![]() |
| |||||||
| Registrovať | Site Spy | Zoznam členov | Darovanie | Hľadať | Dnešné príspevky | Označiť témy ako prečítané | Pravidlá fóra |
|
![]() |
| | Thread Tools |
|
#1
| |||
| |||
| môj brat odpojený, aby je pripojený k notebooku. potom, keď je pripojený k pôvodnému ks ..... môj desktop, rýchlosť je naozaj začína cicať ....... i dont vedieť. sťahovanie, ktoré zvyčajne stalo v aroun 14 kb teraz deje v max.4kb. ako je napríklad Facebook, ktorý sa otvorí pred pokutou, teraz trochu dostane zavesil na dlhú dobu do otvorenia niečo. Som vysielania môj únos prihlásiť len v prípade. Prosím pomôžte. Heres my rýchlostnej skúške som rýchlosť ........ 128 dont vedieť, či v jeho mega alebo kilo ....... ale myslím, že jeho najväčšou pravdepodobnosťou druhom. http://www.speedtest.net/result/381473298.png Logfile Trend Micro HijackThis v2.0.2 Scan uložené v 2:58:15 PM na 12.31.2008 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Zavádzacia mód: Normálny Bežiace procesy: D: \ WINDOWS \ System32 \ Smss.exe D: \ WINDOWS \ system32 \ Csrss.exe D: \ WINDOWS \ system32 \ Winlogon.exe D: \ WINDOWS \ system32 \ Services.exe D: \ WINDOWS \ system32 \ lsass.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ Spoolsv.exe D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE D: \ WINDOWS \ system32 \ slserv.exe D: \ WINDOWS \ system32 \ wdfmgr.exe D: \ WINDOWS \ system32 \ wscntfy.exe D: \ WINDOWS \ system32 \ Taskmgr.exe D: \ Program Files \ Ares \ Ares.exe D: \ WINDOWS \ explorer.exe E: \ VŠECHNY softvér \ HiJackThis.exe D: \ WINDOWS \ system32 \ softvéru WBEM \ wmiprvse.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = o: Blank R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG: system.ini: Shell = explorer.exe O2 - BHO: DAPHelper triedy - (0000CC75-ACF3-4cac-A0A9-DD3868E06852) - D: \ Program Files \ DAP \ DAPBHO.dll O2 - BHO: IDM Helper - (0055C089-8582-441B-A0BF-17B458C2A3A8) - D: \ Program Files \ Internet Download Manager \ IDMIECC.dll O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - D: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O2 - BHO: Skype add-on (génius) - (22BF413B-C6D2-4d91-82A9-A0F997BA588C) - D: \ Program Files \ Skype \ Lišty \ Internet Explorer \ SkypeIEPlugin.dll O2 - BHO: SSVHelper triedy - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (bez názvu) - (7E853D72-626a-48EC-A868-BA8D5E23E045) - (ne obrázok) O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - d: \ program files \ google \ googletoolbar2.dll O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - d: \ program files \ google \ googletoolbar2.dll O3 - Toolbar: (bez názvu) - (DE9C389F-3316-41A7-809B-AA305ED9D922) - (ne obrázok) O3 - Toolbar: Opýtajte Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - D: \ Program Files \ AskBarDis \ bar \ bin \ askBar.dll O4 - HKLM \ .. \ Run: [QuickTime Úloha] "D: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [GoogleTalk] D: \ Program Files \ Google \ Google Talk \ googletalk.exe / autostart O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [Cttfmon.exe] D: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [Bittorrent DNA] "D: \ Program Files \ DNA \ btdna.exe" O8 - Extra kontextového menu položku: & Stiahnuť pomocou & DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie.htm O8 - Extra kontextového menu položku: Download & all s DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie2.htm O8 - Extra kontextového menu položku: Stiahnuť všetky odkazy s IDM - D: \ Program Files \ Internet Download Manager \ IEGetAll.htm O8 - Extra kontextového menu položku: Prevziať obsah FLV videa s IDM - D: \ Program Files \ Internet Download Manager \ IEGetVL.htm O8 - Extra kontextového menu položku: Stáhnout s IDM - D: \ Program Files \ Internet Download Manager \ IEExt.htm O8 - Extra kontextového menu položku: E & xportovať do programu Microsoft Excel - res: / / D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra tlačidlá: (bez názvu) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra tlačidlá: Skype - (77BF5300-1474-4EC7-9980-D32B190E9B07) - D: \ Program Files \ Skype \ Lišty \ Internet Explorer \ SkypeIEPlugin.dll O9 - Extra tlačidlá: (bez názvu) - (85d1f590-48f4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - (85d1f590-48f4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra tlačidlá: Výskum - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage validáciu Tool) -- http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (5D86DDB5-BDF9-441B-9E9E-D4730F4EE499) (BDSCANONLINE Control) -- http://download.bitdefender.com/reso...an8/oscan8.cab O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1222679603245 O18 - Protokol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - D: \ PROGRA ~ 1 \ Common ~ 1 \ Skype \ SKYPE4 ~ 1.DLL O20 - Winlogon Upozornenie:! SASWinLogon - D: \ Program Files \ SuperAntiSpyware \ SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D: \ Program Files \ Ares \ chatServer.exe O23 - Service: Distribuovaná - Neznámy vlastník - D: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ ServerNet.exe (súbor chýba) O23 - Service: Google Updater Service (gusvc) - Google - D: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D: \ Program Files \ Pripojenie k PC Riešenie \ ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D: \ WINDOWS \ SYSTEM32 \ slserv.exe -- Koniec súboru - 6000 bytes |
|
#2
| |||
| |||
| Stiahnuť Malwarebytes' Anti-Malware (MBAM)
Extra Poznámka: Ak narazia na MBAM súbor, ktorý je ťažké odstrániť, bude predložená v 1 z 2 výzva, kliknite na tlačidlo OK a nechajte MBAM buď pokračovať s dezinfekčné proces, je-li vyzvaní k reštartu počítača, urobte tak ihneď. ---------- Stiahnuť náhodný systém informačný nástroj (rsit) náhodnými / náhodne a uložte ho na plochu.
|
|
#3
| |||
| |||
| Logfile náhodných systém informačný nástroj 1,05 (písomná náhodnými / náhodný) Úcastníkov Burhan v 2009-01-01 23:01:39 Microsoft Windows XP Professional Service Pack 2 Systémovej jednotke D: má 1 GB (16%) bez 10 GB Celkom RAM: 126 MB (17% free) Logfile Trend Micro HijackThis v2.0.2 Scan uložené v 11:01:43 hod, na 1.1.2009 Platforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0013) Zavádzacia mód: Normálny Bežiace procesy: D: \ WINDOWS \ System32 \ Smss.exe D: \ WINDOWS \ system32 \ Csrss.exe D: \ WINDOWS \ system32 \ Winlogon.exe D: \ WINDOWS \ system32 \ Services.exe D: \ WINDOWS \ system32 \ lsass.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ svchost.exe D: \ WINDOWS \ system32 \ Spoolsv.exe D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE D: \ WINDOWS \ system32 \ Ctfmon.exe D: \ WINDOWS \ system32 \ wdfmgr.exe D: \ WINDOWS \ System32 \ alg.exe D: \ WINDOWS \ system32 \ wscntfy.exe D: \ WINDOWS \ system32 \ Taskmgr.exe D: \ WINDOWS \ system32 \ softvéru WBEM \ wmiprvse.exe D: \ WINDOWS \ explorer.exe D: \ Documents and Settings \ Burhan \ Desktop \ RSIT.exe E: \ VŠECHNY softvér \ Burhan.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = o: Blank R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/yco.../www.yahoo.com F2 - REG: system.ini: Shell = explorer.exe O2 - BHO: DAPHelper triedy - (0000CC75-ACF3-4cac-A0A9-DD3868E06852) - D: \ Program Files \ DAP \ DAPBHO.dll O2 - BHO: Skype add-on (génius) - (22BF413B-C6D2-4d91-82A9-A0F997BA588C) - D: \ Program Files \ Skype \ Lišty \ Internet Explorer \ SkypeIEPlugin.dll O2 - BHO: SSVHelper triedy - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (bez názvu) - (7E853D72-626a-48EC-A868-BA8D5E23E045) - (ne obrázok) O3 - Toolbar: (bez názvu) - (DE9C389F-3316-41A7-809B-AA305ED9D922) - (ne obrázok) O4 - HKLM \ .. \ Run: [QuickTime Úloha] "D: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [GoogleTalk] D: \ Program Files \ Google \ Google Talk \ googletalk.exe / autostart O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [Cttfmon.exe] D: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [Bittorrent DNA] "D: \ Program Files \ DNA \ btdna.exe" O8 - Extra kontextového menu položku: & Stiahnuť pomocou & DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie.htm O8 - Extra kontextového menu položku: Download & all s DAP - D: \ PROGRA ~ 1 \ DAP \ dapextie2.htm O8 - Extra kontextového menu položku: E & xportovať do programu Microsoft Excel - res: / / D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra tlačidlá: (bez názvu) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra tlačidlá: Skype - (77BF5300-1474-4EC7-9980-D32B190E9B07) - D: \ Program Files \ Skype \ Lišty \ Internet Explorer \ SkypeIEPlugin.dll O9 - Extra tlačidlá: (bez názvu) - (85d1f590-48f4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - (85d1f590-48f4-11d9-9669-0800200c9a66) - D: \ WINDOWS \ bdoscandel.exe O9 - Extra tlačidlá: Výskum - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - D: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage validáciu Tool) -- http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (5D86DDB5-BDF9-441B-9E9E-D4730F4EE499) (BDSCANONLINE Control) -- http://download.bitdefender.com/reso...an8/oscan8.cab O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1222679603245 O18 - Protokol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - D: \ PROGRA ~ 1 \ Common ~ 1 \ Skype \ SKYPE4 ~ 1.DLL O20 - Winlogon Upozornenie:! SASWinLogon - D: \ Program Files \ SuperAntiSpyware \ SASWINLO.dll O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - D: \ Program Files \ Ares \ chatServer.exe O23 - Service: Distribuovaná - Neznámy vlastník - D: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ ServerNet.exe (súbor chýba) O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - PC Tools Research Pty Ltd - D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe O23 - Service: ServiceLayer - Nokia. - D: \ Program Files \ Pripojenie k PC Riešenie \ ServiceLayer.exe O23 - Service: SmartLinkService (SLService) - Smart Link - D: \ WINDOWS \ SYSTEM32 \ slserv.exe -- Koniec súboru - 4970 bytes ====== Registry výpisem ====== [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (0000CC75-ACF3-4cac-A0A9-DD3868E06852)] DAPHelper triedy - D: \ Program Files \ DAP \ DAPBHO.dll [2007-11-27 98304] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (22BF413B-C6D2-4d91-82A9-A0F997BA588C)] Skype add-on (génius) - D: \ Program Files \ Skype \ Lišty \ Internet Explorer \ SkypeIEPlugin.dll [2008-05-30 1410344] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)] SSVHelper triedy - D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (7E853D72-626a-48EC-A868-BA8D5E23E045)] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar] (DE9C389F-3316-41A7-809B-AA305ED9D922) [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Run] "QuickTime Úloha" = D: \ Program Files \ QuickTime \ qttask.exe [2006-09-01 282624] "GoogleTalk" = D: \ Program Files \ Google \ Google Talk \ googletalk.exe [2007-01-02 3739648] "SunJavaUpdateSched" = D: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe [2008-06-10 144784] [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curr ntVersion \ Run] "Ctfmon.exe" = D: \ WINDOWS \ system32 \ Ctfmon.exe [2004-08-03 15360] "Bittorrent DNA" = D: \ Program Files \ DNA \ btdna.exe [2008-12-30 342848] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ zdieľané tools \ msconfig \ startupreg \ Ctfmon.exe] D: \ WINDOWS \ system32 \ Ctfmon.exe [2004-08-03 15360] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ zdieľané tools \ msconfig \ startupreg \ PCSuiteTrayApplication] [] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ zdieľané tools \ msconfig \ startupreg \ PCTAVApp] D: \ Program Files \ PC Tools AntiVirus \ PCTAV.exe [2008-09-25 1370000] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Informujte \! SASWinLogon] D: \ Program Files \ SuperAntiSpyware \ SASWINLO.dll [2008-07-23 352256] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ ShellExecuteHooks] "(5AE067D3-9AFB-48E0-853A-EBB7F4A000DA)" = D: \ Program Files \ SuperAntiSpyware \ SASSEH.DLL [2008-05-13 77824] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ contro l \ safeboot \ Minimálna \ SBCSSvc] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ contro l \ safeboot \ network \ PCTAVSvc] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ contro l \ safeboot \ network \ SBCSSvc] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ System] "dontdisplaylastusername" = 0 "legalnoticecaption" = "legalnoticetext" = "shutdownwithoutlogon" = 1 "undockwithoutlogon" = 1 [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curr ntVersion \ Policies \ Explorer] "NoDrives" = 0 "NoDriveAutoRun" = FFFFFFFF "NoDriveTypeAutoRun" = 36 [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ Explorer] "NoDriveTypeAutoRun" = "NoDrives" = "NoDriveAutoRun" = [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Servic es \ sharedaccess \ Parameters \ firewallpolicy \ štandardný profil \ authorizedapplications \ list] "% Windir% \ system32 \ Sessmgr.exe" = "% windir% \ system32 \ Sessmgr.exe: *: Enabled: @ xpsp2res.dll, -22019" "D: \ Program Files \ Ares \ Ares.exe" = "D: \ Program Files \ Ares \ Ares.exe: *: Enabled: Ares p2p okien" "D: \ Program Files \ NetMeeting \ conf.exe" = "D: \ Program Files \ NetMeeting \ conf.exe: *: Enabled: Windows ® NetMeeting ®" "D: \ Program Files \ Opera \ Opera.exe" = "D: \ Program Files \ Opera \ Opera.exe: *: Enabled: Opera Internet Browser" "D: \ Program Files \ Google \ Google Talk \ googletalk.exe" = "D: \ Program Files \ Google \ Google Talk \ googletalk.exe: *: Enabled: Google Talk" "D: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe" = "D: \ Pre gram Files \ Yahoo! \ Messenger \ YahooMessenger.exe: *: Povoľte d: Yahoo! Messenger" "D: \ Program Files \ Yahoo! \ Messenger \ YServer.exe" = "D: \ Program Files \ Yahoo! \ Messenger \ YServer.exe: *: Enabled: Yahoo! FT Server" "D: \ Program Files \ AIM6 \ aim6.exe" = "D: \ Program Files \ AIM6 \ aim6.exe: *: Enabled: AIM" "D: \ Program Files \ Skype \ Telefón \ Skype.exe" = "D: \ Program Files \ Skype \ Telefón \ Skype.exe: *: Enabled: Skype" "D: \ Program Files \ Trillian \ trillian.exe" = "D: \ Program Files \ Trillian \ trillian.exe: *: Enabled: Trillian" "D: \ Program Files \ Miranda IM \ miranda32.exe" = "D: \ Program Files \ Miranda IM \ miranda32.exe: *: Enabled: Miranda IM" "D: \ Program Files \ LimeWire \ LimeWire.exe" = "D: \ Program Files \ LimeWire \ LimeWire.exe: *: Enabled: LimeWire" "D: \ Program Files \ MSN Messenger \ msnmsgr.exe" = "D: \ Program Files \ MSN Messenger \ msnmsgr.exe: *: Enabled: Windows Live Messenger 8.1" "D: \ Program Files \ MSN Messenger \ livecall.exe" = "D: \ Program Files \ MSN Messenger \ livecall.exe: *: Enabled: Windows Live Messenger 8.1 (Phone)" "D: \ Program Files \ DNA \ btdna.exe" = "D: \ Program Files \ DNA \ btdna.exe: *: Enabled: DNA" "D: \ Program Files \ BitTorrent \ bittorrent.exe" = "D: \ Program Files \ BitTorrent \ bittorrent.exe: *: Enabled: BitTorre nt" [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Servic es \ sharedaccess \ Parameters \ firewallpolicy \ domainpr ofile \ authorizedapplications \ list] "% Windir% \ system32 \ Sessmgr.exe" = "% windir% \ system32 \ Sessmgr.exe: *: Enabled: @ xpsp2res.dll, -22019" "D: \ Program Files \ MSN Messenger \ msncall.exe" = "D: \ Program Files \ MSN Messenger \ msncall.exe: *: Enabled: Windows Live Messenger 8.0 (Phone)" "D: \ Program Files \ MSN Messenger \ msnmsgr.exe" = "D: \ Program Files \ MSN Messenger \ msnmsgr.exe: *: Enabled: Windows Live Messenger 8.1" "D: \ Program Files \ MSN Messenger \ livecall.exe" = "D: \ Program Files \ MSN Messenger \ livecall.exe: *: Enabled: Windows Live Messenger 8.1 (Phone)" [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ curry ntversion \ explorer \ mountpoints2 \ (dafa2220-8123-11dd-aa9c-00065b298742)] shell \ AutoRun \ command - G: \ CONFIG \ S-1-5-21-1482476501-1644491937-682003330-1013 \ Cfg.exe shell \ open \ command - G: \ CONFIG \ S-1-5-21-1482476501-1644491937-682003330-1013 \ Cfg.exe ====== Zoznam súborov a priečinkov vytvorených v poslednej 1 mesiac ====== 2009-01-01 20:51:34 ---- SHD ---- D: \ FOUND.174 2008-12-31 19:12:10 ---- SHD ---- D: \ FOUND.173 2008-12-30 23:08:48 ---- SHD ---- D: \ FOUND.172 2008-12-30 18:53:42 ---- SHD ---- D: \ FOUND.171 2008-12-30 16:16:01 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ bittorrent 2008-12-30 16:15:44 ---- D ---- D: \ Program Files \ DNA 2008-12-30 16:15:44 ---- D ---- D: \ Program Files \ bittorrent 2008-12-30 16:15:44 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ DNA 2008-12-30 14:46:46 ---- SHD ---- D: \ FOUND.170 2008-12-29 23:24:22 ---- SHD ---- D: \ FOUND.169 2008-12-29 15:06:17 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ IDM 2008-12-29 13:39:04 ---- SHD ---- D: \ FOUND.168 2008-12-28 05:25:52 ---- D ---- D: \ Program Files \ IrfanView 2008-12-26 22:39:46 ---- SHD ---- D: \ FOUND.167 2008-12-26 15:36:18 ---- SHD ---- D: \ FOUND.166 2008-12-26 12:37:24 ---- SHD ---- D: \ FOUND.165 2008-12-25 21:19:38 ---- SHD ---- D: \ FOUND.164 2008-12-20 14:47:41 ---- D ---- D: \ Program Files \ HyCam2 2008-12-20 12:02:48 ---- D ---- D: \ Program Files \ Frets On Fire 2008-12-20 09:54:02 ---- SHD ---- D: \ FOUND.163 2008-12-17 11:38:48 ---- SHD ---- D: \ FOUND.162 2008-12-15 23:31:13 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ LimeWire 2008-12-15 23:03:16 ---- SHD ---- D: \ FOUND.161 2008-12-15 16:52:14 ---- SHD ---- D: \ FOUND.160 2008-12-13 13:47:12 ---- SHD ---- D: \ FOUND.159 2008-12-10 21:05:58 ---- SHD ---- D: \ FOUND.158 2008-12-09 23:27:12 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ J River 2008-12-09 13:10:10 ---- D ---- D: \ Program Files \ Common Files \ NSV 2008-12-06 05:52:44 ---- SHD ---- D: \ FOUND.157 2008-12-06 01:43:41 ---- N ---- D: \ WINDOWS \ system32 \ vxblock.dll 2008-12-06 01:43:41 ---- N ---- D: \ WINDOWS \ system32 \ pxwave.dll 2008-12-06 01:43:41 ---- N ---- D: \ WINDOWS \ system32 \ pxmas.dll 2008-12-06 01:43:41 ---- N ---- D: \ WINDOWS \ system32 \ pxhpinst.exe 2008-12-06 01:43:41 ---- N ---- D: \ WINDOWS \ system32 \ pxdrv.dll 2008-12-06 01:43:40 ---- N ---- D: \ WINDOWS \ system32 \ px.dll 2008-12-06 01:43:14 ---- D ---- D: \ Program Files \ Winamp 2008-12-06 01:43:14 ---- A ---- D: \ WINDOWS \ winamp.ini 2008-12-05 14:40:22 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ Netscape 2008-12-05 14:39:56 ---- D ---- D: \ Program Files \ Netscape 2008-12-04 17:34:26 ---- SHD ---- D: \ FOUND.156 2008-12-04 08:55:46 ---- SHD ---- D: \ FOUND.155 2008-12-02 22:24:47 ---- D ---- D: \ Documents and Settings \ Burhan \ Data aplikací \ InstallShield ====== Zoznam súborov a priečinkov upravil v poslednej 1 mesiac ====== 2008-12-31 05:00:54 ---- N ---- D: \ WINDOWS \ SchedLgU.Txt 2008-12-24 22:49:44 ---- A ---- D: \ WINDOWS \ ModemLog_Smart Link 56K Hlasové Modem.txt ====== Zoznam vodiči (R = Spúšťanie, S = Zastavené, 0 = Zavádzacia, 1 = System, 2 = Auto, 3 = Demand, 4 = Zakázané )====== R1 P3; PentiumIII Procesor Intel Driver; D: \ WINDOWS \ system32 \ DRIVERS \ p3.sys [2004-08-03 42496] R1 SASDIFSV; SASDIFSV; \? \ D: \ Program Files \ SuperAntiSpyware \ SASDIFSV.SYS [] R1 SASKUTIL; SASKUTIL; \? \ D: \ Program Files \ SuperAntiSpyware \ SASKUTIL.sys [] R1 WS2IFSL; Windows Socket 2.0 bez-IFS Service Provider Podpora pre životné prostredie; D: \ WINDOWS \ system32 \ drivers \ ws2ifsl.sys [2001-08-23 12032] R2 AVFilter; AVFilter, D: \ WINDOWS \ system32 \ drivers \ AVFilter.sys [2008-02-12 21904] R2 dmsmbios; dmsmbios; \? \ D: \ WINDOWS \ system32 \ dmsmbios.sys [] R3 ac97intc, Intel (R) 82801 Audio Driver Inštalácia Service (WDM), D: \ WINDOWS \ system32 \ drivers \ ac97intc.sys [2001-08-17 96256] R3 AVHook; AVHook, D: \ WINDOWS \ system32 \ drivers \ AVHook.sys [2007-12-06 28568] R3 AVRec; AVRec, D: \ WINDOWS \ system32 \ drivers \ AVRec.sys [2007-12-06 21912] R3 EL90XBC; 3Com EtherLink XL 90XB / C Adapter Driver; D: \ WINDOWS \ system32 \ DRIVERS \ el90xbc5.sys [2001-08-17 66591] R3 i81x; i81x, D: \ WINDOWS \ system32 \ DRIVERS \ i81xnt5.sys [2004-08-03 161020] R3 MODEMCSA; Unimodem Streaming Filtračné zariadenie; D: \ WINDOWS \ system32 \ drivers \ MODEMCSA.sys [2001-08-17 16128] R3 Mtlmnt5; Mtlmnt5, D: \ WINDOWS \ system32 \ DRIVERS \ Mtlmnt5.sys [2004-08-03 126686] R3 Slntamr; Smart Link 56K Modem Driver; D: \ WINDOWS \ system32 \ DRIVERS \ slntamr.sys [2004-08-03 404990] R3 SlWdmSup; SlWdmSup, D: \ WINDOWS \ system32 \ DRIVERS \ SlWdmSup.sys [2004-08-03 13240] R3 usbhub; USB2 Povolené Hub, D: \ WINDOWS \ system32 \ DRIVERS \ usbhub.sys [2004-08-03 57600] R3 usbuhci; Microsoft USB Universal Host Controller Ovladač Miniport; D: \ WINDOWS \ system32 \ DRIVERS \ usbuhci.sys [2004-08-03 20480] S1 b88b9e8e; b88b9e8e, D: \ WINDOWS \ system32 \ drivers \ b88b9e8e.sys [2008-08-05 109150] S3 AvFlt; Antivirus Filter Driver; D: \ WINDOWS \ system32 \ drivers \ av5flt.sys [] S3 CCDECODE; Uzavretá Caption Decoder, D: \ WINDOWS \ system32 \ DRIVERS \ CCDECODE.sys [2004-08-03 17024] S3 iAimFP0; iAimFP0, D: \ WINDOWS \ system32 \ DRIVERS \ wADV01nt.sys [2004-08-03 12415] S3 iAimFP1; iAimFP1, D: \ WINDOWS \ system32 \ DRIVERS \ wADV02NT.sys [2004-08-03 12127] S3 iAimFP2; iAimFP2, D: \ WINDOWS \ system32 \ DRIVERS \ wADV05NT.sys [2004-08-03 11775] S3 iAimFP3; iAimFP3, D: \ WINDOWS \ system32 \ DRIVERS \ wSiINTxx.sys [2004-08-03 12063] S3 iAimFP4; iAimFP4, D: \ WINDOWS \ system32 \ DRIVERS \ wVchNTxx.sys [2004-08-03 19455] S3 iAimFP5; iAimFP5, D: \ WINDOWS \ system32 \ DRIVERS \ wADV07nt.sys [2004-08-03 11807] S3 iAimFP6; iAimFP6, D: \ WINDOWS \ system32 \ DRIVERS \ wADV08nt.sys [2004-08-03 11295] S3 iAimFP7; iAimFP7, D: \ WINDOWS \ system32 \ DRIVERS \ wADV09nt.sys [2004-08-03 11871] S3 iAimTV0; iAimTV0, D: \ WINDOWS \ system32 \ DRIVERS \ wATV01nt.sys [2004-08-03 29311] S3 iAimTV1; iAimTV1, D: \ WINDOWS \ system32 \ DRIVERS \ wATV02NT.sys [2004-08-03 19551] S3 iAimTV3; iAimTV3, D: \ WINDOWS \ system32 \ DRIVERS \ wATV04nt.sys [2004-08-03 33599] S3 iAimTV4; iAimTV4, D: \ WINDOWS \ system32 \ DRIVERS \ wCh7xxNT.sys [2004-08-03 23615] S3 iAimTV5; iAimTV5, D: \ WINDOWS \ system32 \ DRIVERS \ wATV10nt.sys [2004-08-03 25471] S3 iAimTV6; iAimTV6, D: \ WINDOWS \ system32 \ DRIVERS \ wATV06nt.sys [2004-08-03 22271] S3 MBAMSwissArmy; MBAMSwissArmy; \? \ D: \ WINDOWS \ system32 \ drivers \ mbamswissarmy.sys [] S3 MSTEE; Microsoft Streaming Tee / Výlevky-to-Výlevky Converter, D: \ WINDOWS \ system32 \ drivers \ MSTEE.sys [2004-08-03 5504] S3 Mtlstrm; Mtlstrm, D: \ WINDOWS \ system32 \ DRIVERS \ Mtlstrm.sys [2004-08-03 1309184] S3 NABTSFEC; NABTS / FEC VBI Codec; D: \ WINDOWS \ system32 \ DRIVERS \ NABTSFEC.sys [2004-08-03 85376] S3 NdisIP, Microsoft TV / Video pripojenia, D: \ WINDOWS \ system32 \ DRIVERS \ NdisIP.sys [2004-08-03 10880] S3 nmwcd; Nokia USB telefón Parent, D: \ WINDOWS \ system32 \ drivers \ nmwcd.sys [2007-02-22 137216] S3 nmwcdc; Nokia USB Generic; D: \ WINDOWS \ system32 \ drivers \ nmwcdc.sys [2007-02-22 8320] S3 nmwcdcj; Nokia USB Port; D: \ WINDOWS \ system32 \ drivers \ nmwcdcj.sys [2007-02-22 12288] S3 nmwcdcm; Nokia USB Modem; D: \ WINDOWS \ system32 \ drivers \ nmwcdcm.sys [2007-02-22 12288] S3 NtMtlFax; NtMtlFax, D: \ WINDOWS \ system32 \ DRIVERS \ NtMtlFax.sys [2004-08-03 180360] S3 SASENUM; SASENUM; \? \ D: \ Program Files \ SuperAntiSpyware \ SASENUM.SYS [] S3 SBRE; SBRE; \? \ D: \ WINDOWS \ system32 \ drivers \ SBREdrv.sys [] S3 SLIP; BDA Slip De-ramar, D: \ WINDOWS \ system32 \ DRIVERS \ SLIP.sys [2004-08-03 11136] S3 SlNtHal; SlNtHal, D: \ WINDOWS \ system32 \ DRIVERS \ Slnthal.sys [2004-08-03 95424] S3 streamip; BDA IPSink, D: \ WINDOWS \ system32 \ DRIVERS \ StreamIP.sys [2004-08-03 15360] S3 usbprint; Microsoft USB tlačiarne triedy, D: \ WINDOWS \ system32 \ DRIVERS \ usbprint.sys [2004-08-03 25856] S3 USBSTOR; USB Mass Storage Driver; D: \ WINDOWS \ system32 \ DRIVERS \ USBSTOR.SYS [2004-08-03 26496] S3 WpdUsb; WpdUsb, D: \ WINDOWS \ System32 \ Drivers \ wpdusb.sys [2004-08-11 18944] S3 WSTCODEC; Svet štandard Teletext Codec, D: \ WINDOWS \ system32 \ DRIVERS \ WSTCODEC.SYS [2004-08-03 19328] S3 XIRLINK; IBM PC kamery, D: \ WINDOWS \ system32 \ DRIVERS \ C-itnt.sys [1999-10-19 435655] ====== List služieb (R = Spúšťanie, S = Zastavené, 0 = Zavádzacia, 1 = System, 2 = Auto, 3 = Demand, 4 = Zakázané )====== R2 MDM; Machine Debug Manager; D: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ MDM.EXE [2003-06-19 322120] R2 UMWdf; Windows Uživatelský režim Driver rámcový, D: \ WINDOWS \ system32 \ wdfmgr.exe [2004-08-11 38912] S2 Distribuované; Rozdelené, D: \ Program Files \ Common Files \ Microsoft Shared \ MSINFO \ ServerNet.exe [] S2 PCTAVSvc; PC Tools AntiVirus Engine, D: \ Program Files \ PC Tools AntiVirus \ PCTAVSvc.exe [2008-09-23 995520] S2 SLService; SmartLinkService, D: \ WINDOWS \ system32 \ slserv.exe [2004-08-04 73796] S3 AresChatServer; Ares Chatroom server, D: \ Program Files \ Ares \ chatServer.exe [2007-03-20 263168] S3 aspnet_state; ASP.NET štátnej službe, D: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0.50727 \ aspn et_state.exe [2005-09-23 29896] S3 clr_optimization_v2.0.50727_32;. NET Runtime Optimalizačné Service v2.0.50727_X86, D: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0.50727 \ msco rsvw.exe [2005-09-23 66240] S3 osi; Office Source Engine; D: \ Program Files \ Common Files \ Microsoft Shared \ Source Engine \ Ose.exe [2003-07-28 89136] S3 ServiceLayer; ServiceLayer; D: \ Program Files \ Pripojenie k PC Riešenie \ ServiceLayer.exe [2007-06-15 300544] S3 usnjsvc; Messenger Zdieľanie priečinka USN vestník Reader služby; D: \ Program Files \ MSN Messenger \ usnsvc.exe [2007-01-19 97136] S3 WLSetupSvc; Windows Live Setup Service, D: \ Program Files \ Windows Live \ installer \ WLSetupSvc.exe [2007-10-25 266240] ----------------- EOF ----------------- |
|
#4
| |||
| |||
| info.txt logfile náhodných systém informačný nástroj 1,02 2008-09-26 23:02:40 Odinštalovať list ====== ====== -> D: \ WINDOWS \ IsUninst.exe-f "D: \ Program Files \ IbmPcCamera \ Uninst.isu" -> Rundll32.exe Setupapi.dll, InstallHinfSection DefaultUninstall 132 D: \ WINDOWS \ INF \ PCHealth.inf ACDSee -> D: \ PROGRA ~ 1 \ ACDSYS ~ 1 \ ACDSee \ UNWISE.EXE D: \ PROGRA ~ 1 \ ACDSYS ~ 1 \ ACDSee \ INSTALL.LOG Adobe Flash Player ActiveX -> D: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_acti veX.exe Adobe Flash Player Plugin -> D: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_plug in.exe AIM 6 -> D: \ Program Files \ AIM6 \ uninst.exe Ares 2.0.9 -> "D: \ Program Files \ Ares \ uninstall.exe" Astro123 v1.40--> "D: \ Program Files \ Astro123 \ unins000.exe" Axialis AX-Icons 4.5 -> D: \ Program Files \ Axialis \ AX-Icons \ UnInstall.exe "AX-Icons 4.5" "AXIcons.exe" CCleaner (odstrániť iba )-->" D: \ Program Files \ CCleaner \ uninst.exe " CDisplay 1.8 -> "D: \ Program Files \ CDisplay \ unins000.exe" Stiahnuť Accelerator Plus -> D: \ PROGRA ~ 1 \ DAP \ UNWISE.EXE D: \ PROGRA ~ 1 \ DAP \ INSTALL.LOG ESET Online Scanner -> D: \ WINDOWS \ system32 \ OnlineScannerUninstaller.ex e ffdshow [rev 2019] [2008-06-22 ]-->" D: \ Program Files \ ffdshow \ unins000.exe " Flash Studio PRE Trial -> "D: \ Program Files \ Flash Studio PRE Trial \ unins000.exe" FLV Player 2.0, build 24 -> C: \ Program Files \ FLV Player \ uninst.exe Foxit Reader -> C: \ Program Files \ Foxit Software \ Foxit Reader \ Uninstall.exe Glary Registry Repair 2.9 -> "D: \ Program Files \ Glary Registry Repair \ unins000.exe" Google Earth -> Msiexec.exe / I (1D14373E-7970-4F2F-A467-ACA4F0EA21E3) Google Talk (odstrániť iba )-->" D: \ Program Files \ Google \ Google Talk \ uninstall.exe " Google Toolbar pre Internet Explorer -> Msiexec.exe / I (DBEA1034-5882-4A88-8033-81C4EF0CFA29) Google Toolbar pre Internet Explorer -> regsvr32 / u / s "D: \ Program Files \ google \ googletoolbar2.dll" HijackThis 2.0.2 -> "D: \ Documents and Settings \ Burhan \ Dokumenty \ VŠECHNY softvér \ HijackThis.exe" / uninstall Hotfix pre systém Windows XP (KB915865 )-->" D: \ WINDOWS \ $ NtUninstallKB915865 $ \ spuninst \ spunin st.exe " Internet Download Manager -> D: \ Program Files \ Internet Download Manager \ Uninstall.exe Malwarebytes' Anti-Malware -> "D: \ Program Files \ Malwarebytes' Anti-Malware \ unins000.exe" Microsoft Národné Jazyková podpora Downlevel API -> "D: \ WINDOWS \ $ NtServicePackUninstallNLSDownlevelMa pping $ \ spuninst \ spuninst.exe" Microsoft Office Excel Viewer 2003 -> Msiexec.exe / I (90840409-6000-11D3-8CFE-0150048383C9) Microsoft Office XP Professional s FrontPage -> Msiexec.exe / I (90280409-6000-11D3-8CFE-0050048383C9) Microsoft Visual Basic 6.0 Enterprise Edition -> "D: \ Program Files \ Microsoft Visual Studio \ VB98 \ Setup \ 1033 \ Setup.exe" Publikovanie na webe Microsoft Sprievodca 1,53 -> rundll32 ADVPACK.DLL, LaunchINFSection D: \ WINDOWS \ INF \ wpie3x86.inf, WebPostUninstall Mobysaurus Thesaurus -> "D: \ WINDOWS \ system32 \ SpoonUninstall.exe" <uninstall> D: \ WINDOWS \ system32 \ SpoonUninstall-Mobysaurus Thesaurus.dat Nokia Connectivity Cable Driver -> Msiexec.exe / X (11964613-805F-432D-A12B-169554B793E7) Nokia Multimedia Player -> D: \ PROGRA ~ 1 \ Common ~ 1 \ inštaláciu ~ 1 \ Driver \ 7 \ INTEL3 ~ 1 \ I Driver.exe / M (4D6183C0-005C-4B1F-8261-4B0F71F1C4A5) Nokia PC Suite -> D: \ Documents and Settings \ All Users \ Data aplikací \ Device \ (A982E6CC-9F0D-4948-9B18-BDFD55DE4A72) \ Nokia_PC_Suite_6_84_10_3_EA.exe Nokia PC Suite -> Msiexec.exe / I (A982E6CC-9F0D-4948-9B18-BDFD55DE4A72) Opera 9.51 -> Msiexec.exe / X (179624B1-2683-45ED-965A-B72189EB5820) Pripojenie k PC riešenia -> Msiexec.exe / I (99A40651-0BC2-4095-8F9A-A40FAB224FEF) PowerDVD -> rundll32 D: \ PROGRA ~ 1 \ Common ~ 1 \ inštaláciu ~ 1 \ Motor \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "D: \ Program Files \ InstallShield Informácie o inštalácii \ (6811CAA0-BF12 -- 11D4-9EA1-0050BAE317E1) \ Setup.exe "-uninstall QuickTime -> Msiexec.exe / I (F07B861C-72B9-40A4-8B1A-AAED4C06A7E8) RichFX Player -> rundll32 D: \ PROGRA ~ 1 \ Common ~ 1 \ RichFX \ npvpg004.dll, Uninstall _Player Skype ™ 3.8 -> Msiexec.exe / X (5C82DAE5-6EB0-4374-9254-BE3319BA4E82) ČASY vzdelávania - úroveň fyziky -> D: \ WINDOWS \ uninst.exe-f "D: \ Program Files \ ČASY Vzdelanie \ A Level \ fyziky \ DeIsL2.isu"-CD: \ PROGRA ~ 1 \ TIMES ~ 1 \ ALEVEL ~ 1 \ fyziky \ _ISREG32.DL L TZ pripojenie Booster 2.6 -> "D: \ Program Files \ TZ pripojenie Booster \ unins000.exe" USB Drive AntiVirus 2.3 -> "D: \ Program Files \ USBAntiVirus \ unins000.exe" Vyhlídka Media Player -> D: \ Program Files \ hľadiska \ hľadiska Media Player \ mtsAxInstaller.exe / u Windows Driver Balík - Nokia (WUDFRd) WPD (06/01/2007 6.84.33.0) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u: D: \ WINDOWS \ system32 \ DRVSTORE \ pccswpddri_044C8712DB 44F83D9DE6C376991EE9254E0A69E4 \ pccswpddriver.inf Windows Driver Balík - Nokia Modem (02/15/2007 3,1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u: D: \ WINDOWS \ system32 \ DRVSTORE \ pccs_bluet_8B37DC7291 8CCD58A6EC20373AF6242B037A293B \ pccs_bluetooth.inf Windows Driver Balík - Nokia Modem (02/15/2007 3,1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u: D: \ WINDOWS \ system32 \ DRVSTORE \ pccs_bluet_F12A08B6F7 76984A95553486F64C541356F86E38 \ pccs_bluetooth.inf Windows Driver Balík - Nokia Modem (05/24/2007 6.84.0.1) -> D: \ PROGRA ~ 1 \ DIFX \ 270581355A767BF1 \ dpinst.exe / u: D: \ WINDOWS \ system32 \ DRVSTORE \ nokbtmdm_5E1541AFF1E1 EA3554CE566743CCAD323ED1C108 \ nokbtmdm.inf Windows Installer 3.1 (KB893803 )-->" D: \ WINDOWS \ $ MSI31Uninstall_KB893803v2 $ \ spuninst \ spuninst.exe " Instalátor Windows Live -> Msiexec.exe / X (A7E4ECCA-4A8E-4258-8EC8-2DCCF5B11320) Windows Live Messenger -> Msiexec.exe / I (571700F0-DB9D-4B3A-B03D-35A14BB5939F) Windows Media Format Runtime -> "D: \ Program Files \ Windows Media Player \ wmsetsdk.exe" / UninstallAll Windows Media Player 10 -> "D: \ Program Files \ Windows Media Player \ Setup_wm.exe" / Odinštalácia WinRAR Archiver -> D: \ Program Files \ WinRAR \ uninstall.exe Yahoo! Messenger -> D: \ PROGRA ~ 1 \ YAHOO! \ Messen ~ 1 \ UNWISE.EXE / UD: \ PROGRA ~ 1 \ YAHOO! \ Messen ~ 1 \ INSTALL.LOG Premenné prostredia ====== ====== "ComSpec" =% SystemRoot% \ system32 \ cmd.exe "Cesta" =% systemroot% \ system32;% systemroot%;% systemr OOT% \ system32 \ softvéru WBEM; D: \ Program Files \ Pripojenie k PC riešenie, D: \ Program Files \ QuickTime \ QTSYSTEM "windir" =% SystemRoot% "FP_NO_HOST_CHECK" = NO "OS" = Windows_NT "PROCESSOR_ARCHITECTURE" = x86 "PROCESSOR_LEVEL" = 6 "PROCESSOR_IDENTIFIER" = x86 Rodina 6 Model 8 Stepping 10, GenuineIntel "PROCESSOR_REVISION" = 080a "NUMBER_OF_PROCESSORS" = 1 "PATHEXT" =. COM;. EXE,. BAT;. CMD;. VBS;. VBE;. JS;. JSE;. WSF;. WSH "TEMP" =% SystemRoot% \ TEMP "TMP" =% SystemRoot% \ TEMP "Classpath" =.; D: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip "QTJAVA" = D: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip ----------------- EOF ----------------- |
|
#5
| |||
| |||
| Malwarebytes' Anti-Malware 1.28 Verzia databázy: 1234 Windows 5.1.2600 Service Pack 2 12/31/2008 6:04:35 AM mbam-log-2008-12-31 (06-04-35). txt Vyhľadávať typ: Úplné Scan (D: \ |) Objekty skenovanej: 107121 Doba letu: 24 minút (y), 0 sekúnd (y) Pamäťové procesy Infikovaná: 0 Infikované pamäťové moduly: 0 Infikované kľúče databázy Registry: 2 Infikované hodnoty databázy Registry: 0 Infikované položky dat registru: 0 Infikované zložky: 0 Infikované súbory: 0 Infikované pamäťové procesy: (Žiadne položky zistený škodlivý) Infikované pamäťové moduly: (Žiadne položky zistený škodlivý) Infikované kľúče databázy Registry: HKEY_CLASSES_ROOT \ AppID \ (bdbebf18-7615-4971-9ac3-bd6ffb7ad6c1) (Adware.WebDir) -> karanténe a úspešne vymazaná. HKEY_CLASSES_ROOT \ AppID \ DLP.DLL (Trojan.BHO) -> karanténe a úspešne vymazaná. Infikované hodnoty databázy Registry: (Žiadne položky zistený škodlivý) Infikované položky údajov databázy Registry: (Žiadne položky zistený škodlivý) Infikované zložky: (Žiadne položky zistený škodlivý) Infikované súbory: (Žiadne položky zistený škodlivý) |
|
#6
| |||
| |||
| HijackThis a vyberte Otvoriť Do systému kontrolovať len. Umiestnite zatržítko vedľa týchto poznámok: (ak existuje) F2 - REG: system.ini: Shell = explorer.exe Dôležité upozornenie: Zatvorte všetky okná okrem HijackThis a potom kliknite na tlačidlo Fix kontrolované. Jednou vyplnený, výstup HijackThis. ---------- Stiahnite ComboFix © subs z jedného z nižšie uvedených odkazov. Isteže top uložiť do Desktop. Link # 1 Link # 2 ** Poznámka: Je dôležité, že je uložený priamo na váš Desktop DON'T spustiť ešte! Poznámka: nižšie uvedených pokynov boli vytvorené špeciálne pre tohto užívateľa. Ak si nie ste týmto užívateľom DON'T postupujte podľa týchto pokynov, ktoré by mohli poškodiť chod vášho systému Odstrániť tieto súbory / adresáre, takto: 1. Prejsť na Začať > Plynúť > Typ Notepad.exe a kliknite OK otvorte Poznámkový blok. To musieť potrebné Poznámkový blok, WordPad nie. 2. Skopírujte text v nižšie kód do kolónky zvýraznenie celý text a stlačením Ctrl + C Kód: Killall:: File:: D: \ FOUND.174 D: \ FOUND.173 D: \ FOUND.172 D: \ FOUND.171 D: \ FOUND.170 D: \ FOUND.169 D: \ FOUND.168 D: \ FOUND.167 D: \ FOUND.166 D: \ FOUND.165 D: \ FOUND.164 D: \ FOUND.163 D: \ FOUND.162 D: \ FOUND.161 D: \ FOUND.160 D: \ ZISTILO , 159 D: \ FOUND.158 D: \ FOUND.157 D: \ FOUND.156 D: \ FOUND.155 Registry:: [-HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Browser Helper Objects \ (7E853D72 -- 626a-48EC-A868-BA8D5E23E045)] [-HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar] (DE9C389F-3316-41A7-809B-AA305ED9D922) [-HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ mountpoints2 \ ( dafa2220-8123-11dd-aa9c-00065b298742)] 4. Potom kliknite na Súbor > Uložiť 5. Názov súboru CFScript.txt - Uložte súbor do počítača 6. Potom presunieme CFScript (držte ľavé tlačidlo myši a zároveň pretiahnutím súboru) a pusť ju (uvoľnite ľavé tlačidlo myši) do ComboFix.exe, ako vidíte na obrázku nižšie. Dôležité upozornenie: Vykoná pokyny pozorne! ![]() ComboFix začne vykonávať, stačí sledovať pokyny. Po reštarte (v prípade, že požiada o reštart systému), bude produkovať záznam pre vás. Posta, že log (Combofix.txt) vo svojej budúcej odpoveď. Poznámka: Don't mouseclick ComboFix okná, ak je v chode. To môže spôsobiť váš systém zmraziť |