Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

prosím o kontrolu, nejde zapnout antivir.

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
jiri
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 16 říj 2011 10:44

prosím o kontrolu, nejde zapnout antivir.

#1 Příspěvek od jiri »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Honza at 2011-10-16 11:45:56
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 19 GB (38%) free of 50 GB
Total RAM: 1014 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:46:12, on 16.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft\BingBar\SeaPort.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\PROGRA~1\COMMON~1\Nokia\MPLATF~1\NOKIAM~1.EXE
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Honza\Plocha\RSIT.exe
C:\Program Files\trend micro\Honza.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
O2 - BHO: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll
O3 - Toolbar: &S-Rank - {B71B15CF-3093-459C-B764-AEB2486F2273} - C:\Program Files\Seznam\Postak\SRank.dll
O3 - Toolbar: (no name) - {D5D47440-0750-463D-BAEF-A47D02414806} - (no file)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: IObit Toolbar - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
O4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll (HKCU)
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll (HKCU)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 6684168421
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} (Java Plug-in 1.6.0_22) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Updater - Unknown owner - C:\Program Files\Application Updater\ApplicationUpdater.exe (file missing)
O23 - Service: Odyssey Client for Fujitsu Siemens Computers (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - (no file)

--
End of file - 7707 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\ErrorEND.job
C:\WINDOWS\tasks\SmartDefrag_Startup.job
C:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job
C:\WINDOWS\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job
C:\WINDOWS\tasks\XcomTools_home.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Honza\Data aplikací\Mozilla\Firefox\Profiles\oxejwtm4.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03, {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05, {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07, {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10, {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.3.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?ei=utf-8 ... =382950&p="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}"=C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{972ce4c6-7e08-4474-a285-3208198ce6fd}(2)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(3)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(4)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(5)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(6)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(7)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(8)
{972ce4c6-7e08-4474-a285-3208198ce6fd}(9)
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}(2)
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsILegitCheckPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npLegitCheckPlugin.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
McSiteAdvisor.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\Honza\Data aplikací\Mozilla\Firefox\Profiles\oxejwtm4.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}
{ea614400-e918-4741-9a97-7a972ff7c30b}
{ea614400-e918-4741-9a97-7a972ff7c30b}(2)
{ea614400-e918-4741-9a97-7a972ff7c30b}(3)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}]
IObit Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Seznam.cz\listicka.dll [2011-04-20 2194464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{B71B15CF-3093-459C-B764-AEB2486F2273} - &S-Rank - C:\Program Files\Seznam\Postak\SRank.dll [2005-05-17 266240]
{D5D47440-0750-463D-BAEF-A47D02414806}
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-15 1089288]
{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"OdTray.exe"=C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe [2005-05-18 1015871]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2006-11-03 319488]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WIAWizardMenu"=C:\WINDOWS\system32\sti_ci.dll [2008-04-14 136704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2011-05-25 491040]
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-08-04 966712]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-09-26 19554952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
[]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-03-22 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OdysseyClient]
C:\WINDOWS\system32\odyEvent.dll [2007-08-13 106496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoActiveDesktop"=1
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-10-13 02:17:16 ----DC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-13 02:12:29 ----DC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-13 02:12:24 ----DC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-10-11 10:34:21 ----A---- C:\WINDOWS\system32\drivers\sfi.dat
2011-10-11 00:18:20 ----A---- C:\WINDOWS\system32\Remover.ini
2011-10-11 00:18:20 ----A---- C:\WINDOWS\system32\Remove.exe
2011-10-11 00:18:19 ----D---- C:\Program Files\Common Files\Eye 312
2011-10-11 00:18:19 ----A---- C:\WINDOWS\system32\drivers\PAC7302.SYS
2011-10-11 00:18:13 ----A---- C:\WINDOWS\system32\SP7302.ini
2011-10-11 00:18:12 ----D---- C:\WINDOWS\PixArt
2011-10-11 00:18:12 ----D---- C:\Program Files\Common Files\Pac7302
2011-10-11 00:18:12 ----A---- C:\WINDOWS\system32\P7302USD.dll
2011-10-09 21:21:43 ----D---- C:\Program Files\Microsoft Security Essentials
2011-10-08 22:26:18 ----D---- C:\Program Files\IObit Toolbar
2011-10-08 22:26:18 ----D---- C:\Program Files\Common Files\Spigot
2011-10-08 22:26:18 ----D---- C:\Program Files\Application Updater
2011-10-04 23:57:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2011-10-04 23:55:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2011-09-21 14:27:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676-v2$

======List of files/folders modified in the last 1 month======

2011-10-16 11:46:00 ----D---- C:\Program Files\trend micro
2011-10-16 11:23:22 ----D---- C:\WINDOWS\system32\drivers
2011-10-16 11:17:08 ----D---- C:\WINDOWS\Temp
2011-10-16 11:10:00 ----D---- C:\Documents and Settings\Honza\Data aplikací\Skype
2011-10-16 10:57:45 ----SHD---- C:\WINDOWS\Installer
2011-10-16 10:57:45 ----RD---- C:\Program Files
2011-10-16 10:57:33 ----HD---- C:\Config.Msi
2011-10-16 10:57:14 ----SD---- C:\WINDOWS\Tasks
2011-10-16 10:47:39 ----D---- C:\WINDOWS\Prefetch
2011-10-16 10:26:13 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-16 10:14:30 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-16 10:09:01 ----A---- C:\WINDOWS\ModemLog_Motorola SM56 Data Fax Modem.txt
2011-10-16 10:08:59 ----D---- C:\WINDOWS\system32\NtmsData
2011-10-16 02:07:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-16 01:18:27 ----D---- C:\WINDOWS\system32\drivers\etc
2011-10-15 23:41:44 ----D---- C:\WINDOWS
2011-10-15 22:28:05 ----RSHD---- C:\WINDOWS\system32\dllcache
2011-10-15 22:28:02 ----D---- C:\WINDOWS\system32
2011-10-15 22:27:59 ----D---- C:\Program Files\Internet Explorer
2011-10-15 22:27:58 ----D---- C:\WINDOWS\system32\CatRoot
2011-10-15 18:03:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-10-15 18:03:15 ----D---- C:\Program Files\Seznam.cz
2011-10-15 09:19:28 ----D---- C:\WINDOWS\Help
2011-10-15 08:00:15 ----RSD---- C:\WINDOWS\assembly
2011-10-15 01:00:42 ----D---- C:\WINDOWS\security
2011-10-14 00:03:19 ----D---- C:\WINDOWS\Debug
2011-10-13 23:32:35 ----HD---- C:\WINDOWS\inf
2011-10-13 19:03:00 ----A---- C:\WINDOWS\system32\MRT.exe
2011-10-13 18:43:14 ----D---- C:\WINDOWS\WinSxS
2011-10-13 18:42:48 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-13 18:12:38 ----A---- C:\WINDOWS\win.ini
2011-10-13 18:05:08 ----D---- C:\Program Files\Microsoft Silverlight
2011-10-13 02:12:22 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-11 11:51:55 ----D---- C:\Program Files\Mozilla Firefox
2011-10-11 10:52:55 ----D---- C:\Program Files\Common Files\Nokia
2011-10-11 10:16:07 ----D---- C:\Program Files\Skype
2011-10-11 01:25:39 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-10-11 00:18:19 ----D---- C:\Program Files\Common Files
2011-10-11 00:18:13 ----D---- C:\WINDOWS\twain_32
2011-10-10 22:47:50 ----D---- C:\Documents and Settings\Honza\Data aplikací\Image Zone Express
2011-10-10 07:08:33 ----D---- C:\Program Files\XcomTools
2011-10-09 21:31:39 ----ASH---- C:\boot.ini
2011-10-09 21:31:39 ----A---- C:\WINDOWS\system.ini
2011-10-09 20:33:49 ----D---- C:\Program Files\Uniblue
2011-10-09 11:53:55 ----D---- C:\Documents and Settings\Honza\Data aplikací\IObit
2011-10-08 21:59:26 ----D---- C:\Qoobox
2011-10-08 21:38:56 ----D---- C:\Program Files\Windows Media Player
2011-10-08 21:38:55 ----D---- C:\Program Files\Google
2011-10-08 21:04:31 ----D---- C:\WINSSLog
2011-10-08 21:04:31 ----D---- C:\Program Files\Zrychleni Pocitace
2011-10-05 11:35:19 ----D---- C:\WINDOWS\AppPatch
2011-10-05 00:09:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2011-10-04 23:20:15 ----D---- C:\Program Files\IObit
2011-10-04 00:24:09 ----D---- C:\WINDOWS\pss
2011-10-03 10:31:24 ----N---- C:\WINDOWS\system32\mshtml.dll
2011-10-02 19:24:09 ----D---- C:\WINDOWS\system32\config
2011-10-02 19:23:31 ----D---- C:\WINDOWS\system32\wbem
2011-10-02 19:23:31 ----D---- C:\WINDOWS\Registration
2011-10-02 19:23:03 ----D---- C:\WINDOWS\MATS
2011-10-02 19:22:25 ----D---- C:\Program Files\Microsoft Fix it Center
2011-09-29 22:57:47 ----D---- C:\Documents and Settings\Honza\Data aplikací\ElevatedDiagnostics
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\oleaccrc.dll
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\oleaccrc(2).dll
2011-09-26 11:41:20 ----A---- C:\WINDOWS\system32\oleacc.dll
2011-09-26 11:41:20 ----A---- C:\WINDOWS\system32\oleacc(2).dll
2011-09-21 16:57:38 ----D---- C:\WINDOWS\system32\FxsTmp

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2005-10-12 874240]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2005-04-25 135168]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-03-22 827196]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 odysseyIM4;Odyssey Network Agent Miniport; C:\WINDOWS\system32\DRIVERS\odysseyIM4.sys [2005-05-18 173056]
R3 PAC7302;Eye 312; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2007-06-14 457856]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys [2005-03-04 74496]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2005-04-26 839436]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-05 185824]
R3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-04-05 160768]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2005-09-12 3298432]
S1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
S1 MpKsl0337e886;MpKsl0337e886; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{E8E2E598-2AC1-4051-9DBD-C4CB1E59AC4B}\MpKsl0337e886.sys []
S1 MpKsl1e094664;MpKsl1e094664; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{DE6ED1A2-42C5-4874-8389-ED35129FCFE9}\MpKsl1e094664.sys []
S1 MpKsl21d504dc;MpKsl21d504dc; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2290CC06-AB07-4CD0-8F76-FA0543B288D9}\MpKsl21d504dc.sys []
S1 MpKsl37009b16;MpKsl37009b16; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{DCEF95B5-D55D-4948-A806-A43D2FCDDF11}\MpKsl37009b16.sys []
S1 MpKsl4eba1947;MpKsl4eba1947; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{87015D9A-47AB-4427-AD19-EF1B2A7761B2}\MpKsl4eba1947.sys []
S1 MpKsl7fec3af8;MpKsl7fec3af8; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{7A51AF96-693C-415C-AA48-5329CE0B37C6}\MpKsl7fec3af8.sys []
S1 MpKsla6702115;MpKsla6702115; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2CCB4172-B08C-4242-8654-DEB676088626}\MpKsla6702115.sys []
S1 MpKslc3c57d14;MpKslc3c57d14; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1D835FC7-6B59-4EDC-B45B-5A49E15DFC8D}\MpKslc3c57d14.sys []
S1 MpKslc7a0fb46;MpKslc7a0fb46; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{31187F55-F444-4064-8364-C0C4C7A47D60}\MpKslc7a0fb46.sys []
S1 MpKsldcf6f02f;MpKsldcf6f02f; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4B64482-0FF7-416D-BD9C-F9F1B41E446A}\MpKsldcf6f02f.sys []
S1 MpKsldf6c64cf;MpKsldf6c64cf; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{97973FD3-D9B5-4B02-9AAA-9753E140B664}\MpKsldf6c64cf.sys []
S1 MpKsldfc06fde;MpKsldfc06fde; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C4AAFC34-8307-4316-95AC-8E4C8015F90E}\MpKsldfc06fde.sys []
S1 MpKslef711549;MpKslef711549; \??\c:\Documents and Settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2474FF5E-A0DE-47E0-A904-5D24E87798C5}\MpKslef711549.sys []
S3 AVFSFilter;AVFSFilter; C:\WINDOWS\system32\DRIVERS\avfsfilter.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 HdAudAddService;Ovladač funkcí Microsoft UAA pro služby sběrnice High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 S3SavageNB;S3SavageNB; C:\WINDOWS\system32\DRIVERS\s3gnbm.sys [2004-08-04 166912]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Iprip;Naslouchání RIP; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 odClientService;Odyssey Client for Fujitsu Siemens Computers; C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe [2005-05-18 208896]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-03-15 249648]
R2 SimpTcp;Jednoduché služby TCP/IP; C:\WINDOWS\system32\tcpsvcs.exe [2004-08-18 19456]
R2 SNMP;SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 32768]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-15 183560]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 p2pgasvc;Ověřování v síti skupiny rovnocenných počítačů; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 p2pimsvc;Správce identit sítě rovnocenných počítačů; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 p2psvc;Síť rovnocenných počítačů; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 PNRPSvc;Protokol PNRP; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 SNMPTRAP;Zachytávání pro službu SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119509
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu, nejde zapnout antivir.

#2 Příspěvek od Rudy »

Zkuste AV reinstalovat. Pokud se stav nezmění, dejte log z ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
jiri
Návštěvník
Návštěvník
Příspěvky: 2
Registrován: 16 říj 2011 10:44

Re: prosím o kontrolu, nejde zapnout antivir.

#3 Příspěvek od jiri »

ComboFix po dobu 30 minut otevřel 1. okno a vůbec se dál nic neudálo. zasílám log. z Upm.

Windows XP SP 3 (build 2600)
Boot Mode: Normal
Ověření souborů Microsoftu: Ano
Whitelist: Ano
Internet Explorer v8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)
Log vygenerován: 16.10.2011 21:52:40
================================================================

SmallARK
================================================================



Běžící procesy
================================================================

C:\PROGRAM FILES\FUJITSU SIEMENS COMPUTERS\ODYSSEY CLIENT FOR FUJITSU SIEMENS COMPUTERS\ODCLIENTSERVICE.EXE
C:\PROGRAM FILES\FUJITSU SIEMENS COMPUTERS\ODYSSEY CLIENT FOR FUJITSU SIEMENS COMPUTERS\ODTRAY.EXE
C:\WINDOWS\PIXART\PAC7302\MONITOR.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\SERVICELAYER.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLUSBSRV.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLRSSRV.EXE
C:\PROGRA~1\COMMON~1\NOKIA\MPLATF~1\NOKIAM~1.EXE
C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLMSBTSRV.EXE

Scanner
================================================================
[?] odClientService.exe
Nemá okno
Soubor 7%

[R] SeaPort.EXE
Ověřený Microsoft: Ne

[S] explorer.exe
Spouští se po startu HKLM Winlogon [Shell]

[?] OdTray.exe
Spouští se po startu HKLM Run [OdTray.exe]
Soubor 7%

[?] Monitor.exe
Spouští se po startu HKLM Run [PAC7302_Monitor]

[S] ctfmon.exe
Spouští se po startu HKCU Run [ctfmon.exe]

[R] postak.exe
Spouští se po startu HKCU Run [Seznam Postak]

[R] NokiaOviSuite.exe
Spouští se po startu HKCU Run [NokiaOviSuite2]

[R] Skype.exe
Spouští se po startu HKCU Run [Skype]
Podvržená cesta modulu: (00400000) C:\Program Files\Skype\Phone\Skype.exe

[?] ServiceLayer.exe
Soubor 7%

[?] NclUSBSrv.exe
Soubor 7%

[?] NclRSSrv.exe
Soubor 7%

[?] NOKIAM~1.EXE
Soubor 7%

[?] NclMSBTSrv.exe
Soubor 7%


Po spuštění
================================================================

HKCU Run
|_ [R][Seznam Postak] C:\Program Files\Seznam.cz\postak.exe -s
|_ [R][NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
|_ [S][MSMSGS] C:\Program Files\Messenger\msmsgs.exe /background
|_ [R][Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized

HKLM Run
|_ [?][OdTray.exe] C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe
|_ [?][PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
|_ [X][MSC] c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey (Soubor nenalezen)

HKLM RunOnce
|_ [S][WIAWizardMenu] C:\WINDOWS\system32\sti_ci.dll ,WiaCreateWizardMenu

HKU Run
|_ [R][DWQueuedReporting] c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe -t

HKLM IC
|_ [X][>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS] RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP (Soubor nenalezen)
|_ [?][{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] C:\WINDOWS\INF\msnetmtg.inf ,NetMtg.Install.PerUser.NT
|_ [?][{5945c046-1e7d-11d1-bc44-00c04fd912be}] C:\WINDOWS\INF\msmsgs.inf ,BLC.QuietInstall.PerUser
|_ [?][{6BF52A52-394A-11d3-B153-00C04F79FAA6}] C:\WINDOWS\INF\wmp11.inf ,PerUserStub
|_ [?][{89820200-ECBD-11cf-8B85-00AA005B4340}] regsvr32.exe /s /n /i:U shell32.dll
|_ [?][{8b15971b-5355-4c82-8c07-7e181ea07608}] C:\WINDOWS\INF\fxsocm.inf ,Fax.Install.PerUser

HKLM Winlogon Notify
|_ [?][igfxcui] C:\WINDOWS\system32\igfxsrvc.dll
|_ [?][OdysseyClient] C:\WINDOWS\system32\odyEvent.dll

Job
|_ [X][ErrorEND.job] C:\Program Files\ErrorEND\ErrorEND.exe (Soubor nenalezen)
|_ [X][SMARTD~1.JOB] C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe (Soubor nenalezen)
|_ [X][XCOMTO~1.JOB] C:\Program Files\XcomTools\XcomTools.exe (Soubor nenalezen)
|_ [X][XCOMTO~1.JOB] C:\Program Files\XcomTools\XcomTools.exe (Soubor nenalezen)


HKLM BHO
|_ [X][{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}] (Soubor nenalezen)

HKCU IE WebBrowser Toolbar
|_ [?][{B71B15CF-3093-459C-B764-AEB2486F2273}] C:\Program Files\Seznam\Postak\SRank.dll
|_ [X][{D5D47440-0750-463D-BAEF-A47D02414806}] (Soubor nenalezen)

HKLM IE Toolbar
|_ [?][{B71B15CF-3093-459C-B764-AEB2486F2273}] C:\Program Files\Seznam\Postak\SRank.dll
|_ [X][{D5D47440-0750-463D-BAEF-A47D02414806}] (Soubor nenalezen)
|_ [X][{0BDA0769-FD72-49F4-9266-E1FB004F4D8F}] (Soubor nenalezen)

Služby (Zobraz běžící: True, Zobraz zastavené: False, Zobraz i bezpečné služby: False)
================================================================
[X] Application Updater
|_ Cesta: C:\Program Files\Application Updater\ApplicationUpdater.exe
| |_ Výrobce:
| |_ Popis:
| |_ MD5:
|
|_ Jméno: Application Updater
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Zastaveno
|_ Typ: Win32 Own Process
|_ Dependency:

[?] Odyssey Client for Fujitsu Siemens Computers
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exe
| |_ Výrobce: Funk Software, Inc.
| |_ Popis: Odyssey Client Service
| |_ MD5: BFE2CB20291E3AF877ABBC1C6BBEBAD1
|
|_ Jméno: odClientService
|_ StartName: LocalSystem
|_ Typ spouštění: Auto Start
|_ Status: Spuštěno
|_ Typ:
|_ Dependency: RPCSS

[?] ServiceLayer
|_ Cesta: C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
| |_ Výrobce: Nokia
| |_ Popis: ServiceLayer Module
| |_ MD5: 8C1F87F5FDD92229D1754B98F073913F
|
|_ Jméno: ServiceLayer
|_ StartName: LocalSystem
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ:
|_ Dependency: RPCSS


Ovladače (Zobraz běžící: True, Zobraz zastavené: False, Zobraz i bezpečné služby: False)
================================================================
[?] ADI UAA Function Driver for High Definition Audio Service
|_ Cesta: C:\WINDOWS\system32\drivers\ADIHdAud.sys
| |_ Výrobce: Analog Devices, Inc.
| |_ Popis: High Definition Audio Function Driver(Release Candidate 1)
| |_ MD5: F40B7E185B24426A1AB430B5655EB8BB
|
|_ Jméno: ADIHdAudAddService
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] ialm
|_ Cesta: C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
| |_ Výrobce: Intel Corporation
| |_ Popis: Intel Graphics Miniport Driver
| |_ MD5: D68339F8CDE3C00B3FC12AB97E36AA30
|
|_ Jméno: ialm
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] Odyssey Network Agent Miniport
|_ Cesta: C:\WINDOWS\system32\DRIVERS\odysseyIM4.sys
| |_ Výrobce: Funk Software, Inc.
| |_ Popis: Odyssey Network Driver (EAPOL Only)
| |_ MD5: 7AF6EC0EA4261ECF7DA084103BE31EA8
|
|_ Jméno: odysseyIM4
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] Eye 312
|_ Cesta: C:\WINDOWS\system32\DRIVERS\PAC7302.SYS
| |_ Výrobce: PixArt Imaging Inc.
| |_ Popis: PAC7302
| |_ MD5: 5FAE249A5635A52970652CA8EB216515
|
|_ Jméno: PAC7302
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] Realtek 10/100/1000 NIC Family all in one NDIS XP Driver
|_ Cesta: C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys
| |_ Výrobce: Realtek Semiconductor Corporation
| |_ Popis: Realtek 10/100/1000 NDIS 5.1 Driver
| |_ MD5: 7F0413BDD7D53EB4C7A371E7F6F84DF1
|
|_ Jméno: RTL8023xp
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] smserial
|_ Cesta: C:\WINDOWS\system32\DRIVERS\smserial.sys
| |_ Výrobce: Motorola Inc.
| |_ Popis: Motorola SM56 Modem WDM Driver
| |_ MD5: D2025C301325E0BC51FEDB27386C185A
|
|_ Jméno: smserial
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] Synaptics TouchPad Driver
|_ Cesta: C:\WINDOWS\system32\DRIVERS\SynTP.sys
| |_ Výrobce: Synaptics, Inc.
| |_ Popis: Synaptics Touchpad Driver
| |_ MD5: 1A8E6B04907687A8EED75C8031B679FD
|
|_ Jméno: SynTP
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] tifm21
|_ Cesta: C:\WINDOWS\system32\drivers\tifm21.sys
| |_ Výrobce: Texas Instruments
| |_ Popis: tifm21.sys
| |_ MD5: 2448935E1CF84B0341A24A17908C7311
|
|_ Jméno: tifm21
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:

[?] Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP
|_ Cesta: C:\WINDOWS\system32\DRIVERS\w29n51.sys
| |_ Výrobce: Intel® Corporation
| |_ Popis: Intel® Wireless LAN Driver
| |_ MD5: 9EE38FFCB4CBE5BEE6C305700DDC4725
|
|_ Jméno: w29n51
|_ StartName:
|_ Typ spouštění: Ruční spuštění
|_ Status: Spuštěno
|_ Typ: Kernel Driver
|_ Dependency:


lNetStat
================================================================
Typ: PID Proces Local <-> Remote Status
-----------------------------------------------------------------------------------------
TCP (852) tcpsvcs.exe 0.0.0.0:7 LISTENING
TCP (852) tcpsvcs.exe 0.0.0.0:9 LISTENING
TCP (852) tcpsvcs.exe 0.0.0.0:13 LISTENING
TCP (852) tcpsvcs.exe 0.0.0.0:17 LISTENING
TCP (852) tcpsvcs.exe 0.0.0.0:19 LISTENING
TCP (2112) Skype.exe 0.0.0.0:80 LISTENING
TCP (1672) svchost.exe 0.0.0.0:135 LISTENING
TCP (2112) Skype.exe 0.0.0.0:443 LISTENING
TCP (4) Systém 0.0.0.0:445 LISTENING
TCP (2112) Skype.exe 0.0.0.0:26318 LISTENING
TCP (1068) alg.exe 127.0.0.1:1026 LISTENING
TCP (268) firefox.exe 127.0.0.1:1471 <-> 127.0.0.1:1472 ESTABLISHED
TCP (268) firefox.exe 127.0.0.1:1472 <-> 127.0.0.1:1471 ESTABLISHED
TCP (268) firefox.exe 127.0.0.1:1473 <-> 127.0.0.1:1474 ESTABLISHED
TCP (268) firefox.exe 127.0.0.1:1474 <-> 127.0.0.1:1473 ESTABLISHED
TCP (1936) NokiaOviSuite.exe 127.0.0.1:11880 LISTENING
TCP (4) Systém 192.168.1.100:139 LISTENING
TCP (2112) Skype.exe 192.168.1.100:1042 <-> 208.88.186.5:34009 ESTABLISHED
TCP (2112) Skype.exe 192.168.1.100:1062 <-> 212.161.8.3:12350 ESTABLISHED
UDP (852) tcpsvcs.exe 0.0.0.0:7 <-> 109.123.209.238:80 ESTABLISHED
UDP (852) tcpsvcs.exe 0.0.0.0:9
UDP (852) tcpsvcs.exe 0.0.0.0:13
UDP (852) tcpsvcs.exe 0.0.0.0:17
UDP (852) tcpsvcs.exe 0.0.0.0:19
UDP (872) snmp.exe 0.0.0.0:161
UDP (2112) Skype.exe 0.0.0.0:443
UDP (4) Systém 0.0.0.0:445
UDP (1388) lsass.exe 0.0.0.0:500
UDP (1388) lsass.exe 0.0.0.0:4500
UDP (2112) Skype.exe 0.0.0.0:26318
UDP (2112) Skype.exe 127.0.0.1:1037
UDP (2112) Skype.exe 127.0.0.1:1041
UDP (420) iexplore.exe 127.0.0.1:1526
UDP (3552) iexplore.exe 127.0.0.1:1595
UDP (316) svchost.exe 127.0.0.1:1900
UDP (4) Systém 192.168.1.100:137
UDP (4) Systém 192.168.1.100:138
UDP (1720) svchost.exe 192.168.1.100:520
UDP (316) svchost.exe 192.168.1.100:1900

Moduly (Zobraz i bezpečné DLL: False, Jen bez výrobce: True, Zobraz registrované: False)
================================================================
[?] odlogin.dll
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odLogin.dll
|_ MD5: 7CE91A5B673B70FB17289A8B8B2F4094
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ winlogon.exe (1320)

[?] odyevent.dll
|_ Cesta: C:\WINDOWS\system32\odyEvent.dll
|_ MD5: 61C30C5399C20C6D7A3AA793CD6EDBC8
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ winlogon.exe (1320)

[?] dcflibrary.dll
|_ Cesta: C:\Program Files\Common Files\Funk Software\dcfLibrary.dll
|_ MD5: 763364614A32DBF15E480223EFCC091E
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)
|_ OdTray.exe (1848)

[?] dcfdom.dll
|_ Cesta: C:\Program Files\Common Files\Funk Software\dcfDOM.dll
|_ MD5: E5339E0093E513812FA6A46323DC665F
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)
|_ OdTray.exe (1848)

[?] odcert_m.dll
|_ Cesta: C:\Program Files\Common Files\Funk Software\odCert_M.dll
|_ MD5: 05B7311DDB66CB7350A0B8931E4134C4
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)

[?] odservicedialogs.dll
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odServiceDialogs.dll
|_ MD5: 1D3F46A681D1F7FCB33861FBF09DECC0
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)

[?] odserviceresource0009.dll
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdServiceResource0009.dll
|_ MD5: 49B0E5F00485166B8E2378604DA1D010
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)

[?] odlib_ossl.dll
|_ Cesta: C:\Program Files\Common Files\Funk Software\odLib_OSSL.dll
|_ MD5: FA4D09DD42C8E44BF6EE1334AF47D4F0
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)

[?] odservice.dll
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odService.dll
|_ MD5: 321E3429CBAD2FB46B6D2B381E518108
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ odClientService.exe (328)

[?] hptcpmui.dll
|_ Cesta: C:\WINDOWS\system32\HPTcpMUI.dll
|_ MD5: EAB45B0DEDE0670F5029F804DFA7CE9E
|_ Výrobce: Microsoft Corporation
|_ Procesy
|_ spoolsv.exe (612)

[?] hptcpmib.dll
|_ Cesta: C:\WINDOWS\system32\HPTcpMib.dll
|_ MD5: ADBB61BF0B9C97DE818090738EC71E57
|_ Výrobce: Hewlett Packard
|_ Procesy
|_ spoolsv.exe (612)

[?] hptcpmon.dll
|_ Cesta: C:\WINDOWS\system32\HPTcpMon.dll
|_ MD5: 4E460240CB29778F5F8C1FEB38806679
|_ Výrobce: Hewlett Packard
|_ Procesy
|_ spoolsv.exe (612)

[!] contmenu.dll
|_ Cesta: C:\PROGRA~1\ZIPGEN~1\contmenu.dll
|_ MD5: 639E15702F88A802159D90398DC6D2A4
|_ Výrobce: M.Dev Software
|_ Procesy
|_ explorer.exe (1300)

[?] ngscm.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\NGSCM.dll
|_ MD5: 83AB0FCCF90A395AE71B7EA931C90529
|_ Výrobce: Nokia
|_ Procesy
|_ explorer.exe (1300)

[?] connapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\ConnAPI.dll
|_ MD5: 2573E4875EE11D254F0871E9A9192079
|_ Výrobce: Nokia.
|_ Procesy
|_ explorer.exe (1300)
|_ NokiaOviSuite.exe (1936)

[?] daapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\DAAPI.dll
|_ MD5: AE12C74234F1119F6537288082E6F57A
|_ Výrobce: Nokia
|_ Procesy
|_ explorer.exe (1300)
|_ NokiaOviSuite.exe (1936)

[?] versitconverter.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\VersitConverter.dll
|_ MD5: F99805107E644E54172D75B2E8C0DE95
|_ Výrobce: Nokia
|_ Procesy
|_ explorer.exe (1300)

[?] confserver.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\ConfServer.dll
|_ MD5: 0551018C0FAB2A10BFCAE49DD123CB6D
|_ Výrobce: Nokia
|_ Procesy
|_ explorer.exe (1300)
|_ NokiaOviSuite.exe (1936)

[?] phonebrowser.dll
|_ Cesta: C:\Program Files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
|_ MD5: F0CBAF724FF71D400FF45FBCEC4F3898
|_ Výrobce: Nokia
|_ Procesy
|_ explorer.exe (1300)

[?] odclientresource0009.dll
|_ Cesta: C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdClientResource0009.dll
|_ MD5: 8E46F7138586CB7EAD4600A38F882B9E
|_ Výrobce: Funk Software, Inc.
|_ Procesy
|_ OdTray.exe (1848)

[?] qgif4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\Imageformats\qgif4.dll
|_ MD5: 742C372E9833E78A9B27771D20757E90
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qjpeg4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\Imageformats\qjpeg4.dll
|_ MD5: 91936F77258582C91700D604BBFD9673
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qjson.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\qjson.dll
|_ MD5: E5A7E808363825327EA868AD57C02E5D
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qxtweb.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QxtWeb.dll
|_ MD5: 82E11FA378D80AEECCA33D84F738444C
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] ssleay32.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\ssleay32.dll
|_ MD5: DBBFDE9CA7985BD9859059CB1B7B9221
|_ Výrobce: The OpenSSL Project, http://www.openssl.org/
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] pccs_abapi.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\PCCS_ABAPI.dll
|_ MD5: EFF30DCB002C9040037AC23C67F3E889
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] syncruntimeapi.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\syncRuntimeAPI.dll
|_ MD5: 4B45DEBDC4693E1865D1399E0A998782
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] ilsyncex.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\ilsyncEx.dll
|_ MD5: 0D472017A1F742B645CA79A361A416D1
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] attendees.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\Attendees.dll
|_ MD5: 4DE3CC7D4EF69700D66CDFA36C02F02F
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] recipients.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\recipients.dll
|_ MD5: 4D8F5962FA1E9E1F994CA160151478B6
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] ptattach.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\PtAttach.dll
|_ MD5: E6AF0FBEC1CB3B5C91949963AB2CBD0E
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] iltif32.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\IlTif32.dll
|_ MD5: 88BF0F476AF82E8EC70BBB07E36287B1
|_ Výrobce: Nokia Corporation.
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtscript4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtScript4.dll
|_ MD5: BB3F3A2619007062A66F436D26E3B4BE
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtxmlpatterns4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtXmlPatterns4.dll
|_ MD5: B8B0B52FAAAA5ECDC20B9F60229D4068
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qxtcore.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QxtCore.dll
|_ MD5: F8C13072ECF40AAC24BBD735028D875D
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qsqlite4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\sqldrivers\qsqlite4.dll
|_ MD5: 9A9968F97EA289C2D12949668C9EFD19
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] phonon4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\phonon4.dll
|_ MD5: C8D8F565744DB72398AF5068A42FAC02
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtmultimediakit1.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtMultimediaKit1.dll
|_ MD5: 6AA5E8F867F1A4C2405F4D944C02A3A9
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] commonupdatechecker.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\CommonUpdateChecker.dll
|_ MD5: 0E016C1EB477608FC45C138CFE2A4C65
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtwebkit4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtWebKit4.dll
|_ MD5: 692A8AA83A5F7DDEC6D554D53C10482F
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] libeay32.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\libeay32.dll
|_ MD5: 284AB815CF766C057B2CF943F2947B11
|_ Výrobce: The OpenSSL Project, http://www.openssl.org/
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] dsengine.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\mediaservice\dsengine.dll
|_ MD5: BC099DB9496AB2C4D252728EAED047FE
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] mitems.dll
|_ Cesta: C:\PROGRA~1\COMMON~1\Nokia\MPLATF~1\MItems.dll
|_ MD5: 4694C2AF856C8601FD57DA3B54075C55
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)
|_ NOKIAM~1.EXE (3116)

[?] mevent.dll
|_ Cesta: C:\Program Files\Common Files\Nokia\MPlatform\MEvent.dll
|_ MD5: 7FAA67B07CB801E5C3D406C34DB2EE47
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)
|_ NOKIAM~1.EXE (3116)

[?] mdatastore.dll
|_ Cesta: C:\Program Files\Common Files\Nokia\MPlatform\MDataStore.dll
|_ MD5: B175BE51008E7DCE33E51A8C730EBDB2
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)
|_ NOKIAM~1.EXE (3116)

[?] mitemplugins.dll
|_ Cesta: C:\Program Files\Common Files\Nokia\MPlatform\MItemPlugins.dll
|_ MD5: A994C1B8E4F289F43FAFF5F98375C079
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)
|_ NOKIAM~1.EXE (3116)

[?] mthumbnailservice.dll
|_ Cesta: C:\Program Files\Common Files\Nokia\MPlatform\MThumbnailService.dll
|_ MD5: 62EEF790CD04EE1D5C1D07FAB978C266
|_ Výrobce: Nokia
|_ Procesy
|_ NokiaOviSuite.exe (1936)
|_ NOKIAM~1.EXE (3116)

[?] qtxml4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtXml4.dll
|_ MD5: A21501B4BC134BBF1830E80535C27476
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtsql4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtSql4.dll
|_ MD5: 31DADC8F3683C8DD59974E986CE2F546
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtopengl4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtOpenGL4.dll
|_ MD5: 31BCE23CA20FB0BDBC8762F1050C7410
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtnetwork4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtNetwork4.dll
|_ MD5: 5F7272681D47431C1D886EC560DDAC48
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtgui4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtGui4.dll
|_ MD5: 421F234915F40609AA84475289E629E6
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtdeclarative4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtDeclarative4.dll
|_ MD5: 857404F8D8CBCB77AED0D823F39E6845
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] qtcore4.dll
|_ Cesta: C:\Program Files\Nokia\Nokia Ovi Suite\QtCore4.dll
|_ MD5: F572B7D2005EF126F444088F79ECC7AF
|_ Výrobce:
|_ Procesy
|_ NokiaOviSuite.exe (1936)

[?] nclft.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\NclFT.dll
|_ MD5: 174F7A13E04BDAC797041DAC5265A8EA
|_ Výrobce: Nokia
|_ Procesy
|_ ServiceLayer.exe (2516)

[?] pccs_dbengine.dll
|_ Cesta: C:\Program Files\PC Connectivity Solution\PCCS_DBEngine.dll
|_ MD5: F22226065A631153E572E85CA38AAEAD
|_ Výrobce: Nokia
|_ Procesy
|_ ServiceLayer.exe (2516)

[?] mdatastoreph.dll
|_ Cesta: C:\Program Files\Common Files\Nokia\MPlatform\MDatastorePH.dll
|_ MD5: 15FC044F7A144FE7F14E20C55E23C423
|_ Výrobce: Nokia
|_ Procesy
|_ NOKIAM~1.EXE (3116)

[?] shlxthdl.dll
|_ Cesta: C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll
|_ MD5: 471FFDCF899BDCF4167F10E8F898FDC5
|_ Výrobce: OpenOffice.org
|_ Procesy
|_ iexplore.exe (3552)

[?] stlport_vc7145.dll
|_ Cesta: C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\stlport_vc7145.dll
|_ MD5: 3FCB5A2E173B70945C4C80191792AE81
|_ Výrobce: STLport Consulting, Inc.
|_ Procesy
|_ iexplore.exe (3552)



================================================================
Ultimate Process Manager v4.1.3 - [ Lodus Software ]
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119509
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: prosím o kontrolu, nejde zapnout antivir.

#4 Příspěvek od Rudy »

Zkuste CF spustit v nouz. režimu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“