nejde mi sem vložiť log RSIT lebo je priliš velky.poradte prosim.Dakujem :(Som tu novy.
Logfile of random's system information tool 1.08 (written by random/random)
Run by notebook at 2011-03-02 01:11:52
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 127 GB (85%) free of 150 GB
Total RAM: 1976 MB (65% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:11:55, on 2. 3. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe
C:\Program Files\Mozilla Firefox 4.0 Beta 9\plugin-container.exe
C:\Users\notebook\Downloads\RSIT.exe
C:\Program Files\trend micro\notebook.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?linkid=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FC81616-D256-4A18-A4CE-B0EF17D8D18E}: NameServer = 156.154.70.25,156.154.71.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{7322BF71-A0C1-48FD-8931-B52B05F35FE8}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\system32\guard32.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
--
End of file - 4726 bytes
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-01-02 41760]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 136216]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 171032]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 170520]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-01-10 281768]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-01-17 2548552]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 228864]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2011-03-02 01:11:52 ----D---- C:\rsit
2011-03-02 01:11:52 ----D---- C:\Program Files\trend micro
2011-02-27 18:27:08 ----D---- C:\Program Files\Spybot - Search & Destroy
2011-02-27 16:46:28 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2011-02-25 16:30:05 ----D---- C:\Program Files\Microsoft Silverlight
2011-02-25 16:28:35 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-25 16:28:35 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-25 16:28:33 ----A---- C:\Windows\system32\d3d10_1.dll
2011-02-25 16:28:32 ----A---- C:\Windows\system32\drivers\dxgmms1.sys
2011-02-25 00:14:07 ----D---- C:\Windows\system32\SPReview
2011-02-25 00:12:41 ----D---- C:\Windows\system32\EventProviders
2011-02-25 00:09:20 ----A---- C:\Windows\system32\dfshim.dll
2011-02-25 00:09:16 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2011-02-25 00:09:16 ----A---- C:\Windows\system32\mstscax.dll
2011-02-25 00:09:16 ----A---- C:\Windows\system32\LSCSHostPolicy.dll
2011-02-25 00:09:16 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2011-02-25 00:09:14 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-25 00:09:13 ----A---- C:\Windows\system32\tssrvlic.dll
2011-02-25 00:09:13 ----A---- C:\Windows\system32\mfc40u.dll
2011-02-25 00:09:13 ----A---- C:\Windows\system32\mfc40.dll
2011-02-25 00:09:12 ----A---- C:\Windows\system32\sysmain.dll
2011-02-25 00:09:12 ----A---- C:\Windows\system32\RDVGHelper.exe
2011-02-25 00:09:12 ----A---- C:\Windows\system32\rdpcorets.dll
2011-02-25 00:09:11 ----A---- C:\Windows\system32\secproc_isv.dll
2011-02-25 00:09:11 ----A---- C:\Windows\system32\d2d1.dll
2011-02-25 00:09:10 ----A---- C:\Windows\system32\shell32.dll
2011-02-25 00:09:10 ----A---- C:\Windows\system32\secproc.dll
2011-02-25 00:09:10 ----A---- C:\Windows\system32\RMActivate_isv.exe
2011-02-25 00:09:09 ----A---- C:\Windows\system32\RMActivate.exe
2011-02-25 00:09:09 ----A---- C:\Windows\system32\ieframe.dll
2011-02-25 00:09:07 ----A---- C:\Windows\system32\spwizui.dll
2011-02-25 00:09:07 ----A---- C:\Windows\system32\mscoree.dll
2011-02-25 00:09:06 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-25 00:09:06 ----A---- C:\Windows\system32\mf.dll
2011-02-25 00:09:06 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2011-02-25 00:09:05 ----A---- C:\Windows\system32\mssrch.dll
2011-02-25 00:09:05 ----A---- C:\Windows\system32\iertutil.dll
2011-02-25 00:09:05 ----A---- C:\Windows\system32\CertEnroll.dll
2011-02-25 00:09:04 ----A---- C:\Windows\system32\wmp.dll
2011-02-25 00:09:03 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2011-02-25 00:09:03 ----A---- C:\Windows\system32\PresentationHost.exe
2011-02-25 00:09:03 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-25 00:09:03 ----A---- C:\Windows\system32\esent.dll
2011-02-25 00:09:03 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2011-02-25 00:09:03 ----A---- C:\Windows\system32\drivers\hwpolicy.sys
2011-02-25 00:09:02 ----A---- C:\Windows\system32\tquery.dll
2011-02-25 00:09:02 ----A---- C:\Windows\system32\schedsvc.dll
2011-02-25 00:09:02 ----A---- C:\Windows\system32\RacEngn.dll
2011-02-25 00:09:01 ----A---- C:\Windows\system32\ntdll.dll
2011-02-25 00:09:01 ----A---- C:\Windows\system32\AuthFWSnapin.dll
2011-02-25 00:09:00 ----A---- C:\Windows\system32\wininet.dll
2011-02-25 00:09:00 ----A---- C:\Windows\system32\rdpudd.dll
2011-02-25 00:09:00 ----A---- C:\Windows\system32\rdpdd.dll
2011-02-25 00:09:00 ----A---- C:\Windows\system32\qmgr.dll
2011-02-25 00:08:59 ----A---- C:\Windows\system32\ExplorerFrame.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\wevtsvc.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\vssapi.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\urlmon.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\SearchFolder.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\ole32.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\DWrite.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-02-25 00:08:58 ----A---- C:\Windows\system32\d3d9.dll
2011-02-25 00:08:58 ----A---- C:\Windows\system32\CPFilters.dll
2011-02-25 00:08:57 ----A---- C:\Windows\system32\IKEEXT.DLL
2011-02-25 00:08:57 ----A---- C:\Windows\explorer.exe
2011-02-25 00:08:56 ----A---- C:\Windows\system32\taskschd.dll
2011-02-25 00:08:56 ----A---- C:\Windows\system32\PushPrinterConnections.exe
2011-02-25 00:08:56 ----A---- C:\Windows\system32\mstsc.exe
2011-02-25 00:08:56 ----A---- C:\Windows\system32\kernel32.dll
2011-02-25 00:08:56 ----A---- C:\Windows\system32\FntCache.dll
2011-02-25 00:08:56 ----A---- C:\Windows\system32\drivers\ntfs.sys
2011-02-25 00:08:56 ----A---- C:\Windows\system32\crypt32.dll
2011-02-25 00:08:55 ----A---- C:\Windows\system32\wer.dll
2011-02-25 00:08:55 ----A---- C:\Windows\system32\termsrv.dll
2011-02-25 00:08:55 ----A---- C:\Windows\system32\spreview.exe
2011-02-25 00:08:55 ----A---- C:\Windows\system32\spinstall.exe
2011-02-25 00:08:55 ----A---- C:\Windows\system32\rpcrt4.dll
2011-02-25 00:08:55 ----A---- C:\Windows\system32\certcli.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\odbc32.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\msxml6.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\lsasrv.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\gpsvc.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\dwmcore.dll
2011-02-25 00:08:54 ----A---- C:\Windows\system32\diagperf.dll
2011-02-25 00:08:53 ----A---- C:\Windows\system32\WinSAT.exe
2011-02-25 00:08:53 ----A---- C:\Windows\system32\wbengine.exe
2011-02-25 00:08:53 ----A---- C:\Windows\system32\scavengeui.dll
2011-02-25 00:08:53 ----A---- C:\Windows\system32\mstime.dll
2011-02-25 00:08:53 ----A---- C:\Windows\system32\MPSSVC.dll
2011-02-25 00:08:53 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-25 00:08:52 ----A---- C:\Windows\system32\winhttp.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\umrdp.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\TSWorkspace.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\tsmf.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\quartz.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\localspl.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-25 00:08:52 ----A---- C:\Windows\system32\dot3api.dll
2011-02-25 00:08:51 ----A---- C:\Windows\system32\setupapi.dll
2011-02-25 00:08:51 ----A---- C:\Windows\system32\MSVidCtl.dll
2011-02-25 00:08:51 ----A---- C:\Windows\system32\drivers\nvstor.sys
2011-02-25 00:08:51 ----A---- C:\Windows\system32\apphelp.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\WMVDECOD.DLL
2011-02-25 00:08:50 ----A---- C:\Windows\system32\winlogon.exe
2011-02-25 00:08:50 ----A---- C:\Windows\system32\WindowsCodecs.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\VSSVC.exe
2011-02-25 00:08:50 ----A---- C:\Windows\system32\user32.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\rdpshell.exe
2011-02-25 00:08:50 ----A---- C:\Windows\system32\netlogon.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\netcfgx.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\dbgeng.dll
2011-02-25 00:08:50 ----A---- C:\Windows\system32\d3d11.dll
2011-02-25 00:08:49 ----A---- C:\Windows\system32\WsmSvc.dll
2011-02-25 00:08:49 ----A---- C:\Windows\system32\webio.dll
2011-02-25 00:08:49 ----A---- C:\Windows\system32\Query.dll
2011-02-25 00:08:49 ----A---- C:\Windows\system32\gpprefcl.dll
2011-02-25 00:08:49 ----A---- C:\Windows\system32\drivers\srv.sys
2011-02-25 00:08:49 ----A---- C:\Windows\system32\drivers\rdpwd.sys
2011-02-25 00:08:48 ----A---- C:\Windows\system32\upnp.dll
2011-02-25 00:08:48 ----A---- C:\Windows\system32\schannel.dll
2011-02-25 00:08:48 ----A---- C:\Windows\system32\mmcndmgr.dll
2011-02-25 00:08:48 ----A---- C:\Windows\system32\DShowRdpFilter.dll
2011-02-25 00:08:48 ----A---- C:\Windows\system32\drivers\srv2.sys
2011-02-25 00:08:48 ----A---- C:\Windows\system32\drivers\nvraid.sys
2011-02-25 00:08:48 ----A---- C:\Windows\system32\advapi32.dll
2011-02-25 00:08:47 ----A---- C:\Windows\system32\netfxperf.dll
2011-02-25 00:08:47 ----A---- C:\Windows\system32\msv1_0.dll
2011-02-25 00:08:47 ----A---- C:\Windows\system32\msdrm.dll
2011-02-25 00:08:47 ----A---- C:\Windows\system32\lsm.exe
2011-02-25 00:08:47 ----A---- C:\Windows\system32\imapi2fs.dll
2011-02-25 00:08:47 ----A---- C:\Windows\system32\drivers\csc.sys
2011-02-25 00:08:46 ----A---- C:\Windows\system32\usp10.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\sppobjs.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\SessEnv.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\mcbuilder.exe
2011-02-25 00:08:46 ----A---- C:\Windows\system32\KernelBase.dll
2011-02-25 00:08:46 ----A---- C:\Windows\system32\authui.dll
2011-02-25 00:08:45 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-25 00:08:45 ----A---- C:\Windows\system32\winload.exe
2011-02-25 00:08:45 ----A---- C:\Windows\system32\userenv.dll
2011-02-25 00:08:45 ----A---- C:\Windows\system32\d3d10_1core.dll