Preventivka po dlouhé době

Zpráva

Pepe.killer · #1 Příspěvek od **Pepe.killer** » 20 lis 2011 21:49

Ahoj, zkouknete prosím tenhle log? Problém vyloženě nemám, ale chtěl bych si být stopro jistý. Přijde mi totiž divné, že se mi dneska přeměnil samovolně na nějaký úplně jiný a taky se mi občas sám pouští WMP. Díky moc za kontrolu!!

Logfile of random's system information tool 1.09 (written by random/random)
Run by Pepe at 2011-11-20 21:42:32
Microsoft Windows 7 Home Premium
System drive C: has 95 GB (62%) free of 153 GB
Total RAM: 3070 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:45:21, on 20.11.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16869)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtBty.exe
C:\Users\Pepe\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Pepe.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Pepe\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5604 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2017483731-4047512523-2007409315-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2017483731-4047512523-2007409315-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-11-19 42272]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ITSecMng"=C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2011-04-01 80840]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Users\Pepe\AppData\Local\Google\Update\GoogleUpdate.exe [2011-11-19 136176]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-11-20 21:42:32 ----D---- C:\rsit
2011-11-20 21:42:32 ----D---- C:\Program Files (x86)\trend micro
2011-11-20 18:26:40 ----D---- C:\Program Files (x86)\uTorrent
2011-11-20 18:25:43 ----D---- C:\Users\Pepe\AppData\Roaming\uTorrent
2011-11-20 18:17:00 ----D---- C:\Windows\SysWOW64\Wat
2011-11-20 18:09:19 ----A---- C:\Windows\SysWOW64\wcncsvc.dll
2011-11-20 17:59:01 ----A---- C:\Windows\SysWOW64\msv1_0.dll
2011-11-20 17:47:20 ----A---- C:\Windows\SysWOW64\PresentationHostProxy.dll
2011-11-20 17:47:20 ----A---- C:\Windows\SysWOW64\PresentationHost.exe
2011-11-20 17:47:20 ----A---- C:\Windows\SysWOW64\netfxperf.dll
2011-11-20 17:47:20 ----A---- C:\Windows\SysWOW64\mscoree.dll
2011-11-20 17:47:19 ----A---- C:\Windows\SysWOW64\dfshim.dll
2011-11-20 11:56:49 ----A---- C:\Windows\SysWOW64\CertEnroll.dll
2011-11-20 11:56:21 ----A---- C:\Windows\SysWOW64\tzres.dll
2011-11-20 11:56:10 ----A---- C:\Windows\SysWOW64\xmllite.dll
2011-11-20 11:56:08 ----A---- C:\Windows\SysWOW64\kerberos.dll
2011-11-20 11:54:46 ----A---- C:\Windows\SysWOW64\odbcjt32.dll
2011-11-20 11:54:46 ----A---- C:\Windows\SysWOW64\odbccu32.dll
2011-11-20 11:54:46 ----A---- C:\Windows\SysWOW64\odbccr32.dll
2011-11-20 11:54:46 ----A---- C:\Windows\SysWOW64\odbccp32.dll
2011-11-20 11:54:45 ----A---- C:\Windows\SysWOW64\odbctrac.dll
2011-11-20 11:54:43 ----A---- C:\Windows\SysWOW64\asycfilt.dll
2011-11-20 11:54:33 ----A---- C:\Windows\SysWOW64\poqexec.exe
2011-11-20 11:54:20 ----A---- C:\Windows\SysWOW64\explorer.exe
2011-11-20 11:54:20 ----A---- C:\Windows\explorer.exe
2011-11-20 11:54:17 ----A---- C:\Windows\SysWOW64\EncDec.dll
2011-11-20 11:54:17 ----A---- C:\Windows\SysWOW64\CPFilters.dll
2011-11-20 11:54:16 ----A---- C:\Windows\SysWOW64\sbe.dll
2011-11-20 11:54:04 ----A---- C:\Windows\SysWOW64\t2embed.dll
2011-11-20 11:54:02 ----A---- C:\Windows\SysWOW64\ole32.dll
2011-11-20 11:53:59 ----A---- C:\Windows\SysWOW64\taskschd.dll
2011-11-20 11:53:58 ----A---- C:\Windows\SysWOW64\taskeng.exe
2011-11-20 11:53:58 ----A---- C:\Windows\SysWOW64\taskcomp.dll
2011-11-20 11:53:58 ----A---- C:\Windows\SysWOW64\schtasks.exe
2011-11-20 11:53:55 ----A---- C:\Windows\SysWOW64\mssrch.dll
2011-11-20 11:53:54 ----A---- C:\Windows\SysWOW64\tquery.dll
2011-11-20 11:53:53 ----A---- C:\Windows\SysWOW64\SearchIndexer.exe
2011-11-20 11:53:52 ----A---- C:\Windows\SysWOW64\SearchProtocolHost.exe
2011-11-20 11:53:52 ----A---- C:\Windows\SysWOW64\SearchFilterHost.exe
2011-11-20 11:53:52 ----A---- C:\Windows\SysWOW64\mssvp.dll
2011-11-20 11:53:52 ----A---- C:\Windows\SysWOW64\mssphtb.dll
2011-11-20 11:53:52 ----A---- C:\Windows\SysWOW64\mssph.dll
2011-11-20 11:53:51 ----A---- C:\Windows\SysWOW64\msscntrs.dll
2011-11-20 11:53:40 ----A---- C:\Windows\SysWOW64\StructuredQuery.dll
2011-11-20 11:53:24 ----A---- C:\Windows\SysWOW64\secproc_isv.dll
2011-11-20 11:53:23 ----A---- C:\Windows\SysWOW64\secproc.dll
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\secproc_ssp_isv.dll
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\secproc_ssp.dll
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\RMActivate_ssp.exe
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\RMActivate_isv.exe
2011-11-20 11:53:22 ----A---- C:\Windows\SysWOW64\RMActivate.exe
2011-11-20 11:53:17 ----A---- C:\Windows\SysWOW64\shell32.dll
2011-11-20 11:52:39 ----A---- C:\Windows\SysWOW64\XpsGdiConverter.dll
2011-11-20 11:52:26 ----A---- C:\Windows\SysWOW64\schannel.dll
2011-11-20 11:52:25 ----A---- C:\Windows\SysWOW64\comctl32.dll
2011-11-20 11:52:23 ----A---- C:\Windows\SysWOW64\vbscript.dll
2011-11-20 11:52:23 ----A---- C:\Windows\SysWOW64\jscript.dll
2011-11-20 11:52:17 ----A---- C:\Windows\SysWOW64\upnp.dll
2011-11-20 11:52:17 ----A---- C:\Windows\SysWOW64\msxml6.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\wscapi.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\winhttp.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\WebClnt.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\slwga.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\msxml3.dll
2011-11-20 11:52:16 ----A---- C:\Windows\SysWOW64\davclnt.dll
2011-11-20 11:51:59 ----A---- C:\Windows\SysWOW64\XpsPrint.dll
2011-11-20 11:51:56 ----A---- C:\Windows\SysWOW64\mfc42.dll
2011-11-20 11:51:55 ----A---- C:\Windows\SysWOW64\mfc42u.dll
2011-11-20 11:51:41 ----A---- C:\Windows\SysWOW64\ieframe.dll
2011-11-20 11:51:38 ----A---- C:\Windows\SysWOW64\iertutil.dll
2011-11-20 11:51:37 ----A---- C:\Windows\SysWOW64\mshtml.dll
2011-11-20 11:51:36 ----A---- C:\Windows\SysWOW64\urlmon.dll
2011-11-20 11:51:35 ----A---- C:\Windows\SysWOW64\wininet.dll
2011-11-20 11:51:34 ----A---- C:\Windows\SysWOW64\mstime.dll
2011-11-20 11:51:34 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2011-11-20 11:51:33 ----A---- C:\Windows\SysWOW64\iepeers.dll
2011-11-20 11:51:33 ----A---- C:\Windows\SysWOW64\iedkcs32.dll
2011-11-20 11:51:30 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2011-11-20 11:51:30 ----A---- C:\Windows\SysWOW64\msfeedsbs.dll
2011-11-20 11:51:30 ----A---- C:\Windows\SysWOW64\licmgr10.dll
2011-11-20 11:51:29 ----A---- C:\Windows\SysWOW64\url.dll
2011-11-20 11:51:29 ----A---- C:\Windows\SysWOW64\ieui.dll
2011-11-20 11:51:28 ----A---- C:\Windows\SysWOW64\msfeedssync.exe
2011-11-20 11:51:28 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2011-11-20 11:47:33 ----A---- C:\Windows\SysWOW64\rtutils.dll
2011-11-20 11:46:21 ----A---- C:\Windows\SysWOW64\fontsub.dll
2011-11-20 11:46:21 ----A---- C:\Windows\SysWOW64\atmlib.dll
2011-11-20 11:46:21 ----A---- C:\Windows\SysWOW64\atmfd.dll
2011-11-20 11:46:19 ----A---- C:\Windows\SysWOW64\d3d10warp.dll
2011-11-20 11:46:19 ----A---- C:\Windows\SysWOW64\d2d1.dll
2011-11-20 11:46:18 ----A---- C:\Windows\SysWOW64\mf.dll
2011-11-20 11:46:18 ----A---- C:\Windows\SysWOW64\DWrite.dll
2011-11-20 11:46:16 ----A---- C:\Windows\SysWOW64\WMVDECOD.DLL
2011-11-20 11:46:15 ----A---- C:\Windows\SysWOW64\XpsRasterService.dll
2011-11-20 11:46:15 ----A---- C:\Windows\SysWOW64\mfreadwrite.dll
2011-11-20 11:46:15 ----A---- C:\Windows\SysWOW64\ExplorerFrame.dll
2011-11-20 11:45:31 ----A---- C:\Windows\SysWOW64\webio.dll
2011-11-20 11:45:30 ----A---- C:\Windows\SysWOW64\iccvid.dll
2011-11-20 11:44:16 ----A---- C:\Windows\SysWOW64\dnsapi.dll
2011-11-20 11:44:15 ----A---- C:\Windows\SysWOW64\dnscacheugc.exe
2011-11-20 11:43:36 ----A---- C:\Windows\SysWOW64\wmpmde.dll
2011-11-20 11:43:35 ----A---- C:\Windows\SysWOW64\quartz.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\tsbyuv.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\msyuv.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\msvidc32.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\msrle32.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\mciavi32.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\iyuv_32.dll
2011-11-20 11:43:34 ----A---- C:\Windows\SysWOW64\avifil32.dll
2011-11-20 11:43:32 ----A---- C:\Windows\SysWOW64\d3d10_1core.dll
2011-11-20 11:43:32 ----A---- C:\Windows\SysWOW64\d3d10_1.dll
2011-11-20 11:42:36 ----A---- C:\Windows\SysWOW64\psisdecd.dll
2011-11-20 11:42:30 ----A---- C:\Windows\SysWOW64\ntdll.dll
2011-11-20 11:41:55 ----A---- C:\Windows\SysWOW64\sspicli.dll
2011-11-20 11:41:55 ----A---- C:\Windows\SysWOW64\secur32.dll
2011-11-20 11:40:54 ----A---- C:\Windows\SysWOW64\mfc40u.dll
2011-11-20 11:40:54 ----A---- C:\Windows\SysWOW64\mfc40.dll
2011-11-20 11:40:51 ----A---- C:\Windows\SysWOW64\msasn1.dll
2011-11-20 11:40:49 ----A---- C:\Windows\SysWOW64\setup16.exe
2011-11-20 11:40:49 ----A---- C:\Windows\SysWOW64\KernelBase.dll
2011-11-20 11:40:49 ----A---- C:\Windows\SysWOW64\kernel32.dll
2011-11-20 11:40:48 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-11-20 11:40:48 ----A---- C:\Windows\SysWOW64\wow32.dll
2011-11-20 11:40:48 ----A---- C:\Windows\SysWOW64\ntvdm64.dll
2011-11-20 11:40:48 ----A---- C:\Windows\SysWOW64\instnm.exe
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-11-20 11:40:46 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-11-20 11:40:45 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-11-20 11:40:44 ----AH---- C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2011-11-20 11:40:44 ----A---- C:\Windows\SysWOW64\user.exe
2011-11-20 11:40:26 ----A---- C:\Windows\SysWOW64\drvinst.exe
2011-11-20 11:40:26 ----A---- C:\Windows\SysWOW64\devrtl.dll
2011-11-20 11:40:26 ----A---- C:\Windows\SysWOW64\devobj.dll
2011-11-20 11:40:26 ----A---- C:\Windows\SysWOW64\cfgmgr32.dll
2011-11-20 11:40:25 ----A---- C:\Windows\SysWOW64\mstscax.dll
2011-11-20 11:40:24 ----A---- C:\Windows\SysWOW64\mstsc.exe
2011-11-20 11:40:21 ----A---- C:\Windows\SysWOW64\wmp.dll
2011-11-20 11:40:20 ----A---- C:\Windows\SysWOW64\wmploc.DLL
2011-11-20 11:39:59 ----A---- C:\Windows\SysWOW64\prevhost.exe
2011-11-20 11:39:57 ----A---- C:\Windows\SysWOW64\inetcomm.dll
2011-11-20 11:37:44 ----A---- C:\Windows\SysWOW64\oleaut32.dll
2011-11-20 11:37:44 ----A---- C:\Windows\SysWOW64\oleacc.dll
2011-11-20 11:37:40 ----A---- C:\Windows\SysWOW64\odbc32.dll
2011-11-20 11:37:38 ----A---- C:\Windows\SysWOW64\sscore.dll
2011-11-20 11:13:35 ----A---- C:\Windows\SysWOW64\ntoskrnl.exe
2011-11-20 11:13:35 ----A---- C:\Windows\SysWOW64\ntkrnlpa.exe
2011-11-19 21:55:14 ----D---- C:\Users\Pepe\AppData\Roaming\Skype
2011-11-19 21:55:05 ----RD---- C:\Program Files (x86)\Skype
2011-11-19 21:55:01 ----D---- C:\ProgramData\Skype
2011-11-19 20:18:47 ----D---- C:\Users\Pepe\AppData\Roaming\Zoner
2011-11-19 20:18:46 ----D---- C:\ProgramData\Zoner
2011-11-19 20:13:59 ----D---- C:\Users\Pepe\AppData\Roaming\WinRAR
2011-11-19 20:13:46 ----D---- C:\Program Files (x86)\WinRAR
2011-11-19 18:01:18 ----D---- C:\Windows\Minidump
2011-11-19 15:00:06 ----D---- C:\CFLog
2011-11-19 14:58:29 ----D---- C:\Windows\SysWOW64\Macromed
2011-11-19 14:48:33 ----D---- C:\Program Files (x86)\Z8Games
2011-11-19 14:22:08 ----D---- C:\Users\Pepe\AppData\Roaming\.minecraft
2011-11-19 14:20:56 ----D---- C:\ProgramData\Sun
2011-11-19 14:20:55 ----D---- C:\Program Files (x86)\Common Files\Java
2011-11-19 14:20:46 ----A---- C:\Windows\SysWOW64\javaws.exe
2011-11-19 14:20:46 ----A---- C:\Windows\SysWOW64\javaw.exe
2011-11-19 14:20:46 ----A---- C:\Windows\SysWOW64\java.exe
2011-11-19 14:20:46 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2011-11-19 14:20:35 ----D---- C:\Program Files (x86)\Java
2011-11-19 14:03:54 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2011-11-19 14:03:50 ----D---- C:\Program Files (x86)\Microsoft Security Client
2011-11-19 13:58:17 ----D---- C:\ProgramData\TOSHIBA
2011-11-19 13:51:57 ----D---- C:\Program Files (x86)\Toshiba
2011-11-19 13:51:27 ----SHD---- C:\Windows\Installer
2011-11-19 13:42:43 ----D---- C:\Users\Pepe\AppData\Roaming\Macromedia
2011-11-19 13:42:43 ----D---- C:\Users\Pepe\AppData\Roaming\Adobe
2011-11-19 13:27:17 ----A---- C:\Windows\SysWOW64\wintrust.dll
2011-11-19 13:27:15 ----A---- C:\Windows\SysWOW64\cabview.dll
2011-11-19 13:21:15 ----D---- C:\Users\Pepe\AppData\Roaming\Identities
2011-11-19 13:20:56 ----SD---- C:\Users\Pepe\AppData\Roaming\Microsoft
2011-11-19 13:20:56 ----D---- C:\Users\Pepe\AppData\Roaming\Media Center Programs
2011-11-19 13:19:04 ----SHD---- C:\Recovery
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Šablony
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Plocha
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Oblíbené položky
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Nabídka Start
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Dokumenty
2011-11-19 13:19:03 ----SHD---- C:\ProgramData\Data aplikací
2011-11-19 13:14:52 ----D---- C:\Windows\SoftwareDistribution
2011-11-19 13:12:09 ----D---- C:\Windows\Prefetch
2011-11-19 13:11:57 ----ASH---- C:\pagefile.sys
2011-11-19 13:11:53 ----SHD---- C:\System Volume Information
2011-11-19 13:11:53 ----ASH---- C:\hiberfil.sys
2011-11-19 13:10:28 ----D---- C:\Windows\Panther

======List of files/folders modified in the last 1 month======

2011-11-20 21:42:32 ----RD---- C:\Program Files (x86)
2011-11-20 21:41:24 ----D---- C:\Windows\Temp
2011-11-20 21:37:35 ----D---- C:\Windows\System32
2011-11-20 21:37:35 ----D---- C:\Windows\inf
2011-11-20 21:36:15 ----SD---- C:\ProgramData\Microsoft
2011-11-20 20:29:17 ----D---- C:\Windows\Microsoft.NET
2011-11-20 20:29:08 ----RSD---- C:\Windows\assembly
2011-11-20 18:23:39 ----D---- C:\Windows\winsxs
2011-11-20 18:20:14 ----D---- C:\Windows\SysWOW64
2011-11-20 18:17:24 ----D---- C:\Windows\SysWOW64\cs-CZ
2011-11-20 18:17:22 ----D---- C:\Windows
2011-11-20 18:17:22 ----D---- C:\Program Files (x86)\Common Files\System
2011-11-20 18:17:17 ----D---- C:\Windows\ehome
2011-11-20 18:17:17 ----D---- C:\Program Files (x86)\Windows Mail
2011-11-20 18:17:15 ----RSD---- C:\Windows\Fonts
2011-11-20 18:17:13 ----D---- C:\Windows\SysWOW64\migration
2011-11-20 18:17:13 ----D---- C:\Program Files (x86)\Internet Explorer
2011-11-20 18:16:59 ----D---- C:\Windows\AppPatch
2011-11-20 18:16:54 ----D---- C:\Program Files (x86)\Windows Media Player
2011-11-19 21:55:01 ----HD---- C:\ProgramData
2011-11-19 20:15:12 ----RD---- C:\Program Files
2011-11-19 14:20:55 ----D---- C:\Program Files (x86)\Common Files
2011-11-19 13:23:42 ----D---- C:\Windows\Tasks
2011-11-19 13:23:33 ----D---- C:\Windows\Logs
2011-11-19 13:21:12 ----SHD---- C:\$Recycle.Bin
2011-11-19 13:20:56 ----RD---- C:\Users
2011-11-19 13:18:46 ----D---- C:\Windows\rescache
2011-11-19 13:18:13 ----D---- C:\Windows\debug
2011-11-19 13:09:57 ----D---- C:\Windows\Setup

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS []
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys []
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys []
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys []
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys []
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys []
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys []
R3 toshidpt;Bluetooth HID Port; C:\Windows\system32\drivers\Toshidpt.sys []
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys []
R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys []
R3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys []
R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys []
R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys []
S3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys []
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys []
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys []
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys []
S3 X6va005;X6va005; \??\C:\Users\Pepe\AppData\Local\Temp\0057532.tmp []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe []
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 12784]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 288272]
R3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2011-04-01 198064]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------

chodnik74 · #2 Příspěvek od **chodnik74** » 20 lis 2011 22:38

Dobrý večer

Log vypadá čistý.. jsou s pc nějaké problémy?

chodnik74 · #3 Příspěvek od **chodnik74** » 20 lis 2011 22:39

Akorát aktualizujte Service pack 1 a IE 9

Pepe.killer · #4 Příspěvek od **Pepe.killer** » 20 lis 2011 23:00

Díky moc, problémy až na ten kurzor a občasné samovolné spuštění windows media playeru, jak jsem psal, nejsou. IE nepoužívám a Service pack už je snad aktualizován s dalšími aktualizacemi.

chodnik74 · #5 Příspěvek od **chodnik74** » 20 lis 2011 23:05

Internet Explorer aktualizujte ikdyž nepoužíváte, zlepšujete tím zabezpečení systému a Service Pack 1 není nainstalovaný.. budete muset ručně

Service Pack 1 ( podle verze systému x86 = 32 bitový a x64 je 64 bitový systém)

Internet Explorer 9

Můžeme preventivně mrknou na havěť, ale nic asi nenajdeme

Malwarebytes' Anti-Malware Obrázek

Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
Objeví se vám log,který mi sem vložte
NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

Pepe.killer · #6 Příspěvek od **Pepe.killer** » 20 lis 2011 23:19

Tak jsem to projel, žádný malware. Ještě jednou díky moc

chodnik74 · #7 Příspěvek od **chodnik74** » 21 lis 2011 05:51

Mohu pro vás ještě něco v tuto chvíli udělat?

Pepe.killer · #8 Příspěvek od **Pepe.killer** » 21 lis 2011 10:08

S timto pc jiz ne, dekuji moc, ale ma jeste druhy pc, kde po startu trva hrozne dlouho nacteni programu. Casto se pocitac take seka. mam log hodit sem nebo zalo8zit novy topic jinde?

chodnik74 · #9 Příspěvek od **chodnik74** » 21 lis 2011 12:03

Zalozte si novy topic. vzdy jeden pc = jeden topic. dekuji

VIRY.CZ

Preventivka po dlouhé době

Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době

Re: Preventivka po dlouhé době