Nefunkční stránky Microsoft supportu a známých antivirů
Napsal: 10 zář 2010 12:30
Zdravím, už třetí den řeším v kanceláři rodičů problém s instalací nové tiskárny (zlobí Spooler SubSystem App). Po delším hledání jsem snad našel potenciální řešení, které ale vyžaduje stažení a spuštění fixu ze stránek supportu Microsoftu. Na ty se však k mému zděšení nemohu dostat. Po dalším hledání řešení nového problému jsem vyzkoušel i stránky jako www.avast.com, www.avg.com, www.nod32.com, www.norton.com,...také nefunkční. Podle diskuzních fór by se mohlo jednat o nějaký malware, který přístup na tyhle stránky blokuje. NOD32 našel nějaké trojany a ty smazal, problém přetrvává. Přikládám výpis z RSIT. Díky za případnou pomoc.
Kód: Vybrat vše
Logfile of random's system information tool 1.06 (written by random/random)
Run by Ing. Pavel Stoklasa at 2010-09-10 13:13:34
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 25 GB (16%) free of 153 GB
Total RAM: 1022 MB (43% free)
HijackThis download failed
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B922D405-6D13-4A2B-AE89-08A030DA4402}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-11-14 16270848]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"JMB36X IDE Setup"=C:\WINDOWS\JM\JMInsIDE.exe [2006-10-31 36864]
"36X Raid Configurer"=C:\WINDOWS\system32\JMRaidSetup.exe [2006-11-17 1953792]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-08-11 7630848]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-08-11 86016]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-06-29 921600]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Akcelerátor spuštění AutoCADu LT.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
imagePROGRAF Status Monitor.lnk - C:\Program Files\Canon\imagePROGRAFStatusMonitor\cnwism.exe
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Canon\GARO Device Setup Utility\cnwids.exe"="C:\Program Files\Canon\GARO Device Setup Utility\cnwids.exe:*:Enabled:imagePROGRAF Device Setup Utility"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ Library"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\WINDOWS\system32\hasplms.exe"="C:\WINDOWS\system32\hasplms.exe:*:Enabled:HASP LLM"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
======File associations======
.scr - open - "C:\WINDOWS\system32\notepad.exe" "%1"
.scr - install -
.scr - config -
======List of files/folders created in the last 1 months======
2010-09-10 13:13:34 ----D---- C:\rsit
2010-09-10 13:13:34 ----D---- C:\Program Files\trend micro
2010-09-10 10:53:04 ----D---- C:\Program Files\Printer Spooler Fix Wizard
2010-09-10 10:53:04 ----A---- C:\WINDOWS\eSellerateEngine.dll
2010-09-10 10:53:04 ----A---- C:\WINDOWS\eSellerateControl350.dll
2010-09-09 12:31:02 ----D---- C:\WINDOWS\SHELLNEW
2010-09-09 12:29:10 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-09 12:29:02 ----D---- C:\Program Files\Microsoft Visual Studio
2010-09-09 11:22:57 ----D---- C:\WINDOWS\pss
2010-09-09 08:55:31 ----N---- C:\WINDOWS\system32\fppr432.dll
2010-09-09 08:55:31 ----N---- C:\WINDOWS\system32\fppmon4.dll
2010-09-05 13:56:22 ----D---- C:\Program Files\CCleaner
2010-09-02 14:19:04 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\~0
2010-09-01 18:10:52 ----D---- C:\spoolerlogs
2010-09-01 15:53:58 ----A---- C:\WINDOWS\system32\PSX64.dll
2010-09-01 15:53:58 ----A---- C:\WINDOWS\system32\pswin.dll
2010-09-01 15:53:58 ----A---- C:\WINDOWS\system32\psnt.dll
2010-09-01 15:53:58 ----A---- C:\WINDOWS\system32\Bot.dll
2010-09-01 15:53:58 ----A---- C:\WINDOWS\PSXLPR.INI
2010-09-01 12:02:08 ----RA---- C:\WINDOWS\system32\TSKMON.DLL
2010-09-01 11:56:58 ----D---- C:\Program Files\PrintServer Utilities
2010-08-19 21:38:40 ----D---- C:\PROSENICE-DOKUMENTY pro ZÚ
2010-08-12 19:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-08-12 19:42:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-08-12 19:41:56 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-08-12 19:41:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-08-12 19:39:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-08-12 19:39:17 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-08-12 19:37:52 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-08-12 19:37:40 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
======List of files/folders modified in the last 1 months======
2010-09-10 13:13:34 ----RD---- C:\Program Files
2010-09-10 13:13:00 ----A---- C:\WINDOWS\wincmd.ini
2010-09-10 12:20:20 ----D---- C:\WINDOWS
2010-09-10 12:20:16 ----D---- C:\WINDOWS\system32
2010-09-10 12:16:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-09-10 12:13:42 ----D---- C:\Program Files\Mozilla Firefox
2010-09-10 12:11:57 ----D---- C:\WINDOWS\Temp
2010-09-10 11:59:36 ----D---- C:\Program Files\pdfforge Toolbar
2010-09-10 11:22:15 ----D---- C:\síťové
2010-09-10 11:16:58 ----D---- C:\WINDOWS\Prefetch
2010-09-10 08:17:47 ----A---- C:\WINDOWS\ccolwiz.ini
2010-09-09 13:00:17 ----D---- C:\ondra
2010-09-09 12:58:48 ----RSD---- C:\WINDOWS\Fonts
2010-09-09 12:57:09 ----HD---- C:\WINDOWS\inf
2010-09-09 12:57:08 ----D---- C:\WINDOWS\system32\CatRoot
2010-09-09 12:56:12 ----D---- C:\internet
2010-09-09 12:55:45 ----D---- C:\WINDOWS\Help
2010-09-09 12:55:13 ----D---- C:\WINDOWS\system32\CatRoot2
2010-09-09 12:34:34 ----D---- C:\Záloha
2010-09-09 12:31:19 ----SHD---- C:\WINDOWS\Installer
2010-09-09 12:29:47 ----A---- C:\WINDOWS\ODBC.INI
2010-09-09 12:29:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-09 12:29:10 ----D---- C:\Program Files\Common Files
2010-09-09 12:29:06 ----D---- C:\Program Files\Microsoft Works
2010-09-09 12:01:14 ----D---- C:\WINDOWS\network diagnostic
2010-09-09 11:39:18 ----D---- C:\Program Files\Microsoft Office
2010-09-09 11:39:17 ----D---- C:\Program Files\Common Files\System
2010-09-09 11:39:08 ----A---- C:\WINDOWS\win.ini
2010-09-09 08:46:33 ----D---- C:\Program Files\PDFCreator
2010-09-08 08:05:52 ----D---- C:\Documents and Settings\Ing. Pavel Stoklasa\Data aplikací\ICQ
2010-09-05 13:37:53 ----D---- C:\Pavel-dokumety_záloha_havárie_18_05_2008
2010-09-02 13:29:27 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2010-09-01 17:35:32 ----D---- C:\Program Files\AutoCAD LT 2002 Cz
2010-09-01 16:16:02 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-15 13:59:12 ----D---- C:\Documents and Settings\Ing. Pavel Stoklasa\Data aplikací\Adobe
2010-08-13 07:40:43 ----D---- C:\WINDOWS\Microsoft.NET
2010-08-13 07:38:52 ----RSD---- C:\WINDOWS\assembly
2010-08-12 19:42:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-08-12 19:42:13 ----D---- C:\WINDOWS\system32\drivers
2010-08-12 19:42:11 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-12 19:42:09 ----A---- C:\WINDOWS\imsins.BAK
2010-08-12 19:41:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-08-12 19:41:25 ----D---- C:\WINDOWS\WinSxS
2010-08-12 19:39:41 ----D---- C:\Program Files\Internet Explorer
2010-08-12 19:37:54 ----D---- C:\Program Files\Movie Maker
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 NTGDT;NTGDT; \??\C:\WINDOWS\system32\Drivers\NTGDT.SYS []
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aksfridge;HASP Fridge; C:\WINDOWS\system32\DRIVERS\aksfridge.sys [2009-01-16 352256]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2006-04-22 8064]
R2 hardlock;hardlock; \??\C:\WINDOWS\system32\drivers\hardlock.sys []
R2 Haspnt;Haspnt; \??\C:\WINDOWS\system32\drivers\Haspnt.sys []
R2 HplParNt;HplParNt; \??\C:\WINDOWS\system32\drivers\HplParNt.sys []
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2006-09-05 20096]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-08-11 3958496]
R3 ROCKEYNT;Feitian ROCKEY4 Device Service; C:\WINDOWS\system32\DRIVERS\Rockey4.sys [2008-11-07 22016]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2006-11-22 250496]
S3 akshasp;Aladdin HASP Key; C:\WINDOWS\system32\DRIVERS\akshasp.sys [2009-03-13 238208]
S3 akshhl;Aladdin HASP HL Key; C:\WINDOWS\system32\DRIVERS\akshhl.sys [2007-07-23 46336]
S3 aksusb;Aladdin USB Key; C:\WINDOWS\system32\DRIVERS\aksusb.sys [2009-06-22 16384]
S3 ax7o0u9e;ax7o0u9e; C:\WINDOWS\system32\drivers\ax7o0u9e.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 GEMPC430;GEMPC430; C:\WINDOWS\System32\Drivers\gemusb.sys [2002-09-13 53568]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2010-01-08 380928]
R2 hasplms;HASP License Manager; C:\WINDOWS\system32\hasplms.exe [2009-04-21 2869760]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-06-29 507904]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-08-11 155715]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-01-16 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Prejmenujte ComboFix treba na Beruska.com
, záskok za kolegu.