VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

problem s .NET Framework

https://forum.viry.cz:443/viewtopic.php?t=109636

Stránka 1 z 1

problem s .NET Framework

Napsal: 19 úno 2011 11:34
od Apoler
zdravim, na ntb mam problem s .net framework, pise to chybovou hlasku kvuli smtp, i po preinstalovani . V prubehu tydne byl na nb zachycen nortonem trojsky kun, soubor stub.exe byl ulozen do karanteny. Nevim jestli spolu tyto dve veci mohou souviset, ale problem s framework pretrvava...posilam log z RSIT...diky


Logfile of random's system information tool 1.08 (written by random/random)
Run by Hanka at 2011-02-19 11:25:36
Microsoft Windows 7 Home Premium
System drive C: has 406 GB (87%) free of 466 GB
Total RAM: 3893 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:25:48, on 19.2.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files (x86)\ICQ7.4\ICQ.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe
C:\Program Files\trend micro\Hanka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.4\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: winlogin.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\Windows\system32\ibmpmsvc.exe (file missing)
O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo Camera Mute (LENOVO.CAMMUTE) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
O23 - Service: Lenovo Microphone Mute (LENOVO.MICMUTE) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
O23 - Service: Lenovo Keyboard Noise Reduction (LENOVO.TPKNRSVC) - Lenovo Group Limited - C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
O23 - Service: Lenovo Auto Scroll (Lenovo.VIRTSCRLSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\Program Files (x86)\Lenovo\System Update\SUService.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Unknown owner - C:\Windows\System32\TPHDEXLG64.exe (file missing)
O23 - Service: On Screen Display (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 10676 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SC
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
"C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe"
"C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe"
"C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe"
"C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
"C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\diMaster.dll" /prefetch:1
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe"
"C:\Windows\System32\TpShocks.exe"
"C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe"
"C:\Program Files (x86)\ICQ7.4\ICQ.exe" silent loginmode=4
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\Windows\System32\StikyNot.exe"
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
"C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
"C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2760
"C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe" /c /a /s UserSession2
"C:\Windows\System32\rundll32.exe" C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\igfxext.exe -Embedding
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe"
"c:\Program Files (x86)\Lenovo\System Update\SUService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\servicing\TrustedInstaller.exe
taskeng.exe {EE424FA6-9578-4B58-8792-9D7C155141F7}
"C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe" /start
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Hanka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogin.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
"C:\Users\Hanka\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
C:\Windows\tasks\SystemToolsDailyTest.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-10-24 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll [2010-12-04 433080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL [2010-12-01 210360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-23 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-05 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar64.dll [2011-01-20 1581376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll [2010-12-04 433080]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-15 11049576]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2009-12-21 69568]
"TpShocks"=C:\Windows\system32\TpShocks.exe [2009-12-11 380776]
"LENOVO.TPKNRRES"=C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [2010-04-20 62312]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-04-23 2097960]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-11-29 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-11-29 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-11-29 417304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=C:\Program Files (x86)\ICQ7.4\ICQ.exe [2011-01-31 119608]
"RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 427520]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"PWMTRV"=rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor []
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

C:\Users\Hanka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
winlogin.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-11-29 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-19 11:25:36 ----D---- C:\rsit
2011-02-19 11:25:36 ----D---- C:\Program Files\trend micro
2011-02-19 11:14:50 ----D---- C:\ProgramData\Intel
2011-02-19 09:41:53 ----A---- C:\Windows\ntbtlog.txt
2011-02-19 09:29:50 ----D---- C:\Program Files\CCleaner
2011-02-09 14:38:34 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-02-09 14:38:34 ----A---- C:\Windows\system32\mshtml.dll
2011-02-09 14:38:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-02-09 14:38:30 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\mstime.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-09 14:38:30 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\iertutil.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\iepeers.dll
2011-02-09 14:38:30 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-09 14:37:50 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2011-02-09 14:37:50 ----A---- C:\Windows\system32\kerberos.dll
2011-02-09 14:37:49 ----A---- C:\Windows\system32\win32k.sys
2011-02-09 14:37:46 ----A---- C:\Windows\system32\msxml6.dll
2011-02-09 14:37:46 ----A---- C:\Windows\system32\msxml3.dll
2011-02-09 14:37:45 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-02-09 14:37:45 ----A---- C:\Windows\SYSWOW64\upnp.dll
2011-02-09 14:37:45 ----A---- C:\Windows\system32\wininet.dll
2011-02-09 14:37:45 ----A---- C:\Windows\system32\urlmon.dll
2011-02-09 14:37:45 ----A---- C:\Windows\system32\upnp.dll
2011-02-09 14:37:44 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-02-09 14:37:44 ----A---- C:\Windows\SYSWOW64\WebClnt.dll
2011-02-09 14:37:44 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2011-02-09 14:37:44 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2011-02-09 14:37:44 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-02-09 14:37:44 ----A---- C:\Windows\system32\wscapi.dll
2011-02-09 14:37:44 ----A---- C:\Windows\system32\winhttp.dll
2011-02-09 14:37:44 ----A---- C:\Windows\system32\WebClnt.dll
2011-02-09 14:37:44 ----A---- C:\Windows\system32\ieframe.dll
2011-02-09 14:37:44 ----A---- C:\Windows\system32\davclnt.dll
2011-02-09 14:37:43 ----A---- C:\Windows\SYSWOW64\wscapi.dll
2011-02-09 14:37:43 ----A---- C:\Windows\SYSWOW64\winhttp.dll
2011-02-09 14:37:43 ----A---- C:\Windows\SYSWOW64\slwga.dll
2011-02-09 14:37:43 ----A---- C:\Windows\SYSWOW64\davclnt.dll
2011-02-09 14:37:43 ----A---- C:\Windows\system32\wscsvc.dll
2011-02-09 14:37:43 ----A---- C:\Windows\system32\slwga.dll
2011-02-09 14:37:40 ----A---- C:\Windows\system32\winsrv.dll
2011-02-09 14:37:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2011-02-09 14:37:39 ----A---- C:\Windows\SYSWOW64\jscript.dll
2011-02-09 14:37:39 ----A---- C:\Windows\system32\vbscript.dll
2011-02-09 14:37:39 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-09 14:37:39 ----A---- C:\Windows\system32\jscript.dll
2011-02-09 14:37:38 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-02-09 14:37:38 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-02-09 14:37:38 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2011-02-09 14:37:38 ----A---- C:\Windows\system32\ntdll.dll
2011-02-09 14:37:31 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2011-02-09 14:37:31 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2011-02-09 14:37:31 ----A---- C:\Windows\system32\atmlib.dll
2011-02-09 14:37:31 ----A---- C:\Windows\system32\atmfd.dll
2011-02-08 20:25:06 ----D---- C:\Users\Hanka\AppData\Roaming\Windows Live Writer
2011-02-07 21:01:03 ----D---- C:\ProgramData\Sun
2011-02-07 20:58:36 ----A---- C:\Windows\SYSWOW64\javaws.exe
2011-02-07 20:58:36 ----A---- C:\Windows\SYSWOW64\javaw.exe
2011-02-07 20:58:36 ----A---- C:\Windows\SYSWOW64\java.exe
2011-02-07 20:58:36 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2011-02-07 20:36:29 ----D---- C:\Users\Hanka\AppData\Roaming\Opera
2011-02-07 20:36:23 ----D---- C:\Program Files (x86)\Opera
2011-01-31 22:10:22 ----D---- C:\Users\Hanka\AppData\Roaming\ICQ
2011-01-31 22:10:19 ----D---- C:\Program Files (x86)\ICQ7.4
2011-01-31 21:57:51 ----D---- C:\Windows\cs
2011-01-31 21:57:11 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2011-01-31 21:56:29 ----DC---- C:\Windows\system32\DRVSTORE
2011-01-31 21:56:29 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2011-01-31 21:56:19 ----D---- C:\Program Files\Windows Live
2011-01-31 21:55:33 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-01-31 21:55:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-01-31 21:55:33 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-01-31 21:55:33 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-01-31 21:38:54 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-01-31 21:38:54 ----A---- C:\Windows\system32\mfps.dll
2011-01-31 21:38:53 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL
2011-01-31 21:38:53 ----A---- C:\Windows\SYSWOW64\mfreadwrite.dll
2011-01-31 21:38:53 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-01-31 21:38:53 ----A---- C:\Windows\system32\mf.dll
2011-01-31 21:38:52 ----A---- C:\Windows\SYSWOW64\mf.dll
2011-01-31 20:32:02 ----D---- C:\Program Files (x86)\MSXML 4.0
2011-01-31 20:31:56 ----D---- C:\Windows\SYSWOW64\Wat
2011-01-31 20:31:55 ----D---- C:\Windows\system32\Wat
2011-01-31 20:16:15 ----D---- C:\Users\Hanka\AppData\Roaming\WinRAR
2011-01-31 20:13:53 ----D---- C:\Program Files (x86)\WinRAR
2011-01-31 20:13:16 ----D---- C:\Program Files (x86)\Microsoft Works
2011-01-31 20:13:09 ----D---- C:\Program Files (x86)\Microsoft Visual Studio
2011-01-31 20:12:59 ----D---- C:\Windows\PCHEALTH
2011-01-31 20:12:59 ----D---- C:\Program Files (x86)\Microsoft.NET
2011-01-31 20:11:46 ----D---- C:\Program Files\Microsoft Office
2011-01-31 20:11:01 ----D---- C:\ProgramData\Microsoft Help
2011-01-31 20:11:01 ----D---- C:\Program Files (x86)\Microsoft Office
2011-01-31 20:10:19 ----RHD---- C:\MSOCache
2011-01-31 20:06:20 ----D---- C:\Program Files (x86)\DAEMON Tools Toolbar
2011-01-31 20:06:07 ----D---- C:\Users\Hanka\AppData\Roaming\DAEMON Tools Lite
2011-01-31 20:06:07 ----D---- C:\ProgramData\DAEMON Tools Lite
2011-01-31 20:04:51 ----D---- C:\Users\Hanka\AppData\Roaming\GHISLER
2011-01-31 20:04:51 ----D---- C:\totalcmd
2011-01-31 20:04:51 ----A---- C:\Windows\UC.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\RAR.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\PKZIP.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\PKUNZIP.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\NOCLOSE.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\LHA.PIF
2011-01-31 20:04:51 ----A---- C:\Windows\ARJ.PIF
2011-01-31 20:02:52 ----D---- C:\Users\Hanka\AppData\Roaming\Macromedia
2011-01-31 20:00:43 ----A---- C:\Windows\system32\MRT.exe
2011-01-31 19:57:07 ----D---- C:\Users\Hanka\AppData\Roaming\SoftGrid Client
2011-01-31 19:56:13 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-01-31 19:55:48 ----A---- C:\Windows\SYSWOW64\PresentationHostProxy.dll
2011-01-31 19:55:48 ----A---- C:\Windows\SYSWOW64\PresentationHost.exe
2011-01-31 19:55:48 ----A---- C:\Windows\SYSWOW64\netfxperf.dll
2011-01-31 19:55:48 ----A---- C:\Windows\SYSWOW64\mscoree.dll
2011-01-31 19:55:48 ----A---- C:\Windows\SYSWOW64\dfshim.dll
2011-01-31 19:55:48 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-01-31 19:55:48 ----A---- C:\Windows\system32\PresentationHost.exe
2011-01-31 19:55:48 ----A---- C:\Windows\system32\netfxperf.dll
2011-01-31 19:55:48 ----A---- C:\Windows\system32\mscoree.dll
2011-01-31 19:55:48 ----A---- C:\Windows\system32\dfshim.dll
2011-01-31 19:55:46 ----D---- C:\Users\Hanka\AppData\Roaming\TP
2011-01-31 19:55:35 ----A---- C:\Windows\system32\browserchoice.exe
2011-01-31 19:52:23 ----A---- C:\Windows\system32\drivers\usbvideo.sys
2011-01-31 19:52:23 ----A---- C:\Windows\system32\drivers\ks.sys
2011-01-31 19:52:04 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2011-01-31 19:52:04 ----A---- C:\Windows\system32\msdri.dll
2011-01-31 19:52:04 ----A---- C:\Windows\system32\CPFilters.dll
2011-01-31 19:52:03 ----A---- C:\Windows\SYSWOW64\StructuredQuery.dll
2011-01-31 19:52:03 ----A---- C:\Windows\SYSWOW64\odbc32.dll
2011-01-31 19:52:03 ----A---- C:\Windows\system32\StructuredQuery.dll
2011-01-31 19:52:03 ----A---- C:\Windows\system32\odbc32.dll
2011-01-31 19:51:49 ----A---- C:\Windows\SYSWOW64\schannel.dll
2011-01-31 19:51:49 ----A---- C:\Windows\system32\schedsvc.dll
2011-01-31 19:51:49 ----A---- C:\Windows\system32\schannel.dll
2011-01-31 19:51:48 ----A---- C:\Windows\SYSWOW64\webio.dll
2011-01-31 19:51:48 ----A---- C:\Windows\SYSWOW64\taskschd.dll
2011-01-31 19:51:48 ----A---- C:\Windows\SYSWOW64\taskeng.exe
2011-01-31 19:51:48 ----A---- C:\Windows\SYSWOW64\taskcomp.dll
2011-01-31 19:51:48 ----A---- C:\Windows\SYSWOW64\schtasks.exe
2011-01-31 19:51:48 ----A---- C:\Windows\system32\wmicmiplugin.dll
2011-01-31 19:51:48 ----A---- C:\Windows\system32\webio.dll
2011-01-31 19:51:48 ----A---- C:\Windows\system32\taskschd.dll
2011-01-31 19:51:48 ----A---- C:\Windows\system32\taskeng.exe
2011-01-31 19:51:48 ----A---- C:\Windows\system32\taskcomp.dll
2011-01-31 19:51:48 ----A---- C:\Windows\system32\schtasks.exe
2011-01-31 19:51:47 ----A---- C:\Windows\system32\ole32.dll
2011-01-31 19:51:46 ----A---- C:\Windows\SYSWOW64\ole32.dll
2011-01-31 19:51:46 ----A---- C:\Windows\system32\spoolsv.exe
2011-01-31 19:51:46 ----A---- C:\Windows\system32\drivers\fvevol.sys
2011-01-31 19:51:42 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-01-31 19:51:42 ----A---- C:\Windows\system32\tzres.dll
2011-01-31 19:51:36 ----A---- C:\Windows\SYSWOW64\wmpmde.dll
2011-01-31 19:51:36 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2011-01-31 19:51:36 ----A---- C:\Windows\system32\wmpmde.dll
2011-01-31 19:51:36 ----A---- C:\Windows\system32\oleaut32.dll
2011-01-31 19:51:35 ----A---- C:\Windows\SYSWOW64\t2embed.dll
2011-01-31 19:51:35 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2011-01-31 19:51:35 ----A---- C:\Windows\system32\t2embed.dll
2011-01-31 19:51:35 ----A---- C:\Windows\system32\inetcomm.dll
2011-01-31 19:51:34 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2011-01-31 19:51:34 ----A---- C:\Windows\system32\comctl32.dll
2011-01-31 19:51:33 ----A---- C:\Windows\system32\wmp.dll
2011-01-31 19:51:31 ----A---- C:\Windows\SYSWOW64\wmp.dll
2011-01-31 19:51:30 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2011-01-31 19:51:30 ----A---- C:\Windows\system32\wmploc.DLL
2011-01-31 19:51:15 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-01-31 19:51:15 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-01-31 19:51:15 ----A---- C:\Windows\system32\jsproxy.dll
2011-01-31 19:51:15 ----A---- C:\Windows\system32\ieui.dll
2011-01-31 19:51:12 ----A---- C:\Windows\SYSWOW64\mfc40u.dll
2011-01-31 19:51:12 ----A---- C:\Windows\SYSWOW64\mfc40.dll
2011-01-31 19:51:00 ----A---- C:\Windows\SYSWOW64\sscore.dll
2011-01-31 19:51:00 ----A---- C:\Windows\system32\srvsvc.dll
2011-01-31 19:51:00 ----A---- C:\Windows\system32\drivers\srvnet.sys
2011-01-31 19:51:00 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-01-31 19:51:00 ----A---- C:\Windows\system32\drivers\srv.sys
2011-01-31 19:51:00 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2011-01-31 19:50:56 ----A---- C:\Windows\system32\consent.exe
2011-01-31 19:45:20 ----D---- C:\Users\Hanka\AppData\Roaming\Adobe
2011-01-31 18:41:12 ----D---- C:\Users\Hanka\AppData\Roaming\Ulead Systems
2011-01-31 18:40:59 ----D---- C:\Windows\SYSWOW64\Macromed
2011-01-31 18:40:55 ----D---- C:\ProgramData\InterVideo
2011-01-31 18:37:41 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-01-31 18:37:41 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-01-31 18:37:40 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-01-31 18:37:40 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-01-31 18:37:40 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-01-31 18:37:40 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-01-31 18:37:40 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-01-31 18:37:40 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-01-31 18:37:39 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-01-31 18:37:39 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-01-31 18:37:39 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-01-31 18:37:39 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-01-31 18:37:39 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-01-31 18:37:39 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-01-31 18:37:38 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-01-31 18:37:38 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-01-31 18:37:36 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-01-31 18:37:36 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-01-31 18:37:36 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-01-31 18:37:36 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-01-31 18:37:36 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-01-31 18:37:36 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-01-31 18:37:36 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-01-31 18:37:36 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-01-31 18:37:35 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-01-31 18:37:35 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-01-31 18:37:34 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-01-31 18:37:34 ----A---- C:\Windows\system32\xinput1_3.dll
2011-01-31 18:37:33 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-01-31 18:37:33 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-01-31 18:37:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-01-31 18:37:33 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-01-31 18:37:33 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-01-31 18:37:33 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-01-31 18:37:32 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-01-31 18:37:32 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-01-31 18:37:29 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-01-31 18:37:29 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-01-31 18:36:00 ----D---- C:\ProgramData\Ulead Systems
2011-01-31 18:36:00 ----D---- C:\Program Files (x86)\Corel
2011-01-31 18:34:15 ----D---- C:\ProgramData\Adobe
2011-01-31 18:34:14 ----D---- C:\Program Files (x86)\Adobe
2011-01-31 18:33:32 ----D---- C:\Program Files\ThinkVantage
2011-01-31 18:29:14 ----D---- C:\Users\Hanka\AppData\Roaming\Identities
2011-01-31 18:28:24 ----D---- C:\Program Files\Symantec
2011-01-31 18:28:24 ----D---- C:\Program Files\Common Files\Symantec Shared
2011-01-31 18:28:24 ----A---- C:\Windows\system32\drivers\SYMEVENT64x86.SYS
2011-01-31 18:28:04 ----D---- C:\Windows\system32\drivers\NISx64
2011-01-31 18:28:01 ----D---- C:\ProgramData\Norton
2011-01-31 18:28:01 ----D---- C:\Program Files (x86)\Norton Internet Security
2011-01-31 18:27:12 ----D---- C:\ProgramData\NortonInstaller
2011-01-31 18:27:12 ----D---- C:\Program Files (x86)\NortonInstaller
2011-01-31 18:27:11 ----A---- C:\Windows\NISPERM.TXT
2011-01-31 18:24:48 ----D---- C:\Program Files (x86)\Microsoft
2011-01-31 18:23:46 ----A---- C:\Windows\SYSWOW64\mfc71.dll
2011-01-31 18:23:37 ----D---- C:\Program Files (x86)\Windows Live
2011-01-31 18:23:10 ----SD---- C:\Users\Hanka\AppData\Roaming\Microsoft
2011-01-31 18:23:10 ----D---- C:\Users\Hanka\AppData\Roaming\Media Center Programs

======List of files/folders modified in the last 1 months======

2011-02-19 11:25:36 ----RD---- C:\Program Files
2011-02-19 11:25:24 ----D---- C:\Windows\Temp
2011-02-19 11:18:24 ----D---- C:\Windows\system32\config
2011-02-19 11:15:57 ----SHD---- C:\System Volume Information
2011-02-19 11:15:30 ----D---- C:\Windows
2011-02-19 11:14:50 ----HD---- C:\ProgramData
2011-02-19 11:14:46 ----A---- C:\Windows\SYSWOW64\log.txt
2011-02-19 11:14:01 ----D---- C:\Windows\System32
2011-02-19 11:13:57 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-02-19 11:12:57 ----D---- C:\Program Files (x86)\Intel
2011-02-19 11:12:30 ----D---- C:\Windows\SysWOW64
2011-02-19 11:11:58 ----D---- C:\Windows\system32\drivers
2011-02-19 11:11:51 ----D---- C:\Windows\system32\catroot2
2011-02-19 11:11:51 ----D---- C:\Windows\system32\catroot
2011-02-19 11:11:51 ----D---- C:\Windows\inf
2011-02-19 11:11:43 ----D---- C:\Windows\system32\DriverStore
2011-02-19 11:05:58 ----SHD---- C:\Windows\Installer
2011-02-19 11:05:16 ----RSD---- C:\Windows\assembly
2011-02-19 11:03:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-19 11:01:28 ----D---- C:\Windows\Microsoft.NET
2011-02-19 10:53:52 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-02-19 10:53:52 ----D---- C:\Windows\system32\cs-CZ
2011-02-19 10:49:19 ----D---- C:\Windows\SYSWOW64\en-US
2011-02-19 10:49:19 ----D---- C:\Windows\system32\en-US
2011-02-19 09:30:14 ----D---- C:\Windows\debug
2011-02-10 15:07:54 ----D---- C:\Windows\winsxs
2011-02-10 15:05:47 ----D---- C:\Program Files\Internet Explorer
2011-02-10 15:05:47 ----D---- C:\Program Files (x86)\Internet Explorer
2011-02-09 15:57:13 ----D---- C:\Windows\system32\LogFiles
2011-02-07 21:01:02 ----D---- C:\Program Files (x86)\Common Files
2011-02-07 20:58:31 ----D---- C:\Program Files (x86)\Java
2011-02-07 20:57:33 ----D---- C:\Windows\system32\Tasks
2011-02-07 20:36:23 ----RD---- C:\Program Files (x86)
2011-02-07 20:26:26 ----SD---- C:\ProgramData\Microsoft
2011-02-05 01:32:50 ----D---- C:\Windows\system32\wdi
2011-02-02 14:08:19 ----D---- C:\Windows\Prefetch
2011-02-01 14:29:42 ----D---- C:\Program Files\PC-Doctor
2011-02-01 14:29:26 ----D---- C:\ProgramData\PCDr
2011-01-31 22:10:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-01-31 21:56:23 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-01-31 21:55:29 ----D---- C:\Windows\Logs
2011-01-31 21:55:24 ----D---- C:\Windows\SoftwareDistribution
2011-01-31 20:55:18 ----RSD---- C:\Windows\Fonts
2011-01-31 20:17:31 ----D---- C:\Program Files\Windows Mail
2011-01-31 20:17:31 ----D---- C:\Program Files (x86)\Windows Mail
2011-01-31 20:17:30 ----D---- C:\Windows\ehome
2011-01-31 20:17:22 ----D---- C:\Windows\AppPatch
2011-01-31 20:17:22 ----D---- C:\Program Files\Windows Media Player
2011-01-31 20:17:22 ----D---- C:\Program Files (x86)\Windows Media Player
2011-01-31 20:17:20 ----D---- C:\Windows\SYSWOW64\migration
2011-01-31 20:17:20 ----D---- C:\Windows\system32\migration
2011-01-31 20:11:32 ----D---- C:\Windows\ShellNew
2011-01-31 19:10:02 ----D---- C:\swshare
2011-01-31 18:36:13 ----D---- C:\Windows\SYSWOW64\drivers
2011-01-31 18:33:35 ----D---- C:\Windows\Help
2011-01-31 18:33:10 ----D---- C:\Windows\system32\restore
2011-01-31 18:29:06 ----SHD---- C:\$Recycle.Bin
2011-01-31 18:28:59 ----D---- C:\SWTOOLS
2011-01-31 18:28:24 ----D---- C:\Program Files\Common Files
2011-01-31 18:24:23 ----D---- C:\Windows\Panther
2011-01-31 18:23:10 ----RD---- C:\Users

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-01-15 538136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx64.sys [2009-10-09 136744]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1205000.07D\SYMDS64.SYS [2010-10-21 450608]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1205000.07D\SYMEFA64.SYS [2010-11-18 802864]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM64.sys [2009-10-09 23592]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20110114.001\BHDrvx64.sys [2011-01-14 953904]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2010-05-28 475696]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20110218.003\IDSvia64.sys [2010-11-09 476792]
R1 lenovo.smi;Lenovo System Interface Driver; C:\Windows\system32\DRIVERS\smiifx64.sys [2008-05-12 15400]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1205000.07D\SRTSPX64.SYS [2010-11-23 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1205000.07D\Ironx64.SYS [2010-11-16 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1205000.07D\SYMNETS.SYS [2010-12-01 382072]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr64v.sys [2010-08-24 13104]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 5U877;USB Video Device; C:\Windows\system32\DRIVERS\5U877.sys [2010-03-17 161664]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-05-28 132656]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2009-11-18 32880]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-11-29 12252192]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-15 2416872]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-02-02 271872]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110218.035\ENG64.SYS [2011-02-07 117880]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20110218.035\EX64.SYS [2011-02-07 1791096]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2009-07-02 40512]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
R3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver; C:\Windows\system32\DRIVERS\rtl8192se.sys [2010-05-17 1107488]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1205000.07D\SRTSP64.SYS [2010-11-23 735864]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2011-02-07 174640]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-04-23 318000]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 551936]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 79360]
S3 btusbflt;Bluetooth USB Filter; C:\Windows\system32\drivers\btusbflt.sys [2009-11-30 53800]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-01-15 98344]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2010-01-15 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-01-15 21288]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 PCDSRVC{127174DC-C366ED8B-06020000}_0;PCDSRVC{127174DC-C366ED8B-06020000}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [2010-05-07 24560]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-08 239136]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 38400]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe [2010-02-18 873248]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 IBMPMSVC;ThinkPad PM Service; C:\Windows\system32\ibmpmsvc.exe [2009-11-18 45928]
R2 IviRegMgr;IviRegMgr; C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 LENOVO.CAMMUTE;Lenovo Camera Mute; C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe [2010-04-20 50536]
R2 LENOVO.MICMUTE;Lenovo Microphone Mute; C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe [2010-04-07 45496]
R2 LENOVO.TPKNRSVC;Lenovo Keyboard Noise Reduction; C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe [2010-04-20 74088]
R2 Lenovo.VIRTSCRLSVC;Lenovo Auto Scroll; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [2010-04-07 93032]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe [2010-11-24 130000]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2010-07-15 199272]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 SUService;System Update; c:\Program Files (x86)\Lenovo\System Update\SUService.exe [2010-03-15 28672]
R2 TPHKSVC;On Screen Display; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2010-04-07 63928]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2008-01-10 61440]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [2010-08-24 75112]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG64.exe [2009-10-09 47656]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-31 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Re: problem s .NET Framework

Napsal: 19 úno 2011 11:44
od Rudy
Také zdravím!
Nejprve dejte log z kompletního skenu MBAM: http://www.malwarebytes.org/mbam.php . Předem nic nemažte.

Re: problem s .NET Framework

Napsal: 19 úno 2011 12:11
od Apoler
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5808

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

19.2.2011 12:10:32
mbam-log-2011-02-19 (12-10-21).txt

Typ kontroly: Rychlý test
Testované objekty: 157774
Uplynulý čas: 3 minut, 39 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Hanka\AppData\Roaming\microsoft\Windows\start menu\Programs\Startup\winlogin.exe (Trojan.Downloader) -> No action taken.

Re: problem s .NET Framework

Napsal: 19 úno 2011 12:43
od Rudy
Položku smažte. Dále zkuste (v případě, že se nic nezměnilo) NET.Framework kompletně odinstalovat přes TotalUninstall: http://www.stahuj.centrum.cz/utility_a_ ... uninstall/ a nainstalovat nejnovější verzi.

Re: problem s .NET Framework

Napsal: 19 úno 2011 13:39
od Apoler
pokusil jsem se aplikaci winlogin smazat pomocí malwarebytes, po restartu však winlogin stále existuje a malwarebytes ho při další kontole znovu označí jako napadený...

Re: problem s .NET Framework

Napsal: 19 úno 2011 14:37
od Apoler
přeinstalace .net framework taky nepomohla, stále vyskakuje hláška:

Server SMTP vyžaduje zabezpečené připojení nebo klient nebyl ověřen. Odpověď serveru: 5.7.0 Must issue a STARTTLS command first. t5sm2911681eeh.14.

Informace o vyvolání ladění JIT najdete na konci této zprávy,
nikoli v tomto dialogovém okně.

************** Text výjimky **************
System.Net.Mail.SmtpException: Server SMTP vyžaduje zabezpečené připojení nebo klient nebyl ověřen. Odpověď serveru: 5.7.0 Must issue a STARTTLS command first. t5sm2911681eeh.14
v System.Net.Mail.MailCommand.CheckResponse(SmtpStatusCode statusCode, String response)
v System.Net.Mail.SmtpTransport.SendMail(MailAddress sender, MailAddressCollection recipients, String deliveryNotify, SmtpFailedRecipientException& exception)
v System.Net.Mail.SmtpClient.Send(MailMessage message)
v yooowningthisshit.Form1.stealers_Tick(Object sender, EventArgs e)
v System.Windows.Forms.Timer.OnTick(EventArgs e)
v System.Windows.Forms.Timer.TimerNativeWindow.WndProc(Message& m)
v System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Načtená sestavení **************
mscorlib
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4952 (win7RTMGDR.050727-4900)
Základ kódu: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
----------------------------------------
Stub
Verze sestavení: 1.0.0.0
Verze Win32: 1.0.0.0
Základ kódu: file:///C:/Users/Hanka/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/winlogin.exe
----------------------------------------
Microsoft.VisualBasic
Verze sestavení: 8.0.0.0
Verze Win32: 8.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll
----------------------------------------
System
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
System.Windows.Forms
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
System.Runtime.Remoting
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll
----------------------------------------
System.Configuration
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
System.Xml
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
mscorlib.resources
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4952 (win7RTMGDR.050727-4900)
Základ kódu: file:///C:/Windows/Microsoft.NET/Framework64/v2.0.50727/mscorlib.dll
----------------------------------------
System.Management
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll
----------------------------------------
System.resources
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.resources/2.0.0.0_cs_b77a5c561934e089/System.resources.dll
----------------------------------------
System.Windows.Forms.resources
Verze sestavení: 2.0.0.0
Verze Win32: 2.0.50727.4927 (NetFXspW7.050727-4900)
Základ kódu: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms.resources/2.0.0.0_cs_b77a5c561934e089/System.Windows.Forms.resources.dll
----------------------------------------

************** Ladění JIT **************
Aby bylo povoleno ladění JIT, musí konfigurační soubor
pro tuto aplikaci nebo počítač (machine.config) mít
v oddílu system.windows.forms nastavenou hodnotu njitDebugging.
Aplikace rovněž musí být kompilována s povoleným
laděním.

Příklad:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

Je-li ladění JIT povoleno, budou všechny neošetřené výjimky
odeslány ladicímu programu JIT, který je registrován v počítači,
a nebudou zpracovány tímto dialogovým oknem.

Re: problem s .NET Framework

Napsal: 19 úno 2011 18:26
od Rudy
Dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

Re: problem s .NET Framework

Napsal: 22 úno 2011 10:57
od Apoler
zdravím, omlouvám se za pozdní odpověď, problém je zdá se vyřešen, přeinstaloval jsem .net framework a hláška se objevovala dál, snažil jsem se několikrát smazat soubor zachycený scanem MBAM, tak jak jste dříve psal, nejprve žádná změna, ale po několika restartech se hláška přestala objevovat, ntb jel potom asi den a pul, problém se již nevyskytnul. uvidíme do budoucna ;-) ...každopádně moc děkuju za rady ;-)

Re: problem s .NET Framework

Napsal: 22 úno 2011 18:46
od Rudy
Nemáte zač!
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz