Prosím o preventivní kontrolu logu

[ileini]

Dobrý den, prosila bych o kontrolu logu. Když jsem dnes spustila Avast, aby otestoval, jestli nejsou v notebooku viry, našel mi Trojského koně v souboru MEMORY.DMP. Tohle je už podruhé, co mi našel Trojského koně ve stejném souboru, naposledy to bylo v listopadu loňského roku. Avast mi pak nabídla ho buď smazat nebo přesunout do truhly. Do truhly se nevešel, protože byl moc velký, tak jsem ho smazala. Prosím Vás, co je to vlastně za soubor? Neudělala jsem nějakou chybu tím, že jsem ho smazala?

Předem děkuji za odpověď.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Notebook at 2010-01-26 17:07:32
Microsoft® Windows Vista™ Home Basic
System drive C: has 34 GB (57%) free of 60 GB
Total RAM: 958 MB (42% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2005-09-24 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2009-07-31 1006264]
"S3Trayp"=C:\Windows\system32\S3trayp.exe [2007-03-07 176128]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\VistaADeck\HDAudioCPL.exe [2007-02-16 1122304]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-11-10 815104]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2009-08-02 2171904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-31 1232896]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-08-02 3055616]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2006-11-02 201728]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Notebook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-01-26 17:07:32 ----D---- C:\rsit
2010-01-26 15:55:29 ----D---- C:\Program Files\CCleaner
2010-01-22 17:41:15 ----A---- C:\Windows\system32\mshtml.dll
2010-01-22 17:41:14 ----A---- C:\Windows\system32\wininet.dll
2010-01-22 17:41:13 ----A---- C:\Windows\system32\ieframe.dll
2010-01-22 17:41:11 ----A---- C:\Windows\system32\urlmon.dll
2010-01-22 17:41:10 ----A---- C:\Windows\system32\mstime.dll
2010-01-22 17:41:08 ----A---- C:\Windows\system32\ieapfltr.dll
2010-01-22 17:41:08 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-22 17:41:06 ----A---- C:\Windows\system32\iertutil.dll
2010-01-22 17:41:05 ----A---- C:\Windows\system32\mshtmled.dll
2010-01-22 17:41:05 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-22 17:41:05 ----A---- C:\Windows\system32\icardie.dll
2010-01-22 17:41:05 ----A---- C:\Windows\system32\dxtmsft.dll
2010-01-22 17:41:04 ----A---- C:\Windows\system32\occache.dll
2010-01-22 17:41:03 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-22 17:41:02 ----A---- C:\Windows\system32\pngfilt.dll
2010-01-22 17:41:02 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-22 17:41:02 ----A---- C:\Windows\system32\ieaksie.dll
2010-01-22 17:41:02 ----A---- C:\Windows\system32\dxtrans.dll
2010-01-22 17:41:01 ----A---- C:\Windows\system32\iernonce.dll
2010-01-22 17:41:01 ----A---- C:\Windows\system32\advpack.dll
2010-01-22 17:41:00 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-22 17:41:00 ----A---- C:\Windows\system32\ieencode.dll
2010-01-22 17:40:59 ----A---- C:\Windows\system32\admparse.dll
2010-01-22 17:40:58 ----A---- C:\Windows\system32\ieui.dll
2010-01-22 17:40:57 ----A---- C:\Windows\system32\iesetup.dll
2010-01-22 17:40:55 ----A---- C:\Windows\system32\ieakui.dll
2010-01-22 17:40:54 ----A---- C:\Windows\system32\mshtmler.dll
2010-01-18 21:28:42 ----D---- C:\Users\Notebook\AppData\Roaming\AbleFaxTifView
2010-01-18 21:20:26 ----D---- C:\ProgramData\FLEXnet
2010-01-14 12:59:16 ----A---- C:\Windows\system32\t2embed.dll
2010-01-14 12:59:15 ----A---- C:\Windows\system32\fontsub.dll
2010-01-14 12:59:13 ----A---- C:\Windows\system32\lpk.dll
2010-01-14 12:59:13 ----A---- C:\Windows\system32\dciman32.dll
2010-01-14 12:59:12 ----A---- C:\Windows\system32\atmlib.dll
2010-01-14 12:59:12 ----A---- C:\Windows\system32\atmfd.dll

======List of files/folders modified in the last 1 months======

2010-01-26 17:07:41 ----D---- C:\Windows\Temp
2010-01-26 17:07:38 ----D---- C:\Windows\Prefetch
2010-01-26 16:53:08 ----D---- C:\ProgramData\Spyware Terminator
2010-01-26 16:18:01 ----D---- C:\Program Files\Mozilla Firefox
2010-01-26 16:01:00 ----D---- C:\Windows\Minidump
2010-01-26 16:01:00 ----D---- C:\Windows\Debug
2010-01-26 16:01:00 ----D---- C:\Windows
2010-01-26 15:55:29 ----RD---- C:\Program Files
2010-01-26 15:44:20 ----D---- C:\Users\Notebook\AppData\Roaming\Spyware Terminator
2010-01-26 15:44:20 ----D---- C:\Program Files\Spyware Terminator
2010-01-25 14:55:40 ----SHD---- C:\System Volume Information
2010-01-22 18:06:25 ----A---- C:\Windows\win.ini
2010-01-22 18:06:23 ----SHD---- C:\Windows\Installer
2010-01-22 18:06:23 ----HD---- C:\Config.Msi
2010-01-22 18:01:12 ----D---- C:\Windows\system32\migration
2010-01-22 18:01:12 ----D---- C:\Program Files\Internet Explorer
2010-01-22 18:01:11 ----D---- C:\Windows\System32
2010-01-22 18:01:11 ----D---- C:\Windows\AppPatch
2010-01-22 17:47:11 ----D---- C:\Windows\winsxs
2010-01-22 17:38:34 ----D---- C:\Windows\system32\catroot
2010-01-22 17:38:32 ----D---- C:\Windows\system32\catroot2
2010-01-18 22:29:06 ----D---- C:\Program Files\Common Files\Adobe
2010-01-18 22:29:06 ----D---- C:\Program Files\Common Files
2010-01-18 22:26:42 ----D---- C:\Program Files\Adobe
2010-01-18 22:10:11 ----D---- C:\Users\Notebook\AppData\Roaming\Adobe
2010-01-18 22:08:38 ----D---- C:\ProgramData\Adobe
2010-01-18 22:04:52 ----D---- C:\Windows\system32\Tasks
2010-01-18 21:20:26 ----HD---- C:\ProgramData
2010-01-18 21:07:28 ----RSD---- C:\Windows\Fonts
2010-01-14 15:14:08 ----D---- C:\Windows\inf
2010-01-14 15:14:08 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-14 13:04:42 ----D---- C:\Program Files\Windows Mail
2010-01-14 11:12:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-01-05 01:17:46 ----A---- C:\Windows\system32\mrt.exe
2010-01-01 20:10:14 ----D---- C:\Users\Notebook\AppData\Roaming\HpUpdate

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2009-11-25 23120]
R1 aswSP;avast! Self Protection; C:\Windows\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 SbFw;SbFw; C:\Windows\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\Windows\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2009-08-02 142592]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\DRIVERS\aswMonFlt.sys [2009-11-25 53328]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2009-07-31 14208]
R3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5bv.sys [2006-12-20 45568]
R3 HdAudAddService;VIA High Definition Audio Service; C:\Windows\system32\drivers\viahduaa.sys [2007-01-16 202752]
R3 S3GIGP;S3GIGP; C:\Windows\system32\DRIVERS\VTGKModeDX32.sys [2007-03-07 844288]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\Windows\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 SIS163u;SiS163 USB Wireless LAN Adapter Driver; C:\Windows\system32\DRIVERS\sis163u.sys [2007-05-07 218624]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2006-11-10 181176]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2006-11-02 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2006-11-02 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2006-11-02 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 FETNDIS;VIA Rhine-Family Fast Ethernet Adapter Driver Service; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2006-11-02 22016]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2006-11-02 22016]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-08-02 487424]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------

[Rudy]

Log vypadá čistý.

[ileini]

To jsem ráda, že je to v pořádku. Moc děkuju za pomoc.

[Rudy]

Nemáte zač!