VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Podezření na havěť (log inside)

https://forum.viry.cz:443/viewtopic.php?t=105880

Stránka 1 z 1

Podezření na havěť (log inside)

Napsal: 25 říj 2010 10:00
od Dejw.N
Zdravím,

včera večer mi při běžném surfování NTB začal zlobit. Přestalo fungovat připojení k netu a ani po x-tém vytažení síťového kabelu WIN 7 pořád detekovaly připojení, místo toho, aby zaregistrovaly, že je kabel odpojen. Tak jsem NTB natvrdo vypl - softw. restart nereagoval, a po opětovném zapnutí mi vždy při startu využívá svchost.exe cca 60%CPU (jinak vše v normálu). Projel jsem NTB Spybotem a čisto. Přikládám log a prosím o kontrolu/rady.

Díky moc

--------------------------------------------------------------------------
Logfile of random's system information tool 1.08 (written by random/random)
Run by Dejw at 2010-10-25 10:54:12
Microsoft Windows 7 Professional
System drive C: has 25 GB (25%) free of 99 GB
Total RAM: 3069 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:54:26, on 25.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\accelerometerST.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\Student DOG\StudentDOG.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\Dejw\Desktop\RSIT.exe
C:\Program Files\trend micro\Dejw.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DigitalPersona Personal Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O3 - Toolbar: (no name) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - (no file)
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKCU\..\Run: [AccelerometerSysTrayApplet] "C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe"
O4 - HKCU\..\Run: [EVEREST AutoStart] C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest_start.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [StudentDOG] C:\Program Files\Student DOG\StudentDOG.exe -h
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Active@ Disk Monitor - LSoft Technologies Inc - C:\Program Files\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\aestsrv.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\Windows\system32\Hpservice.exe
O23 - Service: Media Center Support Service (Jasmio.MediaCenter.Service) - Unknown owner - C:\Program Files\Jasmio\Media Center Support Service\Jasmio.MediaCenter.Service.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - c:\Windows\system32\vfsFPService.exe

--
End of file - 9349 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
DigitalPersona Personal Extension - C:\Program Files\DigitalPersona\Bin\DpOtsPluginIe8.dll [2009-12-01 1256512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B922D405-6D13-4A2B-AE89-08A030DA4402}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-07-21 458844]
"WirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2009-07-23 498744]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"DpAgent"=C:\Program Files\DigitalPersona\Bin\dpagent.exe [2009-12-01 842816]
"UCam_Menu"=C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [2007-12-24 222504]
"UnlockerAssistant"=C:\Program Files\Unlocker\UnlockerAssistant.exe [2010-03-09 15872]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2215064]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1557800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AccelerometerSysTrayApplet"=C:\Program Files\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.Exe [2009-07-13 68152]
"EVEREST AutoStart"=C:\Program Files\Lavalys\EVEREST Ultimate Edition\everest_start.exe [2009-03-30 334928]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]
"StudentDOG"=C:\Program Files\Student DOG\StudentDOG.exe [2010-08-30 2126848]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
DPPWDFLT

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoThumbnailCache"=1
"DisableThumbnailsOnNetworkFolders"=1
"DisableThumbnails"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-25 10:46:49 ----D---- C:\Program Files\trend micro
2010-10-25 10:46:46 ----D---- C:\rsit
2010-10-24 10:22:48 ----A---- C:\ProgramData\HPWALog.txt
2010-10-18 11:54:55 ----SHD---- C:\$RECYCLE.BIN
2010-10-13 16:04:14 ----A---- C:\Windows\system32\RTNUninst32.dll
2010-10-13 16:04:14 ----A---- C:\Windows\system32\RtNicProp32.dll
2010-10-13 16:04:14 ----A---- C:\Windows\system32\drivers\Rt86win7.sys
2010-10-13 16:00:27 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2010-10-13 16:00:27 ----A---- C:\Windows\system32\SynTPCo4.dll
2010-10-13 16:00:26 ----A---- C:\Windows\system32\SynCtrl.dll
2010-10-13 16:00:26 ----A---- C:\Windows\system32\SynCOM.dll
2010-10-13 16:00:24 ----A---- C:\Windows\system32\SynTPAPI.dll
2010-10-13 16:00:24 ----A---- C:\Windows\system32\drivers\SynTP.sys
2010-10-13 14:46:39 ----D---- C:\Windows\cs
2010-10-13 14:42:42 ----A---- C:\Windows\system32\UIRibbonRes.dll
2010-10-13 14:42:42 ----A---- C:\Windows\system32\UIRibbon.dll
2010-10-13 14:42:14 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-10-13 14:42:14 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-10-13 14:42:14 ----A---- C:\Windows\system32\mf.dll
2010-10-12 22:45:23 ----A---- C:\Windows\system32\t2embed.dll
2010-10-12 22:45:17 ----A---- C:\Windows\system32\iertutil.dll
2010-10-12 22:45:16 ----A---- C:\Windows\system32\mshtml.dll
2010-10-12 22:45:14 ----A---- C:\Windows\system32\ieframe.dll
2010-10-12 22:45:13 ----A---- C:\Windows\system32\urlmon.dll
2010-10-12 22:45:13 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-12 22:45:12 ----A---- C:\Windows\system32\wininet.dll
2010-10-12 22:45:12 ----A---- C:\Windows\system32\mstime.dll
2010-10-12 22:45:12 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-12 22:45:12 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-12 22:45:11 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-12 22:45:11 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-12 22:45:11 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-12 22:45:11 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-12 22:45:11 ----A---- C:\Windows\system32\ieui.dll
2010-10-12 22:45:11 ----A---- C:\Windows\system32\iepeers.dll
2010-10-12 22:45:06 ----A---- C:\Windows\system32\wmp.dll
2010-10-12 22:45:05 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-12 22:45:04 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-12 22:44:57 ----A---- C:\Windows\system32\schannel.dll
2010-10-12 22:44:56 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-12 22:44:56 ----A---- C:\Windows\system32\mfc40.dll
2010-10-12 22:44:52 ----A---- C:\Windows\system32\ole32.dll
2010-10-12 22:44:51 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-12 22:44:51 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-12 22:44:51 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-12 22:44:51 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-12 22:44:50 ----A---- C:\Windows\system32\win32k.sys
2010-10-12 22:44:49 ----A---- C:\Windows\system32\comctl32.dll
2010-10-12 22:44:23 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-12 16:06:26 ----D---- C:\Program Files\Windows Live
2010-10-12 16:02:24 ----D---- C:\Program Files\Common Files\Windows Live
2010-10-11 15:58:50 ----D---- C:\Windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2010-10-11 15:58:48 ----D---- C:\ProgramData\NVIDIA Corporation
2010-10-11 15:57:08 ----A---- C:\Windows\system32\nvhdap32.dll
2010-10-11 15:57:08 ----A---- C:\Windows\system32\nvapo32v.dll
2010-10-11 15:57:08 ----A---- C:\Windows\system32\drivers\nvhda32v.sys
2010-10-11 15:56:58 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-10-11 15:56:56 ----A---- C:\Windows\system32\OpenCL.dll
2010-10-11 15:56:55 ----A---- C:\Windows\system32\nvoglv32.dll
2010-10-11 15:56:55 ----A---- C:\Windows\system32\nvdecodemft.dll
2010-10-11 15:56:54 ----A---- C:\Windows\system32\nvd3dum.dll
2010-10-11 15:56:54 ----A---- C:\Windows\system32\nvcuvid.dll
2010-10-11 15:56:54 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-10-11 15:56:54 ----A---- C:\Windows\system32\nvcuda.dll
2010-10-11 15:56:53 ----A---- C:\Windows\system32\nvcompiler.dll
2010-10-11 15:56:53 ----A---- C:\Windows\system32\nvcod1922.dll
2010-10-11 15:56:53 ----A---- C:\Windows\system32\nvcod.dll
2010-10-07 21:44:38 ----D---- C:\Users\Dejw\AppData\Roaming\ESET
2010-10-07 08:26:21 ----D---- C:\Program Files\Common Files\Adobe
2010-09-29 08:04:01 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2010-09-29 08:04:00 ----A---- C:\Windows\system32\drivers\ks.sys
2010-09-29 08:03:46 ----A---- C:\Windows\system32\tzres.dll
2010-09-26 18:08:03 ----A---- C:\Windows\system32\rapture3d_oal.dll
2010-09-26 18:08:03 ----A---- C:\Windows\system32\mkl_blueripple.dll
2010-09-26 18:08:02 ----D---- C:\Program Files\BRS
2010-09-26 18:08:01 ----RA---- C:\Windows\system32\tmp618D.tmp
2010-09-26 18:08:01 ----RA---- C:\Windows\system32\tmp2851.tmp
2010-09-26 18:08:01 ----A---- C:\Windows\system32\wrap_oal.dll
2010-09-26 18:08:01 ----A---- C:\Windows\system32\OpenAL32.dll
2010-09-26 13:56:59 ----D---- C:\Windows\pss

======List of files/folders modified in the last 1 months======

2010-10-25 10:54:15 ----D---- C:\Windows\Temp
2010-10-25 10:48:29 ----D---- C:\Windows\system32\config
2010-10-25 10:47:04 ----D---- C:\Windows\Prefetch
2010-10-25 10:46:57 ----RD---- C:\Program Files
2010-10-25 10:45:38 ----HD---- C:\ProgramData
2010-10-25 10:40:04 ----D---- C:\Program Files\ESET
2010-10-25 10:34:57 ----D---- C:\Windows\winsxs
2010-10-25 10:33:45 ----D---- C:\Windows\System32
2010-10-25 10:33:45 ----D---- C:\Program Files\Internet Explorer
2010-10-25 10:30:56 ----SD---- C:\Users\Dejw\AppData\Roaming\Microsoft
2010-10-25 09:22:52 ----D---- C:\Windows\inf
2010-10-25 09:22:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-25 08:21:46 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-10-25 07:56:11 ----D---- C:\Windows\system32\LogFiles
2010-10-25 07:53:07 ----D---- C:\Windows
2010-10-24 23:38:35 ----D---- C:\Windows\debug
2010-10-24 23:36:42 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-10-24 23:36:07 ----D---- C:\Windows\system32\drivers\etc
2010-10-24 10:17:10 ----D---- C:\Windows\system32\catroot2
2010-10-23 22:10:40 ----SHD---- C:\Windows\Installer
2010-10-22 21:17:10 ----D---- C:\Program Files\FreeRapid 0.83
2010-10-21 10:23:53 ----D---- C:\Program Files\Mozilla Firefox
2010-10-20 15:32:18 ----D---- C:\Windows\system32\Tasks
2010-10-19 11:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-14 10:19:11 ----D---- C:\Windows\system32\NDF
2010-10-13 16:05:58 ----D---- C:\Windows\system32\catroot
2010-10-13 16:04:52 ----D---- C:\Windows\system32\drivers
2010-10-13 16:04:45 ----D---- C:\Windows\system32\DriverStore
2010-10-13 16:04:13 ----D---- C:\Program Files\Realtek
2010-10-13 15:13:15 ----D---- C:\Program Files\SystemRequirementsLab
2010-10-13 14:44:06 ----SD---- C:\ProgramData\Microsoft
2010-10-13 14:43:41 ----D---- C:\Program Files\Common Files\microsoft shared
2010-10-12 23:19:31 ----D---- C:\Windows\system32\migration
2010-10-12 23:19:31 ----D---- C:\Program Files\Windows Media Player
2010-10-12 22:48:56 ----D---- C:\ProgramData\Microsoft Help
2010-10-12 22:45:37 ----A---- C:\Windows\system32\MRT.exe
2010-10-12 16:07:04 ----D---- C:\Program Files\Microsoft
2010-10-12 16:06:49 ----RSD---- C:\Windows\assembly
2010-10-12 16:06:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-10-12 16:02:24 ----D---- C:\Program Files\Common Files
2010-10-11 16:00:56 ----D---- C:\ProgramData\NVIDIA
2010-10-11 15:58:36 ----D---- C:\Program Files\NVIDIA Corporation
2010-10-07 21:55:27 ----D---- C:\ProgramData\ESET
2010-10-07 13:12:23 ----D---- C:\Program Files\CCleaner
2010-10-07 08:26:23 ----D---- C:\ProgramData\Adobe
2010-10-06 17:29:31 ----A---- C:\Windows\NeroDigital.ini
2010-10-05 17:17:33 ----AD---- C:\ProgramData\Temp
2010-10-01 16:12:54 ----D---- C:\Program Files\EA Sports
2010-10-01 12:55:39 ----D---- C:\Windows\Microsoft.NET
2010-09-29 18:22:26 ----D---- C:\Windows\rescache
2010-09-29 12:51:03 ----D---- C:\Program Files\Microsoft Silverlight
2010-09-29 08:39:09 ----D---- C:\Windows\system32\cs-CZ
2010-09-26 13:39:14 ----D---- C:\Windows\Registration

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2009-11-16 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys [2009-12-12 5632]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-07-29 136632]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 96920]
R3 Accelerometer;HP Accelerometer; C:\Windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 AVerAF15;AVerMedia A815; C:\Windows\System32\Drivers\AVerAF15.sys [2009-11-06 284928]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2008-09-04 54784]
R3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [2009-03-30 26224]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2009-09-23 120432]
R3 NETwNs32;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 32 Bit; C:\Windows\system32\DRIVERS\NETwNs32.sys [2010-07-14 6814720]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2010-06-22 105576]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-22 278560]
R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt.sys [2009-07-21 409088]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-08-28 228784]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
R3 WinUSB;WinUSB Service; C:\Windows\system32\DRIVERS\WinUSB.sys [2009-07-14 34944]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys []
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys []
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys []
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 84992]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys []
S3 USBNumPad;Numberpad USB Keyboard; C:\Windows\System32\Drivers\USBNumPad.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-04-08 56448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Active@ Disk Monitor;Active@ Disk Monitor; C:\Program Files\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [2009-09-02 1127944]
R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\aestsrv.exe [2009-03-02 81920]
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2010-01-08 380928]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2009-12-01 322624]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2009-07-08 26168]
R2 Jasmio.MediaCenter.Service;Media Center Support Service; C:\Program Files\Jasmio\Media Center Support Service\Jasmio.MediaCenter.Service.exe [2009-10-29 73144]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]
R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_8e7d5b9d3a91d8c5\STacSV.exe [2009-07-21 221266]
R2 vfsFPService;Validity Fingerprint Service; c:\Windows\system32\vfsFPService.exe [2009-03-26 599344]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-27 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 33584]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-18 1343400]

-----------------EOF-----------------

Re: Podezření na havěť (log inside)

Napsal: 25 říj 2010 19:43
od Rudy
Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: Podezření na havěť (log inside)

Napsal: 26 říj 2010 21:45
od Dejw.N
Čisto.... Ikdyž dnes MS vydal nějaké aktualizace W7, tak uvidíme, jestli to nemohla být nějaká jejich chybka...
--------------------------------
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4954

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

26.10.2010 22:39:46
mbam-log-2010-10-26 (22-39-46).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 257684
Uplynulý čas: 43 minuta(y), 2 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Re: Podezření na havěť (log inside)

Napsal: 26 říj 2010 22:00
od Rudy
OK, log je čistý. V případě problému zkuste obnovu systému k datu, kdy korektně fungoval.

Re: Podezření na havěť (log inside)

Napsal: 27 říj 2010 11:43
od Dejw.N
Tuto možnost mám ve WIN vypnutu... Takže mi nezbyde, buď ignorovat neustálé "žraní" CPU procesem svchost.exe (děje se pouze, když jsem připojen k netu), anebo WIN přeinstalovat? :-(
Zjistil jsem služby, které běží pod tím svchostem. Třeba to pomůže.

AeLookupSvc - Funkčnost aplikací
BITS - Služba inteligentního přenosu na pozadí
EapHost - Protokol EAP
gpsvc - Klient zásad skupiny
IKEEXT - Služba IKE and AuthIP IPsec....
iphlpsvc - Pomocná služba protokolu IP
LanmanServer - Server
ProfSvc - Služba Profil uživatele
Schedule - Plánovač úloh
SENS - Služba oznamování událostí systému
ShellHWDetection - Rozpoznávání hardwaru
Themes - Motivy
Winmgmt - Slžba WMI
wauauserv - Windows Update

Všechny služby mají PID 852 a běží pod skupinou netsvcs...

Re: Podezření na havěť (log inside)

Napsal: 27 říj 2010 16:51
od Rudy
Na zkoušku vypněte aut. aktualizace.

Re: Podezření na havěť (log inside)

Napsal: 30 říj 2010 17:24
od Dejw.N
Ano, zkouška vyšla. Je to tím. Svchost vytíží CPU na cca minutu, a pak už je klid... Je to tím, ale zaráží mne, proč to tak je? :-) Díky za vše!

Re: Podezření na havěť (log inside)

Napsal: 30 říj 2010 20:41
od Rudy
Nejspíš se nezdařila některá aktualizace. Ponechte to pár dnů vypnuté, někdy po 10. listopadu budou nové aktualizace. Pak je zapněte, většinou se problém srovná.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz