prosím o kontrolu logu z UPM

[horus921]

Dobrý den,
prosím o kontrolu logu z UPM.
moc děkuji!

Windows XP SP 3 (build 2600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ne
Whitelist: Ne
Internet Explorer v8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
Log vygenerován: 28.7.2010 16:07:44
================================================================

SmallARK
================================================================
[?]NtClose -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtCreateFile -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtCreateKey -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtCreateSection -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtDeleteKey -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtDeleteValueKey -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtLoadDriver -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtOpenFile -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtSetInformationFile -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtSetValueKey -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtTerminateProcess -> C:\windows\system32\drivers\sp_rsdrv2.sys
[?]NtWriteFile -> C:\windows\system32\drivers\sp_rsdrv2.sys



Běžící procesy
================================================================

C:\WINDOWS\SYSTEM32\SMSS.EXE
C:\WINDOWS\SYSTEM32\CSRSS.EXE
C:\WINDOWS\SYSTEM32\WINLOGON.EXE
C:\WINDOWS\SYSTEM32\SERVICES.EXE
C:\WINDOWS\SYSTEM32\LSASS.EXE
C:\WINDOWS\SYSTEM32\NVSVC32.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\SYSTEM32\SPOOLSV.EXE
C:\PROGRAM FILES\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACSERVICE.EXE
C:\PROGRAM FILES\COMMON FILES\INFOWATCH\CRYPTOSTORAGE\PROTECTEDOBJECTSSRV.EXE
C:\PROGRAM FILES\ICQ6TOOLBAR\ICQ SERVICE.EXE
C:\PROGRAM FILES\GOOGLE\UPDATE\GOOGLEUPDATE.EXE
C:\PROGRAM FILES\JAVA\JRE6\BIN\JQS.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\VS7DEBUG\MDM.EXE
C:\PROGRA~1\COMMON~1\MICROW~1\AGENT\MWASER.EXE
C:\PROGRA~1\COMMON~1\MICROW~1\AGENT\MWAGENT.EXE
C:\PROGRAM FILES\COMMON FILES\NERO\NERO BACKITUP 4\NBSERVICE.EXE
C:\WINDOWS\SYSTEM32\HPZIPM12.EXE
C:\WINDOWS\SYSTEM32\PNKBSTRA.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
D:\PROGRAMY\SPYWARE TERMINATOR\SP_RSSER.EXE
D:\PROGRAMY\ALCOHOL 120\STARWIND\STARWINDSERVICE.EXE
C:\PROGRAM FILES\TUNEUP UTILITIES 2010\TUNEUPUTILITIESSERVICE32.EXE
C:\PROGRAM FILES\COMMON FILES\ULEAD SYSTEMS\DVD\ULCDRSVR.EXE
C:\WINDOWS\SYSTEM32\ALG.EXE
C:\PROGRAM FILES\LAVASOFT\AD-AWARE\AAWSERVICE.EXE
C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE
C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE
C:\PROGRAM FILES\TUNEUP UTILITIES 2010\ONECLICKSTARTER.EXE
C:\WINDOWS\SYSTEM32\SVCHOST.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\WINFAST\WFDTV\DTVSCHDL.EXE
C:\PROGRAM FILES\COMMON FILES\ARCSOFT\CONNECTION SERVICE\BIN\ACDAEMON.EXE
D:\PROGRAMY\INTERNET DOWNLOAD MANAGER\IDMAN.EXE
C:\PROGRAM FILES\IOBIT\ADVANCED SYSTEMCARE 3\SUP_SMARTRAM.EXE
D:\PROGRAMY\ORB\BIN\ORBTRAY.EXE
C:\PROGRAM FILES\WINFAST\WFDTV\WFWIZ.EXE
C:\PROGRAM FILES\IOBIT\ADVANCED SYSTEMCARE 3\AWC.EXE
D:\PROGRAMY\INTERNET DOWNLOAD MANAGER\IEMONITOR.EXE
D:\PROGRAMY\ORB\BIN\ORB.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\WINDOWS\SYSTEM32\CTFMON.EXE
C:\PROGRAM FILES\TUNEUP UTILITIES 2010\ONECLICKSTARTER.EXE
C:\PROGRAM FILES\TUNEUP UTILITIES 2010\ONECLICKSTARTER.EXE
C:\PROGRAM FILES\ULTIMATE PROCESS MANAGER\UPM.EXE

Scanner
================================================================
[R] GoogleUpdate.exe
Spouští se po startu Job [GOOGLE~2.JOB]

[?] mdm.exe
Ověřený Microsoft: Ne
Nemá okno
Soubor 12%

[R] MWASER.EXE
EntryPoint v sekci: CODE
|_ Celkový počet sekcí: 8

[R] MWAGENT.EXE
EntryPoint v sekci: CODE
|_ Celkový počet sekcí: 9

[?] HPZipm12.exe
Non Microsoft v System32:
Nemá okno
Soubor 7%

[?] sp_rsser.exe
EntryPoint v sekci: .ITEXT
|_ Celkový počet sekcí: 9
Nemá okno
Soubor 70%

[?] StarWindService.exe
Nemá okno
Soubor 7%

[?] ULCDRSvr.exe
Nemá okno
Soubor 7%

[R] OneClickStarter.exe
EntryPoint v sekci: .ITEXT
|_ Celkový počet sekcí: 9

[S] explorer.exe
Spouští se po startu HKLM Winlogon [Shell]

[?] DTVSchdl.exe
Spouští se po startu HKLM Run [WinFastDTV]
Soubor 7%

[R] ACDaemon.exe
Spouští se po startu HKLM Run [ArcSoft Connection Service]

[?] IDMan.exe
Spouští se po startu HKCU Run [IDMan]
Soubor 7%

[R] Sup_SmartRAM.exe
Spouští se po startu HKCU Run [SmartRAM]
EntryPoint v sekci: CODE
|_ Celkový počet sekcí: 8

[?] OrbTray.exe
Spouští se po startu HKCU Run [Orb]
Soubor 7%

[?] WFWIZ.exe
Spouští se po startu HKCU Run [WinFast Schedule]
Soubor 14%

[R] AWC.exe
Spouští se po startu HKCU Run [Advanced SystemCare 3]
EntryPoint v sekci: CODE
|_ Celkový počet sekcí: 8

[?] Orb.exe
Soubor 7%

[S] ctfmon.exe
Spouští se po startu HKCU Run [ctfmon.exe]

[R] OneClickStarter.exe
EntryPoint v sekci: .ITEXT
|_ Celkový počet sekcí: 9

[R] OneClickStarter.exe
EntryPoint v sekci: .ITEXT
|_ Celkový počet sekcí: 9

[?] UPM.exe
Soubor 7%


Po spuštění
================================================================

Moduly (Zobraz i bezpečné DLL: False, Jen bez výrobce: True, Zobraz registrované: False)
================================================================
[?] pdfcmnnt.dll
|_ Cesta: C:\WINDOWS\system32\pdfcmnnt.dll
|_ MD5: 1574DD9D409F2DC45CF82C22B99164A4
|_ Výrobce:
|_ Procesy
|_ spoolsv.exe (212)

[?] aspnet_isapi.dll
|_ Cesta: C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll
|_ MD5: 1BF5ADCDC841B69AB00187ABD53253A1
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ jqs.exe (1552)

[?] msvcr71.dll
|_ Cesta: C:\Program Files\Java\jre6\bin\msvcr71.dll
|_ MD5: 86F1895AE8C5E8B17D99ECE768A70732
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ jqs.exe (1552)
|_ explorer.exe (2156)

[?] msdbg2.dll
|_ Cesta: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\msdbg2.dll
|_ MD5: 94A0142B6AE74333BCCF6502D567CBB6
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ mdm.exe (1652)

[?] csm.dll
|_ Cesta: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\csm.dll
|_ MD5: 647C11534C7AF0C5FF599D930476511F
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ mdm.exe (1652)

[!] vclimg120.bpl
|_ Cesta: C:\Program Files\TuneUp Utilities 2010\vclimg120.bpl
|_ MD5: F598B59A553C84677E335C590F94EA5E
|_ Výrobce: Embarcadero Technologies, Inc.
|_ Procesy
|_ OneClickStarter.exe (936)
|_ OneClickStarter.exe (13740)
|_ OneClickStarter.exe (10584)

[!] rtl120.bpl
|_ Cesta: C:\Program Files\TuneUp Utilities 2010\rtl120.bpl
|_ MD5: DD82EB68D97944B192C7803EB585B03C
|_ Výrobce: Embarcadero Technologies, Inc.
|_ Procesy
|_ OneClickStarter.exe (936)
|_ OneClickStarter.exe (13740)
|_ OneClickStarter.exe (10584)

[!] vcl120.bpl
|_ Cesta: C:\Program Files\TuneUp Utilities 2010\vcl120.bpl
|_ MD5: 773EBD87010A6F644869A59D98792C9C
|_ Výrobce: Embarcadero Technologies, Inc.
|_ Procesy
|_ OneClickStarter.exe (936)
|_ OneClickStarter.exe (13740)
|_ OneClickStarter.exe (10584)

[!] vclx120.bpl
|_ Cesta: C:\Program Files\TuneUp Utilities 2010\vclx120.bpl
|_ MD5: 264BFCC11A0DA6F0B449A40A14D15772
|_ Výrobce: Embarcadero Technologies, Inc.
|_ Procesy
|_ OneClickStarter.exe (936)
|_ OneClickStarter.exe (13740)
|_ OneClickStarter.exe (10584)

[?] mmfinfo.dll
|_ Cesta: D:\programy\Avi2Dvd\Programs\Filters\Haali media splitter\mmfinfo.dll
|_ MD5: 072F37C17D2773E8872F1DD15E7EA15D
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)
|_ firefox.exe (2520)

[?] mkunicode.dll
|_ Cesta: D:\programy\Avi2Dvd\Programs\Filters\Haali media splitter\mkunicode.dll
|_ MD5: 8868CDF839E4BD21284F090CBDB7E30E
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)
|_ firefox.exe (2520)

[?] pdfshell.dll
|_ Cesta: C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll
|_ MD5: 2094BC9A0FC9C0E15EEA5F4A9581DD14
|_ Výrobce: Adobe Systems, Inc.
|_ Procesy
|_ explorer.exe (2156)
|_ firefox.exe (2520)

[?] rarext.dll
|_ Cesta: D:\programy\rar\RarExt.dll
|_ MD5: F11FE030158F8EF14A56A3EA9E9BD47D
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)

[!] sptcontmenu.dll
|_ Cesta: D:\programy\Spyware Terminator\sptcontmenu.dll
|_ MD5: A5E97B2B88CC48FC178E88BF6E02F5EC
|_ Výrobce: Crawler.com
|_ Procesy
|_ explorer.exe (2156)

[?] pihook.dll
|_ Cesta: C:\PROGRA~1\ArcSoft\PHOTOI~1\Share\PIHook.dll
|_ MD5: 804ADAA2F253E4B6F2D2036F71FAB38B
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)

[X] pspads~1.dll
|_ Cesta: D:\programy\PSPADE~1\PSPADS~1.DLL
|_ MD5: 8BF42C134D0A4D580D35F7DE2EDE9B21
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)

[X] rarlng.dll
|_ Cesta: D:\programy\rar\rarlng.dll
|_ MD5: B00DEED63396B97FF5BEE860C201D86B
|_ Výrobce:
|_ Procesy
|_ explorer.exe (2156)

[?] msnlnamespacemgr.dll
|_ Cesta: C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll
|_ MD5: 994AD0D8550B8B26990A6E3AA0791502
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ explorer.exe (2156)
|_ IDMan.exe (3216)

[?] pwrisosh.dll
|_ Cesta: D:\programy\PowerISO\PWRISOSH.DLL
|_ MD5: 5035FE520A2DC089E64CA255F9AE64DE
|_ Výrobce: PowerISO Computing, Inc.
|_ Procesy
|_ explorer.exe (2156)

[?] aeext.dll
|_ Cesta: D:\programy\AptEdit 5\aeext.dll
|_ MD5: AEB39A2A3C0687F51DBD90099B0E7493
|_ Výrobce: Brother Technology, Inc.
|_ Procesy
|_ explorer.exe (2156)

[?] zlib1.dll
|_ Cesta: D:\programy\Orb\bin\zlib1.dll
|_ MD5: 80E41408F6D641DC1C0F5353A0CC8125
|_ Výrobce: ?
|_ Procesy
|_ OrbTray.exe (144)

[?] cabclient.dll
|_ Cesta: D:\programy\Orb\bin\CabClient.dll
|_ MD5: 610C37FE627D084CF67FBA0EA7638E19
|_ Výrobce: Orb Networks
|_ Procesy
|_ OrbTray.exe (144)

[?] libeay32.dll
|_ Cesta: D:\programy\Orb\bin\libeay32.dll
|_ MD5: D0F8A744D21FD65DF736A0133E3B9728
|_ Výrobce: The OpenSSL Project, http://www.openssl.org/
|_ Procesy
|_ OrbTray.exe (144)
|_ Orb.exe (1824)

[?] ssleay32.dll
|_ Cesta: D:\programy\Orb\bin\ssleay32.dll
|_ MD5: 20D417B6495D591D2C2F94D139F2BB08
|_ Výrobce: The OpenSSL Project, http://www.openssl.org/
|_ Procesy
|_ OrbTray.exe (144)

[?] cabdirectory.dll
|_ Cesta: D:\programy\Orb\bin\CabDirectory.dll
|_ MD5: D2B6CF355EADB3450833820C75F78CAC
|_ Výrobce: Orb Networks
|_ Procesy
|_ OrbTray.exe (144)

[?] cab.dll
|_ Cesta: D:\programy\Orb\bin\Cab.dll
|_ MD5: CF081BB874C40AC94BAA309C16877392
|_ Výrobce: ?
|_ Procesy
|_ OrbTray.exe (144)
|_ Orb.exe (1824)

[?] divxdec.ax
|_ Cesta: D:\programy\DivX\DivX Codec\divxdec.ax
|_ MD5: F0B0273CA3C2528AE28BFEA4B3C15716
|_ Výrobce: DivX, Inc.
|_ Procesy
|_ WFWIZ.exe (4036)

[?] wizlangcze.dll
|_ Cesta: C:\Program Files\WinFast\WFDTV\WIZLANGCZE.dll
|_ MD5: 3233EBF64BDE32C9C32665994B2A3A5D
|_ Výrobce:
|_ Procesy
|_ WFWIZ.exe (4036)

[?] sqlite3.dll
|_ Cesta: D:\programy\Orb\bin\sqlite3.dll
|_ MD5: 5353F96F5A85D8E34FD597265E9A45E2
|_ Výrobce: ?
|_ Procesy
|_ Orb.exe (1824)

[?] id3lib.dll
|_ Cesta: D:\programy\Orb\bin\id3lib.dll
|_ MD5: C8F849B7762ED250793B66BABD99AFA4
|_ Výrobce: http://www.id3lib.org/
|_ Procesy
|_ Orb.exe (1824)

[?] ogg.dll
|_ Cesta: D:\programy\Orb\bin\ogg.dll
|_ MD5: 9434183B53AFDEBAFF427CEC3EA21783
|_ Výrobce:
|_ Procesy
|_ Orb.exe (1824)

[?] orbcontacts.dll
|_ Cesta: D:\programy\Orb\bin\OrbContacts.dll
|_ MD5: 24F5AC710446D7E9F3039CB8B9E1F4AD
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbdms.dll
|_ Cesta: D:\programy\Orb\bin\OrbDMS.dll
|_ MD5: FBEDB3FF1BFBC7871371A007970F3854
|_ Výrobce: Orb Networks, Inc.
|_ Procesy
|_ Orb.exe (1824)

[?] orbrtspserver.dll
|_ Cesta: D:\programy\Orb\bin\OrbRTSPServer.dll
|_ MD5: 4E517136A26A24AD4334C5DF648430A6
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbstats.dll
|_ Cesta: D:\programy\Orb\bin\OrbStats.dll
|_ MD5: EA7D788FA08F46B80B31D9D2A3F59F12
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbtvxml.dll
|_ Cesta: D:\programy\Orb\bin\OrbTVXML.dll
|_ MD5: FAB09CC66959C304BE6E9F6278C7536A
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] libexpat.dll
|_ Cesta: D:\programy\Orb\bin\libexpat.dll
|_ MD5: AD060058E84DA47C8869118B9672A0B8
|_ Výrobce:
|_ Procesy
|_ Orb.exe (1824)

[?] orbwebserver.dll
|_ Cesta: D:\programy\Orb\bin\OrbWebServer.dll
|_ MD5: 4E9DE6844F7539132F2719DFDEF01A83
|_ Výrobce: ?
|_ Procesy
|_ Orb.exe (1824)

[?] tvgrabber.dll
|_ Cesta: D:\programy\Orb\bin\TVGrabber.dll
|_ MD5: 149DA4C877D49CFB360B0C8D227381CA
|_ Výrobce: ?
|_ Procesy
|_ Orb.exe (1824)

[?] orbmedia.dll
|_ Cesta: D:\programy\Orb\bin\OrbMedia.dll
|_ MD5: BC379C4C5722C1D77265904E27D4CA59
|_ Výrobce: ?
|_ Procesy
|_ Orb.exe (1824)

[?] orbpvr.dll
|_ Cesta: D:\programy\Orb\bin\OrbPVR.dll
|_ MD5: B4AD31601ADBBF1899A16CF42D5DEFC2
|_ Výrobce: ?
|_ Procesy
|_ Orb.exe (1824)

[?] orbimageprocessing.dll
|_ Cesta: D:\programy\Orb\bin\OrbImageProcessing.dll
|_ MD5: 1F098F7FA34B3D601553B9E3AE24AC43
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbrequestproxy.dll
|_ Cesta: D:\programy\Orb\bin\OrbRequestProxy.dll
|_ MD5: F86FE15754E08A3AF9A2CBD14D695CE0
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbstreamer.dll
|_ Cesta: D:\programy\Orb\bin\OrbStreamer.dll
|_ MD5: B9893B7B2CA75AD03F02A6ADE041F6B5
|_ Výrobce: Orb Networks
|_ Procesy
|_ Orb.exe (1824)

[?] orbir.dll
|_ Cesta: D:\programy\Orb\bin\OrbIR.dll
|_ MD5: 1E03C4CEDF565179C350A052CCC81FCC
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ Orb.exe (1824)

[?] mapi32.dll
|_ Cesta: C:\WINDOWS\system32\mapi32.dll
|_ MD5: 0C0961661A7F151728B7325D0CF04A99
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ Orb.exe (1824)

[?] softokn3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\softokn3.dll
|_ MD5: 1FD6C03C0001A5E1EAF61596C2502F0C
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (2520)

[?] nssdbm3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\nssdbm3.dll
|_ MD5: 9DFB30F203999A3AE0F258A33FA598F9
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (2520)

[?] freebl3.dll
|_ Cesta: C:\Program Files\Mozilla Firefox\freebl3.dll
|_ MD5: 26B018758226A5DC06DE45496C394D40
|_ Výrobce: Mozilla Foundation
|_ Procesy
|_ firefox.exe (2520)

[X] lde.dll
|_ Cesta: C:\Program Files\Ultimate Process Manager\LDE.dll
|_ MD5: 0F13A4173A599AAA15E3B270E5E27A7F
|_ Výrobce:
|_ Procesy
|_ UPM.exe (10448)

[?] upm.dll
|_ Cesta: C:\Program Files\Ultimate Process Manager\upm.dll
|_ MD5: 9D9AA74910EE283E95214ABEADC779BD
|_ Výrobce: Lodus Software
|_ Procesy
|_ UPM.exe (10448)

[!] prjxtab.ocx
|_ Cesta: C:\Program Files\Ultimate Process Manager\prjXTab.ocx
|_ MD5: DE745F09FC7C607841519AD559C33AC3
|_ Výrobce: xyz
|_ Procesy
|_ UPM.exe (10448)



================================================================
Ultimate Process Manager v4.1.3 - [ Lodus Software ] - Not Registered =(

[Caroprd111]

Zdravím

Nezakládejte, prosím, duplicitní témata a pokračujte v tématu http://www.viry.cz/forum/viewtopic.php?f=13&t=103161