preventivka

[swobi]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan Svoboda at 2010-09-05 10:58:57
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 2 GB (0%) free of 477 GB
Total RAM: 2046 MB (57% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\Google Software Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\User_Feed_Synchronization-{D3BCFB12-CB3B-472F-9F00-1BB3D1BD21C9}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-03-30 668656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-01 35840]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-01 148888]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-06-01 1093208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-12 1414144]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2009-04-24 203928]
"QIP2005"=C:\Program Files\QIP\qip.exe [2009-08-13 3276288]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - "C:\Windows\system32\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-09-05 10:58:57 ----D---- C:\rsit
2010-08-12 12:03:37 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-08-12 12:00:20 ----A---- C:\Windows\system32\mshtml.dll
2010-08-12 12:00:20 ----A---- C:\Windows\system32\iertutil.dll
2010-08-12 12:00:19 ----A---- C:\Windows\system32\ieframe.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\wininet.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\urlmon.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\mstime.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\msfeeds.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\iedkcs32.dll
2010-08-12 12:00:18 ----A---- C:\Windows\system32\ie4uinit.exe
2010-08-12 12:00:17 ----A---- C:\Windows\system32\occache.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\msfeedssync.exe
2010-08-12 12:00:17 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\jsproxy.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\ieUnatt.exe
2010-08-12 12:00:17 ----A---- C:\Windows\system32\ieui.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\iesysprep.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\iesetup.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\iernonce.dll
2010-08-12 12:00:17 ----A---- C:\Windows\system32\iepeers.dll
2010-08-12 12:00:11 ----A---- C:\Windows\system32\iccvid.dll
2010-08-12 12:00:09 ----A---- C:\Windows\system32\schannel.dll
2010-08-12 11:57:58 ----A---- C:\Windows\system32\win32k.sys
2010-08-12 11:57:56 ----A---- C:\Windows\system32\rtutils.dll
2010-08-12 11:56:10 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-08-12 11:56:09 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-08-12 11:51:07 ----A---- C:\Windows\system32\msxml3.dll
2010-08-12 11:51:04 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-08-12 11:51:04 ----A---- C:\Windows\system32\drivers\srv.sys

======List of files/folders modified in the last 1 months======

2010-09-05 10:58:58 ----D---- C:\Windows\Prefetch
2010-09-05 10:58:55 ----D---- C:\Windows\temp
2010-09-05 10:33:10 ----D---- C:\Windows\Tasks
2010-09-05 09:48:29 ----D---- C:\ProgramData\NVIDIA
2010-09-04 19:19:24 ----D---- C:\ProgramData\Google Updater
2010-09-04 18:11:39 ----SHD---- C:\System Volume Information
2010-09-04 18:10:51 ----D---- C:\Windows\system32\catroot2
2010-08-31 12:47:35 ----D---- C:\Program Files\Warcraft III
2010-08-26 17:02:20 ----D---- C:\Windows\System32
2010-08-26 17:02:20 ----D---- C:\Windows\inf
2010-08-26 17:02:20 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-25 17:25:44 ----D---- C:\Windows\Debug
2010-08-25 17:25:44 ----D---- C:\Windows
2010-08-15 15:31:43 ----SHD---- C:\Windows\Installer
2010-08-15 15:31:35 ----D---- C:\ProgramData\Microsoft Help
2010-08-14 15:27:55 ----D---- C:\Program Files\Opera
2010-08-13 19:21:21 ----D---- C:\Windows\Microsoft.NET
2010-08-13 19:21:12 ----RSD---- C:\Windows\assembly
2010-08-13 18:03:57 ----D---- C:\Windows\winsxs
2010-08-13 16:12:34 ----D---- C:\Windows\system32\migration
2010-08-13 16:12:34 ----D---- C:\Program Files\Internet Explorer
2010-08-13 16:12:33 ----D---- C:\Program Files\Movie Maker
2010-08-13 16:12:32 ----D---- C:\Windows\system32\drivers
2010-08-13 09:35:49 ----D---- C:\Windows\system32\catroot
2010-08-13 09:35:44 ----D---- C:\Program Files\Windows Mail
2010-08-09 17:15:44 ----D---- C:\Program Files\Mozilla Firefox
2010-08-09 12:15:31 ----D---- C:\Program Files\Nokia
2010-08-09 12:02:45 ----D---- C:\Program Files\Common Files\Nokia
2010-08-09 11:59:16 ----D---- C:\ProgramData\Installations

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-17 721904]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2007-02-28 15440]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2007-12-26 278984]
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2004-11-05 670208]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2007-12-26 25416]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-04-04 11573800]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-01-31 47360]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-12-20 234016]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S0 Lbd;Lbd; C:\Windows\system32\DRIVERS\Lbd.sys []
S2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
S3 ag80sjm9;ag80sjm9; C:\Windows\system32\drivers\ag80sjm9.sys []
S3 AnyDVD;AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [2007-09-25 15152]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2005-05-03 27392]
S3 ElbyDelay;ElbyDelay; C:\Windows\System32\Drivers\ElbyDelay.sys [2007-02-16 11984]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2007-11-30 15600]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2008-05-13 25280]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2008-11-26 66872]
R2 Remote Solver for COSMOSFloWorks 2007;Remote Solver for COSMOSFloWorks 2007; C:\Program Files\SolidWorks (2)\COSMOSFloWorks\FloWorks\binCFW\StandAloneSlv.exe [2007-07-23 675840]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-04-03 240232]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-04 136176]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-30 183280]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-01-28 85096]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-03-15 655624]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2008-09-22 79360]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]

-----------------EOF-----------------

[Rudy]

Log vypadá čistý.

[swobi]

dekuji

[Rudy]

Nemáte zač!