Prosím o kontrolu logu-HijackThis
Napsal: 28 lis 2014 20:09
Dobrý den, prosím co dále bych měl udělat abych měl PC bez závad? Baz reklam ? Děkuji.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:05:42, on 28. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
FIREFOX: 33.1 (x86 cs)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Smart Driver Updater\SDUTray.exe
C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\Doma\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=503&a ... 27&src=hmp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: .html?u=http%3A%2F%2Finb.csrvrgroup.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D1024%26noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fpc.poradna.net%2F%26pstn%3D97001024&p=Internet%20Speed%20Checker1.1&a=&c=9700-1024&b=firefox&bv=33&t1=1417065263095&tt=1417065263095&r=pc.poradna.net&ua=0&n=convertmedia&sn=&mpa=0&mp=0
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CStart8] "C:\Program Files (x86)\CStart8\CStart8Tray64.exe" /STARTUP
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Doma\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Doma\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Google Update] "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Google+ Auto Backup] "C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9398 bytes
************************************************
Toto mi píše dále :
headleft
HijackThis.de Security
Deutsch English Français Italian Czech
headright
Automatická analýza log souboru z programu HijackThis
HijackThis opens you a possibility to find and fix nasty entries on your computer easier.
Therefore it will scan special parts in the registry and on your harddisk and compare them with the default settings. If there is some abnormality detected on your computer HijackThis will save them into a logfile. In order to find out what entries are nasty and what are installed by the user, you need some background information.
A logfile is not so easy to analyze. Even for an advanced computer user. With the help of this automatic analyzer you are able to get some additional support. Just paste your complete logfile into the textbox at the bottom of this page.
Aby nedocházelo k nedorozumení, tak je nutno upresnit, že jsem vytvoril pouze tuto online analýzu a ne program HijackThis.
Service & Support
HijackThis.de Supportforum Deutsch | English
Log soubor (file)
Show the visitors ratings
To vypadá, že nepoužíváš antivirusový program nebo je vypnutý. Jedine zapnutý antivirusový program Te ochrání. Zde najdeš vynikající antivirusové programy.
Na Vašem systému (PC) nepoužíváte firewall nebo firewall, který používáte neznáme. Pokud firewall nepoužíváte, stáhnete a naistalujte si nejaký firewalový program nebo aktivujte firewall ve Windows xp. V prípade, že máte nejakou otázku nebo chcete nám zdelit informace o Vašem firewalovém programu, který není v naší databázi a rádi byste ho do databáze vložili, kontaktujte nás v našem fóru forum.hijackthis.de
Actions
Vstup
Druh
Visitor's assessment
Information
Analyzerdetails
Logfile of Trend Micro HijackThis v2.0.4
Druh
Toto by mela být novejší verze.
Platform: Unknown Windows (WinNT 6.02.1008)
Druh
Analyzerdetails
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Druh
Verze (11.00.9600.17416) je stará. Zkontroluj Windowsupdate a updatuj Internet Explorer.
Visitor's assessment Analyzerdetails
FIREFOX: 33.1 (x86 cs)
Druh
Visitor's assessment Analyzerdetails
Boot mode: Normal
Druh
Very safe
Very safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Smart Driver Updater\SDUTray.exe
Druh
Neznámý proces.
Visitor's assessment Analyzerdetails
C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
Druh
Neutral (3.11 / 5.00)
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Druh
Very safe
Very safe
Internet Browser
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Druh
Very safe
Very safe
Safe (4.51 / 5.00)
Visitor's assessment Analyzerdetails
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
Druh
Neutral (3.41 / 5.00)
Visitor's assessment Analyzerdetails
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
Druh
Neutral (3.41 / 5.00)
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
Druh
Very safe
Very safe
Mozilla Thunderbird Mail
Visitor's assessment Analyzerdetails
C:\Users\Doma\Downloads\HijackThis.exe
Druh
Pamatujte, že Hijackthis musí bežet ve vlastním adresári. Jedine tak vytvorí program Hijackthis backups! Tool, mit dem sie dieses Logfile erzeugt haben. Das Programm sollte so angelegt sein ! C:\Programme\HijackThis\HijackThis.exe
Visitor's assessment Analyzerdetails
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=503&a ... 27&src=hmp
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
Druh
Very safe
Very safe
Tato stránka byla urcená jako bezpecná.
Visitor's assessment Analyzerdetails
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
F2 - REG:system.ini: UserInit=userinit.exe
Druh
Safe
Safe
Neznámá aplikace. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O1 - Hosts: .html?u=http%3A%2F%2Finb.csrvrgroup.com%2FWhiteLabelBidRequestHandlerServlet%3Fo id%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D1024%26noaop%3D1%26re vmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fpc.poradna.net%2F%2 6pstn%3D97001024&p=Internet%20Speed%20Checker1.1&a=&c=9700-1024&b=firefox&bv=33& t1=1417065263095&tt=1417065263095&r=pc.poradna.net&ua=0&n=convertmedia&sn=&mpa=0 &mp=0
Druh
Musí být opraven!
Visitor's assessment Analyzerdetails
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
Druh
SUN Java
Visitor's assessment Analyzerdetails
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
Druh
Safe
Safe
Safe (4.16 / 5.00)
Visitor's assessment Analyzerdetails
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
Druh
Safe
Safe
iefdmcks.dll - Free Download Manager, http://www.freedownloadmanager.org/
Visitor's assessment Analyzerdetails
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
Druh
jp2ssv.dll - Sun_Java, http://java.sun.com/javase/downloads/ind ex.jsp browser plugin
Visitor's assessment Analyzerdetails
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
Druh
Neutral
Neutral
Neznámá aplikace.
Nepotrebný (deaktivován) vstup, který muže být opravent.
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
Druh
Safe
Safe
Safe (4.11 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [CStart8] "C:\Program Files (x86)\CStart8\CStart8Tray64.exe" /STARTUP
Druh
Safe (4 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
Druh
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe"
Druh
Neznámá aplikace.
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
Druh
"Free Download Manager" See here
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Doma\AppData\Roaming\Seznam.cz\szninstall.exe" -c
Druh
Neutral (3.17 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Doma\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
Druh
Neutral (3.14 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Google Update] "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
Druh
Safe (3.64 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Google+ Auto Backup] "C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
Druh
Neutral (3.11 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
Druh
Very safe
Very safe
Není nebezpecný, není potrebný. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Visitor's assessment Analyzerdetails
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
Druh
Very safe
Very safe
Neutral (3 / 5.00)
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
Druh
Safe
Safe
Vstup Add to Google Photos Screensa&ver byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
Druh
Vstup E&xportovat do aplikace Microsoft Excel byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
Druh
Safe (4.18 / 5.00)
Visitor's assessment Analyzerdetails
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Druh
Vstup Odeslat do aplikace OneNote byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Druh
Vstup Od&eslat do aplikace OneNote byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
Druh
Visitor's assessment Analyzerdetails
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Druh
Very safe
Very safe
Safe (3.87 / 5.00)
Visitor's assessment Analyzerdetails
O20 - AppInit_DLLs:
Druh
Neutral
Neutral
Neutral (3.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
Druh
Safe
Safe
Neznámá služba. (armsvc.exe) This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
Druh
tato služba(fxssvc.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
Druh
Safe
Safe
Neznámá služba. (IEEtwCollector.exe)
Visitor's assessment Analyzerdetails
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
tato služba(lsass.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
Druh
tato služba(msdtc.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (locator.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
Druh
Safe
Safe
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
Druh
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (spoolsv.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
Druh
Safe (4.38 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
Druh
Very safe
Very safe
Safe (4.28 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
Druh
Safe (4.26 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (vds.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (vssvc.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
Druh
Safe
Safe
tato služba(wbengine.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
Druh
Very safe
Very safe
Safe (4.4 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
Druh
Very safe
Very safe
tato služba(MsMpEng.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
Druh
tato služba(WmiApSrv.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
Druh
Safe
Safe
tato služba(wmpnetwk.exe) byla identifikována jako dobrá. This entry was classified from our visitors as good.
Short analysis
Tyto tipy používáte na vlastní riziko!
© 2004 - 2014 Mathias Mattner
bottomleft
bottomright
Ads by Internet Speed Checker1.1Ad Options
Ads by Internet Speed Checker1.1Ad Options
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:05:42, on 28. 11. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
FIREFOX: 33.1 (x86 cs)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Smart Driver Updater\SDUTray.exe
C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Users\Doma\Downloads\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=503&a ... 27&src=hmp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: .html?u=http%3A%2F%2Finb.csrvrgroup.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D1024%26noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fpc.poradna.net%2F%26pstn%3D97001024&p=Internet%20Speed%20Checker1.1&a=&c=9700-1024&b=firefox&bv=33&t1=1417065263095&tt=1417065263095&r=pc.poradna.net&ua=0&n=convertmedia&sn=&mpa=0&mp=0
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CStart8] "C:\Program Files (x86)\CStart8\CStart8Tray64.exe" /STARTUP
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Doma\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Doma\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Google Update] "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Google+ Auto Backup] "C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://C:\Program Files (x86)\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://C:\Program Files (x86)\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 9398 bytes
************************************************
Toto mi píše dále :
headleft
HijackThis.de Security
Deutsch English Français Italian Czech
headright
Automatická analýza log souboru z programu HijackThis
HijackThis opens you a possibility to find and fix nasty entries on your computer easier.
Therefore it will scan special parts in the registry and on your harddisk and compare them with the default settings. If there is some abnormality detected on your computer HijackThis will save them into a logfile. In order to find out what entries are nasty and what are installed by the user, you need some background information.
A logfile is not so easy to analyze. Even for an advanced computer user. With the help of this automatic analyzer you are able to get some additional support. Just paste your complete logfile into the textbox at the bottom of this page.
Aby nedocházelo k nedorozumení, tak je nutno upresnit, že jsem vytvoril pouze tuto online analýzu a ne program HijackThis.
Service & Support
HijackThis.de Supportforum Deutsch | English
Log soubor (file)
Show the visitors ratings
To vypadá, že nepoužíváš antivirusový program nebo je vypnutý. Jedine zapnutý antivirusový program Te ochrání. Zde najdeš vynikající antivirusové programy.
Na Vašem systému (PC) nepoužíváte firewall nebo firewall, který používáte neznáme. Pokud firewall nepoužíváte, stáhnete a naistalujte si nejaký firewalový program nebo aktivujte firewall ve Windows xp. V prípade, že máte nejakou otázku nebo chcete nám zdelit informace o Vašem firewalovém programu, který není v naší databázi a rádi byste ho do databáze vložili, kontaktujte nás v našem fóru forum.hijackthis.de
Actions
Vstup
Druh
Visitor's assessment
Information
Analyzerdetails
Logfile of Trend Micro HijackThis v2.0.4
Druh
Toto by mela být novejší verze.
Platform: Unknown Windows (WinNT 6.02.1008)
Druh
Analyzerdetails
MSIE: Internet Explorer v11.0 (11.00.9600.17416)
Druh
Verze (11.00.9600.17416) je stará. Zkontroluj Windowsupdate a updatuj Internet Explorer.
Visitor's assessment Analyzerdetails
FIREFOX: 33.1 (x86 cs)
Druh
Visitor's assessment Analyzerdetails
Boot mode: Normal
Druh
Very safe
Very safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Smart Driver Updater\SDUTray.exe
Druh
Neznámý proces.
Visitor's assessment Analyzerdetails
C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
Druh
Neutral (3.11 / 5.00)
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Druh
Very safe
Very safe
Internet Browser
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
Druh
Very safe
Very safe
Safe (4.51 / 5.00)
Visitor's assessment Analyzerdetails
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
Druh
Neutral (3.41 / 5.00)
Visitor's assessment Analyzerdetails
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_223.exe
Druh
Neutral (3.41 / 5.00)
Visitor's assessment Analyzerdetails
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
Druh
Very safe
Very safe
Mozilla Thunderbird Mail
Visitor's assessment Analyzerdetails
C:\Users\Doma\Downloads\HijackThis.exe
Druh
Pamatujte, že Hijackthis musí bežet ve vlastním adresári. Jedine tak vytvorí program Hijackthis backups! Tool, mit dem sie dieses Logfile erzeugt haben. Das Programm sollte so angelegt sein ! C:\Programme\HijackThis\HijackThis.exe
Visitor's assessment Analyzerdetails
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.default-search.net?sid=503&a ... 27&src=hmp
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.seznam.cz/?sourceid=quicksearch_22668&q={searchTerms}
Druh
Tento vstup by mel být opraven (fix it) programem HijackThis!
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/?clid=22668
Druh
Jestliže neznáte vstup 'https://www.seznam.cz/?clid=22668', vymažte to. Tato stránka je eventuálne špatná.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
Druh
Very safe
Very safe
Tato stránka byla urcená jako bezpecná.
Visitor's assessment Analyzerdetails
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
F2 - REG:system.ini: UserInit=userinit.exe
Druh
Safe
Safe
Neznámá aplikace. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O1 - Hosts: .html?u=http%3A%2F%2Finb.csrvrgroup.com%2FWhiteLabelBidRequestHandlerServlet%3Fo id%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D1024%26noaop%3D1%26re vmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fpc.poradna.net%2F%2 6pstn%3D97001024&p=Internet%20Speed%20Checker1.1&a=&c=9700-1024&b=firefox&bv=33& t1=1417065263095&tt=1417065263095&r=pc.poradna.net&ua=0&n=convertmedia&sn=&mpa=0 &mp=0
Druh
Musí být opraven!
Visitor's assessment Analyzerdetails
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll
Druh
SUN Java
Visitor's assessment Analyzerdetails
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
Druh
Safe
Safe
Safe (4.16 / 5.00)
Visitor's assessment Analyzerdetails
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
Druh
Safe
Safe
iefdmcks.dll - Free Download Manager, http://www.freedownloadmanager.org/
Visitor's assessment Analyzerdetails
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll
Druh
jp2ssv.dll - Sun_Java, http://java.sun.com/javase/downloads/ind ex.jsp browser plugin
Visitor's assessment Analyzerdetails
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
Druh
Neutral
Neutral
Neznámá aplikace.
Nepotrebný (deaktivován) vstup, který muže být opravent.
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
Druh
Safe
Safe
Safe (4.11 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [CStart8] "C:\Program Files (x86)\CStart8\CStart8Tray64.exe" /STARTUP
Druh
Safe (4 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [AllShareAgent] C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
Druh
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKLM\..\Run: [HDD Regenerator] "C:\Program Files (x86)\HDD Regenerator\HDD Regenerator.exe"
Druh
Neznámá aplikace.
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
Druh
"Free Download Manager" See here
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Doma\AppData\Roaming\Seznam.cz\szninstall.exe" -c
Druh
Neutral (3.17 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Doma\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
Druh
Neutral (3.14 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Google Update] "C:\Users\Doma\AppData\Local\Google\Update\GoogleUpdate.exe" /c
Druh
Safe (3.64 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Google+ Auto Backup] "C:\Users\Doma\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
Druh
Neutral (3.11 / 5.00)
Visitor's assessment Analyzerdetails
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
Druh
Very safe
Very safe
Není nebezpecný, není potrebný. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Visitor's assessment Analyzerdetails
O4 - Startup: MEGAsync.lnk = C:\ProgramData\MEGAsync\MEGAsync.exe
Druh
Very safe
Very safe
Neutral (3 / 5.00)
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
Druh
Safe
Safe
Vstup Add to Google Photos Screensa&ver byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
Druh
Vstup E&xportovat do aplikace Microsoft Excel byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
Druh
Safe (4.18 / 5.00)
Visitor's assessment Analyzerdetails
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Druh
Vstup Odeslat do aplikace OneNote byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
Druh
Vstup Od&eslat do aplikace OneNote byl oznacen jako bezpecný.
Visitor's assessment Analyzerdetails
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
Druh
Safe
Safe
This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.9\ViProtocol.dll
Druh
Visitor's assessment Analyzerdetails
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
Druh
Very safe
Very safe
Safe (3.87 / 5.00)
Visitor's assessment Analyzerdetails
O20 - AppInit_DLLs:
Druh
Neutral
Neutral
Neutral (3.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
Druh
Safe
Safe
Neznámá služba. (armsvc.exe) This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. This entry was classified from our visitors as good.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
Druh
tato služba(fxssvc.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
Druh
Safe
Safe
Neznámá služba. (IEEtwCollector.exe)
Visitor's assessment Analyzerdetails
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
tato služba(lsass.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
Druh
tato služba(msdtc.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (locator.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
Druh
Safe
Safe
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
Druh
Safe (4.22 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (spoolsv.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
Druh
Safe (4.38 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
Druh
Very safe
Very safe
Safe (4.28 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
Druh
Safe (4.26 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
Druh
Safe
Safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (lsass.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (vds.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
Druh
Very safe
Very safe
Tento vstup nebeží z adresáre System32 ,jedná se pravdepodobne o špatný. Tato služba (vssvc.exe) vypadá jako špatná.
Tento vstup nebeží z adresáre System32 jak má.
Visitor's assessment Analyzerdetails
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
Druh
Safe
Safe
tato služba(wbengine.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
Druh
Very safe
Very safe
Safe (4.4 / 5.00)
Visitor's assessment Analyzerdetails
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
Druh
Very safe
Very safe
tato služba(MsMpEng.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
Druh
tato služba(WmiApSrv.exe) byla identifikována jako dobrá.
Visitor's assessment Analyzerdetails
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
Druh
Safe
Safe
tato služba(wmpnetwk.exe) byla identifikována jako dobrá. This entry was classified from our visitors as good.
Short analysis
Tyto tipy používáte na vlastní riziko!
© 2004 - 2014 Mathias Mattner
bottomleft
bottomright
Ads by Internet Speed Checker1.1Ad Options
Ads by Internet Speed Checker1.1Ad Options