Skryté procesy

[mad_doc]

Dobrý den, prosím o kontrolu logu, avira mne upozorňuje během preventivního testu na skryté procesy, zároveň mi prohlížeč chrome při stisku pravého tlačítka myši na stránkách jakoby divně problikne. Tak bych rád pro jistotu věděl, že je vše OK.
Děkuji za Váš čas.


Logfile of random's system information tool 1.09 (written by random/random)
Run by doktor at 2011-11-01 11:13:11
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 60 GB (39%) free of 153 GB
Total RAM: 2047 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:13:25, on 1.11.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Pidgin\pidgin.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\doktor\Downloads\RSIT.exe
C:\Program Files\trend micro\doktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 7234 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-954556414-2874214386-3271078217-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-954556414-2874214386-3271078217-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\doktor\AppData\Roaming\Mozilla\Firefox\Profiles\592shssi.default

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2011-10-20 2497352]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-09-08 343168]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2011-10-11 258512]
"Malwarebytes' Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2011-08-31 1047208]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-03-30 499608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hard Disk Sentinel]
C:\Program Files\Hard Disk Sentinel\HDSentinel.exe [2008-08-06 3264000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2011-09-14 1242448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-09-14 203776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.ACDV"=ACDV.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-11-01 11:13:12 ----D---- C:\Program Files\trend micro
2011-11-01 11:13:11 ----D---- C:\rsit
2011-10-30 14:07:21 ----SHD---- C:\$RECYCLE.BIN
2011-10-30 14:07:18 ----D---- C:\Windows\temp
2011-10-30 13:55:07 ----D---- C:\Windows\ERDNT
2011-10-28 09:52:38 ----D---- C:\Users\doktor\AppData\Roaming\Ashampoo
2011-10-28 09:52:25 ----D---- C:\ProgramData\ashampoo
2011-10-28 09:52:16 ----D---- C:\Program Files\Ashampoo
2011-10-24 21:51:02 ----D---- C:\Users\doktor\AppData\Roaming\Kalypso Media
2011-10-24 21:40:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-10-24 21:40:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-10-24 21:40:30 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-10-24 21:40:30 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-10-24 21:40:30 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-10-24 21:40:30 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-10-24 21:40:29 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-10-24 21:40:29 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-10-24 21:39:42 ----D---- C:\Windows\system32\directx
2011-10-23 18:18:42 ----D---- C:\Users\doktor\AppData\Roaming\Avira
2011-10-23 18:18:06 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2011-10-23 18:18:05 ----A---- C:\Windows\system32\drivers\avkmgr.sys
2011-10-23 18:18:05 ----A---- C:\Windows\system32\drivers\avipbb.sys
2011-10-23 18:18:05 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2011-10-23 18:18:00 ----D---- C:\ProgramData\Avira
2011-10-23 18:18:00 ----D---- C:\Program Files\Avira
2011-10-23 18:04:43 ----D---- C:\Program Files\Alcohol Soft
2011-10-23 17:58:49 ----A---- C:\Windows\system32\drivers\sptd.sys
2011-10-23 17:58:25 ----D---- C:\Program Files\Franzis
2011-10-23 17:35:26 ----D---- C:\Program Files\WinRAR
2011-10-21 13:28:51 ----A---- C:\Windows\system32\cmdcsr.dll
2011-10-19 12:46:19 ----A---- C:\Windows\system32\javaws.exe
2011-10-19 12:46:19 ----A---- C:\Windows\system32\javaw.exe
2011-10-19 12:46:19 ----A---- C:\Windows\system32\java.exe
2011-10-16 18:59:16 ----D---- C:\Program Files\Hard Disk Sentinel
2011-10-16 17:20:00 ----D---- C:\Users\doktor\AppData\Roaming\Malwarebytes
2011-10-16 14:04:52 ----D---- C:\Program Files\My Company Name
2011-10-16 14:04:52 ----D---- C:\Program Files\Common Files\PX Storage Engine
2011-10-16 12:32:29 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2011-10-16 12:32:29 ----RA---- C:\Windows\system32\AdobePDF.dll
2011-10-16 12:17:19 ----D---- C:\Program Files\Common Files\Macrovision Shared
2011-10-16 00:06:23 ----D---- C:\TempProjekty
2011-10-16 00:05:27 ----D---- C:\Program Files\WinHTTrack
2011-10-13 12:57:13 ----A---- C:\Windows\system32\mshtmled.dll
2011-10-13 12:57:13 ----A---- C:\Windows\system32\iertutil.dll
2011-10-13 12:57:12 ----A---- C:\Windows\system32\jscript9.dll
2011-10-13 12:57:12 ----A---- C:\Windows\system32\jscript.dll
2011-10-13 12:57:12 ----A---- C:\Windows\system32\ieui.dll
2011-10-13 12:57:11 ----A---- C:\Windows\system32\wininet.dll
2011-10-13 12:57:11 ----A---- C:\Windows\system32\urlmon.dll
2011-10-13 12:57:11 ----A---- C:\Windows\system32\jsproxy.dll
2011-10-13 12:57:10 ----A---- C:\Windows\system32\url.dll
2011-10-13 12:57:10 ----A---- C:\Windows\system32\ieframe.dll
2011-10-13 12:57:09 ----A---- C:\Windows\system32\mshtml.dll
2011-10-13 12:13:45 ----A---- C:\Windows\system32\psisdecd.dll
2011-10-13 12:13:40 ----A---- C:\Windows\system32\oleaut32.dll
2011-10-13 12:13:40 ----A---- C:\Windows\system32\oleacc.dll
2011-10-13 12:13:31 ----A---- C:\Windows\system32\win32k.sys
2011-10-11 14:49:08 ----D---- C:\Program Files\NVIDIA Corporation
2011-10-11 14:48:26 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-10-11 14:48:26 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-10-11 14:48:26 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-10-11 14:48:26 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-10-10 15:51:17 ----D---- C:\Users\doktor\AppData\Roaming\dvdcss
2011-10-07 16:16:35 ----D---- C:\ProgramData\ATI
2011-10-07 16:16:33 ----D---- C:\Program Files\AMD APP
2011-10-07 16:13:23 ----A---- C:\Windows\system32\atiesrxx.exe
2011-10-07 16:13:20 ----A---- C:\Windows\system32\atiumdmv.dll
2011-10-07 16:13:18 ----A---- C:\Windows\system32\aticalrt.dll
2011-10-07 16:13:17 ----A---- C:\Windows\system32\atigktxx.dll
2011-10-07 16:13:15 ----A---- C:\Windows\system32\aticalcl.dll
2011-10-07 16:13:13 ----A---- C:\Windows\system32\drivers\atikmdag.sys
2011-10-07 16:13:10 ----A---- C:\Windows\system32\drivers\atikmpag.sys
2011-10-07 16:13:10 ----A---- C:\Windows\system32\atitmmxx.dll
2011-10-07 16:13:09 ----A---- C:\Windows\system32\atimpc32.dll
2011-10-07 16:13:09 ----A---- C:\Windows\system32\atiapfxx.exe
2011-10-07 16:13:09 ----A---- C:\Windows\system32\amdpcom32.dll
2011-10-07 16:13:04 ----A---- C:\Windows\system32\atieclxx.exe
2011-10-07 16:13:01 ----A---- C:\Windows\system32\Oemdspif.dll
2011-10-07 16:12:55 ----A---- C:\Windows\system32\atimuixx.dll
2011-10-07 16:12:55 ----A---- C:\Windows\system32\aticaldd.dll
2011-10-07 16:12:52 ----A---- C:\Windows\system32\drivers\ati2erec.dll
2011-10-07 16:12:46 ----A---- C:\Windows\system32\ati2edxx.dll
2011-10-07 16:12:40 ----A---- C:\Windows\system32\atiicdxx.dat
2011-10-07 16:12:36 ----A---- C:\Windows\system32\atiglpxx.dll
2011-10-07 16:12:34 ----A---- C:\Windows\system32\atioglxx.dll
2011-10-03 11:05:33 ----D---- C:\Program Files\ActiveState Komodo Edit 6

======List of files/folders modified in the last 1 month======

2011-11-01 11:13:23 ----D---- C:\Windows\Prefetch
2011-11-01 11:13:12 ----RD---- C:\Program Files
2011-11-01 11:13:04 ----SHD---- C:\Windows\Installer
2011-11-01 11:10:15 ----D---- C:\Users\doktor\AppData\Roaming\.purple
2011-11-01 10:08:50 ----D---- C:\Users\doktor\AppData\Roaming\vlc
2011-11-01 09:19:29 ----D---- C:\Windows\system32\drivers
2011-11-01 07:39:18 ----D---- C:\Windows\system32\config
2011-11-01 07:29:39 ----D---- C:\Windows\System32
2011-11-01 07:29:39 ----D---- C:\Windows\inf
2011-11-01 07:29:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-01 07:28:57 ----SHD---- C:\System Volume Information
2011-10-31 23:21:38 ----D---- C:\Users\doktor\AppData\Roaming\esmska
2011-10-31 08:28:59 ----D---- C:\Program Files\Common Files\Steam
2011-10-30 22:45:08 ----D---- C:\Program Files\Steam
2011-10-30 14:57:42 ----D---- C:\Windows
2011-10-30 14:41:39 ----D---- C:\Windows\Logs
2011-10-30 14:05:08 ----A---- C:\Windows\system.ini
2011-10-30 14:05:02 ----D---- C:\Windows\system32\drivers\etc
2011-10-30 14:01:32 ----D---- C:\Windows\AppPatch
2011-10-30 14:01:30 ----D---- C:\Program Files\Common Files
2011-10-28 09:52:25 ----D---- C:\ProgramData
2011-10-28 07:52:55 ----D---- C:\Windows\system32\catroot2
2011-10-27 19:00:35 ----D---- C:\Users\doktor\AppData\Roaming\FileZilla
2011-10-25 20:12:53 ----D---- C:\Windows\TAPI
2011-10-24 22:25:10 ----D---- C:\Program Files\Common Files\Adobe
2011-10-24 22:25:04 ----D---- C:\Program Files\Adobe
2011-10-23 20:51:29 ----D---- C:\Windows\system32\Tasks
2011-10-23 18:18:20 ----D---- C:\Windows\system32\catroot
2011-10-23 17:40:09 ----D---- C:\Program Files\JDownloader
2011-10-23 17:36:27 ----D---- C:\Users\doktor\AppData\Roaming\WinRAR
2011-10-23 17:34:13 ----D---- C:\Windows\system32\DriverStore
2011-10-23 16:32:13 ----D---- C:\Windows\DigitalLocker
2011-10-22 13:30:03 ----D---- C:\Windows\system32\NDF
2011-10-19 13:31:06 ----D---- C:\Users\doktor\AppData\Roaming\Adobe
2011-10-19 12:45:56 ----D---- C:\Program Files\Java
2011-10-17 01:15:42 ----D---- C:\Windows\debug
2011-10-17 00:15:21 ----SD---- C:\Users\doktor\AppData\Roaming\Microsoft
2011-10-17 00:12:07 ----D---- C:\ProgramData\Adobe
2011-10-16 23:12:22 ----RSD---- C:\Windows\Fonts
2011-10-16 14:38:11 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2011-10-16 14:01:13 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-10-16 13:57:36 ----D---- C:\Windows\winsxs
2011-10-15 00:19:55 ----D---- C:\Windows\Microsoft.NET
2011-10-15 00:19:53 ----RSD---- C:\Windows\assembly
2011-10-13 13:02:13 ----D---- C:\Program Files\Microsoft Silverlight
2011-10-13 13:01:00 ----D---- C:\Windows\system32\migration
2011-10-13 13:01:00 ----D---- C:\Windows\ehome
2011-10-13 13:00:59 ----D---- C:\Program Files\Internet Explorer
2011-10-13 12:55:37 ----A---- C:\Windows\system32\MRT.exe
2011-10-11 14:49:08 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-10-11 00:53:39 ----D---- C:\Windows\system32\wdi
2011-10-07 21:01:32 ----D---- C:\Windows\Panther
2011-10-07 21:01:03 ----D---- C:\Program Files\CCleaner
2011-10-07 18:47:10 ----A---- C:\Windows\system32\guard32.dll
2011-10-07 16:16:13 ----D---- C:\Program Files\ATI Technologies
2011-10-07 16:13:21 ----A---- C:\Windows\system32\coinst.dll
2011-10-07 16:13:05 ----A---- C:\Windows\system32\atiuxpag.dll
2011-10-07 16:13:01 ----A---- C:\Windows\system32\atiumdva.dll
2011-10-07 16:13:01 ----A---- C:\Windows\system32\ATIDEMGX.dll
2011-10-07 16:13:00 ----A---- C:\Windows\system32\atidxx32.dll
2011-10-07 16:12:58 ----A---- C:\Windows\system32\atiu9pag.dll
2011-10-07 16:12:58 ----A---- C:\Windows\system32\atiadlxx.dll
2011-10-07 16:12:56 ----A---- C:\Windows\system32\atipdlxx.dll
2011-10-07 16:12:54 ----A---- C:\Windows\system32\atiumdag.dll
2011-10-07 16:12:41 ----A---- C:\Windows\system32\aticfx32.dll
2011-10-05 20:35:49 ----D---- C:\Program Files\Mozilla Firefox
2011-10-03 04:06:03 ----A---- C:\Windows\system32\deployJava1.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-10-23 722416]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2011-10-11 134344]
R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2011-10-11 36000]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2011-10-07 488208]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2011-10-07 39640]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2011-10-07 82400]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2011-10-11 74640]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-10-07 8606208]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-10-07 248832]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2011-06-06 211984]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-13 43008]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 af0yhtjl;af0yhtjl; C:\Windows\system32\drivers\af0yhtjl.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 catchme;catchme; \??\C:\Users\doktor\AppData\Local\Temp\catchme.sys []
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 15872]
S3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2011-01-15 30208]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-10-07 176128]
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2011-10-11 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2011-10-11 86224]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2011-10-07 1883328]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-10-16 655624]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-10-13 419624]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-14 1343400]

-----------------EOF-----------------

[Rudy]

Zdravím!
Log vypadá OK. O jaké procesy se jedná? I skrytý proces může být legitimní.

[mad_doc]

Také zdravím a děkuji za odpověď. Procesy mi avira nahlásí během full testu, bohužel je nespecifikuje a navrhuje mi, abych pc otestoval z jejich Rescue CD, což jsem zkusil (nabootuje nějaký "avira linux"), ale protože ten test trval 2 hodiny a to byl teprve první disk oskenován zhruba z jedné třetiny, vzdal jsem to (alespoň prozatímně) a řekl si, že bych se zkusil poradit se zdejšími odborníky, což mi "nezaseká" počítač celý den jako test z Rescue CD
Každopádně bych nějakou infiltraci nečekal, jelikož systém je na PC zhruba 2-3 měsíce a nemyslím, že bych na něm operoval s něčím evidentně problematickým. Spíše mne zneklidnila ta hláška Aviry.
Je ještě nějaká jiná varianta jak zjistit možný problém, než nechat otestovat PC tím Rescue CD? Každopádně například MBAM test jsem prováděl a ten byl čistý.

Díky za váš čas.

[Rudy]

Ten základní jste již provedl - dal jste log z RSIT, v němž není nic nebezpečného vidět. Zkuste sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log. Speciálními utilitami bych do toho zatím nešel.