Stránka 1 z 1

preventivka

Napsal: 17 úno 2011 20:33
od mrr.killer
zdravim...

nebol som doma a za tu dobu co sa dialo netusim... brat mi len vravel ze vraj mame v pc spinu ale ako sa to prejavuje to nepovedal... ja som si zvlastne spravanie u PC nevsimol ale tak preistotu by som poprosil o kontrolu...

dakujem velmi pekne




Logfile of random's system information tool 1.08 (written by random/random)
Run by Ondrej at 2011-02-17 20:28:20
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (11%) free of 26 GB
Total RAM: 511 MB (19% free)

HijackThis download failed

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1364589140-1801674531-1003Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1364589140-1801674531-1003UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PtiuPbmd"=ptipbm.dll,SetWriteBack []
"CTHelper"=C:\WINDOWS\CTHELPER.EXE [2006-08-11 17920]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2006-08-11 18944]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-09-30 4603904]
"nwiz"=nwiz.exe /install []
"COMODO Firewall Pro"=C:\Program Files\Comodo\Firewall\CPF.exe [2009-02-19 1115728]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-01-12 2219184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]
"Google Update"=C:\Documents and Settings\Ondrej\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-02-21 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
D:\Program Files\SlySoft\AnyDVD\AnyDVD.exe [2009-03-04 459264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\Ondrej\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-02-21 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2004-05-12 241664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2004-02-12 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2004-09-30 86016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe [2008-07-02 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2004-06-18 67584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-09 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Teleport Scheduler]
D:\Program Files\Teleport Pro\scheduler.exe [2007-09-20 327680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2004-05-28 241664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Image Zone Fast Start.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2004-05-28 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Ondrej^Nabídka Start^Programy^Po spuštění^The Matrix_ Path of Neo Registration.lnk]
C:\Documents and Settings\Ondrej\Local Settings\Temp\{9860DB7A-7EE7-4491-9855-165F6EF45F5F}\{E571E8B1-9771-465D-9DE0-3BA2D1BDAE99}\ATR1.exe /remind /language=SKY /PRNM=The Matrix: Path of Neo /PRMP=MPON /SKUN=PCXX /GTYP=ACTN []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Ondrej-transfer.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\ICQ6.5\ICQ.exe"="D:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe"="C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.2"
"D:\Program Files\Skype\Plugin Manager\skypePM.exe"="D:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"D:\Program Files\Skype\Phone\Skype.exe"="D:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2011-02-17 20:28:23 ----D---- C:\Program Files\trend micro
2011-02-17 20:28:20 ----D---- C:\rsit
2011-02-17 20:22:32 ----D---- C:\windows\LastGood
2011-02-17 20:21:51 ----D---- C:\Program Files\ESET
2011-02-17 20:21:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-02-11 20:27:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\cKbKmAf14700

======List of files/folders modified in the last 1 months======

2011-02-17 20:28:23 ----RD---- C:\Program Files
2011-02-17 20:27:58 ----SHD---- C:\windows\Installer
2011-02-17 20:27:58 ----HD---- C:\Config.Msi
2011-02-17 20:22:38 ----D---- C:\windows\Prefetch
2011-02-17 20:22:35 ----HD---- C:\windows\inf
2011-02-17 20:22:35 ----D---- C:\windows\system32\drivers
2011-02-17 20:22:32 ----D---- C:\WINDOWS
2011-02-17 20:22:26 ----D---- C:\windows\system32\CatRoot2
2011-02-17 20:20:15 ----D---- C:\windows\Temp
2011-02-17 20:16:44 ----A---- C:\windows\SchedLgU.Txt
2011-02-17 20:15:56 ----A---- C:\windows\{00000000-00000000-00000007-00001102-00000004-20021102}.BAK
2011-02-11 20:50:50 ----A---- C:\windows\msicpl.ini
2011-02-11 08:50:33 ----A---- C:\windows\NeroDigital.ini
2011-01-28 20:54:53 ----A---- C:\windows\avisplitter.ini
2011-01-19 22:36:39 ----D---- C:\windows\system32

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\windows\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 Inspect;Comodo Network Engine; C:\windows\System32\DRIVERS\inspect.sys [2009-02-19 51328]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\windows\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2008-08-20 44944]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2009-02-19 639224]
R0 UlSata;UlSata; C:\windows\system32\DRIVERS\ulsata.sys [2003-01-26 64256]
R0 viaagp1;VIA AGP Filter; C:\windows\system32\DRIVERS\viaagp1.sys [2003-07-02 27904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\windows\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdK8;AMD Athlon64 Processor Driver; C:\windows\system32\DRIVERS\AmdK8.sys [2003-11-07 35328]
R1 CmdMon;Comodo Application Engine; C:\windows\System32\DRIVERS\cmdmon.sys [2009-02-19 75520]
R1 DumaNT;NVIDIA Stereo Helper Service; C:\windows\system32\DRIVERS\dumant.sys [2002-11-18 399700]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2010-12-21 115008]
R1 epfwtdir;epfwtdir; C:\windows\system32\DRIVERS\epfwtdir.sys [2010-12-21 94872]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\windows\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 eamon;eamon; C:\windows\system32\DRIVERS\eamon.sys [2010-12-21 141264]
R2 ElbyCDIO;ElbyCDIO Driver; C:\windows\System32\Drivers\ElbyCDIO.sys [2005-04-21 10624]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\windows\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\windows\system32\drivers\ALCXWDM.SYS [2004-06-21 626204]
R3 AnyDVD;AnyDVD; C:\windows\System32\Drivers\AnyDVD.sys [2006-01-01 19200]
R3 ctac32k;Creative AC3 Software Decoder; C:\windows\system32\drivers\ctac32k.sys [2006-08-11 502272]
R3 ctaud2k;Creative Audio Driver (WDM); C:\windows\system32\drivers\ctaud2k.sys [2006-08-11 499584]
R3 ctprxy2k;Creative Proxy Driver; C:\windows\system32\drivers\ctprxy2k.sys [2006-08-11 7168]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\windows\system32\drivers\ctsfm2k.sys [2006-08-11 143872]
R3 emupia;E-mu Plug-in Architecture Driver; C:\windows\system32\drivers\emupia2k.sys [2006-08-11 78336]
R3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\windows\system32\drivers\ha10kx2k.sys [2006-08-11 766976]
R3 hap16v2k;Creative P16V HAL Driver; C:\windows\system32\drivers\hap16v2k.sys [2006-08-11 154112]
R3 hidusb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 nv;nv; C:\windows\system32\DRIVERS\nv4_mini.sys [2004-09-30 2743840]
R3 ossrv;Creative OS Services Driver; C:\windows\system32\drivers\ctoss2k.sys [2006-08-11 116224]
R3 RTL8023xp;Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver; C:\windows\system32\DRIVERS\Rtlnicxp.sys [2004-07-16 70400]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\windows\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 ajdhb2dh;ajdhb2dh; C:\windows\system32\drivers\ajdhb2dh.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\windows\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\windows\system32\drivers\ctdvda2k.sys [2005-11-10 340704]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2009-02-19 25544]
S3 hap17v2k;Creative P17V HAL Driver; C:\windows\system32\drivers\hap17v2k.sys [2006-08-11 180224]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\windows\system32\DRIVERS\HPZid412.sys [2004-06-21 51088]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\windows\system32\DRIVERS\HPZipr12.sys [2004-06-21 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\windows\system32\DRIVERS\HPZius12.sys [2004-06-21 21744]
S3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NIC1394;1394 Net Driver; C:\windows\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nm;Ovladač programu Sledování sítě; C:\windows\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\windows\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\windows\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\windows\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:\windows\system32\DRIVERS\s0017bus.sys [2008-10-21 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS); C:\windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s0017obex.sys [2008-10-21 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM); C:\windows\system32\DRIVERS\s0017unic.sys [2008-10-21 109736]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM); C:\windows\system32\DRIVERS\s1018bus.sys [2008-11-04 86696]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s1018mdfl.sys [2008-11-04 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s1018mdm.sys [2008-11-04 114472]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s1018mgmt.sys [2008-11-04 108200]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS); C:\windows\system32\DRIVERS\s1018nd5.sys [2008-11-04 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s1018obex.sys [2008-11-04 104616]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM); C:\windows\system32\DRIVERS\s1018unic.sys [2008-11-04 109736]
S3 s816bus;Sony Ericsson Device 816 driver (WDM); C:\windows\system32\DRIVERS\s816bus.sys [2007-06-19 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter; C:\windows\system32\DRIVERS\s816mdfl.sys [2007-06-19 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver; C:\windows\system32\DRIVERS\s816mdm.sys [2007-06-19 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM); C:\windows\system32\DRIVERS\s816mgmt.sys [2007-06-19 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS); C:\windows\system32\DRIVERS\s816nd5.sys [2007-06-19 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface; C:\windows\system32\DRIVERS\s816obex.sys [2007-06-19 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM); C:\windows\system32\DRIVERS\s816unic.sys [2007-06-19 97704]
S3 usb_rndis;USB Remote NDIS Device Driver; C:\windows\system32\DRIVERS\usb8023.sys [2008-04-13 12800]
S3 usbprint;Třída USB Printer; C:\windows\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WpdUsb;WpdUsb; C:\windows\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\windows\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CmdAgent;Comodo Application Agent; C:\Program Files\Comodo\Firewall\cmdagent.exe [2009-02-19 361040]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-01-12 810144]
R2 NVSvc;NVIDIA Display Driver Service; C:\windows\system32\nvsvc32.exe [2004-09-30 127043]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\windows\system32\svchost.exe [2008-04-14 14336]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S2 StarWindService;StarWind iSCSI Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2011-01-12 33584]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-02-28 654848]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-09 152984]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

Re: preventivka

Napsal: 18 úno 2011 19:30
od Rudy
Log vypadá čistý. Pokud by PC vykazoval nějaké anomálie v chodu, udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: preventivka

Napsal: 18 úno 2011 21:47
od mrr.killer
PC nevykazuje ziadne anomalie... podarilo sa mi od brata vytiahnut nejake info

vraj sa mu zmenil obrazok plochy - z opisu mi to pripomenulo vzhlad BSOD, akurat ze pc mu nevyplo a videl svoje ikony na ploche...
a ze sa spustilo nejake okno kde sa plnil progressbar a roloval zoznam vypisujuc "trojan" "worms" atd...

tu je ten log z mbam

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verzia databázy: 5363

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

18. 2. 2011 21:43:01
mbam-log-2011-02-18 (21-42-55).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Objektov kontrolovaných: 363407
Uplynutý čas: 55 min, 33 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 1
Infikované priečinky: 0
Infikované súbory: 21

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
c:\documents and settings\Ondrej\local settings\temporary internet files\Content.IE5\1TQ1EWQH\setup_lib_srl[1].exe (Spyware.Zbot) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\dwm.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\antivirus system 2011\antivirus__system__2011.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\antivirus system 2011\securityhelper.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\antivirus system 2011\securitymanager.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\cpx3lt2rm12flpeh11ibevc3jqvxl3n2\browseropera.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\cpx3lt2rm12flpeh11ibevc3jqvxl3n2\softwarewerefet.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\xykdcpoqbaclfgwnbtbbxw1i2aoukscl2\internetbrowser.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\0.7160264848311895.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\browsernero.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\jar_cache5833614285074691370.tmp (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\m.23.tmp.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\nabídka start\Programy\příslušenství\systémové nástroje\internetdoplk.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Ondrej\nabídka start\Programy\příslušenství\systémové nástroje\memcopysoftware.exe (Trojan.FakeAlert) -> No action taken.
d:\program files\Adobe\adobe photoshop cs3\extended_patch_by_p!mpdog_adobe_photoshop_cs3.exe (RiskWare.Agent.CK) -> No action taken.
d:\program files\your uninstaller 2008\Keygen.exe (Trojan.Dropper.PGen) -> No action taken.
c:\documents and settings\Ondrej\data aplikací\microsoft\conhost.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\0.12233830800839285.exe (Trojan.Dropper) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\7.exe (Worm.AutoRun) -> No action taken.
c:\documents and settings\Ondrej\local settings\Temp\csrss.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\user\ctfmon.exe (Trojan.Agent) -> No action taken.

Re: preventivka

Napsal: 18 úno 2011 22:17
od Rudy
Všechny nalezené položky smažte.

Re: preventivka

Napsal: 18 úno 2011 22:22
od mrr.killer
zmazane... je teda PC v poriadku? mozme bez obav sa pripajat na inernet (mail, internetbanking...)?

Re: preventivka

Napsal: 18 úno 2011 23:03
od Rudy
Pokud PC nevykazuje nějaké anomálie v chodu, měl by být již čistý.

Re: preventivka

Napsal: 19 úno 2011 00:39
od mrr.killer
dakujem pekne za Vas cas a pomoc :)

Re: preventivka

Napsal: 19 úno 2011 11:45
od Rudy
Nemáte zač!