pomaly PC
Napsal: 22 říj 2011 20:27
Prosim o kontrolu logu.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Uzivatel at 2011-10-22 16:19:45
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 560 MB (8%) free of 7 GB
Total RAM: 1275 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:19:51, on 22.10.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Uzivatel\Local Settings\Temporary Internet Files\Content.IE5\2OK01KHS\RSIT[1].exe
C:\Program Files\trend micro\Uzivatel.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O4 - HKLM\..\Run: [SpIDerAgent] "C:\Program Files\DrWeb\SpIDerAgent.exe"
O4 - HKLM\..\Run: [SpIDerMail] "C:\Program Files\DrWeb\spiderml.exe"
O4 - HKLM\..\Run: [SpIDerNT] C:\PROGRA~1\DrWeb\spiderui.exe /agent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) - Doctor Web, Ltd. - C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SpIDer Guard for Windows (SPIDERNT) - Unknown owner - C:\PROGRA~1\DrWeb\spidernt.exe (file missing)
--
End of file - 2472 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\User_Feed_Synchronization-{699950D7-5FC5-4086-B31C-79AB6EC0459F}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SpIDerAgent"=C:\Program Files\DrWeb\SpIDerAgent.exe []
"SpIDerMail"=C:\Program Files\DrWeb\spiderml.exe []
"SpIDerNT"=C:\PROGRA~1\DrWeb\spiderui.exe /agent []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-02-14 567016]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
======List of files/folders created in the last 1 month======
2011-10-22 16:19:45 ----D---- C:\Program Files\trend micro
2011-10-22 16:19:44 ----D---- C:\rsit
2011-10-22 15:32:34 ----D---- C:\WINDOWS\LastGood
2011-10-22 15:08:02 ----ASH---- C:\pagefile.sys
2011-10-21 20:23:38 ----D---- C:\bd_logs
2011-10-20 17:45:22 ----D---- C:\WINDOWS\system32\XPSViewer
2011-10-20 17:45:13 ----D---- C:\Program Files\MSBuild
2011-10-20 17:45:07 ----D---- C:\WINDOWS\system32\en-US
2011-10-20 17:44:50 ----D---- C:\Program Files\Reference Assemblies
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-10-20 17:43:43 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2011-10-20 17:43:36 ----D---- C:\Program Files\MSXML 6.0
2011-10-20 17:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-10-20 17:27:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-10-20 16:28:10 ----A---- C:\ComboFix.txt
2011-10-20 16:17:19 ----A---- C:\Boot.bak
2011-10-20 16:17:09 ----RASHD---- C:\cmdcons
2011-10-20 16:14:38 ----A---- C:\WINDOWS\PEV.exe
2011-10-20 16:14:38 ----A---- C:\WINDOWS\NIRCMD.exe
2011-10-20 16:14:38 ----A---- C:\WINDOWS\MBR.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\zip.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWSC.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWREG.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\sed.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\grep.exe
2011-10-19 17:45:10 ----D---- C:\WINDOWS\ERDNT
2011-10-19 17:43:04 ----D---- C:\Qoobox
2011-10-19 17:27:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-10-19 17:25:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-10-17 14:22:44 ----RSD---- C:\WINDOWS\assembly
2011-10-17 14:22:00 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-17 14:20:06 ----D---- C:\Program Files\NeoSmart Technologies
======List of files/folders modified in the last 1 month======
2011-10-22 16:19:45 ----RD---- C:\Program Files
2011-10-22 15:33:03 ----HD---- C:\WINDOWS\inf
2011-10-22 15:32:35 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-22 15:32:34 ----D---- C:\WINDOWS
2011-10-22 15:29:53 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-22 15:28:12 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-10-22 15:28:12 ----D---- C:\WINDOWS\system32\CatRoot
2011-10-22 15:08:25 ----D---- C:\WINDOWS\Temp
2011-10-22 13:36:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-20 18:12:02 ----D---- C:\WINDOWS\system32
2011-10-20 17:55:56 ----SHD---- C:\WINDOWS\Installer
2011-10-20 17:54:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-20 17:52:54 ----D---- C:\WINDOWS\WinSxS
2011-10-20 17:45:03 ----RSD---- C:\WINDOWS\Fonts
2011-10-20 17:44:15 ----D---- C:\WINDOWS\system32\spool
2011-10-20 17:44:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-20 17:34:58 ----A---- C:\WINDOWS\imsins.BAK
2011-10-20 17:34:46 ----A---- C:\WINDOWS\win.ini
2011-10-20 17:20:37 ----D---- C:\WINDOWS\Debug
2011-10-20 16:24:41 ----A---- C:\WINDOWS\system.ini
2011-10-20 16:24:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-10-20 16:21:45 ----D---- C:\WINDOWS\system32\drivers
2011-10-20 16:21:44 ----D---- C:\WINDOWS\AppPatch
2011-10-20 16:21:39 ----D---- C:\Program Files\Common Files
2011-10-20 16:17:19 ----RASH---- C:\boot.ini
2011-10-20 16:11:38 ----D---- C:\WINDOWS\Prefetch
2011-10-19 17:51:38 ----D---- C:\Program Files\Internet Explorer
2011-10-19 17:44:04 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-19 17:26:07 ----D---- C:\Program Files\Outlook Express
2011-10-19 17:15:03 ----D---- C:\WINDOWS\system32\cs-cz
2011-10-19 17:14:05 ----D---- C:\WINDOWS\ie7updates
2011-10-19 14:25:56 ----D---- C:\Program Files\WinAce
2011-10-17 14:24:53 ----SD---- C:\WINDOWS\Tasks
2011-10-17 13:41:38 ----SHD---- C:\System Volume Information
2011-10-05 10:09:48 ----AC---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-12-05 20640]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-08-24 27784]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-18 39936]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-06-22 154112]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-04-16 2564032]
R3 SMBios;Intel (R) System Management BIOS Service; C:\WINDOWS\system32\DRIVERS\SMBios.sys [2004-06-07 36484]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S2 SPIDER;SpIDer Guard File System Monitor; \??\C:\PROGRA~1\DrWeb\spider.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-04 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-04 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\Uzivatel\LOCALS~1\Temp\catchme.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-04 59648]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 uybmvrr;uybmvrr; \??\C:\WINDOWS\system32\01.tmp []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-18 14336]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine); C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe [2009-01-21 886072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-29 153376]
S2 SPIDERNT;SpIDer Guard for Windows; C:\PROGRA~1\DrWeb\spidernt.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Uzivatel at 2011-10-22 16:19:45
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 560 MB (8%) free of 7 GB
Total RAM: 1275 MB (69% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:19:51, on 22.10.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17055)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Uzivatel\Local Settings\Temporary Internet Files\Content.IE5\2OK01KHS\RSIT[1].exe
C:\Program Files\trend micro\Uzivatel.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O4 - HKLM\..\Run: [SpIDerAgent] "C:\Program Files\DrWeb\SpIDerAgent.exe"
O4 - HKLM\..\Run: [SpIDerMail] "C:\Program Files\DrWeb\spiderml.exe"
O4 - HKLM\..\Run: [SpIDerNT] C:\PROGRA~1\DrWeb\spiderui.exe /agent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) - Doctor Web, Ltd. - C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SpIDer Guard for Windows (SPIDERNT) - Unknown owner - C:\PROGRA~1\DrWeb\spidernt.exe (file missing)
--
End of file - 2472 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\User_Feed_Synchronization-{699950D7-5FC5-4086-B31C-79AB6EC0459F}.job
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SpIDerAgent"=C:\Program Files\DrWeb\SpIDerAgent.exe []
"SpIDerMail"=C:\Program Files\DrWeb\spiderml.exe []
"SpIDerNT"=C:\PROGRA~1\DrWeb\spiderui.exe /agent []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-08 348160]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-02-14 567016]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"LegalNoticeText"=
"LegalNoticeCaption"=
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
======List of files/folders created in the last 1 month======
2011-10-22 16:19:45 ----D---- C:\Program Files\trend micro
2011-10-22 16:19:44 ----D---- C:\rsit
2011-10-22 15:32:34 ----D---- C:\WINDOWS\LastGood
2011-10-22 15:08:02 ----ASH---- C:\pagefile.sys
2011-10-21 20:23:38 ----D---- C:\bd_logs
2011-10-20 17:45:22 ----D---- C:\WINDOWS\system32\XPSViewer
2011-10-20 17:45:13 ----D---- C:\Program Files\MSBuild
2011-10-20 17:45:07 ----D---- C:\WINDOWS\system32\en-US
2011-10-20 17:44:50 ----D---- C:\Program Files\Reference Assemblies
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-10-20 17:43:57 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-10-20 17:43:43 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2011-10-20 17:43:36 ----D---- C:\Program Files\MSXML 6.0
2011-10-20 17:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-10-20 17:27:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-10-20 16:28:10 ----A---- C:\ComboFix.txt
2011-10-20 16:17:19 ----A---- C:\Boot.bak
2011-10-20 16:17:09 ----RASHD---- C:\cmdcons
2011-10-20 16:14:38 ----A---- C:\WINDOWS\PEV.exe
2011-10-20 16:14:38 ----A---- C:\WINDOWS\NIRCMD.exe
2011-10-20 16:14:38 ----A---- C:\WINDOWS\MBR.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\zip.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWSC.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\SWREG.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\sed.exe
2011-10-20 16:14:37 ----A---- C:\WINDOWS\grep.exe
2011-10-19 17:45:10 ----D---- C:\WINDOWS\ERDNT
2011-10-19 17:43:04 ----D---- C:\Qoobox
2011-10-19 17:27:17 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-10-19 17:25:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-10-17 14:22:44 ----RSD---- C:\WINDOWS\assembly
2011-10-17 14:22:00 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-17 14:20:06 ----D---- C:\Program Files\NeoSmart Technologies
======List of files/folders modified in the last 1 month======
2011-10-22 16:19:45 ----RD---- C:\Program Files
2011-10-22 15:33:03 ----HD---- C:\WINDOWS\inf
2011-10-22 15:32:35 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-22 15:32:34 ----D---- C:\WINDOWS
2011-10-22 15:29:53 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-22 15:28:12 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-10-22 15:28:12 ----D---- C:\WINDOWS\system32\CatRoot
2011-10-22 15:08:25 ----D---- C:\WINDOWS\Temp
2011-10-22 13:36:17 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-20 18:12:02 ----D---- C:\WINDOWS\system32
2011-10-20 17:55:56 ----SHD---- C:\WINDOWS\Installer
2011-10-20 17:54:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-20 17:52:54 ----D---- C:\WINDOWS\WinSxS
2011-10-20 17:45:03 ----RSD---- C:\WINDOWS\Fonts
2011-10-20 17:44:15 ----D---- C:\WINDOWS\system32\spool
2011-10-20 17:44:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-20 17:34:58 ----A---- C:\WINDOWS\imsins.BAK
2011-10-20 17:34:46 ----A---- C:\WINDOWS\win.ini
2011-10-20 17:20:37 ----D---- C:\WINDOWS\Debug
2011-10-20 16:24:41 ----A---- C:\WINDOWS\system.ini
2011-10-20 16:24:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-10-20 16:21:45 ----D---- C:\WINDOWS\system32\drivers
2011-10-20 16:21:44 ----D---- C:\WINDOWS\AppPatch
2011-10-20 16:21:39 ----D---- C:\Program Files\Common Files
2011-10-20 16:17:19 ----RASH---- C:\boot.ini
2011-10-20 16:11:38 ----D---- C:\WINDOWS\Prefetch
2011-10-19 17:51:38 ----D---- C:\Program Files\Internet Explorer
2011-10-19 17:44:04 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-19 17:26:07 ----D---- C:\Program Files\Outlook Express
2011-10-19 17:15:03 ----D---- C:\WINDOWS\system32\cs-cz
2011-10-19 17:14:05 ----D---- C:\WINDOWS\ie7updates
2011-10-19 14:25:56 ----D---- C:\Program Files\WinAce
2011-10-17 14:24:53 ----SD---- C:\WINDOWS\Tasks
2011-10-17 13:41:38 ----SHD---- C:\System Volume Information
2011-10-05 10:09:48 ----AC---- C:\WINDOWS\system32\MRT.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-12-05 20640]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-08-24 27784]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-18 39936]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-06-22 154112]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-08 804572]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-04-16 2564032]
R3 SMBios;Intel (R) System Management BIOS Service; C:\WINDOWS\system32\DRIVERS\SMBios.sys [2004-06-07 36484]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
S2 SPIDER;SpIDer Guard File System Monitor; \??\C:\PROGRA~1\DrWeb\spider.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2004-08-04 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2004-08-03 100992]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2004-08-04 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\Uzivatel\LOCALS~1\Temp\catchme.sys []
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2004-08-04 59648]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 uybmvrr;uybmvrr; \??\C:\WINDOWS\system32\01.tmp []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2004-08-18 14336]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine); C:\Program Files\Common Files\Doctor Web\Scanning Engine\dwengine.exe [2009-01-21 886072]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-29 153376]
S2 SPIDERNT;SpIDer Guard for Windows; C:\PROGRA~1\DrWeb\spidernt.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------