VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o zkontrolování logu

https://forum.viry.cz:443/viewtopic.php?t=108219

Stránka 1 z 1

Prosím o zkontrolování logu

Napsal: 06 led 2011 14:31
od nemo11
Dobrý den,
dnes na mě při přihlášení na na síť FaceBook na mě vybafla hláška že můj účet byl zablokován a možný důvod je malware čehož si tedy nejsem vědom. Proto prosím o zkontrolování logu jinak co se PC týče vše je v naprostém pořádku.
Děkuji. :)

Logfile of random's system information tool 1.08 (written by random/random)
Run by SEETH at 2011-01-06 14:27:20
Microsoft Windows 7 Ultimate
System drive C: has 15 GB (29%) free of 50 GB
Total RAM: 4096 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:27:23, on 6.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Vtune\TBPANEL.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
D:\PROGRAMY\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\SEETH.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [TBPanel] C:\Program Files (x86)\Vtune\TBPanel.exe /A
O4 - HKCU\..\Run: [Google Update] "C:\Users\SEETH\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - D:\PROGRAMY\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7595 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9d580c47-3e09-48cd-9e4b-7cd781555c43 -SystemEventPortName:HostProcess-8884bbc6-7bf2-4f88-be33-1243cc4e9bf8 -IoCancelEventPortName:HostProcess-c5c518d6-ef41-4c17-820e-248966a9d941 -NonStateChangingEventPortName:HostProcess-51f817df-c1ba-4392-90fd-43be83896c69 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3e05d17b-9dfe-40bc-9c9f-e2dc0940a664
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3cf6b18b-2d35-479b-8390-7551075e4097 -SystemEventPortName:HostProcess-7d8809b7-2b9a-4240-a12a-12db19908e8f -IoCancelEventPortName:HostProcess-0c254bff-f469-4d5d-92ab-20efad0681e3 -NonStateChangingEventPortName:HostProcess-b929ce7a-ab45-454f-9ae0-cf0ad68223fd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3c4a955f-6236-4a61-8db1-4ddb2f95e825
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\dgdersvc.exe
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
D:\PROGRAMY\Defrag\oodag.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
taskeng.exe {25AA3E26-C269-4CCD-9919-A7474E11D0FC}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe"
"C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
"C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Vtune\TBPANEL.exe" /A
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe"
"D:\PROGRAMY\G15_TeamSpeak\G15_TeamSpeak.exe"

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 18:08
od Marek-26
Dobrý den,
log není celý. Poprosím zkuste ještě jednou vygenerovat log :wink:

Klikněte na MBAM v mém podpisu a udělejte kompletní test a vložte mi sem výsledek :)

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 18:22
od nemo11
Omlouvám se teď by mělo být vše v pořádku.

Logfile of random's system information tool 1.08 (written by random/random)
Run by SEETH at 2011-01-06 14:27:20
Microsoft Windows 7 Ultimate
System drive C: has 15 GB (29%) free of 50 GB
Total RAM: 4096 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:27:23, on 6.1.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Vtune\TBPANEL.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
D:\PROGRAMY\G15_TeamSpeak\G15_TeamSpeak.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Windows Media Player\wmplayer.exe
C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\SEETH.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [TBPanel] C:\Program Files (x86)\Vtune\TBPanel.exe /A
O4 - HKCU\..\Run: [Google Update] "C:\Users\SEETH\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\Windows\system32\dgdersvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: O&O Defrag - O&O Software GmbH - D:\PROGRAMY\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7595 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
winlogon.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-9d580c47-3e09-48cd-9e4b-7cd781555c43 -SystemEventPortName:HostProcess-8884bbc6-7bf2-4f88-be33-1243cc4e9bf8 -IoCancelEventPortName:HostProcess-c5c518d6-ef41-4c17-820e-248966a9d941 -NonStateChangingEventPortName:HostProcess-51f817df-c1ba-4392-90fd-43be83896c69 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3e05d17b-9dfe-40bc-9c9f-e2dc0940a664
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-3cf6b18b-2d35-479b-8390-7551075e4097 -SystemEventPortName:HostProcess-7d8809b7-2b9a-4240-a12a-12db19908e8f -IoCancelEventPortName:HostProcess-0c254bff-f469-4d5d-92ab-20efad0681e3 -NonStateChangingEventPortName:HostProcess-b929ce7a-ab45-454f-9ae0-cf0ad68223fd -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3c4a955f-6236-4a61-8db1-4ddb2f95e825
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\dgdersvc.exe
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
D:\PROGRAMY\Defrag\oodag.exe
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"taskhost.exe"
taskeng.exe {25AA3E26-C269-4CCD-9919-A7474E11D0FC}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Logitech\Gaming Software\LWEMon.exe" /noui
"C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe"
"C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
"C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Vtune\TBPANEL.exe" /A
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDCountdown.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDPop3.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe"
"C:\Program Files\Logitech\GamePanel Software\Applets\LCDClock.exe"
"D:\PROGRAMY\G15_TeamSpeak\G15_TeamSpeak.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3620.01016300.1161909457 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3620.01016180.444198511 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3620.01016D80.1177013804 /prefetch:3 --ignored=" --type=renderer "
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3620.01016C00.2087084229 /prefetch:3 --ignored=" --type=renderer "
"C:\Program Files\Windows Media Player\WMPSideShowGadget.exe"
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /SkipFUE /RemoteOCXLaunch
"C:\Users\SEETH\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=CacheSize/CacheSizeGroup_3/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchEnabled/ProxyConnectionImpact/proxy_connections_32/SpdyImpact/npn_with_spdy/ --channel=3620.01085300.1412362362 /prefetch:3
"taskhost.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-2827445951-1758643074-319110142-10013_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-2827445951-1758643074-319110142-10013 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Users\SEETH\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2827445951-1758643074-319110142-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2827445951-1758643074-319110142-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-11-16 2716216]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-12-08 9642528]
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2009-09-16 190472]
"OODefragTray"=D:\PROGRAMY\Defrag\oodtray.exe [2009-09-11 3832064]
"Launch LgDeviceAgent"=C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe [2009-07-09 408584]
"Launch LCDMon"=C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe [2009-07-09 2091528]
"Launch LGDCore"=C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe [2009-07-09 4195336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"TBPanel"=C:\Program Files (x86)\Vtune\TBPanel.exe [2009-10-05 2158592]
"Google Update"=C:\Users\SEETH\AppData\Local\Google\Update\GoogleUpdate.exe [2010-06-18 136176]
"KiesTrayAgent"= []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-01-06 14:27:20 ----D---- C:\Program Files\trend micro
2010-12-22 20:10:21 ----D---- C:\Garmin
2010-12-22 18:58:46 ----D---- C:\ProgramData\Garmin
2010-12-22 15:54:43 ----D---- C:\Users\SEETH\AppData\Roaming\GARMIN
2010-12-22 15:54:38 ----D---- C:\Program Files (x86)\Garmin GPS Plugin
2010-12-22 15:54:37 ----D---- C:\Program Files\DIFX
2010-12-22 15:54:36 ----D---- C:\Program Files (x86)\Garmin
2010-12-21 12:53:48 ----A---- C:\Windows\SYSWOW64\javaws.exe
2010-12-21 12:53:48 ----A---- C:\Windows\SYSWOW64\javaw.exe
2010-12-21 12:53:48 ----A---- C:\Windows\SYSWOW64\java.exe
2010-12-15 14:09:45 ----A---- C:\Windows\SYSWOW64\tzres.dll
2010-12-15 14:09:45 ----A---- C:\Windows\system32\tzres.dll
2010-12-15 14:09:42 ----A---- C:\Windows\system32\wmicmiplugin.dll
2010-12-15 14:09:42 ----A---- C:\Windows\system32\taskschd.dll
2010-12-15 14:09:42 ----A---- C:\Windows\system32\taskeng.exe
2010-12-15 14:09:42 ----A---- C:\Windows\system32\taskcomp.dll
2010-12-15 14:09:42 ----A---- C:\Windows\system32\schedsvc.dll
2010-12-15 14:09:41 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2010-12-15 14:09:41 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2010-12-15 14:09:41 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2010-12-15 14:09:41 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2010-12-15 14:09:41 ----A---- C:\Windows\system32\schtasks.exe
2010-12-15 14:09:34 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2010-12-15 14:09:34 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2010-12-15 14:09:34 ----A---- C:\Windows\system32\atmlib.dll
2010-12-15 14:09:34 ----A---- C:\Windows\system32\atmfd.dll
2010-12-15 14:09:31 ----A---- C:\Windows\system32\win32k.sys
2010-12-15 14:09:29 ----A---- C:\Windows\system32\webio.dll
2010-12-15 14:09:28 ----A---- C:\Windows\SYSWOW64\webio.dll
2010-12-15 14:09:28 ----A---- C:\Windows\system32\consent.exe
2010-12-15 14:09:27 ----A---- C:\Windows\system32\mshtml.dll
2010-12-15 14:09:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2010-12-15 14:09:26 ----A---- C:\Windows\system32\mstime.dll
2010-12-15 14:09:26 ----A---- C:\Windows\system32\iertutil.dll
2010-12-15 14:09:26 ----A---- C:\Windows\system32\ieframe.dll
2010-12-15 14:09:24 ----A---- C:\Windows\SYSWOW64\mstime.dll
2010-12-15 14:09:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2010-12-15 14:09:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2010-12-15 14:09:22 ----A---- C:\Windows\system32\wininet.dll
2010-12-15 14:09:21 ----A---- C:\Windows\SYSWOW64\wininet.dll
2010-12-15 14:09:21 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2010-12-15 14:09:21 ----A---- C:\Windows\system32\urlmon.dll
2010-12-15 14:09:21 ----A---- C:\Windows\system32\msfeeds.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2010-12-15 14:09:20 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\mshtmled.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\msfeedssync.exe
2010-12-15 14:09:20 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\licmgr10.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\jsproxy.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\ieui.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\iepeers.dll
2010-12-15 14:09:20 ----A---- C:\Windows\system32\iedkcs32.dll

======List of files/folders modified in the last 1 months======

2011-01-06 14:27:23 ----D---- C:\Windows\Prefetch
2011-01-06 14:27:22 ----D---- C:\Windows\Temp
2011-01-06 14:27:20 ----RD---- C:\Program Files
2011-01-06 14:25:37 ----D---- C:\Windows\System32
2011-01-06 14:25:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-01-06 14:25:36 ----D---- C:\Windows\inf
2011-01-06 14:23:13 ----D---- C:\Windows\system32\config
2011-01-06 14:21:30 ----D---- C:\ProgramData\NVIDIA
2011-01-05 17:35:06 ----SHD---- C:\System Volume Information
2011-01-05 16:07:13 ----D---- C:\Windows\system32\catroot2
2011-01-03 22:01:00 ----D---- C:\Users\SEETH\AppData\Roaming\uTorrent
2011-01-02 13:40:18 ----D---- C:\Users\SEETH\AppData\Roaming\Xfire
2011-01-02 00:30:40 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-01-01 01:00:45 ----SHD---- C:\Windows\Installer
2010-12-31 23:50:06 ----HD---- C:\ProgramData
2010-12-30 01:01:58 ----SD---- C:\Users\SEETH\AppData\Roaming\Microsoft
2010-12-28 01:14:57 ----D---- C:\Program Files (x86)\Opera
2010-12-27 13:40:47 ----D---- C:\ProgramData\Xfire
2010-12-26 14:49:53 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2010-12-26 13:19:17 ----D---- C:\Windows\SYSWOW64\drivers
2010-12-26 01:00:02 ----D---- C:\Windows
2010-12-25 14:09:03 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2010-12-23 11:21:39 ----RSD---- C:\Windows\assembly
2010-12-23 11:21:39 ----D---- C:\Windows\Microsoft.NET
2010-12-22 20:10:37 ----D---- C:\Windows\system32\catroot
2010-12-22 20:10:36 ----D---- C:\Windows\system32\DriverStore
2010-12-22 16:07:20 ----D---- C:\Windows\SYSWOW64\cs-CZ
2010-12-22 16:07:20 ----D---- C:\Windows\system32\cs-CZ
2010-12-22 16:05:11 ----D---- C:\Windows\SysWOW64
2010-12-22 16:05:10 ----D---- C:\Windows\SYSWOW64\en-US
2010-12-22 16:05:10 ----D---- C:\Windows\system32\en-US
2010-12-22 16:05:09 ----D---- C:\Program Files (x86)\Microsoft.NET
2010-12-22 15:54:38 ----RD---- C:\Program Files (x86)
2010-12-21 12:53:36 ----D---- C:\Program Files (x86)\Java
2010-12-18 19:49:49 ----D---- C:\Windows\debug
2010-12-16 18:18:17 ----D---- C:\Windows\rescache
2010-12-16 16:24:18 ----D---- C:\Windows\winsxs
2010-12-16 00:22:59 ----D---- C:\Program Files\Windows Mail
2010-12-16 00:22:59 ----D---- C:\Program Files\Internet Explorer
2010-12-16 00:22:59 ----D---- C:\Program Files (x86)\Windows Mail
2010-12-16 00:22:59 ----D---- C:\Program Files (x86)\Internet Explorer
2010-12-16 00:22:58 ----D---- C:\Windows\SYSWOW64\migration
2010-12-16 00:22:58 ----D---- C:\Windows\system32\migration
2010-12-15 23:36:23 ----A---- C:\Windows\system32\MRT.exe
2010-12-15 23:36:11 ----D---- C:\ProgramData\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-08-19 828912]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-11-16 136584]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-11-16 145336]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-12-18 169080]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-12-18 44944]
R3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [2010-09-15 20552]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-01-08 33608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-12-08 2223392]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\LGBusEnum.sys [2009-07-09 22408]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2009-09-11 26248]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2009-09-11 15880]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2009-09-11 76552]
S2 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys []
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; C:\Windows\system32\drivers\LGVirHid.sys [2009-11-23 16008]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-11-10 56336]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-11-10 58384]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2010-07-20 125416]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2010-07-20 16872]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2010-07-20 159208]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2010-04-27 136264]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2010-04-27 19016]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2010-04-27 172104]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 TFsExDisk;TFsExDisk; \??\C:\Windows\System32\Drivers\TFsExDisk.sys [2010-09-15 16392]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\Windows\system32\drivers\WmFilter.sys [2009-09-11 41096]
S3 WmHidLo;Logitech Gaming USB Filter Driver; C:\Windows\system32\drivers\WmHidLo.sys [2009-09-11 36872]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 dgdersvc;Device Error Recovery Service; C:\Windows\system32\dgdersvc.exe [2010-09-15 119632]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2009-11-16 735960]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-10-16 989800]
R2 O&O Defrag;O&O Defrag; D:\PROGRAMY\Defrag\oodag.exe [2009-09-11 2287360]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2010-04-17 75064]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-06-18 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-11-16 23296]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-18 867080]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-11-17 403240]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-09 1255736]

-----------------EOF-----------------

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 18:44
od Marek-26
Toto mi pro jistotu otestujte na virustotal.com a vložte sem odkaz na výsledek :wink:
C:\Windows\system32\dgdersvc.exe
Ale měl by být čistý :)

Jinak v logu nic nevidím. A s hláškou od facebooku jsem se ještě nesetkal. Mohl by jste sem postnout screen?
http://www.viry.cz/forum/viewtopic.php?f=11&t=14114

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 19:58
od nemo11
Přikládám log z MBAM no bohužel rád bych i jsem na to myslel ale už jsem to z aktivoval ale ve stručnosti při zadaní hlesla vyskočila hlaška s tím že kvuli podezřelé aktivitě na mém učtu byl zablokován a mám projet pc jestli není zahlcené havětí celé to má několik bodu kde se ověřuje jestli jde o pravdu o vlastníka ale žádné osobní udaje se nezadávají a vše vypadalo věrohodně dále to obsahuje rady o tom aby uživatel změnil hesla ke svým účtům atd

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5471

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

6.1.2011 19:20:58
mbam-log-2011-01-06 (19-20-58).txt

Typ kontroly: Úplný test (C:\|D:\|)
Testované objekty: 652902
Uplynulý čas: 55 minut, 44 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 20:02
od nemo11
a zde vypís z toho sceneru :)

Antivirus Version Last update Result
AhnLab-V3 2011.01.06.01 2011.01.06 -
AntiVir 7.11.1.35 2011.01.06 -
Antiy-AVL 2.0.3.7 2011.01.06 -
Avast 4.8.1351.0 2011.01.06 -
Avast5 5.0.677.0 2011.01.06 -
AVG 9.0.0.851 2011.01.06 -
BitDefender 7.2 2011.01.06 -
CAT-QuickHeal 11.00 2011.01.06 -
ClamAV 0.96.4.0 2011.01.05 -
Command 5.2.11.5 2011.01.06 -
Comodo 7315 2011.01.06 -
DrWeb 5.0.2.03300 2011.01.06 -
Emsisoft 5.1.0.1 2011.01.06 -
eSafe 7.0.17.0 2011.01.06 -
eTrust-Vet 36.1.8084 2011.01.06 -
F-Prot 4.6.2.117 2011.01.05 -
F-Secure 9.0.16160.0 2011.01.06 -
Fortinet 4.2.254.0 2011.01.06 -
GData 21 2011.01.06 -
Ikarus T3.1.1.90.0 2011.01.06 -
Jiangmin 13.0.900 2011.01.06 -
K7AntiVirus 9.75.3461 2011.01.06 -
Kaspersky 7.0.0.125 2011.01.06 -
McAfee 5.400.0.1158 2011.01.06 -
McAfee-GW-Edition 2010.1C 2011.01.06 -
Microsoft 1.6402 2011.01.06 -
NOD32 5765 2011.01.06 -
Norman 6.06.12 2011.01.06 -
nProtect 2011-01-06.01 2011.01.06 -
Panda 10.0.2.7 2011.01.06 -
PCTools 7.0.3.5 2011.01.06 -
Prevx 3.0 2011.01.06 -
Rising 22.81.03.00 2011.01.06 -
Sophos 4.60.0 2011.01.06 -
SUPERAntiSpyware 4.40.0.1006 2011.01.06 -
Symantec 20101.3.0.103 2011.01.06 -
TheHacker 6.7.0.1.111 2011.01.06 -
TrendMicro 9.120.0.1004 2011.01.06 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.06 -
VBA32 3.12.14.2 2011.01.06 -
VIPRE 7978 2011.01.06 -
ViRobot 2011.1.6.4240 2011.01.06 -
VirusBuster 13.6.132.0 2011.01.06 -
MD5: 10b8f89d146d0e20b1284d47bb4ec6c9
SHA1: fe510793e5a0140efc5778faebd9b79527646820
SHA256: e4309f7866d27064f01447b30bb1aa468b4794674e9f0cda04c0525fa83db1cc
File size: 95568 bytes
Scan date: 2011-01-06 18:59:18 (UTC)

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 21:57
od Marek-26
PC se skutečně jeví jako čistý. Mohl by jste vyfotit tu hlášku na facebooku?

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 22:05
od nemo11
Jak jsem již psal výše bohužel jsem ji nezachytil :oops: a nyní již se nezobrazuje pro představu nešlo o žádnou malou hlášku jednoduše po zadání přihlašovacích údajů se místo domovské stránky FB zobrazila strana s tímhle kde bylo nahoře znázorněno několik kroků ktere se musí splnit k opětovné aktivaci účtu

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 22:12
od Marek-26
nemo11 píše:Jak jsem již psal výše bohužel jsem ji nezachytil :oops: a nyní již se nezobrazuje pro představu nešlo o žádnou malou hlášku jednoduše po zadání přihlašovacích údajů se místo domovské stránky FB zobrazila strana s tímhle kde bylo nahoře znázorněno několik kroků ktere se musí splnit k opětovné aktivaci účtu
PC je každopádně čistý :wink:

Re: Prosím o zkontrolování logu

Napsal: 06 led 2011 22:15
od nemo11
Tak mockrát děkuji za pomoc a za to že sis na mě udělal čas.
Děkuji :)

Re: Prosím o zkontrolování logu

Napsal: 07 led 2011 00:48
od Marek-26
Nemáte zač :)
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz