Prosím o kontrolu logu-pomalý start PC

Místo pro vaše HiJackThis logy a logy z dalších programů…

Moderátoři: Mods_senior, Security team

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 27 lis 2008 18:36

Fixwareout hned aplikuju ale pak nevím jakou DNS adresu tam dát...Podle mého providera žádnou jinou nevím,kde bych ji mohl zjistit ??

Reklama
Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43287
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod jaro3 » 27 lis 2008 19:08

Většinou se dává získat adresu serveru DNS automaticky a získat adresu IP ze serveru DHCP automaticky, je to podle providera.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 27 lis 2008 19:43

Zkoušel sem změnit v připojení: nastavit DNS a IP adresu automaticky ale nastavila se mi jen IP adresa a maska,DNS nic.... :?

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 28 lis 2008 15:33

Tak sem nějak přeměnil ty DNS adresy,net jde ale po předělání se mi ukázalo okno s hláškou:

Ochrana souborů systému Windows

Došlo k nahrazení souborů nezbytných pro správnou funkčnost systému Windows soubory neznámé verze.Stabilita systému bude zachována pokud systém obnoví původní verze těchto souborů.
Vložte Disk CD aktualizace Service Pack systému Windows

Co s tím ?? Já to CD nemám....

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43287
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod jaro3 » 28 lis 2008 15:54

No to je špatný, ještě zkus toto:
Stáhni si Dial-a-fix

Zkus opravit tímto programem.
Explorer/IE/OE/shell/WMP - Pokusí se o opravu Internet Exploreru, Outlook Expressu, Windows Media Playeru atd.
Policies: Otevře přehled všech použitých omezení nastavených v registru, například na použití editoru registru, správce úloh atd.
FlushDNS - Resetuje DNS cache.
Reset networking interfaces - Opraví winsock a síťové nastavení.
Stačí jen klik (dát zatržítko) a pak kliknout na Go.

Když to nepůjde tak ještě toto:
Stáhni si SREng--klikni pravým na odkaz a vyber uložit cíl...
- rozbal na plochu a spusť ho
- "zvol Smart Scan", nech nastaveni tak jak je
- zvol "Verify the digital signature of process modules"
- klik na "Scan"
- klik na Save Reports, ulož log na plochu a cely obsah logu zkopiruj sem.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 28 lis 2008 20:56

Log ze SREng

2008-11-28,20:47:43

System Repair Engineer 2.7.0.1210
Smallfrogs (http://www.KZTechs.com)

Windows XP Professional Service Pack 2 (Build 2600) - Administrative User - Completed Functions Allowed

Follow item(s) have been selected:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Running Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
Process Privileges Scan
Scheduled Tasks
API HOOK
Hidden Process


Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><D:\WINDOWS\system32\ctfmon.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<NvCplDaemon><RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup> [NVIDIA Corporation]
<nwiz><nwiz.exe /install> []
<NvMediaCenter><RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit> [NVIDIA Corporation]
<C-Media Mixer><Mixer.exe /startup> [(Verified)Microsoft Windows Hardware Compatibility Publisher, E=""]
<nod32kui><"D:\Program Files\Eset\nod32kui.exe" /WAITSERVICE> [Eset ]
<SunJavaUpdateSched><"D:\Program Files\Java\jre6\bin\jusched.exe"> [(Verified)"Sun Microsystems, Inc."]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [(Verified)Microsoft Windows Component Publisher]
<Userinit><D:\WINDOWS\system32\userinit.exe,> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
<{AEB6717E-7E19-11d0-97EE-00C04FD91972}><shell32.dll> [(Verified)Microsoft Windows Component Publisher]
<{B5A7F190-DDA6-4420-B3BA-52453494E6CD}><D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
<PostBootReminder><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<CDBurn><%SystemRoot%\system32\SHELL32.dll> [(Verified)Microsoft Windows Component Publisher]
<WebCheck><%SystemRoot%\system32\webcheck.dll> [(Verified)Microsoft Windows Publisher]
<WPDShServiceObj><D:\WINDOWS\system32\WPDShServiceObj.dll> [(Verified)Microsoft Windows Component Publisher]
<SysTray><D:\WINDOWS\system32\stobject.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
<WinlogonNotify: crypt32chain><crypt32.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
<WinlogonNotify: cryptnet><cryptnet.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
<WinlogonNotify: cscdll><cscdll.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
<WinlogonNotify: ScCertProp><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
<WinlogonNotify: Schedule><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
<WinlogonNotify: sclgntfy><sclgntfy.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
<WinlogonNotify: SensLogn><WlNotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
<WinlogonNotify: termsrv><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
<WinlogonNotify: WgaLogon><WgaLogon.dll> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
<WinlogonNotify: wlballoon><wlnotify.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
<{438755C2-A8BA-11D1-B96B-00A0C90312E1}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
<{8C7461EF-2B13-11d2-BE35-3078302C2030}><%SystemRoot%\system32\browseui.dll> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
<Microsoft Windows Media Player><D:\WINDOWS\inf\unregmp2.exe /ShowWMP> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}]
<Internet Explorer><%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS]
<Vlastní nastavení prohlížeče><RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}]
<Outlook Express><%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
<Themes Setup><%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}]
<Microsoft Outlook Express 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}]
<NetMeeting 3.01><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}]
<Windows Messenger 4.7><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}]
<Microsoft Windows Media Player><rundll32.exe advpack.dll,LaunchINFSection D:\WINDOWS\INF\wmp11.inf,PerUserStub> [(Verified)Microsoft Windows Component Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}]
<Adresář 6><"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}]
<Aktualizace plochy systému Windows><regsvr32.exe /s /n /i:U shell32.dll> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}]
<Internet Explorer 6><%SystemRoot%\system32\ie4uinit.exe> [(Verified)Microsoft Windows Publisher]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}]
<N/A><D:\WINDOWS\system32\Rundll32.exe D:\WINDOWS\system32\mscories.dll,Install> [(Verified)Microsoft Corporation]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Adobe Reader Speed Launcher><; "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"> [(Verified)"Adobe Systems, Incorporated"]
<Appwarp><; D:\PROGRA~1\REMI-S~1\APPLIC~1\ApplicationWarp.exe> []
<BDRegion><; D:\Program Files\Cyberlink\Shared Files\brs.exe> [(Verified)CyberLink]
<CloneCDTray><; "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s> [SlySoft, Inc.]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<DAEMON Tools Lite><; "D:\Program Files\DAEMON Tools Lite\daemon.exe"> [(Verified)DAEMON Tools Code Signing Services]
<IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}><; "D:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020> [File is missing]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<NeroFilterCheck><; D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe> [(Verified)Nero AG]
<PDVD8LanguageShortcut><; "D:\Program Files\CyberLink\PowerDVD8\Language\Language.exe"> [(Verified)CyberLink]
<QuickTime Task><; "D:\Program Files\QuickTime\QTTask.exe" -atboottime> [Apple Inc.]
<RemoteControl8><; "D:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"> [(Verified)CyberLink]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<Steam><; "D:\Program Files\Steam\Steam.exe" -silent> [(Verified)Valve]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
<TkBellExe><; "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [(Verified)"RealNetworks, Inc."]

==================================
Startup Folders
[Výřezy obrazovky a spuštění aplikace OneNote 2007]
<D:\Documents and Settings\Martin G\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk --> D:\PROGRA~1\MICROS~1\Office12\ONENOTEM.EXE [Microsoft Corporation]><N>

==================================
Services
[Ad-Aware 2007 Service / aawservice][Running/Auto Start]
<"D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe"><Lavasoft>
[##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## / Bonjour Service][Running/Auto Start]
<"D:\Program Files\Bonjour\mDNSResponder.exe"><Apple Computer, Inc.>
[Capture Device Service / Capture Device Service][Running/Auto Start]
<"D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe"><InterVideo Inc.>
[FLEXnet Licensing Service / FLEXnet Licensing Service][Stopped/Manual Start]
<"D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"><Macrovision Europe Ltd.>
[Windows Presentation Foundation Font Cache 3.0.0.0 / FontCache3.0.0.0][Stopped/Manual Start]
<D:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe><Microsoft Corporation>
[Přístup k zařízením standardu HID / HidServ][Stopped/Disabled]
<D:\WINDOWS\System32\svchost.exe -k netsvcs-->%SystemRoot%\System32\hidserv.dll><N/A>
[InstallDriver Table Manager / IDriverT][Stopped/Manual Start]
<"D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe"><Macrovision Corporation>
[Windows CardSpace / idsvc][Stopped/Manual Start]
<"D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"><Microsoft Corporation>
[InCD Helper / InCDsrv][Stopped/Disabled]
<D:\Program Files\Nero\Nero8\InCD\InCDsrv.exe><Nero AG>
[Java Quick Starter / JavaQuickStarterService][Running/Auto Start]
<"D:\Program Files\Java\jre6\bin\jqs.exe" -service -config "D:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"><Sun Microsystems, Inc.>
[Nero BackItUp Scheduler 3 / Nero BackItUp Scheduler 3][Stopped/Disabled]
<D:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe><Nero AG>
[Nero Registry InCD Service / NeroRegInCDSrv][Stopped/Disabled]
<D:\Program Files\Nero\Nero8\InCD\NBHRegInCDSrv.exe><Nero AG>
[Net.Tcp Port Sharing Service / NetTcpPortSharing][Stopped/Disabled]
<"D:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"><Microsoft Corporation>
[NMIndexingService / NMIndexingService][Stopped/Disabled]
<"D:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe"><Nero AG>
[NMSAccessU / NMSAccessU][Running/Auto Start]
<D:\Program Files\CDBurnerXP\NMSAccessU.exe><N/A>
[NOD32 Kernel Service / NOD32krn][Running/Auto Start]
<"D:\Program Files\Eset\nod32krn.exe"><Eset>
[NVIDIA Display Driver Service / NVSvc][Running/Auto Start]
<D:\WINDOWS\system32\nvsvc32.exe><NVIDIA Corporation>
[O&O Defrag / O&O Defrag][Running/Auto Start]
<D:\WINDOWS\system32\oodag.exe><O&O Software GmbH>
[PLFlash DeviceIoControl Service / PLFlash DeviceIoControl Service][Running/Auto Start]
<D:\WINDOWS\system32\IoctlSvc.exe><Prolific Technology Inc.>
[StarWind AE Service / StarWindServiceAE][Running/Auto Start]
<D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe><Rocket Division Software>
[TuneUp Drive Defrag Service / TuneUp.Defrag][Stopped/Manual Start]
<D:\WINDOWS\System32\TuneUpDefragService.exe><TuneUp Software GmbH>
[Ulead Burning Helper / UleadBurningHelper][Running/Auto Start]
<D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe><Ulead Systems, Inc.>
[TrueVector Internet Monitor / vsmon][Running/Auto Start]
<D:\WINDOWS\system32\ZoneLabs\vsmon.exe -service><Zone Labs, LLC>

==================================
Drivers
[Služba instalace zvukového ovladače Intel(r) (WDM) / ac97intc][Running/Manual Start]
<system32\drivers\ac97intc.sys><Intel Corporation>
[AMON / AMON][Running/Auto Start]
<\SystemRoot\system32\drivers\amon.sys><Eset>
[atksgt / atksgt][Running/Auto Start]
<system32\DRIVERS\atksgt.sys><N/A>
[C-Media PCI Audio Driver (WDM) / cmpci][Running/Manual Start]
<system32\drivers\cmaudio.sys><C-Media Inc>
[Dual-Mode DSC(2770) / DCamUSBSQTECH][Stopped/Manual Start]
<System32\Drivers\SQcaptur.sys><Service & Quality Technology.>
[ElbyCDFL / ElbyCDFL][Running/Manual Start]
<System32\Drivers\ElbyCDFL.sys><SlySoft, Inc.>
[ElbyCDIO Driver / ElbyCDIO][Running/System Start]
<System32\Drivers\ElbyCDIO.sys><Elaborate Bytes AG>
[Hamachi Network Interface / hamachi][Running/Manual Start]
<system32\DRIVERS\hamachi.sys><LogMeIn, Inc.>
[hotcore2 / hotcore2][Running/Boot Start]
<\SystemRoot\system32\drivers\hotcore2.sys><Paragon Software Group>
[Nero InCD File System / InCDfs][Running/Disabled]
<system32\drivers\InCDFs.sys><Nero AG>
[Nero InCDPass / InCDPass][Running/System Start]
<system32\drivers\InCDPass.sys><Nero AG>
[Nero InCD MRW Remapper / incdrm][Running/System Start]
<system32\drivers\InCDRm.sys><Nero AG>
[Sony Ericsson K510 Driver driver (WDM) / k510bus][Stopped/Manual Start]
<system32\DRIVERS\k510bus.sys><MCCI>
[Sony Ericsson K510 USB WMC Modem Filter / k510mdfl][Stopped/Manual Start]
<system32\DRIVERS\k510mdfl.sys><MCCI>
[Sony Ericsson K510 USB WMC Modem Driver / k510mdm][Stopped/Manual Start]
<system32\DRIVERS\k510mdm.sys><MCCI>
[Sony Ericsson K510 USB WMC Device Management Drivers (WDM) / k510mgmt][Stopped/Manual Start]
<system32\DRIVERS\k510mgmt.sys><MCCI>
[Sony Ericsson K510 USB WMC OBEX Interface / k510obex][Stopped/Manual Start]
<system32\DRIVERS\k510obex.sys><MCCI>
[KLIF / KLIF][Running/System Start]
<system32\DRIVERS\klif.sys><Kaspersky Lab>
[lirsgt / lirsgt][Running/Auto Start]
<system32\DRIVERS\lirsgt.sys><N/A>
[nod32drv / nod32drv][Running/System Start]
<\SystemRoot\system32\drivers\nod32drv.sys><N/A>
[nv / nv][Running/Manual Start]
<system32\DRIVERS\nv4_mini.sys><NVIDIA Corporation>
[VSO Software pcouffin / pcouffin][Running/Manual Start]
<System32\Drivers\pcouffin.sys><VSO Software>
[Direct Parallel Link Driver / Ptilink][Running/Manual Start]
<system32\DRIVERS\ptilink.sys><Parallel Technologies, Inc.>
[PxHelp20 / PxHelp20][Running/Boot Start]
<\SystemRoot\System32\Drivers\PxHelp20.sys><Sonic Solutions>
[Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver / rtl8139][Running/Manual Start]
<system32\DRIVERS\RTL8139.SYS><Realtek Semiconductor Corporation>
[Secdrv / Secdrv][Stopped/Manual Start]
<system32\DRIVERS\secdrv.sys><Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.>
[StarForce Protection Environment Driver (version 1.x) / sfdrv01][Running/Boot Start]
<\SystemRoot\System32\drivers\sfdrv01.sys><Protection Technology>
[StarForce Protection Helper Driver (version 2.x) / sfhlp02][Running/Boot Start]
<\SystemRoot\System32\drivers\sfhlp02.sys><Protection Technology>
[StarForce Protection VFS Driver (version 2.x) / sfvfs02][Running/Boot Start]
<\SystemRoot\System32\drivers\sfvfs02.sys><Protection Technology>
[sptd / sptd][Running/Boot Start]
<\SystemRoot\System32\Drivers\sptd.sys><N/A>
[srescan / srescan][Running/Boot Start]
<\SystemRoot\system32\ZoneLabs\srescan.sys><Zone Labs, LLC>
[VPN Anonymizer Adapter / tap0901_2gm][Stopped/Manual Start]
<system32\DRIVERS\tap0901_2gm.sys><The OpenVPN Project>
[LGE Mobile Composite USB Device / usbbus][Stopped/Manual Start]
<system32\DRIVERS\lgusbbus.sys><LG Electronics Inc.>
[LGE Mobile USB Serial Port / UsbDiag][Stopped/Manual Start]
<system32\DRIVERS\lgusbdiag.sys><LG Electronics Inc.>
[LGE Mobile USB Modem / USBModem][Stopped/Manual Start]
<system32\DRIVERS\lgusbmodem.sys><LG Electronics Inc.>
[vsdatant / vsdatant][Running/System Start]
<System32\vsdatant.sys><Zone Labs, LLC>
[{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054} / {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}][Running/Auto Start]
<\??\D:\Program Files\CyberLink\PowerDVD8\000.fcl><Cyberlink Corp.>

==================================
Browser Add-ons
[Octh Class]
{000123B4-9B42-4900-B3F7-F4B073EFC214} <D:\Program Files\Orbitdownloader\orbitcth.dll, (Signed) Orbitdownloader.com>
[Podpora odkazu pro Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[Groove GFS Browser Helper]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} <D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL, (Signed) Microsoft Corporation>
[Java(tm) Plug-In SSV Helper]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} <D:\Program Files\Java\jre6\bin\ssv.dll, (Signed) Sun Microsystems, Inc.>
[Java(tm) Plug-In 2 SSV Helper]
{DBC80044-A445-435b-BC74-9C25C1C588A9} <D:\Program Files\Java\jre6\bin\jp2ssv.dll, Sun Microsystems, Inc.>
[JQSIEStartDetectorImpl Class]
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} <D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll, Sun Microsystems, Inc.>
[Send to OneNote from Internet Explorer button]
{2670000A-7350-4f3c-8081-5663EE0C6C49} <D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll, (Signed) Microsoft Corporation>
[&Zdroje informací]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL, (Signed) Microsoft Corporation>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <D:\Program Files\Messenger\msmsgs.exe, (Signed) Microsoft Corporation>
[Java Plug-in 1.6.0_10]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <D:\Program Files\Java\jre6\bin\npjpi160_10.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_10]
{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA} <D:\Program Files\Java\jre6\bin\npjpi160_10.dll, (Signed) Sun Microsystems, Inc.>
[Java Plug-in 1.6.0_10]
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} <D:\Program Files\Java\jre6\bin\npjpi160_10.dll, (Signed) Sun Microsystems, Inc.>
[Octh Class]
{000123B4-9B42-4900-B3F7-F4B073EFC214} <D:\Program Files\Orbitdownloader\orbitcth.dll, (Signed) Orbitdownloader.com>
[Outlook Today's Data-binding control]
{0468C085-CA5B-11D0-AF08-00609797F0E0} <D:\PROGRA~1\MICROS~1\Office12\OUTLCTL.DLL, (Signed) >
[Podpora odkazu pro Adobe PDF Reader]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} <D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll, (Signed) Adobe Systems Incorporated>
[]
{1F364306-AA45-47B5-9F9D-39A8B94E7EF1} <, >
[]
{2670000A-7350-4F3C-8081-5663EE0C6C49} <, >
[]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7} <, >
[IETag Factory]
{38481807-CA0E-42D2-BF39-B33AF135CC4D} <D:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\IETAG.DLL, (Signed) Microsoft Corporation>
[Active Desktop Mover]
{72267F6A-A6F9-11D0-BC94-00C04FB67863} <%SystemRoot%\system32\SHELL32.dll, (Signed) N/A>
[Groove GFS Browser Helper]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} <D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL, (Signed) Microsoft Corporation>
[]
{92780B25-18CC-41C8-B9BE-3C9C571A8263} <, >
[SearchAssistantOC]
{B45FF030-4447-11D2-85DE-00C04FA35C89} <%SystemRoot%\system32\shdocvw.dll, (Signed) N/A>
[Shockwave Flash Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <D:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, (Signed) Adobe Systems, Inc.>
[]
{F90D830D-C175-4bbe-82C7-FF94669A4C42} <, >
[]
{FB5F1910-F110-11D2-BB9E-00C04F795683} <, >
[&Download All by FlashGet]
<D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm, N/A>
[&Download by FlashGet]
<D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm, N/A>
[&Download by Orbit]
<res://D:\Program Files\Orbitdownloader\orbitmxt.dll/201, N/A>
[&Grab video by Orbit]
<res://D:\Program Files\Orbitdownloader\orbitmxt.dll/204, N/A>
[Do&wnload selected by Orbit]
<res://D:\Program Files\Orbitdownloader\orbitmxt.dll/203, N/A>
[Down&load all by Orbit]
<res://D:\Program Files\Orbitdownloader\orbitmxt.dll/202, N/A>
[E&xportovat do aplikace Microsoft Excel]
<res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000, N/A>

==================================
Running Processes
[PID: 820 / SYSTEM][\SystemRoot\System32\smss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 984 / SYSTEM][\??\D:\WINDOWS\system32\csrss.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1008 / SYSTEM][\??\D:\WINDOWS\system32\winlogon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1052 / SYSTEM][D:\WINDOWS\system32\services.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\AppPatch\AcAdProc.dll] [Microsoft Corporation, 5.1.2600.3008 (xpsp.061004-0027)]
[PID: 1064 / SYSTEM][D:\WINDOWS\system32\lsass.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1220 / SYSTEM][D:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1336 / NETWORK SERVICE][D:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 1704 / SYSTEM][D:\WINDOWS\System32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[d:\windows\system32\uxtuneup.dll] [TuneUp Software GmbH, 2.0.0.9]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[D:\WINDOWS\System32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 1860 / NETWORK SERVICE][D:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 2044 / LOCAL SERVICE][D:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 520 / Martin G][D:\WINDOWS\Explorer.EXE] [(Verified) Microsoft Corporation, 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234)]
[D:\WINDOWS\system32\BROWSEUI.dll] [Společnost Microsoft, 6.00.2900.3395 (xpsp_sp2_qfe.080623-1318)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\Nero\Nero8\InCD\NBHShx.dll] [Nero AG, 5, 9, 4, 0]
[D:\Program Files\Nero\Nero8\InCD\NBHStr.dll] [Nero AG, 5, 9, 4, 0]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\Common Files\Nero\Shared\NL3\AdvrCntr3.dll] [Nero AG, 3,3,1, 500]
[D:\Program Files\Common Files\Nero\Lib\NeroDigitalExt.dll] [Nero AG, 3, 1, 0, 11]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll] [Adobe Systems, Inc., 8.1.0.0]
[PID: 1524 / SYSTEM][D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe] [Lavasoft, 7,0,2,6]
[D:\Program Files\Lavasoft\Ad-Aware 2007\CEAPI.dll] [Lavasoft, 7,0,2,6]
[D:\Program Files\Lavasoft\Ad-Aware 2007\PKArchive85u.dll] [PKWARE, Inc., 8.4.1045.0]
[D:\Program Files\Lavasoft\Ad-Aware 2007\Update.dll] [, 7, 0, 2, 6]
[PID: 1956 / SYSTEM][D:\WINDOWS\system32\spoolsv.exe] [(Verified) Microsoft Corporation, 5.1.2600.2696 (xpsp.050610-1527)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll] [Microsoft Corporation, 6.0.6000.16438 (winmain(wmbla).070123-1305)]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 324 / SYSTEM][D:\Program Files\Bonjour\mDNSResponder.exe] [Apple Computer, Inc., 1,0,3,1]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 444 / SYSTEM][D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe] [InterVideo Inc., 1.0.0.1]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\WINDOWS\system32\msdmo.dll] [, ]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 232 / SYSTEM][D:\Program Files\Java\jre6\bin\jqs.exe] [Sun Microsystems, Inc., 6.0.100.33]
[D:\Program Files\Java\jre6\bin\MSVCR71.dll] [Microsoft Corporation, 7.10.3052.4]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[D:\WINDOWS\system32\netfxperf.dll] [Microsoft Corporation, 1.1.4322.573]
[PID: 316 / NETWORK SERVICE][D:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe] [Microsoft Corporation, 2005.090.3042.00]
[PID: 688 / SYSTEM][D:\Program Files\CDBurnerXP\NMSAccessU.exe] [N/A, ]
[PID: 488 / SYSTEM][D:\Program Files\Eset\nod32krn.exe] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\nod32krr.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\ps_amon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_amon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\ps_dmon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_dmon.dll] [N/A, ]
[D:\Program Files\Eset\ps_emon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_emon.dll] [N/A, ]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[D:\Program Files\Eset\ps_nod32.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\ps_upd.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_upd.dll] [N/A, ]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[PID: 728 / SYSTEM][D:\WINDOWS\system32\nvsvc32.exe] [NVIDIA Corporation, 6.14.11.6921]
[D:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 900 / SYSTEM][D:\WINDOWS\system32\oodag.exe] [O&O Software GmbH, 10.0.1634]
[D:\WINDOWS\system32\OODAGRS.DLL] [O&O Software GmbH, 10.0.1.1617]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1424 / SYSTEM][D:\WINDOWS\system32\IoctlSvc.exe] [Prolific Technology Inc., 1, 6, 0, 0]
[PID: 1460 / SYSTEM][D:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe] [Microsoft Corporation, 2005.090.3042.00]
[PID: 2072 / SYSTEM][D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe] [Rocket Division Software, 3.2.3 Build 20070527]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 2224 / SYSTEM][D:\WINDOWS\system32\svchost.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 2268 / SYSTEM][D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe] [Ulead Systems, Inc., 1, 0, 0, 5]
[PID: 3584 / SYSTEM][D:\WINDOWS\system32\wbem\wmiapsrv.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3676 / LOCAL SERVICE][D:\WINDOWS\System32\alg.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\System32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 1856 / Martin G][D:\WINDOWS\system32\RUNDLL32.EXE] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\NvMcTray.dll] [NVIDIA Corporation, 6.14.11.6921]
[D:\WINDOWS\system32\nvapi.dll] [NVIDIA Corporation, 6.14.11.6921]
[PID: 1916 / Martin G][D:\WINDOWS\Mixer.exe] [C-Media Electronic Inc. (http://www.cmedia.com.tw), 1.48]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\System32\cmnprop.dll] [C-Media Corporation, 5.00.2195.9]
[PID: 2108 / Martin G][D:\Program Files\Eset\nod32kui.exe] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\nod32rui.dll] [N/A, ]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Eset\pu_amon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_amon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pu_dmon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_dmon.dll] [N/A, ]
[D:\Program Files\Eset\pu_emon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_emon.dll] [N/A, ]
[D:\Program Files\Eset\pu_imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[D:\Program Files\Eset\pu_nod32.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_nod32.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pu_upd.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_upd.dll] [N/A, ]
[PID: 2120 / Martin G][D:\Program Files\Java\jre6\bin\jusched.exe] [Sun Microsystems, Inc., 6.0.100.33]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]
[D:\WINDOWS\system32\imon.dll] [Eset , 2, 70, 39 ]
[D:\Program Files\Eset\pr_imon.dll] [N/A, ]
[PID: 2220 / Martin G][D:\WINDOWS\system32\ctfmon.exe] [(Verified) Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\UxTheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[PID: 3244 / Martin G][C:\Program Files\TC UP\TOTALCMD.EXE] [C. Ghisler & Co., 7.02a]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\Nero\Nero8\InCD\NBHShx.dll] [Nero AG, 5, 9, 4, 0]
[D:\Program Files\Nero\Nero8\InCD\NBHStr.dll] [Nero AG, 5, 9, 4, 0]
[D:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL] [Microsoft Corporation, 8.00.50727.762]
[D:\Program Files\Common Files\Nero\Shared\NL3\AdvrCntr3.dll] [Nero AG, 3,3,1, 500]
[PID: 2424 / Martin G][D:\Documents and Settings\Martin G\Plocha\SREngLdr.EXE] [Smallfrogs Studio, 2.7.0.1210]
[PID: 460 / Martin G][D:\Documents and Settings\Martin G\Plocha\SREb5951044.EXE] [Smallfrogs Studio, 2.7.0.1210]
[D:\WINDOWS\system32\uxtheme.dll] [Microsoft Corporation, 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\WINDOWS\system32\sfc_os.dll] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)]
[D:\Documents and Settings\Martin G\Plocha\Upload\3rdUpd.DLL] [Smallfrogs Studio, 2, 1, 0, 15]
[D:\Program Files\Bonjour\mdnsNSP.dll] [Apple Computer, Inc., 1,0,3,1]

==================================
File Associations
.TXT OK. [%SystemRoot%\system32\NOTEPAD.EXE %1]
.EXE OK. ["%1" %*]
.COM OK. ["%1" %*]
.PIF OK. ["%1" %*]
.REG OK. [regedit.exe "%1"]
.BAT OK. ["%1" %*]
.SCR OK. ["%1" /S]
.CHM OK. ["D:\WINDOWS\hh.exe" %1]
.HLP OK. [%SystemRoot%\System32\winhlp32.exe %1]
.INI OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.INF OK. [%SystemRoot%\System32\NOTEPAD.EXE %1]
.VBS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.JS OK. [%SystemRoot%\System32\WScript.exe "%1" %*]
.LNK OK. [{00021401-0000-0000-C000-000000000046}]

==================================
Winsock Provider
N/A

==================================
Autorun.Inf
N/A

==================================
HOSTS File
127.0.0.1 localhost

==================================
Process Privileges Scan
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 728, D:\WINDOWS\SYSTEM32\NVSVC32.EXE]
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 3544, D:\PROGRAM FILES\OPERA8.54\OPERA.EXE]
Special Privileges Enabled: SeLoadDriverPrivilege [PID = 2424, D:\DOCUMENTS AND SETTINGS\MARTIN G\PLOCHA\SRENGLDR.EXE]

==================================
Scheduled Tasks
[Disabled] Úklid 1 kliknutím.job
D:\Program Files\TuneUp Utilities 2008\OneClick.exe
[Enabled] 1-Click Maintenance.job
D:\Program Files\TuneUp Utilities 2008\OneClick.exe

==================================
API HOOK
N/A

==================================
Hidden Process
N/A

==================================

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43287
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod jaro3 » 28 lis 2008 22:14

Nejlepší by bylo půjčit sio od někoho CD se stejným OS jako máš Ty.
Koukni se zde:
system32\themeui.dll
ProgramFiles%\Outlook Express\setup50.exe, pokud tam nemáš ty soubory , musel bys je tam dodat, problém je ale i v klíčích...

Ještě toto:
Stáhni si SDFix
- Spusť ho a rozbalí se ti na disk kde je nainstalovaný Windows (typicky to je C:\SDfix)
- Pak restartuj PC do nouzového režimu (zvol možnost: Stav nouze, ne Stav nouze s práci v síti)
- Otevři adresář kde je vybalený SDFix a spusť soubor RunThis.bat tím spustíš program.
* Pak stiskni klávesu Y a pak Enter pro zahájení čistícího procesu.
* Pro dokončení kontroly budeš vyzván ke stisknutí libovolné klávesy a počítač se restartuje.
* Při nabíhání operačního systému se program spustí znovu a dokončí čistící proces. Až se objeví Finish, budeš muset po vyzvání stisknout libovolnou klávesu, tim se ukončí program a zobrazí se ti ikony na ploše
- Když se skončí načítání ikon na ploše, otevře se ti na obrazovce log z SDFix a zároveň ho uloží do adresáře kde je rozbalený SDFix jako soubor Report.txt
Pak sem zkopíruj jeho obsah + nový log z HJT+ mrkni se jestli ti pod Startem nechybí nějaké ikony, zobrazují se ti disky pod Tento počítač....
A zkus sehnat to CD s XP.
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 29 lis 2008 11:49

Ty soubory tam jsou.CD s WinXP se pokusím sehnat, mám originál. systém,ne fake asi by vadilo kdybych vložil fake CD z SP2 že ??

Jinak ty logy:

SDFix


SDFix: Version 1.240
Run by Martin G on so 29.11.2008 at 10:23

Microsoft Windows XP [Verze 5.1.2600]
Running From: D:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

No Trojan Files Found






Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-29 11:25:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s1"=dword:2df9c43f
"s2"=dword:110480d0
"h0"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="D:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000001
"ujdew"=hex:55,66,c2,91,62,9d,ad,17,69,95,f1,4b,08,90,0a,b3,1b,dc,23,8d,41,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="D:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:0d,37,36,a1,85,b0,8c,62,fe,eb,68,58,c4,05,ab,4b,1c,43,78,b0,22,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,55,64,54,3c,a2,38,75,11,dd,1b,f5,31,f3,af,ed,36,2b,..
"khjeh"=hex:8a,12,1b,36,36,bf,f0,55,59,10,e1,82,1b,84,5f,6b,6e,85,d6,3a,f2,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:a4,63,67,4b,76,52,bb,7c,3a,56,3a,1b,e9,4c,67,a9,e1,cb,85,10,39,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:27,25,66,b5,e7,3a,8f,2f,d4,58,02,bd,7a,64,f6,69,0e,31,37,64,96,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:f1,f3,75,01,08,f4,14,19,b0,de,46,7f,d9,cd,ab,10,28,d6,5d,3b,9a,..

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:37,bb,0a,8c,32,00,38,88,28,5f,91,91,c5,93,f1,b1,54,36,ec,6d,c4,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{2C7D58A9-CC0B-43C2-8AF5-768AD1A11A0B}]
"LeaseObtainedTime"=dword:49311809
"T1"=dword:49311888
"T2"=dword:493118e8
"LeaseTerminatesTime"=dword:49311908
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{2C7D58A9-CC0B-43C2-8AF5-768AD1A11A0B}\Parameters\Tcpip]
"LeaseObtainedTime"=dword:49311809
"T1"=dword:49311888
"T2"=dword:493118e8
"LeaseTerminatesTime"=dword:49311908
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
"p0"="D:\Program Files\Alcohol Soft\Alcohol 120\"
"h0"=dword:00000001
"ujdew"=hex:55,66,c2,91,62,9d,ad,17,69,95,f1,4b,08,90,0a,b3,1b,dc,23,8d,41,..
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4]
"p0"="D:\Program Files\DAEMON Tools Lite\"
"h0"=dword:00000000
"khjeh"=hex:0d,37,36,a1,85,b0,8c,62,fe,eb,68,58,c4,05,ab,4b,1c,43,78,b0,22,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001]
"a0"=hex:20,01,00,00,55,64,54,3c,a2,38,75,11,dd,1b,f5,31,f3,af,ed,36,2b,..
"khjeh"=hex:8a,12,1b,36,36,bf,f0,55,59,10,e1,82,1b,84,5f,6b,6e,85,d6,3a,f2,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40]
"khjeh"=hex:a4,63,67,4b,76,52,bb,7c,3a,56,3a,1b,e9,4c,67,a9,e1,cb,85,10,39,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf41]
"khjeh"=hex:27,25,66,b5,e7,3a,8f,2f,d4,58,02,bd,7a,64,f6,69,0e,31,37,64,96,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf42]
"khjeh"=hex:f1,f3,75,01,08,f4,14,19,b0,de,46,7f,d9,cd,ab,10,28,d6,5d,3b,9a,..

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf43]
"khjeh"=hex:37,bb,0a,8c,32,00,38,88,28,5f,91,91,c5,93,f1,b1,54,36,ec,6d,c4,..

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes]
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?"="D:\WINDOWS\cursors\arrow_r.cur,D:\WINDOWS\cursors\help_r.cur,D:\WINDOWS\cursors\wait_r.cur,D:\WINDOWS\cursors\busy_r.cur,D:\WINDOWS\cursors\cross_r.cur,D:\WINDOWS\cursors\beam_r.cur,D:\WINDOWS\cursors\pen_r.cur,D:\WINDOWS\cursors\no_r.cur,D:\WINDOWS\cursors\size4_r.cur,D:\WINDOWS\cursors\size3_r.cur,D:\WINDOWS\cursors\size2_r.cur,D:\WINDOWS\cursors\size1_r.cur,D:\WINDOWS\cursors\move_r.cur,D:\WINDOWS\cursors\up_r.cur"
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?(?v?e?l?k?é?)?"="D:\WINDOWS\cursors\arrow_rm.cur,D:\WINDOWS\cursors\help_rm.cur,D:\WINDOWS\cursors\wait_rm.cur,D:\WINDOWS\cursors\busy_rm.cur,D:\WINDOWS\cursors\cross_rm.cur,D:\WINDOWS\cursors\beam_rm.cur,D:\WINDOWS\cursors\pen_rm.cur,D:\WINDOWS\cursors\no_rm.cur,D:\WINDOWS\cursors\size4_rm.cur,D:\WINDOWS\cursors\size3_rm.cur,D:\WINDOWS\cursors\size2_rm.cur,D:\WINDOWS\cursors\size1_rm.cur,D:\WINDOWS\cursors\move_rm.cur,D:\WINDOWS\cursors\up_rm.cur"
"\f\1e?r?n?é? ?u?k?a?z?a?t?e?l?e? ?(?n?e?j?v?\e\1t?a\1í?)?"="D:\WINDOWS\cursors\arrow_rl.cur,D:\WINDOWS\cursors\help_rl.cur,D:\WINDOWS\cursors\wait_rl.cur,D:\WINDOWS\cursors\busy_rl.cur,D:\WINDOWS\cursors\cross_rl.cur,D:\WINDOWS\cursors\beam_rl.cur,D:\WINDOWS\cursors\pen_rl.cur,D:\WINDOWS\cursors\no_rl.cur,D:\WINDOWS\cursors\size4_rl.cur,D:\WINDOWS\cursors\size3_rl.cur,D:\WINDOWS\cursors\size2_rl.cur,D:\WINDOWS\cursors\size1_rl.cur,D:\WINDOWS\cursors\move_rl.cur,D:\WINDOWS\cursors\up_rl.cur"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\System]
"OODEFRAG10.00.00.01WORKSTATION"="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"
"OODEFRAG11.00.00.01WORKSTATION"="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"

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\Program Files\\QIP\\qip.exe"="D:\\Program Files\\QIP\\qip.exe:*:Disabled:Quiet Internet Pager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

Remaining Files :



Files with Hidden Attributes :

Thu 27 Nov 2008 0 ..SH. --- "D:\WINDOWS\SE6CEC13C.tmp"
Wed 3 May 2006 163,328 ..SHR --- "D:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007 31,232 ..SHR --- "D:\WINDOWS\system32\msfDX.dll"
Mon 17 Dec 2007 27,648 ..SH. --- "D:\WINDOWS\system32\Smab0.dll"
Sun 26 Jun 2005 616,448 ..SHR --- "D:\Program Files\eRightSoft\SUPER\cygwin1.dll"
Tue 21 Jun 2005 45,568 ..SHR --- "D:\Program Files\eRightSoft\SUPER\cygz.dll"
Thu 22 May 2008 72,704 ..SHR --- "D:\Program Files\eRightSoft\SUPER\Setup.exe"
Tue 2 Oct 2007 15,360 A.SHR --- "D:\Program Files\eRightSoft\SUPER\_Setup.dll"
Thu 7 Aug 2008 2,451,968 ..SH. --- "D:\Documents and Settings\Martin G\Dokumenty\youtube\Vdm61r_cfdg.exe"
Tue 4 Jun 2002 84,992 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll"
Tue 4 Jun 2002 44,032 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll"
Tue 10 Dec 2002 73,766 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll"
Tue 10 Dec 2002 65,575 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll"
Sun 9 Jun 2002 36,864 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll"
Tue 4 Jun 2002 20,480 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll"
Tue 10 Dec 2002 102,437 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll"
Tue 10 Dec 2002 176,165 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll"
Tue 10 Dec 2002 208,935 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll"
Tue 10 Dec 2002 217,127 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll"
Sun 9 Jun 2002 40,448 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll"
Sat 3 Nov 2001 225,280 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll"
Tue 10 Apr 2001 225,280 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll"
Fri 20 Feb 2004 232,960 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\raac.dll"
Sun 9 Jun 2002 525,824 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll"
Tue 10 Dec 2002 245,805 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll"
Tue 10 Dec 2002 45,093 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll"
Tue 10 Dec 2002 98,341 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll"
Tue 10 Dec 2002 94,247 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll"
Tue 10 Dec 2002 90,151 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll"
Tue 10 Dec 2002 102,439 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll"
Sun 9 Jun 2002 49,152 ...HR --- "D:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll"
Thu 20 Mar 2008 5,632 ..SHR --- "D:\Program Files\eRightSoft\SUPER\spk\1stRun.exe"
Sun 5 Oct 2008 165,232 A..H. --- "D:\Documents and Settings\Martin G\Data aplikacˇ\Microsoft\Virtual PC\VPCKeyboard.dll"

Finished!




HijackThis


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:40:02, on 29.11.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\ZoneLabs\vsmon.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\CDBurnerXP\NMSAccessU.exe
D:\Program Files\Eset\nod32krn.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\oodag.exe
D:\WINDOWS\system32\IoctlSvc.exe
D:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
D:\WINDOWS\system32\svchost.exe
D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
D:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\WINDOWS\system32\notepad.exe
D:\WINDOWS\system32\wuauclt.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\WINDOWS\Mixer.exe
D:\Program Files\Eset\nod32kui.exe
D:\Program Files\Java\jre6\bin\jusched.exe
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - D:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [nod32kui] "D:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] ; "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Appwarp] ; D:\PROGRA~1\REMI-S~1\APPLIC~1\ApplicationWarp.exe
O4 - HKLM\..\Run: [BDRegion] ; D:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [CloneCDTray] ; "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [NeroFilterCheck] ; D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [PDVD8LanguageShortcut] ; "D:\Program Files\CyberLink\PowerDVD8\Language\Language.exe"
O4 - HKLM\..\Run: [QuickTime Task] ; "D:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [RemoteControl8] ; "D:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe"
O4 - HKLM\..\Run: [TkBellExe] ; "D:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] ; "D:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] ; "D:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [Steam] ; "D:\Program Files\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Download All by FlashGet - D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm
O8 - Extra context menu item: &Download by FlashGet - D:\Program Files\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm
O8 - Extra context menu item: &Download by Orbit - res://D:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://D:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://D:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://D:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{FF6F40A0-9980-463A-A903-FD3B6C48406C}: NameServer = 213.195.238.1,81.30.224.2
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - D:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - D:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - D:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - D:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - D:\WINDOWS\system32\oodag.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - D:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - D:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - D:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - D:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 8697 bytes

Uživatelský avatar
jaro3
člen Security týmu
Guru Level 15
Guru Level 15
Příspěvky: 43287
Registrován: červen 07
Bydliště: Jižní Čechy
Pohlaví: Muž
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod jaro3 » 29 lis 2008 12:14

Najdi a smaž:
D:\SDFix

Fix v HJT:

Kód: Vybrat vše

O4 - HKLM\..\Run: [NeroFilterCheck] ; D:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] ; &quot;D:\Program Files\QuickTime\QTTask.exe&quot; -atboottime


Aktualizuj javu:
Java SE Runtime Environment 6u10

Vyber OS ( předpokládám Windows), zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u10-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.
Na opravu windows Ti stačí jakékoliv CD se stejným OS jako máš Ty..
Při práci s programy HJT, ComboFix,MbAM, SDFix aj. zavřete všechny ostatní aplikace a prohlížeče!
Neposílejte logy do soukromých zpráv.Po dobu mé nepřítomnosti mě zastupuje memphisto , Žbeky a Orcus.
Pokud budete spokojeni , můžete podpořit naše forum:Podpora fóra

skslezska
nováček
Příspěvky: 44
Registrován: květen 08
Pohlaví: Nespecifikováno
Stav:
Offline

Re: Prosím o kontrolu logu-pomalý start PC

Příspěvekod skslezska » 29 lis 2008 13:31

Takže to nemusí být originál...ok,ještě dneska to snad bude


Zpět na “HiJackThis”

Kdo je online

Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 80 hostů