:26:54 ----D---- C:\WINDOWS\system
2010-06-21 17:24:12 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-06-17 18:59:02 ----SD---- C:\WINDOWS\Tasks
2010-06-15 20:27:47 ----D---- C:\Documents and Settings\Dvl\Data aplikací\Mozilla
2010-06-13 11:19:13 ----D---- C:\Documents and Settings\Dvl\Data aplikací\NoNameScript
2010-06-13 11:15:12 ----D---- C:\Program Files\mIRC
2010-06-08 09:59:10 ----D---- C:\Documents and Settings\Dvl\Data aplikací\ICQ
2010-06-06 10:52:12 ----SD---- C:\Documents and Settings\Dvl\Data aplikací\Microsoft
2010-06-06 10:27:47 ----D---- C:\WINDOWS\Registration
2010-06-06 10:19:14 ----D---- C:\WINDOWS\system32\DirectX
2010-06-06 10:07:01 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-10 16:18:37 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-05-02 16:44:21 ----D---- C:\Program Files\Opera

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-08-17 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-08-17 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-08-17 51376]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2007-03-09 394192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-08-17 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-08-17 94160]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-08-17 23152]
R3 AtcL001;NDIS Miniport Driver for Attansic L1 Gigabit Ethernet Controller; C:\WINDOWS\system32\DRIVERS\atl01_xp.sys [2006-10-31 35840]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
S3 a9zmv5rf;a9zmv5rf; C:\WINDOWS\system32\drivers\a9zmv5rf.sys []
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2009-06-17 28560]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-08-17 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-08-17 138680]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-05-20 153376]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-06-06 66872]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2007-03-09 75568]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-08-17 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-08-17 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Re: Preventivka, niesom si isty či je všetko ok :)

Napsal: 19 črc 2010 15:19
od 1danab
zdravím :)
v logu nic škodlivého nevidím :wink:

Re: Preventivka, niesom si isty či je všetko ok :)

Napsal: 19 črc 2010 19:11
od Devilsvkkalnet
Ok ďakujem :) tak software je v pohode :P

Re: Preventivka, niesom si isty či je všetko ok :)

Napsal: 19 črc 2010 20:38
od 1danab
nemáte vůbec zač :wink: