Ahoj, před týdnem jsem si koupil nový ntb a do včerejška bylo vše bez problému. Pak začal blbnout Avast - hlásí chybu: Failed to loud language dll [1033\UILangRes.dll] a nejde ani spustit ani odinstalovat a ani nechrání pc. Zkoušel jsem obnovit systém do doby, kdy to bylo v pořádku ale nic. Notebook se začal spouštět podezřele pomalu a přestala fungovat tlačítka na zesílení či zeslabení hlasitosti (nereagují), měnit hlasitot jde pouze manuálně pomocí ikonky na liště.
Prosím o kontrolu logu a následnou pomoc. Děkuju mockrát
přikládám log z RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Meph6 at 2012-02-12 11:32:14
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 256 GB (82%) free of 313 GB
Total RAM: 6054 MB (68% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:32:29, on 12.2.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Windows\SysWOW64\ACEngSvr.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Windows\AsScrPro.exe
C:\ASUS.SYS\SIONExportService.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
D:\Programy\Firefox\firefox.exe
D:\Programy\Firefox\plugin-container.exe
C:\Program Files\trend micro\Meph6.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programy\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Programy\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Nuance PDF Reader-reminder] "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Cyberlink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [avast] "D:\Programy\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-21-2522459899-969540581-640915996-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2522459899-969540581-640915996-1000\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2522459899-969540581-640915996-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: FancyStart daemon.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Splashtop Meta Data Export Service (Splashtop MDES) - Splashtop Inc. - C:\ASUS.SYS\SIONExportService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Intel(R) Turbo Boost Technology Monitor 2.0 (TurboBoost) - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12756 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
C:\Windows\system32\WLANExt.exe 22521104
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
\??\C:\Windows\system32\conhost.exe "-21079081251767355985-30339140-1274457856138647818-288709422-8019324611051132365
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe"
"C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe"
"C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe"
"C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe"
"taskhost.exe"
taskeng.exe {3843E3D6-5601-4247-8B42-60F0B6744D70}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
C:\Windows\SysWOW64\ACEngSvr.exe -Embedding
"C:\Program Files\Intel\WiFi\bin\EvtEng.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Windows\AsScrPro.exe"
"C:\ASUS.SYS\SIONExportService.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
WLIDSvcM.exe 2868
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe"
"C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray
"C:\Windows\System32\rundll32.exe" "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" -EMBEDDING
"C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe" -Embedding
"C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\system32\sppsvc.exe
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"D:\Programy\Firefox\firefox.exe"
"D:\Programy\Firefox\plugin-container.exe" --channel=5116.d44b990.350752995 "C:\Windows\system32\Macromed\Flash\NPSWF32.dll" - -greomni "D:\Programy\Firefox\omni.ja" 5116 "\\.\pipe\gecko-crash-server-pipe.5116" plugin
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 536 540 548 65536 544
"C:\Users\Meph6\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}]
avast! WebRep - D:\Programy\Avast\aswWebRepIE64.dll [2011-11-28 963064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-08 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\Programy\Avast\aswWebRepIE.dll [2011-11-28 809040]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-08 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! WebRep - D:\Programy\Avast\aswWebRepIE64.dll [2011-11-28 963064]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\Programy\Avast\aswWebRepIE.dll [2011-11-28 809040]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2011-03-21 361984]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-08-16 2277480]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-05-05 2785064]
"IntelPAN"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2011-07-28 1935120]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2011-05-05 97064]
"BTMTrayAgent"=C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [2011-05-19 10365952]
"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-31 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-31 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-31 416024]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-11-09 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-08-16 12673128]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Nuance PDF Reader-reminder"=C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [2008-11-03 328992]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [2011-02-23 731472]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [2010-07-10 984400]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-22 5716608]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
"RemoteControl10"=C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
"UpdatePSTShortCut"=C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [2010-11-25 222504]
"UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"avast"=D:\Programy\Avast\avastUI.exe [2011-11-28 3744552]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
FancyStart daemon.lnk - C:\Windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-08-31 390144]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2011-03-28 249344]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDriveAutoRun"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2012-02-12 11:32:14 ----D---- C:\rsit
2012-02-12 11:32:14 ----D---- C:\Program Files\trend micro
2012-02-12 11:29:01 ----D---- C:\Windows\temp
2012-02-12 11:28:59 ----A---- C:\ComboFix.txt
2012-02-12 11:25:59 ----SHD---- C:\$RECYCLE.BIN
2012-02-12 11:15:17 ----A---- C:\Windows\zip.exe
2012-02-12 11:15:17 ----A---- C:\Windows\SWSC.exe
2012-02-12 11:15:17 ----A---- C:\Windows\SWREG.exe
2012-02-12 11:15:17 ----A---- C:\Windows\sed.exe
2012-02-12 11:15:17 ----A---- C:\Windows\PEV.exe
2012-02-12 11:15:17 ----A---- C:\Windows\NIRCMD.exe
2012-02-12 11:15:17 ----A---- C:\Windows\MBR.exe
2012-02-12 11:15:17 ----A---- C:\Windows\grep.exe
2012-02-12 11:15:09 ----D---- C:\Windows\ERDNT
2012-02-12 11:15:02 ----D---- C:\Qoobox
2012-02-11 22:41:40 ----D---- C:\Users\Meph6\AppData\Roaming\SoftGrid Client
2012-02-11 22:40:35 ----D---- C:\Program Files\Microsoft Office
2012-02-11 22:40:35 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client
2012-02-11 22:40:13 ----D---- C:\Users\Meph6\AppData\Roaming\TP
2012-02-11 20:51:25 ----D---- C:\ProgramData\ASUS
2012-02-11 19:49:25 ----D---- C:\Users\Meph6\AppData\Roaming\Nuance
2012-02-11 19:49:07 ----A---- C:\Windows\ATKPF.ini
2012-02-10 11:29:34 ----D---- C:\Users\Meph6\AppData\Roaming\RigNRoll_usa_ws
2012-02-10 11:29:16 ----A---- C:\Windows\system32\wrap_oal.dll
2012-02-10 11:29:15 ----D---- C:\Program Files (x86)\OpenAL
2012-02-10 11:29:15 ----A---- C:\Windows\SYSWOW64\wrap_oal.dll
2012-02-10 11:29:15 ----A---- C:\Windows\SYSWOW64\OpenAL32.dll
2012-02-10 11:29:15 ----A---- C:\Windows\system32\OpenAL32.dll
2012-02-10 11:29:12 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2012-02-10 11:29:12 ----A---- C:\Windows\system32\xactengine2_8.dll
2012-02-10 11:29:11 ----A---- C:\Windows\SYSWOW64\x3daudio1_2.dll
2012-02-10 11:29:11 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2012-02-10 11:29:11 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2012-02-10 11:29:11 ----A---- C:\Windows\system32\x3daudio1_2.dll
2012-02-10 11:29:11 ----A---- C:\Windows\system32\d3dx10_34.dll
2012-02-10 11:29:11 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2012-02-10 11:29:10 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-02-10 11:29:10 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2012-02-10 11:29:10 ----A---- C:\Windows\system32\xinput1_3.dll
2012-02-10 11:29:10 ----A---- C:\Windows\system32\d3dx9_34.dll
2012-02-10 11:29:09 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2012-02-10 11:29:09 ----A---- C:\Windows\system32\xactengine2_7.dll
2012-02-10 11:29:08 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2012-02-10 11:29:08 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2012-02-10 11:29:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2012-02-10 11:29:08 ----A---- C:\Windows\system32\d3dx9_33.dll
2012-02-10 11:29:08 ----A---- C:\Windows\system32\d3dx10_33.dll
2012-02-10 11:29:08 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2012-02-10 11:29:06 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2012-02-10 11:29:06 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2012-02-10 11:29:06 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2012-02-10 11:29:06 ----A---- C:\Windows\system32\xactengine2_6.dll
2012-02-10 11:29:06 ----A---- C:\Windows\system32\xactengine2_5.dll
2012-02-10 11:29:06 ----A---- C:\Windows\system32\d3dx10.dll
2012-02-10 11:29:04 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2012-02-10 11:29:04 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2012-02-10 11:29:04 ----A---- C:\Windows\system32\xactengine2_4.dll
2012-02-10 11:29:04 ----A---- C:\Windows\system32\x3daudio1_1.dll
2012-02-10 11:29:03 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2012-02-10 11:29:03 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-02-10 11:29:03 ----A---- C:\Windows\system32\xactengine2_3.dll
2012-02-10 11:29:03 ----A---- C:\Windows\system32\d3dx9_31.dll
2012-02-10 11:29:02 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2012-02-10 11:29:02 ----A---- C:\Windows\system32\xinput1_2.dll
2012-02-10 11:29:01 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2012-02-10 11:29:01 ----A---- C:\Windows\system32\xactengine2_2.dll
2012-02-10 11:29:00 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2012-02-10 11:29:00 ----A---- C:\Windows\system32\xinput1_1.dll
2012-02-10 11:28:58 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2012-02-10 11:28:58 ----A---- C:\Windows\system32\xactengine2_1.dll
2012-02-10 11:28:39 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2012-02-10 11:28:39 ----A---- C:\Windows\system32\d3dx9_30.dll
2012-02-10 11:28:36 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2012-02-10 11:28:36 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2012-02-10 11:28:36 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2012-02-10 11:28:36 ----A---- C:\Windows\system32\xactengine2_0.dll
2012-02-10 11:28:36 ----A---- C:\Windows\system32\x3daudio1_0.dll
2012-02-10 11:28:36 ----A---- C:\Windows\system32\d3dx9_29.dll
2012-02-10 11:28:35 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2012-02-10 11:28:35 ----A---- C:\Windows\system32\d3dx9_28.dll
2012-02-10 11:28:34 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2012-02-10 11:28:34 ----A---- C:\Windows\system32\d3dx9_27.dll
2012-02-10 11:28:32 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2012-02-10 11:28:32 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2012-02-10 11:28:32 ----A---- C:\Windows\system32\d3dx9_26.dll
2012-02-10 11:28:32 ----A---- C:\Windows\system32\d3dx9_25.dll
2012-02-10 11:28:29 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2012-02-10 11:28:29 ----A---- C:\Windows\system32\d3dx9_24.dll
2012-02-08 12:19:18 ----D---- C:\Users\Meph6\AppData\Roaming\Zeon
2012-02-08 11:26:03 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-02-08 10:28:15 ----D---- C:\Windows\Sun
2012-02-08 09:27:03 ----N---- C:\Windows\system32\MpSigStub.exe
2012-02-08 09:02:39 ----D---- C:\Windows\SYSWOW64\Wat
2012-02-08 09:02:38 ----D---- C:\Windows\system32\Wat
2012-02-08 08:19:45 ----D---- C:\ProgramData\Sun
2012-02-08 08:19:17 ----A---- C:\Windows\SYSWOW64\javaws.exe
2012-02-08 08:19:17 ----A---- C:\Windows\SYSWOW64\javaw.exe
2012-02-08 08:19:17 ----A---- C:\Windows\SYSWOW64\java.exe
2012-02-08 08:19:17 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2012-02-08 08:19:07 ----D---- C:\Program Files (x86)\Java
2012-02-08 08:06:53 ----D---- C:\Users\Meph6\AppData\Roaming\CyberLink
2012-02-08 07:54:03 ----A---- C:\Windows\system32\shell32.dll
2012-02-08 07:54:00 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-08 07:53:57 ----A---- C:\Windows\system32\tquery.dll
2012-02-08 07:53:57 ----A---- C:\Windows\system32\mssrch.dll
2012-02-08 07:53:56 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-02-08 07:53:56 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-02-08 07:53:56 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-02-08 07:53:56 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-02-08 07:53:55 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-02-08 07:53:55 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-02-08 07:53:55 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-02-08 07:53:55 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-02-08 07:53:55 ----A---- C:\Windows\system32\mssvp.dll
2012-02-08 07:53:55 ----A---- C:\Windows\system32\mssphtb.dll
2012-02-08 07:53:55 ----A---- C:\Windows\system32\mssph.dll
2012-02-08 07:53:54 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-02-08 07:53:54 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-02-08 07:53:54 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-02-08 07:53:54 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-02-08 07:53:54 ----A---- C:\Windows\system32\msscntrs.dll
2012-02-08 07:53:52 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-02-08 07:53:52 ----A---- C:\Windows\system32\xmllite.dll
2012-02-08 07:53:51 ----A---- C:\Windows\explorer.exe
2012-02-08 07:53:50 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-02-08 07:53:42 ----A---- C:\Windows\system32\esent.dll
2012-02-08 07:53:41 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-02-08 07:53:41 ----A---- C:\Windows\system32\fsutil.exe
2012-02-08 07:53:40 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\storport.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-02-08 07:53:40 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-02-08 07:53:36 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-02-08 07:53:29 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-02-08 07:53:29 ----A---- C:\Windows\system32\XpsPrint.dll
2012-02-08 07:53:28 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-02-08 07:52:52 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-02-08 07:52:51 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-02-08 07:52:50 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-02-08 07:52:50 ----A---- C:\Windows\system32\prevhost.exe
2012-02-08 07:52:17 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2012-02-08 07:52:17 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-02-07 22:10:49 ----D---- C:\ProgramData\Oberon Media
2012-02-07 21:58:03 ----A---- C:\Windows\system32\MRT.exe
2012-02-07 21:56:05 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-02-07 21:53:16 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-02-07 21:53:16 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-07 21:53:15 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-02-07 21:53:15 ----A---- C:\Windows\system32\iertutil.dll
2012-02-07 21:53:14 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-02-07 21:53:14 ----A---- C:\Windows\SYSWOW64\url.dll
2012-02-07 21:53:14 ----A---- C:\Windows\system32\urlmon.dll
2012-02-07 21:53:14 ----A---- C:\Windows\system32\url.dll
2012-02-07 21:53:13 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-02-07 21:53:13 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-07 21:53:13 ----A---- C:\Windows\system32\ieui.dll
2012-02-07 21:53:12 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-02-07 21:53:12 ----A---- C:\Windows\system32\wininet.dll
2012-02-07 21:53:10 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-02-07 21:53:10 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-02-07 21:53:10 ----A---- C:\Windows\system32\jscript9.dll
2012-02-07 21:53:09 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-02-07 21:53:09 ----A---- C:\Windows\system32\jscript.dll
2012-02-07 21:53:08 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-02-07 21:53:05 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-02-07 21:53:05 ----A---- C:\Windows\system32\mshtml.dll
2012-02-07 21:53:04 ----A---- C:\Windows\system32\ieframe.dll
2012-02-07 21:49:10 ----A---- C:\Windows\system32\KernelBase.dll
2012-02-07 21:49:09 ----A---- C:\Windows\system32\wow64win.dll
2012-02-07 21:49:09 ----A---- C:\Windows\system32\winsrv.dll
2012-02-07 21:49:09 ----A---- C:\Windows\system32\kernel32.dll
2012-02-07 21:49:08 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-02-07 21:49:08 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-02-07 21:49:08 ----A---- C:\Windows\system32\wow64.dll
2012-02-07 21:49:08 ----A---- C:\Windows\system32\conhost.exe
2012-02-07 21:49:07 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-02-07 21:49:07 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-02-07 21:49:07 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-02-07 21:49:07 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-02-07 21:49:07 ----A---- C:\Windows\system32\ntvdm64.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-02-07 21:49:06 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-02-07 21:49:06 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-02-07 21:49:06 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-02-07 21:49:06 ----A---- C:\Windows\system32\wow64cpu.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-02-07 21:49:05 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-02-07 21:49:04 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-02-07 21:49:03 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-02-07 21:49:03 ----A---- C:\Windows\SYSWOW64\user.exe
2012-02-07 21:48:24 ----A---- C:\Windows\system32\schannel.dll
2012-02-07 21:48:23 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-02-07 21:48:23 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-02-07 21:48:22 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-02-07 21:48:22 ----A---- C:\Windows\system32\webio.dll
2012-02-07 21:48:22 ----A---- C:\Windows\system32\sspicli.dll
2012-02-07 21:48:22 ----A---- C:\Windows\system32\lsass.exe
2012-02-07 21:48:22 ----A---- C:\Windows\system32\lsasrv.dll
2012-02-07 21:48:22 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-02-07 21:48:22 ----A---- C:\Windows\system32\drivers\cng.sys
2012-02-07 21:48:21 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-02-07 21:48:21 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-02-07 21:48:21 ----A---- C:\Windows\system32\sspisrv.dll
2012-02-07 21:48:21 ----A---- C:\Windows\system32\secur32.dll
2012-02-07 21:48:19 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-07 21:48:18 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-02-07 21:48:17 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-02-07 21:48:17 ----A---- C:\Windows\system32\drivers\srv.sys
2012-02-07 21:48:12 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-02-07 21:48:12 ----A---- C:\Windows\system32\poqexec.exe
2012-02-07 21:48:11 ----A---- C:\Windows\system32\psisdecd.dll
2012-02-07 21:48:10 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-02-07 21:48:08 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-02-07 21:48:05 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-02-07 21:48:05 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-02-07 21:48:05 ----A---- C:\Windows\system32\quartz.dll
2012-02-07 21:48:04 ----A---- C:\Windows\system32\qdvd.dll
2012-02-07 21:48:03 ----A---- C:\Windows\system32\odbccu32.dll
2012-02-07 21:48:03 ----A---- C:\Windows\system32\odbccr32.dll
2012-02-07 21:48:02 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-02-07 21:48:02 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-02-07 21:48:02 ----A---- C:\Windows\system32\odbctrac.dll
2012-02-07 21:48:02 ----A---- C:\Windows\system32\odbccp32.dll
2012-02-07 21:48:01 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-02-07 21:48:01 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-02-07 21:48:00 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-02-07 21:47:59 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-02-07 21:47:59 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-02-07 21:47:59 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-02-07 21:47:57 ----A---- C:\Windows\system32\csrsrv.dll
2012-02-07 21:47:55 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-02-07 21:47:55 ----A---- C:\Windows\system32\ntdll.dll
2012-02-07 21:47:42 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-02-07 21:47:42 ----A---- C:\Windows\system32\tzres.dll
2012-02-07 21:47:29 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-02-07 21:47:29 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-02-07 21:47:29 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-02-07 21:47:29 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-02-07 21:47:29 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-02-07 21:46:07 ----A---- C:\Windows\system32\inetcomm.dll
2012-02-07 21:46:06 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-02-07 21:45:52 ----A---- C:\Windows\system32\win32k.sys
2012-02-07 21:41:58 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-02-07 21:41:57 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-02-07 21:41:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-02-07 21:41:55 ----A---- C:\Windows\system32\EncDec.dll
2012-02-07 21:41:54 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-02-07 21:41:53 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-02-07 21:41:53 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-02-07 21:41:53 ----A---- C:\Windows\system32\oleaut32.dll
2012-02-07 21:41:53 ----A---- C:\Windows\system32\oleacc.dll
2012-02-07 21:41:23 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-02-07 21:41:23 ----A---- C:\Windows\system32\packager.dll
2012-02-07 21:28:55 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-02-07 21:27:25 ----D---- C:\Users\Meph6\AppData\Roaming\DAEMON Tools Lite
2012-02-07 21:27:21 ----D---- C:\ProgramData\DAEMON Tools Lite
2012-02-07 21:14:45 ----D---- C:\Users\Meph6\AppData\Roaming\WinRAR
2012-02-07 20:41:14 ----D---- C:\Users\Meph6\AppData\Roaming\Mozilla
2012-02-07 20:28:20 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-02-07 20:28:18 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-02-07 20:27:52 ----A---- C:\Windows\avastSS.scr
2012-02-07 20:27:51 ----A---- C:\Windows\SYSWOW64\aswBoot.exe
2012-02-07 20:27:42 ----D---- C:\ProgramData\AVAST Software
2012-02-07 20:17:55 ----D---- C:\Users\Meph6\AppData\Roaming\Macromedia
2012-02-07 20:17:54 ----D---- C:\Users\Meph6\AppData\Roaming\Adobe
2012-02-07 20:10:23 ----D---- C:\Users\Meph6\AppData\Roaming\ASUS WebStorage
2012-02-07 20:05:23 ----A---- C:\Windows\SYSWOW64\acovcnt.exe
2012-02-07 20:05:22 ----D---- C:\Users\Meph6\AppData\Roaming\Identities
2012-02-07 20:05:07 ----D---- C:\Users\Meph6\AppData\Roaming\Google
2012-02-07 20:04:44 ----D---- C:\ProgramData\FolderView
2012-02-07 20:04:43 ----HD---- C:\ASUS.DAT
2012-02-07 20:04:28 ----D---- C:\Users\Meph6\AppData\Roaming\Intel
2012-02-07 20:04:24 ----SD---- C:\Users\Meph6\AppData\Roaming\Microsoft
2012-02-07 20:04:24 ----D---- C:\Users\Meph6\AppData\Roaming\Media Center Programs
======List of files/folders modified in the last 1 month======
2012-02-12 11:32:14 ----RD---- C:\Program Files
2012-02-12 11:29:40 ----D---- C:\Windows\System32
2012-02-12 11:29:40 ----D---- C:\Windows\inf
2012-02-12 11:29:40 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-12 11:29:01 ----D---- C:\Windows\system32\drivers
2012-02-12 11:29:01 ----D---- C:\Windows
2012-02-12 11:27:02 ----A---- C:\Windows\SYSWOW64\log.txt
2012-02-12 11:25:09 ----D---- C:\Windows\system32\Tasks
2012-02-12 11:24:54 ----A---- C:\Windows\system.ini
2012-02-12 11:24:47 ----D---- C:\Windows\system32\drivers\etc
2012-02-12 11:24:36 ----D---- C:\ProgramData\NVIDIA
2012-02-12 11:24:24 ----D---- C:\Windows\system32\config
2012-02-12 11:23:34 ----D---- C:\Windows\winsxs
2012-02-12 11:22:00 ----D---- C:\Windows\SysWOW64
2012-02-12 11:22:00 ----D---- C:\ProgramData
2012-02-12 11:20:10 ----D---- C:\Windows\SYSWOW64\drivers
2012-02-12 11:20:10 ----D---- C:\Windows\AppPatch
2012-02-12 11:20:08 ----D---- C:\Program Files\Common Files
2012-02-12 11:20:08 ----D---- C:\Program Files (x86)\Common Files
2012-02-12 11:18:48 ----D---- C:\Windows\system32\catroot2
2012-02-12 11:14:06 ----D---- C:\Windows\system32\catroot
2012-02-12 11:12:01 ----SHD---- C:\System Volume Information
2012-02-12 11:05:17 ----D---- C:\Windows\rescache
2012-02-12 11:01:10 ----D---- C:\Windows\Tasks
2012-02-12 11:01:10 ----D---- C:\Windows\system32\wfp
2012-02-12 11:00:15 ----D---- C:\Program Files\Windows Sidebar
2012-02-12 11:00:15 ----D---- C:\Program Files\Windows Photo Viewer
2012-02-12 11:00:15 ----D---- C:\Program Files\Windows Media Player
2012-02-12 11:00:15 ----D---- C:\Program Files\Windows Mail
2012-02-12 11:00:15 ----D---- C:\Program Files\Windows Journal
2012-02-12 11:00:14 ----D---- C:\Program Files\Windows Defender
2012-02-12 11:00:14 ----D---- C:\Program Files\Common Files\System
2012-02-12 11:00:12 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-02-12 11:00:12 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2012-02-12 11:00:12 ----D---- C:\Program Files (x86)\Windows Media Player
2012-02-12 11:00:12 ----D---- C:\Program Files (x86)\Windows Mail
2012-02-12 11:00:11 ----D---- C:\Windows\servicing
2012-02-12 11:00:11 ----D---- C:\Windows\ehome
2012-02-12 11:00:11 ----D---- C:\Program Files (x86)\Windows Defender
2012-02-12 11:00:09 ----D---- C:\Windows\SYSWOW64\winrm
2012-02-12 11:00:09 ----D---- C:\Windows\SYSWOW64\sr-Latn-CS
2012-02-12 11:00:09 ----D---- C:\Windows\SYSWOW64\slmgr
2012-02-12 11:00:09 ----D---- C:\Windows\SYSWOW64\migwiz
2012-02-12 11:00:09 ----D---- C:\Windows\SYSWOW64\en
2012-02-12 11:00:03 ----D---- C:\Windows\SYSWOW64\en-US
2012-02-12 11:00:03 ----D---- C:\Windows\SYSWOW64\drivers\en-US
2012-02-12 10:59:58 ----D---- C:\Windows\SYSWOW64\WCN
2012-02-12 10:59:58 ----D---- C:\Windows\SYSWOW64\Printing_Admin_Scripts
2012-02-12 10:59:58 ----D---- C:\Windows\SYSWOW64\DriverStore
2012-02-12 10:59:58 ----D---- C:\Windows\SYSWOW64\Dism
2012-02-12 10:59:57 ----D---- C:\Windows\sr-Latn-CS
2012-02-12 10:59:57 ----D---- C:\Windows\en-US
2012-02-12 10:59:56 ----D---- C:\Windows\system32\winrm
2012-02-12 10:59:56 ----D---- C:\Windows\system32\sysprep
2012-02-12 10:59:56 ----D---- C:\Windows\system32\sr-Latn-CS
2012-02-12 10:59:56 ----D---- C:\Windows\system32\slmgr
2012-02-12 10:59:56 ----D---- C:\Windows\system32\oobe
2012-02-12 10:59:56 ----D---- C:\Windows\system32\migwiz
2012-02-12 10:59:56 ----D---- C:\Windows\system32\en
2012-02-12 10:59:56 ----D---- C:\Windows\system32\Boot
2012-02-12 10:59:51 ----D---- C:\Windows\system32\en-US
2012-02-12 10:59:45 ----D---- C:\Windows\system32\WCN
2012-02-12 10:59:45 ----D---- C:\Windows\system32\drivers\en-US
2012-02-12 10:59:45 ----D---- C:\Windows\system32\Dism
2012-02-12 10:59:44 ----D---- C:\Windows\system32\DriverStore
2012-02-12 10:59:43 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2012-02-12 10:59:29 ----D---- C:\Windows\system32\wbem
2012-02-12 10:55:13 ----D---- C:\ProgramData\P4G
2012-02-12 10:54:49 ----D---- C:\dvmexp
2012-02-12 10:53:57 ----D---- C:\Windows\registration
2012-02-12 10:51:15 ----SHD---- C:\Windows\Installer
2012-02-12 10:50:58 ----SD---- C:\ProgramData\Microsoft
2012-02-12 10:50:11 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-02-12 10:50:09 ----RD---- C:\Program Files (x86)
2012-02-11 19:49:25 ----D---- C:\ProgramData\Nuance
2012-02-11 17:58:55 ----D---- C:\Windows\Prefetch
2012-02-11 17:58:50 ----D---- C:\Windows\system32\wdi
2012-02-11 15:58:47 ----D---- C:\Windows\SYSWOW64\sl-SI
2012-02-11 15:58:15 ----D---- C:\Windows\system32\sl-SI
2012-02-11 15:55:40 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-02-11 15:55:09 ----D---- C:\Windows\system32\sk-SK
2012-02-11 15:52:24 ----D---- C:\Windows\SYSWOW64\ro-RO
2012-02-11 15:51:53 ----D---- C:\Windows\system32\ro-RO
2012-02-11 15:48:24 ----D---- C:\Windows\SYSWOW64\XPSViewer
2012-02-11 15:48:24 ----D---- C:\Windows\SYSWOW64\pl-PL
2012-02-11 15:48:24 ----D---- C:\Windows\SYSWOW64\MUI
2012-02-11 15:48:24 ----D---- C:\Windows\SYSWOW64\migration
2012-02-11 15:47:32 ----D---- C:\Windows\SYSWOW64\com
2012-02-11 15:47:32 ----D---- C:\Windows\IME
2012-02-11 15:47:27 ----D---- C:\Windows\system32\migration
2012-02-11 15:47:24 ----D---- C:\Windows\system32\MUI
2012-02-11 15:47:24 ----D---- C:\Windows\system32\drivers\UMDF
2012-02-11 15:47:08 ----D---- C:\Windows\system32\pl-PL
2012-02-11 15:45:57 ----D---- C:\Windows\system32\com
2012-02-11 15:42:17 ----D---- C:\Windows\SYSWOW64\hu-HU
2012-02-11 15:40:48 ----D---- C:\Windows\system32\hu-HU
2012-02-11 15:36:46 ----D---- C:\Windows\SYSWOW64\lv-LV
2012-02-11 15:36:16 ----D---- C:\Windows\system32\lv-LV
2012-02-11 15:34:00 ----D---- C:\Windows\SYSWOW64\lt-LT
2012-02-11 15:34:00 ----D---- C:\Windows\system32\lt-LT
2012-02-11 15:31:39 ----D---- C:\Windows\SYSWOW64\hr-HR
2012-02-11 15:31:06 ----D---- C:\Windows\system32\hr-HR
2012-02-11 15:28:03 ----D---- C:\Windows\SYSWOW64\et-EE
2012-02-11 15:27:28 ----D---- C:\Windows\system32\et-EE
2012-02-11 15:23:06 ----D---- C:\Windows\SYSWOW64\bg-BG
2012-02-11 15:22:16 ----D---- C:\Windows\system32\bg-BG
2012-02-11 15:17:24 ----D---- C:\Program Files\DVD Maker
2012-02-11 15:06:13 ----D---- C:\Windows\Logs
2012-02-10 11:28:58 ----RSD---- C:\Windows\assembly
2012-02-10 11:28:43 ----D---- C:\Windows\Microsoft.NET
2012-02-08 12:34:34 ----AD---- C:\ProgramData\Temp
2012-02-08 12:20:11 ----D---- C:\Windows\Panther
2012-02-08 12:20:11 ----D---- C:\Windows\debug
2012-02-08 12:12:24 ----D---- C:\Windows\system32\LogFiles
2012-02-08 11:58:05 ----A---- C:\Windows\system32\Defrag.ini
2012-02-08 11:28:37 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-02-08 11:28:37 ----D---- C:\Windows\system32\cs-CZ
2012-02-08 10:18:53 ----D---- C:\Windows\system32\NDF
2012-02-08 09:40:10 ----D---- C:\eSupport
2012-02-08 09:10:43 ----A---- C:\Windows\system32\AutoRunFilter.ini
2012-02-08 09:05:42 ----D---- C:\Windows\SYSWOW64\NV
2012-02-08 09:05:42 ----D---- C:\Windows\system32\NV
2012-02-08 09:03:49 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-02-08 09:02:43 ----RSD---- C:\Windows\Fonts
2012-02-08 08:59:29 ----D---- C:\ProgramData\Trend Micro
2012-02-08 08:06:57 ----D---- C:\ProgramData\CyberLink
2012-02-07 22:43:32 ----A---- C:\Windows\system32\ServiceFilter.ini
2012-02-07 22:36:30 ----D---- C:\ProgramData\Partner
2012-02-07 22:36:30 ----D---- C:\Program Files\Google
2012-02-07 22:36:30 ----D---- C:\Program Files (x86)\Google
2012-02-07 22:34:15 ----D---- C:\Program Files\Internet Explorer
2012-02-07 22:34:15 ----D---- C:\Program Files (x86)\Internet Explorer
2012-02-07 21:58:24 ----D---- C:\Program Files (x86)\ASUS
2012-02-07 21:58:24 ----D---- C:\AsusVibeData
2012-02-07 20:27:01 ----D---- C:\Windows\system32\restore
2012-02-07 20:07:46 ----D---- C:\ProgramData\ChangeFolderView
2012-02-07 20:04:23 ----RD---- C:\Users
2012-02-07 20:02:20 ----D---- C:\Recovery
2012-02-07 20:02:18 ----D---- C:\Windows\SoftwareDistribution
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-04-26 557848]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-06-09 25960]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-11-28 591192]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-02-07 283200]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-11-28 66904]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-30 16120]
R3 AiCharger;ASUS Charger Driver; C:\Windows\system32\DRIVERS\AiCharger.sys [2011-02-26 16768]
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys [2011-08-08 299008]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-01-27 125416]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-01-27 385512]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btmaudio;Intel Bluetooth Audio Service; C:\Windows\system32\drivers\btmaud.sys [2011-05-19 51712]
R3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys [2011-05-19 53248]
R3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [2011-11-15 327168]
R3 iBtFltCoex;iBtFltCoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys [2011-12-09 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-08-31 12306848]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-08-16 3056360]
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\DRIVERS\iwdbus.sys [2011-08-05 25496]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-08-24 76912]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2011-08-04 8604672]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-05-05 1439792]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys [2011-08-08 299008]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2011-03-18 74840]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys [2011-08-05 34200]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 31232]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2011-01-25 379520]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-01 1166848]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe [2011-09-08 92800]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-07-28 1517328]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-01-15 1839616]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-06 325656]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-05-27 1007208]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-27 1997416]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-07-28 844560]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 Splashtop MDES;Splashtop Meta Data Export Service; C:\ASUS.SYS\SIONExportService.exe [2011-05-11 338208]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-27 378472]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
R3 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [2009-04-17 247152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-30 149504]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-08 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problém s novým notebookem
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s novým notebookem
Zdravím!
Dáte-li log RSIT po skenu ComboFix, můžete si být jistý, že bude čistý, neboť CF zamete všechny případné stopy. Dejte log ComboFix (najdete ho v C:\combofix.txt).
Dáte-li log RSIT po skenu ComboFix, můžete si být jistý, že bude čistý, neboť CF zamete všechny případné stopy. Dejte log ComboFix (najdete ho v C:\combofix.txt).
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s novým notebookem
Omlouvám se. Našel jsem tu na foru podobný příspěvek, kdy měl někdo stejný problém s avastem tak jsem to zkusil vyřešit sám.
ComboFix 12-02-11.03 - Meph6 12.02.2012 11:16:46.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6054.3904 [GMT 1:00]
Spuštěný z: c:\users\Meph6\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Meph6\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\aswBoot.exe"
"c:\windows\system32\drivers\aavmker4.sys"
"c:\windows\system32\drivers\aswFsBlk.sys"
"c:\windows\system32\drivers\aswmon.sys"
"c:\windows\system32\drivers\aswmon2.sys"
"c:\windows\system32\drivers\aswRdr.sys"
"c:\windows\system32\drivers\aswSP.sys"
"c:\windows\system32\drivers\aswTdi.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\programdata\Roaming
c:\windows\AsDebug.log
c:\windows\system32\aswBoot.exe
c:\windows\system32\drivers\aswFsBlk.sys
c:\windows\system32\drivers\aswRdr.sys
c:\windows\system32\drivers\aswSP.sys
c:\windows\system32\drivers\aswTdi.sys
c:\windows\SysWow64\tmp4B34.tmp
c:\windows\SysWow64\tmp4B45.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ASWFSBLK
-------\Legacy_ASWTDI
-------\Service_aswFsBlk
-------\Service_aswTdi
-------\Service_avast! Antivirus
-------\Legacy_aswSP
-------\Service_aswSP
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-12 do 2012-02-12 )))))))))))))))))))))))))))))))
.
.
2012-02-12 10:22 . 2012-02-12 10:22 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-02-12 10:22 . 2012-02-12 10:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-11 21:40 . 2012-02-12 10:01 -------- d-----w- c:\program files (x86)\Microsoft Application Virtualization Client
2012-02-11 19:51 . 2012-02-11 19:51 -------- d-----w- c:\programdata\ASUS
2012-02-10 08:21 . 2012-01-17 03:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB1830B0-7FBD-4155-8CB9-A84D20E9FA7B}\mpengine.dll
2012-02-08 10:26 . 2012-02-08 10:26 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-02-08 09:28 . 2012-02-08 09:28 -------- d-----w- c:\windows\Sun
2012-02-08 08:27 . 2012-01-29 04:10 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-08 08:02 . 2012-02-08 08:02 -------- d-----w- c:\windows\SysWow64\Wat
2012-02-08 08:02 . 2012-02-08 08:02 -------- d-----w- c:\windows\system32\Wat
2012-02-08 07:19 . 2012-02-08 07:19 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-02-08 07:19 . 2012-02-08 07:19 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-02-08 07:19 . 2012-02-08 07:19 -------- d-----w- c:\program files (x86)\Java
2012-02-08 06:52 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2012-02-08 06:52 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2012-02-08 06:52 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2012-02-08 06:52 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2012-02-08 06:52 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2012-02-08 06:52 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2012-02-08 06:52 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2012-02-08 06:52 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-02-08 06:52 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2012-02-08 06:52 . 2011-04-28 03:55 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-02-08 06:52 . 2011-04-28 03:54 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2012-02-07 21:10 . 2012-02-07 21:10 -------- d-----w- c:\programdata\Oberon Media
2012-02-07 20:56 . 2012-02-07 20:56 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-02-07 20:49 . 2011-07-16 05:37 421888 ----a-w- c:\windows\system32\KernelBase.dll
2012-02-07 20:48 . 2011-11-17 06:35 340992 ----a-w- c:\windows\system32\schannel.dll
2012-02-07 20:47 . 2011-07-09 02:46 288768 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-02-07 20:46 . 2011-05-03 05:29 976896 ----a-w- c:\windows\system32\inetcomm.dll
2012-02-07 20:46 . 2011-05-03 04:30 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2012-02-07 20:45 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
2012-02-07 20:41 . 2011-06-23 04:33 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-02-07 20:41 . 2011-06-23 05:43 5561216 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-02-07 20:41 . 2011-06-23 04:33 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-02-07 20:41 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-02-07 20:41 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-02-07 20:41 . 2011-08-27 05:37 861696 ----a-w- c:\windows\system32\oleaut32.dll
2012-02-07 20:41 . 2011-08-27 05:37 331776 ----a-w- c:\windows\system32\oleacc.dll
2012-02-07 20:41 . 2011-08-27 04:26 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2012-02-07 20:41 . 2011-08-27 04:26 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2012-02-07 20:41 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-02-07 20:41 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-02-07 20:28 . 2012-02-07 20:28 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-02-07 20:27 . 2012-02-07 20:27 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-02-07 19:28 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-07 19:28 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-07 19:27 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
2012-02-07 19:27 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-07 19:27 . 2012-02-07 19:27 -------- d-----w- c:\programdata\AVAST Software
2012-02-07 19:05 . 2012-02-12 10:24 45056 ----a-w- c:\windows\SysWow64\acovcnt.exe
2012-02-07 19:04 . 2012-02-07 19:04 -------- d-----w- c:\programdata\FolderView
2012-02-07 19:04 . 2012-02-12 10:03 -------- d-----w- C:\ASUS.DAT
2012-02-07 19:04 . 2012-02-12 10:02 -------- d-----w- c:\users\Meph6
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-07 19:05 . 2010-06-24 18:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-09 18:45 . 2011-12-09 18:45 60416 ----a-w- c:\windows\system32\drivers\iBtFltCoex.sys
2011-12-09 18:34 . 2011-12-09 18:34 47616 ----a-w- c:\windows\system32\opphelper.dll
2011-11-17 06:35 . 2012-02-07 20:48 340992 ----a-w- c:\windows\system32\schannel.dll
2011-11-17 05:34 . 2012-02-07 20:48 224768 ----a-w- c:\windows\SysWow64\schannel.dll
2011-11-15 00:13 . 2011-11-15 00:13 327168 ----a-w- c:\windows\system32\drivers\btmhsf.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" [2008-11-03 328992]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe" [2011-02-23 731472]
"SonicMasterTray"="c:\program files (x86)\ASUS\SonicMaster\SonicMasterTray.exe" [2010-07-10 984400]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-07-21 5716608]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-24 1601536]
"RemoteControl10"="c:\program files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
"UpdatePSTShortCut"="c:\program files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2010-11-24 222504]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"avast"="d:\programy\Avast\avastUI.exe" [2011-11-28 3744552]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe [2011-11-9 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S1 aswSnx;aswSnx; [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-01 1166848]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\Common Files\InstantOn\InsOnSrv.exe [2011-09-08 92800]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-01-14 1839616]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-27 1997416]
S2 Splashtop MDES;Splashtop Meta Data Export Service;c:\asus.sys\SIONExportService.exe [2011-05-10 338208]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-27 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 20:50]
.
2012-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 20:50]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 134384 ------w- d:\programy\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41 220160 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41 220160 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2011-03-21 361984]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-16 2277480]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-31 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-31 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-31 416024]
"combofix"="c:\combofix\CF2113.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://asus.msn.com
mStart Page = hxxp://asus.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - c:\program files (x86)\Synaptics\SynTP\SynAsusAcpi.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\InstantOn\InsOnWMI.exe
c:\program files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
c:\program files (x86)\ASUS\Splendid\ACMON.exe
c:\windows\SysWOW64\ACEngSvr.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\AsScrPro.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
c:\program files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2012-02-12 11:28:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-02-12 10:28
.
Před spuštěním: Volných bajtů: 265 679 495 168
Po spuštění: Volných bajtů: 268 007 899 136
.
- - End Of File - - 0A5CCB7B9E6756D42575DFC46D79A5F4
ComboFix 12-02-11.03 - Meph6 12.02.2012 11:16:46.1.8 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.6054.3904 [GMT 1:00]
Spuštěný z: c:\users\Meph6\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Meph6\Desktop\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\system32\aswBoot.exe"
"c:\windows\system32\drivers\aavmker4.sys"
"c:\windows\system32\drivers\aswFsBlk.sys"
"c:\windows\system32\drivers\aswmon.sys"
"c:\windows\system32\drivers\aswmon2.sys"
"c:\windows\system32\drivers\aswRdr.sys"
"c:\windows\system32\drivers\aswSP.sys"
"c:\windows\system32\drivers\aswTdi.sys"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\FullRemove.exe
c:\programdata\Roaming
c:\windows\AsDebug.log
c:\windows\system32\aswBoot.exe
c:\windows\system32\drivers\aswFsBlk.sys
c:\windows\system32\drivers\aswRdr.sys
c:\windows\system32\drivers\aswSP.sys
c:\windows\system32\drivers\aswTdi.sys
c:\windows\SysWow64\tmp4B34.tmp
c:\windows\SysWow64\tmp4B45.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ASWFSBLK
-------\Legacy_ASWTDI
-------\Service_aswFsBlk
-------\Service_aswTdi
-------\Service_avast! Antivirus
-------\Legacy_aswSP
-------\Service_aswSP
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-12 do 2012-02-12 )))))))))))))))))))))))))))))))
.
.
2012-02-12 10:22 . 2012-02-12 10:22 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-02-12 10:22 . 2012-02-12 10:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-02-11 21:40 . 2012-02-12 10:01 -------- d-----w- c:\program files (x86)\Microsoft Application Virtualization Client
2012-02-11 19:51 . 2012-02-11 19:51 -------- d-----w- c:\programdata\ASUS
2012-02-10 08:21 . 2012-01-17 03:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BB1830B0-7FBD-4155-8CB9-A84D20E9FA7B}\mpengine.dll
2012-02-08 10:26 . 2012-02-08 10:26 -------- d-----w- c:\program files (x86)\Microsoft.NET
2012-02-08 09:28 . 2012-02-08 09:28 -------- d-----w- c:\windows\Sun
2012-02-08 08:27 . 2012-01-29 04:10 279656 ------w- c:\windows\system32\MpSigStub.exe
2012-02-08 08:02 . 2012-02-08 08:02 -------- d-----w- c:\windows\SysWow64\Wat
2012-02-08 08:02 . 2012-02-08 08:02 -------- d-----w- c:\windows\system32\Wat
2012-02-08 07:19 . 2012-02-08 07:19 -------- d-----w- c:\program files (x86)\Common Files\Java
2012-02-08 07:19 . 2012-02-08 07:19 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2012-02-08 07:19 . 2012-02-08 07:19 -------- d-----w- c:\program files (x86)\Java
2012-02-08 06:52 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2012-02-08 06:52 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2012-02-08 06:52 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2012-02-08 06:52 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2012-02-08 06:52 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2012-02-08 06:52 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2012-02-08 06:52 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2012-02-08 06:52 . 2011-02-18 10:51 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-02-08 06:52 . 2011-02-18 05:39 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2012-02-08 06:52 . 2011-04-28 03:55 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-02-08 06:52 . 2011-04-28 03:54 80384 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2012-02-07 21:10 . 2012-02-07 21:10 -------- d-----w- c:\programdata\Oberon Media
2012-02-07 20:56 . 2012-02-07 20:56 -------- d-----w- c:\program files (x86)\MSXML 4.0
2012-02-07 20:49 . 2011-07-16 05:37 421888 ----a-w- c:\windows\system32\KernelBase.dll
2012-02-07 20:48 . 2011-11-17 06:35 340992 ----a-w- c:\windows\system32\schannel.dll
2012-02-07 20:47 . 2011-07-09 02:46 288768 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-02-07 20:46 . 2011-05-03 05:29 976896 ----a-w- c:\windows\system32\inetcomm.dll
2012-02-07 20:46 . 2011-05-03 04:30 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2012-02-07 20:45 . 2011-11-24 04:52 3145216 ----a-w- c:\windows\system32\win32k.sys
2012-02-07 20:41 . 2011-06-23 04:33 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2012-02-07 20:41 . 2011-06-23 05:43 5561216 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-02-07 20:41 . 2011-06-23 04:33 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2012-02-07 20:41 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2012-02-07 20:41 . 2011-10-15 05:38 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2012-02-07 20:41 . 2011-08-27 05:37 861696 ----a-w- c:\windows\system32\oleaut32.dll
2012-02-07 20:41 . 2011-08-27 05:37 331776 ----a-w- c:\windows\system32\oleacc.dll
2012-02-07 20:41 . 2011-08-27 04:26 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2012-02-07 20:41 . 2011-08-27 04:26 233472 ----a-w- c:\windows\SysWow64\oleacc.dll
2012-02-07 20:41 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-02-07 20:41 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-02-07 20:28 . 2012-02-07 20:28 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-02-07 20:27 . 2012-02-07 20:27 -------- d-----w- c:\programdata\DAEMON Tools Lite
2012-02-07 19:28 . 2011-11-28 17:54 591192 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-02-07 19:28 . 2011-11-28 17:52 66904 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-02-07 19:27 . 2011-11-28 18:01 41184 ----a-w- c:\windows\avastSS.scr
2012-02-07 19:27 . 2011-11-28 18:01 199816 ----a-w- c:\windows\SysWow64\aswBoot.exe
2012-02-07 19:27 . 2012-02-07 19:27 -------- d-----w- c:\programdata\AVAST Software
2012-02-07 19:05 . 2012-02-12 10:24 45056 ----a-w- c:\windows\SysWow64\acovcnt.exe
2012-02-07 19:04 . 2012-02-07 19:04 -------- d-----w- c:\programdata\FolderView
2012-02-07 19:04 . 2012-02-12 10:03 -------- d-----w- C:\ASUS.DAT
2012-02-07 19:04 . 2012-02-12 10:02 -------- d-----w- c:\users\Meph6
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-07 19:05 . 2010-06-24 18:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-12-09 18:45 . 2011-12-09 18:45 60416 ----a-w- c:\windows\system32\drivers\iBtFltCoex.sys
2011-12-09 18:34 . 2011-12-09 18:34 47616 ----a-w- c:\windows\system32\opphelper.dll
2011-11-17 06:35 . 2012-02-07 20:48 340992 ----a-w- c:\windows\system32\schannel.dll
2011-11-17 05:34 . 2012-02-07 20:48 224768 ----a-w- c:\windows\SysWow64\schannel.dll
2011-11-15 00:13 . 2011-11-15 00:13 327168 ----a-w- c:\windows\system32\drivers\btmhsf.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Nuance PDF Reader-reminder"="c:\program files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" [2008-11-03 328992]
"ASUSWebStorage"="c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe" [2011-02-23 731472]
"SonicMasterTray"="c:\program files (x86)\ASUS\SonicMaster\SonicMasterTray.exe" [2010-07-10 984400]
"ATKOSD2"="c:\program files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe" [2011-07-21 5716608]
"ATKMEDIA"="c:\program files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe" [2010-10-07 170624]
"HControlUser"="c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe" [2009-06-19 105016]
"Wireless Console 3"="c:\program files (x86)\ASUS\Wireless Console 3\wcourier.exe" [2010-09-24 1601536]
"RemoteControl10"="c:\program files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe" [2010-02-03 87336]
"UpdatePSTShortCut"="c:\program files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2010-11-24 222504]
"UpdateLBPShortCut"="c:\program files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"UpdateP2GoShortCut"="c:\program files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"avast"="d:\programy\Avast\avastUI.exe" [2011-11-28 3744552]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe [2011-11-9 12862]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer3"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys [x]
R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [x]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 136176]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2011-07-28 340240]
R3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\DRIVERS\SiSG664.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S1 aswSnx;aswSnx; [x]
S1 ATKWMIACPIIO;ATKWMIACPI Driver;c:\program files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AFBAgent;AFBAgent;c:\windows\system32\FBAgent.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-09-01 1166848]
S2 ASMMAP64;ASMMAP64;c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
S2 ASUS InstantOn;ASUS InstantOn Service;c:\program files (x86)\Common Files\InstantOn\InsOnSrv.exe [2011-09-08 92800]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-05-19 921664]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [2011-05-19 995392]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-06-03 134928]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-01-14 1839616]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-27 1997416]
S2 Splashtop MDES;Splashtop Meta Data Export Service;c:\asus.sys\SIONExportService.exe [2011-05-10 338208]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-27 378472]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2011-05-19 1335360]
S3 btmaudio;Intel Bluetooth Audio Service;c:\windows\system32\drivers\btmaud.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 20:50]
.
2012-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-02-07 20:50]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 134384 ------w- d:\programy\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_B]
@="{6D4133E5-0742-4ADC-8A8C-9303440F7190}"
[HKEY_CLASSES_ROOT\CLSID\{6D4133E5-0742-4ADC-8A8C-9303440F7190}]
2010-09-02 08:41 220160 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AsusWSShellExt_O]
@="{64174815-8D98-4CE6-8646-4C039977D808}"
[HKEY_CLASSES_ROOT\CLSID\{64174815-8D98-4CE6-8646-4C039977D808}]
2010-09-02 08:41 220160 ----a-w- c:\program files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSShellExt64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2011-03-21 361984]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-16 2277480]
"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-28 1935120]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-05-19 10365952]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-31 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-31 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-31 416024]
"combofix"="c:\combofix\CF2113.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://asus.msn.com
mStart Page = hxxp://asus.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-SynAsusAcpi - c:\program files (x86)\Synaptics\SynTP\SynAsusAcpi.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10k.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
c:\program files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
c:\program files (x86)\Common Files\InstantOn\InsOnWMI.exe
c:\program files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
c:\program files (x86)\ASUS\Splendid\ACMON.exe
c:\windows\SysWOW64\ACEngSvr.exe
c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE
c:\windows\AsScrPro.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
c:\program files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Celkový čas: 2012-02-12 11:28:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-02-12 10:28
.
Před spuštěním: Volných bajtů: 265 679 495 168
Po spuštění: Volných bajtů: 268 007 899 136
.
- - End Of File - - 0A5CCB7B9E6756D42575DFC46D79A5F4
-
Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s novým notebookem
CF vám smazal půlku důležitých souborů Avastu. To je jeden z důvodů, proč nedoporučujeme laikům používat ComboFix. Odinstalujte Avast pomocí utility: http://www.avast.com/cs-cz/uninstall-utility a pak ho znovu nainstalujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s novým notebookem
Tak jsem avast odinstaloval pomocí utility, znovu nainstaloval a opět hlásí, že počítač není chráněn, viz obrázky...
-
Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s novým notebookem
Zkuste obnovu systému k datu, kdy korektně fungoval a postup opakujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Problém s novým notebookem
Tak a vše funguje jak má, ale přesto by mě zajímalo, čím to mohlo být, abych se tomu příště vyvaroval. Obnovovat to pokaždé uplně na začátek se mi zase nechce 
-
Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problém s novým notebookem
OK. Něco poškodilo v systému instalaci antiviru. Jelikož jsme tu podobný problém dosud neměli, obraťte se na tech podporu Avastu. My to, bohužel nevíme. Chyba byla někde v registry a obnova je vrátila do stavu před tou chybou.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?