MyCity » Ambulanta -> Arhiva Ambulante » proverka

proverka

Napisano na dan: 9.3.2008

proverka
Sledeća strana Pagination

Idi na vrh

Poslao: 09 Mar 2008 19:16
Idi na vrh
offline
  • Pridružio: 09 Mar 2008
  • Poruke: 4

Zdravo imam eden problem... imam amd sempron 2800+ so 256 ram 40hdd i 64 graficka karticka nvidia fx 5200 i vo posledno vreme kompjuterot mi raboti mnooogu sporo... probav so formatiranje i toa gi smeni rabotite malku... so instaliranje na nekolku programi toj pak e mn. spor.. probav da go cistam so kaspersky so nod32 ama seto toa bese djabe... i imam problem ... nekoi kopcinja kako sto se d,g,f, i sl. koga kucam izlevaat po 2 bukvi... eve eden log odd hijackthhis. pozz


Logfile of HijackThis v1.99.1
Scan saved at 19:10:08, on 09.03.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\DU Meter\DUMeterSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Opera\Opera.exe
C:\Documents and Settings\KIMOVII\Desktop\t\t.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe



Poslao: 09 Mar 2008 21:12
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.



Poslao: 10 Mar 2008 14:37
Idi na vrh
offline
  • Pridružio: 09 Mar 2008
  • Poruke: 4

eve lod od ComboFix

Poslao: 10 Mar 2008 14:38
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Gde je log?

Poslao: 10 Mar 2008 14:41
Idi na vrh
offline
  • Pridružio: 09 Mar 2008
  • Poruke: 4

ComboFix 08-03-09.4 - KIMOVII 2008-03-10 14:14:48.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.103 [GMT 1:00]
Running from: C:\Documents and Settings\KIMOVII\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2008-02-10 to 2008-03-10 )))))))))))))))))))))))))))))))
.

2008-03-09 19:36 . 2003-05-20 18:27 64,000 --a------ C:\WINDOWS\system32\ECBTEG.DLL
2008-03-09 19:36 . 2000-06-06 17:01 34,304 --a------ C:\WINDOWS\system32\EBPCHP.DLL
2008-03-09 19:35 . 2008-03-09 19:37 <DIR> d-------- C:\Program Files\EPSON
2008-03-09 19:34 . 2008-03-09 19:34 443,573 --a------ C:\WINDOWS\system32\EPSETUP.CAB
2008-03-09 19:34 . 2008-03-09 19:34 288,201 --a------ C:\WINDOWS\system32\EPPRTDRV.CAB
2008-03-09 19:34 . 2008-03-09 19:34 8,284 --a------ C:\WINDOWS\system32\eps_icon.avi
2008-03-09 19:33 . 2008-03-09 19:33 25 --a------ C:\WINDOWS\CDEC46Euro.ini
2008-03-09 19:32 . 2003-05-28 17:01 91,648 --a------ C:\WINDOWS\system32\E_SAGSET.DLL
2008-03-09 19:32 . 2003-12-09 17:13 76,054 --a------ C:\WINDOWS\system32\EBPMON24.DLL
2008-03-09 19:32 . 2003-07-16 05:14 31,744 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2008-03-09 19:32 . 2001-09-03 18:04 182 --a------ C:\WINDOWS\system32\EBPPORT4.DAT
2008-03-08 19:38 . 2008-03-08 19:38 268 --ah----- C:\sqmdata00.sqm
2008-03-08 19:38 . 2008-03-08 19:38 244 --ah----- C:\sqmnoopt00.sqm
2008-03-08 11:27 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2008-03-08 11:27 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys
2008-03-07 15:58 . 2008-03-07 15:58 307,968 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe
2008-03-07 15:58 . 2008-02-27 13:15 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll
2008-03-07 15:53 . 2008-03-07 15:53 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\TuneUp Software
2008-03-07 15:52 . 2008-03-07 15:59 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008
2008-03-07 15:52 . 2008-03-07 15:52 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2008-03-06 17:19 . 2008-03-06 17:19 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Ahead
2008-03-06 17:18 . 2008-03-06 17:18 <DIR> d-------- C:\Program Files\Common Files\Ahead
2008-03-06 17:18 . 2008-03-06 17:18 <DIR> d-------- C:\Program Files\Ahead
2008-03-06 17:18 . 2001-07-06 14:41 569,344 --a------ C:\WINDOWS\system32\imagr5.dll
2008-03-06 17:18 . 2001-07-06 12:44 544,768 --a------ C:\WINDOWS\system32\imagx5.dll
2008-03-06 17:18 . 2001-07-06 18:24 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll
2008-03-06 17:18 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-03-06 17:18 . 2003-03-29 16:45 89,184 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys
2008-03-06 17:18 . 2003-07-22 16:29 57,344 --a------ C:\WINDOWS\system32\ImageDrive.cpl
2008-03-06 17:18 . 2001-06-26 08:15 38,912 --a------ C:\WINDOWS\system32\picn20.dll
2008-03-02 20:49 . 2008-03-02 20:49 <DIR> d-------- C:\Program Files\ESET
2008-03-02 20:30 . 2008-03-02 20:30 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ESET
2008-03-02 14:05 . 2008-03-02 14:05 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\CyberLink
2008-02-27 19:23 . 2008-02-27 19:23 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Samsung
2008-02-27 19:19 . 2006-05-03 22:53 174,592 --a------ C:\WINDOWS\system32\framedyn.dll
2008-02-27 19:18 . 2008-02-27 19:18 <DIR> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers
2008-02-27 19:18 . 2005-12-22 12:24 137,884 --a------ C:\WINDOWS\system32\drivers\sscdmdm.sys
2008-02-27 19:18 . 2005-12-22 12:24 80,272 --a------ C:\WINDOWS\system32\drivers\sscdbus.sys
2008-02-27 19:18 . 2005-12-22 12:24 11,877 --a------ C:\WINDOWS\system32\drivers\sscdcmnt.sys
2008-02-27 19:18 . 2005-12-22 12:24 11,877 --a------ C:\WINDOWS\system32\drivers\sscdcm.sys
2008-02-27 19:18 . 2005-12-22 12:24 11,188 --a------ C:\WINDOWS\system32\drivers\sscdwhnt.sys
2008-02-27 19:18 . 2005-12-22 12:24 11,188 --a------ C:\WINDOWS\system32\drivers\sscdwh.sys
2008-02-27 19:18 . 2005-12-22 12:24 10,864 --a------ C:\WINDOWS\system32\drivers\sscdmdfl.sys
2008-02-27 19:18 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-02-27 19:17 . 2006-07-24 16:05 5,632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys
2008-02-27 19:16 . 2008-02-27 19:16 <DIR> d-------- C:\Program Files\Samsung
2008-02-27 18:03 . 2008-03-08 10:47 <DIR> d-------- C:\Program Files\DU Meter
2008-02-27 18:03 . 2008-02-27 18:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Hagel Technologies
2008-02-27 17:58 . 2008-03-08 10:48 <DIR> d-------- C:\Program Files\Mirc
2008-02-27 17:58 . 2008-03-03 17:28 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\mIRC
2008-02-27 17:10 . 2008-02-27 17:10 <DIR> d-------- C:\Program Files\Windows Live
2008-02-25 18:54 . 2008-02-25 18:56 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WinZip
2008-02-25 18:40 . 2008-02-25 18:42 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2008-02-25 18:00 . 2008-02-25 18:41 <DIR> d-------- C:\Program Files\Your Uninstaller 2008
2008-02-25 18:00 . 2008-02-25 18:00 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\URSoft
2008-02-25 18:00 . 2008-03-08 10:44 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-25 17:58 . 2008-02-27 18:30 <DIR> d-------- C:\Program Files\Serials 2000
2008-02-25 17:53 . 2008-02-25 17:53 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-02-25 17:53 . 2008-02-25 17:53 1,409 --a------ C:\WINDOWS\QTFont.for
2008-02-25 17:50 . 2008-02-25 17:50 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Apple Computer
2008-02-25 17:48 . 2008-02-25 17:49 <DIR> d-------- C:\Program Files\QuickTime
2008-02-25 17:48 . 2008-02-25 17:49 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-02-25 17:47 . 2008-02-25 17:47 <DIR> d-------- C:\Program Files\Apple Software Update
2008-02-25 17:45 . 2008-02-25 17:45 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-02-25 17:43 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-02-25 17:40 . 2008-02-25 17:40 <DIR> d-------- C:\Program Files\MSBuild
2008-02-25 17:40 . 2008-02-25 17:40 <DIR> d-------- C:\Program Files\Microsoft Works
2008-02-25 17:35 . 2008-02-25 17:39 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-02-25 17:34 . 2008-02-25 17:43 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-02-25 17:32 . 2008-02-25 17:32 <DIR> dr-h----- C:\MSOCache
2008-02-25 17:31 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-02-25 17:31 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2008-02-25 17:31 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2008-02-25 17:31 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2008-02-25 17:31 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2008-02-25 17:31 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2008-02-25 17:28 . 2008-02-25 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CyberLink
2008-02-25 17:22 . 2008-02-25 17:25 <DIR> d-------- C:\Program Files\CyberLink
2008-02-25 17:22 . 2008-02-25 17:20 505,392 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-02-25 17:22 . 2008-02-25 17:20 353,840 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-02-25 17:15 . 2008-02-25 17:15 <DIR> d-------- C:\Program Files\Webteh
2008-02-25 17:15 . 2008-02-25 17:16 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\BSplayer PRO
2008-02-25 17:13 . 2008-02-25 17:13 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-02-25 02:16 . 2008-02-25 02:16 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\.BitTornado
2008-02-23 18:58 . 2008-03-03 14:22 <DIR> d-------- C:\Program Files\Opera
2008-02-23 18:57 . 2008-02-23 18:57 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-02-22 16:42 . 2008-02-25 18:47 <DIR> d-------- C:\Program Files\Winamp
2008-02-22 16:42 . 2008-02-24 19:15 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Winamp
2008-02-22 01:42 . 2008-02-22 01:42 <DIR> d-------- C:\Program Files\SsWin
2008-02-22 01:39 . 2008-03-06 21:03 <DIR> d-------- C:\Documents and Settings\KIMOVII\Contacts
2008-02-22 01:37 . 2008-02-25 18:40 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-10 13:20 --------- d-----w C:\Documents and Settings\KIMOVII\Application Data\Skype
2008-03-07 14:50 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-02-27 18:16 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-25 01:16 --------- d-----w C:\Documents and Settings\KIMOVII\Application Data\.BitTornado
2008-02-21 20:55 --------- d-----w C:\Program Files\Farm Frenzy
2008-02-21 20:41 --------- d-----w C:\Program Files\Lavasoft
2008-02-21 20:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-02-21 20:19 --------- d-----w C:\Program Files\Skype
2008-02-21 20:19 --------- d-----w C:\Program Files\Common Files\Skype
2008-02-21 20:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype
2008-02-21 19:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-02-21 19:52 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2008-02-21 19:51 --------- d-----w C:\Program Files\RALINK
2008-02-21 19:42 --------- d-----w C:\Program Files\Realtek Sound Manager
2008-02-21 19:42 --------- d-----w C:\Program Files\Realtek AC97
2008-02-21 19:42 --------- d-----w C:\Program Files\AvRack
2008-02-21 19:40 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-02-21 19:26 --------- d-----w C:\Program Files\microsoft frontpage
2008-02-06 15:09 34,312 ----a-w C:\WINDOWS\system32\drivers\epfwtdir.sys
2008-02-06 15:06 39,944 ----a-w C:\WINDOWS\system32\drivers\eamon.sys
2008-02-06 15:06 29,704 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2002-12-31 13:00 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]
"DU Meter"="C:\Program Files\DU Meter\DUMeter.exe" [2008-02-28 15:45 2582288]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 17:10 23237416]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 01:06 1667584]
"TuneUp MemOptimizer"="C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" [2008-02-29 14:24 196864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2005-08-17 11:39 90112 C:\WINDOWS\SOUNDMAN.EXE]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2007-02-07 16:24 71216]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2007-02-07 16:21 54832]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-06 16:08 1443072]
"NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648]
"EPSON Stylus C46 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.exe" [2004-01-13 19:00 99840]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2002-12-31 13:00 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-02-21 20:52:40 606208]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"disableregistrytools"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\SsWin\\Status Script 2.3\\mirc.exe"=
"C:\\Program Files\\Mirc\\mirc.exe"=
"C:\\Program Files\\Opera\\Opera.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-02-06 16:09]
R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

.
Contents of the 'Scheduled Tasks' folder
"2008-03-10 13:00:10 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe
"2008-03-07 16:52:26 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2008-03-10 14:21:25
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\DUMeterSvc]
"ImagePath"="C:\Program Files\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}]
"ImagePath"="\??\C:\Program Files\CyberLink\PowerDVD\000.fcl"
.
Completion time: 2008-03-10 14:27:38

Poslao: 12 Mar 2008 19:44
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Log je cist.Ne pokazuje znake malwera.

MyCity » Ambulanta -> Arhiva Ambulante » proverka

Ko je trenutno na forumu
 

Ukupno su 1167 korisnika na forumu :: 104 registrovanih, 15 sakrivenih i 1048 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 015, 04bokibole, acov34, AK - 230, Areal84, Ares12356, Asteker, Avalon015, babaroga, Banovo Brdo, Betty25, bojan_t, boromir, Bosnjo, boxbole, Brabant, celik, Centauro, cyprus, d.arsenal321, daedal, dearg, debeli, Django777, Dogma21, Dorcolac, Dovla 1980, dozorni, dragan_mig31, Dragon Order, Dzigy, Feller, gacesam, gagidjuric, Gogi_avio, GveX, Inner-Cell, interesujeme, ivan1973, janbo, jon istvan, JosipRi, Jozo74, Još malo pa deda, Kubovac, kunktator, kuntalo, Lucije Kvint, M74AB3, Mackomen, Mae, Malahit, markolopin, markoni.slo, Marky, marsovac 2, mačković, Mercury, Milan A. Nikolic, Milos1389, milutin134, MiroslavD, mm1811, momcilob55, Mskok, Murko, museum, neutrino, Novakomp, novator, Panter, Papadubi, Parker, Petarvu, pirke96, pisac12, PlayerOne, Povratak1912, predragc, proka89, RAKITNICA, repac, Romibrat, royst33, Sagotolio, Saša1989, Seeker, sekretar, Shadow soldier, shota91, Sirius, Smiljke, Srle993, Su 57, SympathyForTheDevil, The Boss, tomigun, Trivo, ujke, vathra, vidra1, Vladonius, voja64, x011