Prosím o kontrolu

[arkan]

Dobrý deň, chcel by som vás poprosiť o kontrolu logu. Ďakujem

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by Janik at 2010-11-07 11:31:59
Microsoft Windows 7 Home Premium  
System drive C: has 146 GB (62%) free of 235 GB
Total RAM: 3319 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:32:25, on 7. 11. 2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\windows\vsnpstd3.exe
C:\windows\tsnpstd3.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Users\Janik\Desktop\odkazy\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Janik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.sme.sk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: (no name) -  - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\Janik\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Janik\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{E2B162BD-4FA0-45F8-9B08-ACAE9D149511}: NameServer = 172.22.35.254,88.212.8.8
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - Unknown owner - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 7563 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0BF43445-2F28-4351-9252-17FE6E806AA0}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-11-03 281768]
"snpstd3"=C:\Windows\vsnpstd3.exe [2007-05-10 835584]
"tsnpstd3"=C:\Windows\tsnpstd3.exe [2009-06-30 339968]
"00PCTFW"=C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2010-01-12 3168216]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2009-06-18 563736]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-11-07 11:31:59 ----D---- C:\rsit
2010-11-07 11:31:59 ----D---- C:\Program Files\trend micro
2010-11-07 11:27:30 ----D---- C:\Program Files\Ground Control II
2010-11-07 11:14:55 ----D---- C:\Windows\LastGood
2010-11-04 17:42:09 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-11-04 17:42:09 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-11-04 17:42:09 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-11-04 17:42:08 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-11-04 17:42:08 ----A---- C:\Windows\system32\d3dx10_42.dll
2010-11-04 17:42:08 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-11-04 17:42:07 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-11-04 17:42:07 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-11-04 17:42:07 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-11-04 17:42:06 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-11-04 17:42:06 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-11-04 17:42:06 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-11-04 17:42:06 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-11-04 17:42:06 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-11-04 17:42:05 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-11-04 17:42:05 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-11-04 17:42:05 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-11-04 17:42:04 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-11-04 17:42:03 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-11-04 17:42:03 ----A---- C:\Windows\system32\D3DX9_39.dll
2010-11-04 17:42:03 ----A---- C:\Windows\system32\d3dx10_39.dll
2010-11-04 17:42:03 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2010-11-04 17:42:02 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-11-04 17:42:02 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-11-04 17:42:02 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-11-04 17:42:02 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-11-04 17:42:02 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-11-04 17:42:01 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-11-04 17:42:01 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-11-04 17:42:01 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-11-04 17:42:01 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-11-04 17:42:00 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-11-04 17:42:00 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-11-04 17:42:00 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-11-04 17:41:59 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-11-04 17:41:59 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-11-04 17:41:59 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-11-04 17:41:58 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-11-04 17:41:58 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-11-04 17:41:57 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-11-04 17:41:57 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-11-04 17:41:57 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-11-04 17:41:57 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-11-04 17:41:57 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-11-04 17:41:56 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-11-04 17:41:56 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-11-04 17:41:56 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-11-04 17:41:55 ----A---- C:\Windows\system32\xinput1_3.dll
2010-11-04 17:41:55 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-11-04 17:41:55 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-11-04 17:41:55 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-11-04 17:41:54 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-11-04 17:41:53 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-10-27 18:21:14 ----A---- C:\Windows\system32\msdri.dll
2010-10-27 18:21:14 ----A---- C:\Windows\system32\CPFilters.dll
2010-10-27 18:21:12 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2010-10-24 19:49:09 ----D---- C:\ProgramData\Bluetooth
2010-10-24 19:47:27 ----D---- C:\Program Files\IVT Corporation
2010-10-24 16:51:59 ----D---- C:\Program Files\Miranda IM
2010-10-24 11:25:34 ----D---- C:\Program Files\ICQ7.2
2010-10-24 10:24:28 ----D---- C:\Users\Janik\AppData\Roaming\DVDVideoSoft
2010-10-22 00:06:52 ----D---- C:\Program Files\directx
2010-10-21 23:43:36 ----D---- C:\ProgramData\NVIDIA Corporation
2010-10-21 23:43:13 ----A---- C:\Windows\system32\nvgenco322030.dll
2010-10-21 23:43:13 ----A---- C:\Windows\system32\nvdispco322050.dll
2010-10-21 23:42:22 ----D---- C:\NVIDIA
2010-10-21 23:19:12 ----D---- C:\Program Files\Terminal Reality
2010-10-21 23:19:03 ----A---- C:\Windows\IsUninst.exe
2010-10-20 20:27:51 ----D---- C:\Users\Janik\AppData\Roaming\InterVideo
2010-10-20 20:22:57 ----D---- C:\Users\Janik\AppData\Roaming\dvdcss
2010-10-19 20:57:46 ----D---- C:\Windows\sk
2010-10-19 20:57:34 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-10-19 20:55:14 ----A---- C:\Windows\system32\WMVDECOD.DLL
2010-10-19 20:55:14 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-10-19 20:55:14 ----A---- C:\Windows\system32\mf.dll
2010-10-18 16:45:23 ----D---- C:\Windows\Minidump
2010-10-17 07:49:13 ----D---- C:\Program Files\Electronic Arts
2010-10-16 16:38:56 ----D---- C:\Program Files\Tracker Software
2010-10-16 16:37:24 ----D---- C:\Program Files\Foxit Software
2010-10-16 11:12:22 ----D---- C:\Program Files\Common Files\Skype
2010-10-16 11:12:21 ----RD---- C:\Program Files\Skype
2010-10-12 19:55:53 ----A---- C:\Windows\system32\mshtml.dll
2010-10-12 19:55:53 ----A---- C:\Windows\system32\iertutil.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\wininet.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\urlmon.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\mstime.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\mshtmled.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\msfeedssync.exe
2010-10-12 19:55:52 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\msfeeds.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\licmgr10.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\jsproxy.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\ieui.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\iepeers.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\ieframe.dll
2010-10-12 19:55:52 ----A---- C:\Windows\system32\iedkcs32.dll
2010-10-12 19:55:51 ----A---- C:\Windows\system32\mfc40u.dll
2010-10-12 19:55:51 ----A---- C:\Windows\system32\mfc40.dll
2010-10-12 19:55:48 ----A---- C:\Windows\system32\t2embed.dll
2010-10-12 19:55:48 ----A---- C:\Windows\system32\schannel.dll
2010-10-12 19:55:47 ----A---- C:\Windows\system32\wmploc.DLL
2010-10-12 19:55:47 ----A---- C:\Windows\system32\wmp.dll
2010-10-12 19:55:46 ----A---- C:\Windows\system32\comctl32.dll
2010-10-12 19:55:38 ----A---- C:\Windows\system32\ole32.dll
2010-10-12 19:55:37 ----A---- C:\Windows\system32\win32k.sys
2010-10-12 19:55:37 ----A---- C:\Windows\system32\srvsvc.dll
2010-10-12 19:55:37 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-10-12 19:55:37 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-10-12 19:55:37 ----A---- C:\Windows\system32\drivers\srv.sys
2010-10-12 19:55:26 ----A---- C:\Windows\system32\wmpmde.dll
2010-10-12 19:55:26 ----A---- C:\Windows\system32\StructuredQuery.dll
2010-10-11 14:58:28 ----D---- C:\Users\Janik\AppData\Roaming\KompoZer
2010-10-09 12:30:06 ----D---- C:\Program Files\GIMP-2.0

======List of files/folders modified in the last 1 months======

2010-11-07 11:32:14 ----D---- C:\Windows\Prefetch
2010-11-07 11:32:04 ----D---- C:\Windows\Temp
2010-11-07 11:31:59 ----RD---- C:\Program Files
2010-11-07 11:27:32 ----SHD---- C:\System Volume Information
2010-11-07 11:26:04 ----D---- C:\Windows\system32\config
2010-11-07 11:16:41 ----D---- C:\Windows\System32
2010-11-07 11:16:41 ----D---- C:\Windows\inf
2010-11-07 11:16:41 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-07 11:15:28 ----SHD---- C:\Windows\Installer
2010-11-07 11:15:28 ----SHD---- C:\Config.Msi
2010-11-07 11:15:26 ----D---- C:\ProgramData\NVIDIA
2010-11-07 11:15:05 ----D---- C:\windows
2010-11-07 11:14:56 ----D---- C:\Windows\system32\drivers
2010-11-07 10:32:31 ----D---- C:\Incomplete
2010-11-07 10:00:54 ----D---- C:\Windows\system32\Tasks
2010-11-07 09:36:06 ----AD---- C:\ProgramData\TEMP
2010-11-06 17:35:22 ----D---- C:\Users\Janik\AppData\Roaming\ICQ
2010-11-06 14:48:28 ----D---- C:\Windows\winsxs
2010-11-06 14:37:12 ----D---- C:\Windows\system32\zh-TW
2010-11-06 14:37:12 ----D---- C:\Windows\system32\zh-CN
2010-11-06 14:37:12 ----D---- C:\Windows\system32\sv-SE
2010-11-06 14:37:12 ----D---- C:\Windows\system32\ru-RU
2010-11-06 14:37:12 ----D---- C:\Windows\system32\pt-BR
2010-11-06 14:37:12 ----D---- C:\Windows\system32\pl-PL
2010-11-06 14:37:12 ----D---- C:\Windows\system32\ko-KR
2010-11-06 14:37:12 ----D---- C:\Windows\system32\ja-JP
2010-11-06 14:37:12 ----D---- C:\Windows\system32\it-IT
2010-11-06 14:37:12 ----D---- C:\Windows\system32\fr-FR
2010-11-06 14:37:12 ----D---- C:\Windows\system32\es-ES
2010-11-06 14:37:12 ----D---- C:\Windows\system32\en-US
2010-11-06 14:37:12 ----D---- C:\Windows\system32\de-DE
2010-11-06 14:37:06 ----D---- C:\Windows\system32\DriverStore
2010-11-06 14:37:06 ----D---- C:\Windows\system32\catroot
2010-11-06 14:35:37 ----D---- C:\Program Files\Common Files\microsoft shared
2010-11-06 14:31:01 ----D---- C:\Users\Janik\AppData\Roaming\IrfanView
2010-11-06 10:43:45 ----HD---- C:\Program Files\InstallShield Installation Information
2010-11-04 17:41:52 ----RSD---- C:\Windows\assembly
2010-11-04 17:39:15 ----D---- C:\Windows\system32\directx
2010-11-04 17:39:04 ----HD---- C:\Windows\msdownld.tmp
2010-11-03 19:29:19 ----SD---- C:\ProgramData\Microsoft
2010-11-03 19:27:32 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-11-03 05:27:28 ----D---- C:\Windows\system32\catroot2
2010-11-01 16:20:58 ----D---- C:\Windows\system32\drivers\etc
2010-11-01 09:50:07 ----D---- C:\ProgramData\PDFC
2010-10-31 15:23:26 ----D---- C:\Program Files\Mozilla Firefox
2010-10-31 14:57:07 ----SD---- C:\Users\Janik\AppData\Roaming\Microsoft
2010-10-31 13:44:55 ----D---- C:\Users\Janik\AppData\Roaming\Skype
2010-10-31 13:25:25 ----D---- C:\Users\Janik\AppData\Roaming\skypePM
2010-10-28 20:54:28 ----D---- C:\Program Files\CCleaner
2010-10-28 14:53:35 ----D---- C:\Users\Janik\AppData\Roaming\XnView
2010-10-27 19:09:25 ----D---- C:\Windows\rescache
2010-10-27 18:50:09 ----D---- C:\Windows\Microsoft.NET
2010-10-27 18:22:33 ----D---- C:\Windows\ehome
2010-10-27 18:22:29 ----D---- C:\Windows\AppPatch
2010-10-25 21:14:12 ----D---- C:\Users\Janik\AppData\Roaming\AIMP
2010-10-24 19:49:09 ----HD---- C:\ProgramData
2010-10-24 15:17:31 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-24 15:17:29 ----D---- C:\ProgramData\ICQ
2010-10-24 10:24:41 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-10-21 23:44:19 ----D---- C:\Program Files\NVIDIA Corporation
2010-10-21 23:44:12 ----D---- C:\Program Files\Common Files
2010-10-19 20:57:33 ----D---- C:\Program Files\Windows Live
2010-10-19 20:56:27 ----D---- C:\Windows\SoftwareDistribution
2010-10-19 10:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-19 02:44:12 ----D---- C:\Windows\Tasks
2010-10-19 02:44:12 ----D---- C:\Windows\system32\wfp
2010-10-19 02:44:12 ----D---- C:\Windows\system32\wbem
2010-10-19 02:44:11 ----D---- C:\Windows\AppCompat
2010-10-19 02:44:08 ----D---- C:\Windows\registration
2010-10-19 02:40:24 ----D---- C:\Windows\system32\LogFiles
2010-10-18 16:45:33 ----D---- C:\Program Files\PC Tools Firewall Plus
2010-10-16 14:03:06 ----D---- C:\UT2004
2010-10-16 14:00:46 ----D---- C:\Program Files\Common Files\Nero
2010-10-16 14:00:40 ----D---- C:\ProgramData\Nero
2010-10-16 14:00:37 ----D---- C:\Program Files\Nero
2010-10-16 11:12:18 ----D---- C:\ProgramData\Skype
2010-10-14 20:23:40 ----D---- C:\Windows\debug
2010-10-13 19:19:17 ----D---- C:\Program Files\Opera
2010-10-12 19:59:13 ----D---- C:\Windows\system32\migration
2010-10-12 19:59:13 ----D---- C:\Program Files\Windows Media Player
2010-10-12 19:59:13 ----D---- C:\Program Files\Internet Explorer
2010-10-12 19:58:54 ----D---- C:\ProgramData\Microsoft Help
2010-10-12 19:56:50 ----A---- C:\Windows\system32\MRT.exe
2010-10-08 09:38:00 ----A---- C:\Windows\system32\SETF487.tmp
2010-10-08 09:38:00 ----A---- C:\Windows\system32\SETE564.tmp
2010-10-08 09:38:00 ----A---- C:\Windows\system32\SET12A.tmp

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\System32\Drivers\vbtenum.sys [2007-03-05 20880]
R0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys [2007-03-05 35600]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iastor.sys [2009-06-05 330264]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-10 691696]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-11-03 126856]
R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
R1 mfetdik;McAfee Inc. mfetdik; C:\Windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 pctgntdi;pctgntdi; \??\C:\windows\System32\drivers\pctgntdi.sys [2010-01-07 233136]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-11-03 60936]
R2 PCTAppEvent;PCTAppEvent Driver; \??\C:\Windows\system32\drivers\PCTAppEvent.sys [2009-11-23 88040]
R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-18 11032]
R3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys [2007-05-11 34704]
R3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys [2007-03-05 27792]
R3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys [2007-03-05 18320]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-08-04 2744800]
R3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver; \??\C:\Windows\system32\drivers\pctNdis-PacketFilter.sys [2010-01-12 70664]
R3 pctNDIS;PC Tools Driver; C:\Windows\system32\DRIVERS\pctNdis.sys [2010-01-07 58816]
R3 pctplfw;pctplfw; \??\C:\windows\System32\drivers\pctplfw.sys [2010-01-13 115216]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-04 277536]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2010-09-26 27632]
R3 SNPSTD3;USB PC Camera (SNPSTD3); C:\Windows\system32\DRIVERS\snpstd3.sys [2009-07-03 10526464]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-24 10064]
R3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys [2007-03-05 34448]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys [2007-03-05 44304]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 acn4g4ff;acn4g4ff; C:\Windows\system32\drivers\acn4g4ff.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys [2007-05-09 36496]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2006-11-20 78128]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\DRIVERS\btwavdt.sys [2006-11-20 80688]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2006-11-20 16560]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2010-09-26 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2010-09-26 25512]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\Windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\Windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\Windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:\Windows\system32\DRIVERS\s0017bus.sys [2008-10-21 86824]
S3 s0017mdfl;Sony Ericsson Device 0017 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s0017mdfl.sys [2008-10-21 15016]
S3 s0017mdm;Sony Ericsson Device 0017 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s0017mdm.sys [2008-10-21 114600]
S3 s0017mgmt;Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s0017mgmt.sys [2008-10-21 108328]
S3 s0017nd5;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS); C:\Windows\system32\DRIVERS\s0017nd5.sys [2008-10-21 26024]
S3 s0017obex;Sony Ericsson Device 0017 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s0017obex.sys [2008-10-21 104616]
S3 s0017unic;Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM); C:\Windows\system32\DRIVERS\s0017unic.sys [2008-10-21 109736]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-11-03 267944]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-11-03 135336]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2009-07-14 20480]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2010-05-20 121344]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-05 112152]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-03-24 122984]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PCToolsFirewallPlus;PC Tools Firewall Plus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [2009-11-09 818432]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-08-27 1051968]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-09-05 435008]

-----------------EOF-----------------

[Roli]

Zdravím, tyhle zbytečnosti fixni v HJT :

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R3 - URLSearchHook: (no name) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

HJT najdeš zde :

C:\Program Files\trend micro\Janik.exe

Fix znamená že spustíš HJT jako admin

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Jinak nic špatného nevidím.


P.S. příště nedávej log do CODE blbě se to čte, dík.