VirusTotal

[Milan12300]

Dobrý den zase mi po dlouhé době zamrzal PC tak sem ho projel avastem a psal že je všechno OK až na jeden soubor - který je zaheslovaný takže se k němu nedostane. Tak jsem ho dal na VirusTotal a 5 ze 42 antivirů něco našlo https://www.virustotal.com/file/dcd5333 ... 330257553/ Cesta k souboru: C:\Windows\System32\mfc45.dll Co s tím ?
Tady je log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by X at 2012-02-26 13:11:11
Microsoft Windows 7 Professional
System drive C: has 18 GB (12%) free of 153 GB
Total RAM: 2048 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:11:30, on 26.2.2012
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Seznam.cz\postak.exe
C:\Program Files\DAP10\DAP.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\The KMPlayer\KMPlayer.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\X\Downloads\RSIT.exe
C:\Program Files\trend micro\X.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25432;
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: LinkVerifierBHO - {D5974A72-C81C-4DC3-BE77-A8A7BBC8864E} - C:\Program Files\DAP10\LinkVerifier.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\postak.exe" -s
O4 - HKCU\..\Run: [DAP 10 Alpha] "C:\Program Files\DAP10\DAP.EXE" /STARTUP
O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP10\DAP.EXE" /STARTUP
O4 - Startup: Lingea Update Center.lnk = C:\Program Files\Common Files\Lingea Shared\luc.exe
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP10\dapextie.htm
O8 - Extra context menu item: &Verify with DAP - C:\Program Files\DAP10\dapverify.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP10\dapextie2.htm
O18 - Protocol: toolbarchrome - (no CLSID) - (no file)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 3237 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5974A72-C81C-4DC3-BE77-A8A7BBC8864E}]
SpeedBit Link Verification Helper - C:\Program Files\DAP10\LinkVerifier.dll [2012-02-10 422024]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-02-23 4031368]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"Seznam Postak"=C:\Program Files\Seznam.cz\postak.exe [2011-05-25 491040]
"DAP 10 Alpha"=C:\Program Files\DAP10\DAP.EXE [2012-02-10 3631280]
"DownloadAccelerator"=C:\Program Files\DAP10\DAP.EXE [2012-02-10 3631280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax]
C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe -agent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDVCPL]
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-12-13 11487848]

C:\Users\X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Lingea Update Center.lnk - C:\Program Files\Common Files\Lingea Shared\luc.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=2
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoInstrumentation"=1
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.MKVC"=KMVIDC32.DLL
"VIDC.FFDS"=ff_vfw.dll
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"vidc.tscc"=tsccvid.dll
"msacm.l3codec"=l3codecp.acm
"vidc.MPG4"=MPG4C32.dll
"vidc.MP42"=MPG4C32.dll
"vidc.MP43"=MPG4C32.dll
"VIDC.FPS1"=frapsvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - "%1" /S "%3"

======List of files/folders created in the last 1 month======

2012-02-26 13:11:13 ----D---- C:\Program Files\trend micro
2012-02-26 13:11:11 ----D---- C:\rsit
2012-02-25 21:57:10 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2012-02-25 21:57:09 ----A---- C:\Windows\system32\drivers\aswSP.sys
2012-02-25 21:57:04 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2012-02-25 21:57:01 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2012-02-25 21:57:00 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2012-02-25 21:56:57 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2012-02-25 21:56:28 ----A---- C:\Windows\system32\aswBoot.exe
2012-02-25 21:56:28 ----A---- C:\Windows\avastSS.scr
2012-02-24 17:08:40 ----D---- C:\Pokus
2012-02-20 22:27:39 ----D---- C:\ATF
2012-02-16 17:10:17 ----D---- C:\Program Files\uTorrent
2012-02-16 17:09:37 ----D---- C:\Users\X\AppData\Roaming\uTorrent
2012-02-15 19:15:02 ----D---- C:\Program Files\Common Files\Lingea Shared
2012-02-15 19:14:25 ----D---- C:\Program Files\Lingea
2012-02-12 12:48:43 ----D---- C:\Users\X\AppData\Roaming\Wise Registry Cleaner
2012-02-12 12:48:12 ----D---- C:\Program Files\Wise Registry Cleaner
2012-02-11 22:34:27 ----D---- C:\ProgramData\Apple
2012-02-11 22:18:01 ----A---- C:\Windows\system32\spořič MEDIA TRADE.scr
2012-02-10 18:16:16 ----D---- C:\ProgramData\SpeedBit
2012-02-10 18:16:02 ----D---- C:\Program Files\DAP10
2012-02-10 17:59:57 ----D---- C:\Users\X\AppData\Roaming\IDM
2012-02-09 23:10:40 ----SHD---- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2012-02-09 22:49:33 ----A---- C:\Windows\system32\drivers\hcdriver.sys
2012-02-07 19:58:55 ----D---- C:\ProgramData\Nero
2012-02-06 16:36:52 ----A---- C:\ntuser.dat
2012-02-04 18:57:43 ----D---- C:\Users\X\AppData\Roaming\Nero
2012-02-04 00:22:40 ----A---- C:\Windows\system32\nvvsvc.exe
2012-02-04 00:22:40 ----A---- C:\Windows\system32\nvshext.dll
2012-02-04 00:22:39 ----A---- C:\Windows\system32\nvsvc.dll
2012-02-04 00:22:39 ----A---- C:\Windows\system32\nvcpl.dll
2012-02-04 00:22:38 ----A---- C:\Windows\system32\nvmctray.dll
2012-02-04 00:22:31 ----A---- C:\Windows\system32\easyupdatusapiu.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\OpenCL.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvoglv32.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvcuvid.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvcuda.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvcompiler.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\nvapi.dll
2012-02-04 00:14:45 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-02-03 13:47:30 ----A---- C:\Windows\system32\WdfCoInstaller01007.dll
2012-02-03 12:40:54 ----A---- C:\Windows\system32\WavesLib.dll
2012-02-03 12:40:54 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\tosade.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\TepeqAPO.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\tadefxapo2.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\tadefxapo.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\SRSWOW.dll
2012-02-03 12:40:53 ----A---- C:\Windows\system32\SRSTSXT.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SRSTSHD.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SRSHP360.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SFSS_APO.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SFNHK.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SFCOM.dll
2012-02-03 12:40:52 ----A---- C:\Windows\system32\SFAPO.dll
2012-02-03 12:40:50 ----A---- C:\Windows\system32\RtkPgExt.dll
2012-02-03 12:40:50 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2012-02-03 12:40:49 ----A---- C:\Windows\system32\RtkCoLDR.dll
2012-02-03 12:40:49 ----A---- C:\Windows\system32\RtkCoInstII.dll
2012-02-03 12:40:48 ----A---- C:\Windows\system32\RtkApoApi.dll
2012-02-03 12:40:48 ----A---- C:\Windows\system32\RtkAPO.dll
2012-02-03 12:40:46 ----A---- C:\Windows\system32\RTEEP32A.dll
2012-02-03 12:40:46 ----A---- C:\Windows\system32\RTEEL32A.dll
2012-02-03 12:40:46 ----A---- C:\Windows\system32\RTEEG32A.dll
2012-02-03 12:40:45 ----A---- C:\Windows\system32\RTEED32A.dll
2012-02-03 12:40:45 ----A---- C:\Windows\system32\RP3DHT32.dll
2012-02-03 12:40:45 ----A---- C:\Windows\system32\RP3DAA32.dll
2012-02-03 12:40:45 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2012-02-03 12:40:44 ----A---- C:\Windows\system32\RCoRes.dat
2012-02-03 12:40:44 ----A---- C:\Windows\system32\R4EEP32A.dll
2012-02-03 12:40:44 ----A---- C:\Windows\system32\R4EEL32A.dll
2012-02-03 12:40:44 ----A---- C:\Windows\system32\R4EEG32A.dll
2012-02-03 12:40:44 ----A---- C:\Windows\system32\R4EED32A.dll
2012-02-03 12:40:43 ----A---- C:\Windows\system32\R4EEA32A.dll
2012-02-03 12:40:43 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2012-02-03 12:40:43 ----A---- C:\Windows\system32\MaxxAudioRealtek2.dll
2012-02-03 12:40:43 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2012-02-03 12:40:42 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-02-03 12:40:42 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-02-03 12:40:42 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-02-03 12:40:42 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2012-02-03 12:40:41 ----A---- C:\Windows\system32\KAAPORT.dll
2012-02-03 12:40:41 ----A---- C:\Windows\system32\FMAPO.dll
2012-02-03 12:40:40 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2012-02-03 12:40:40 ----A---- C:\Windows\system32\DTSU2PREC32.dll
2012-02-03 12:40:40 ----A---- C:\Windows\system32\DTSU2PLFX32.dll
2012-02-03 12:40:40 ----A---- C:\Windows\system32\DTSU2PGFX32.dll
2012-02-03 12:40:39 ----A---- C:\Windows\system32\DTSSymmetryDLL.dll
2012-02-03 12:40:39 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2012-02-03 12:40:39 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSGFXAPONS.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2012-02-03 12:40:38 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2012-02-03 12:40:37 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2012-02-03 12:40:37 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2012-02-03 12:40:36 ----A---- C:\Windows\system32\AERTARen.dll
2012-02-03 12:40:36 ----A---- C:\Windows\system32\AERTACap.dll
2012-02-03 11:16:59 ----D---- C:\Temp
2012-02-02 17:17:55 ----D---- C:\Users\X\AppData\Roaming\ArcSoft
2012-02-02 17:17:47 ----D---- C:\ProgramData\ArcSoft
2012-02-02 17:17:36 ----D---- C:\Program Files\Common Files\ArcSoft
2012-02-02 17:16:15 ----D---- C:\Program Files\WinFast
2012-02-02 17:14:52 ----A---- C:\Windows\system32\drivers\wfeaglxt.sys
2012-01-31 20:23:37 ----D---- C:\Users\X\AppData\Roaming\My Battle for Middle-earth Files
2012-01-31 19:09:44 ----D---- C:\Program Files\EA GAMES
2012-01-29 10:26:16 ----D---- C:\Program Files\MAF-Soft
2012-01-27 19:31:45 ----A---- C:\Windows\system32\SSubTmr6.dll

======List of files/folders modified in the last 1 month======

2012-02-26 13:11:27 ----D---- C:\Windows\Prefetch
2012-02-26 13:11:23 ----D---- C:\Windows\temp
2012-02-26 13:11:13 ----RD---- C:\Program Files
2012-02-26 09:59:16 ----AD---- C:\ProgramData\Temp
2012-02-25 22:05:41 ----D---- C:\Windows\system32\Tasks
2012-02-25 21:57:10 ----D---- C:\Windows\system32\drivers
2012-02-25 21:56:54 ----SHD---- C:\Windows\Installer
2012-02-25 21:56:53 ----D---- C:\Config.Msi
2012-02-25 21:56:28 ----D---- C:\Windows\System32
2012-02-25 21:56:28 ----AD---- C:\Windows
2012-02-25 21:56:15 ----D---- C:\ProgramData\AVAST Software
2012-02-25 21:56:15 ----D---- C:\Program Files\AVAST Software
2012-02-25 21:56:09 ----SHD---- C:\System Volume Information
2012-02-25 21:42:54 ----D---- C:\Windows\inf
2012-02-24 13:27:35 ----D---- C:\Windows\system32\config
2012-02-23 23:35:19 ----D---- C:\ProgramData
2012-02-23 23:30:16 ----D---- C:\Program Files\Common Files
2012-02-23 22:57:36 ----D---- C:\Program Files\CCleaner
2012-02-23 22:37:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-23 15:53:08 ----D---- C:\Windows\system32\catroot
2012-02-23 15:53:07 ----D---- C:\Windows\system32\DriverStore
2012-02-20 22:52:26 ----DC---- C:\Windows\system32\DRVSTORE
2012-02-20 22:40:35 ----D---- C:\Windows\system32\catroot2
2012-02-11 21:01:40 ----SD---- C:\Users\X\AppData\Roaming\Microsoft
2012-02-10 18:36:58 ----D---- C:\Users\X\AppData\Roaming\DMCache
2012-02-09 22:55:31 ----D---- C:\Windows\system32\wbem
2012-02-09 22:54:53 ----D---- C:\Windows\registration
2012-02-08 17:42:37 ----D---- C:\Windows\winsxs
2012-02-07 19:59:54 ----D---- C:\Program Files\Common Files\Ahead
2012-02-06 22:16:43 ----D---- C:\Windows\SoftwareDistribution
2012-02-06 21:57:00 ----D---- C:\Windows\Tasks
2012-02-05 21:12:08 ----D---- C:\Windows\system32\drivers\etc
2012-02-04 19:01:21 ----D---- C:\Program Files\Nero
2012-02-04 19:01:15 ----D---- C:\Program Files\Common Files\Nero
2012-02-04 00:23:03 ----D---- C:\ProgramData\NVIDIA
2012-02-04 00:22:29 ----D---- C:\Program Files\NVIDIA Corporation
2012-02-04 00:22:14 ----D---- C:\ProgramData\NVIDIA Corporation
2012-02-03 19:07:48 ----D---- C:\Windows\Microsoft.NET
2012-02-03 14:32:42 ----D---- C:\Windows\Panther
2012-02-03 14:32:42 ----D---- C:\Windows\Logs
2012-02-03 14:32:42 ----D---- C:\Windows\debug
2012-02-03 14:18:18 ----RSD---- C:\Windows\assembly
2012-02-03 14:18:11 ----D---- C:\Program Files\Microsoft.NET
2012-02-03 14:18:08 ----D---- C:\Windows\system32\en-US
2012-02-03 14:08:45 ----D---- C:\Windows\system32\wfp
2012-02-03 14:08:44 ----D---- C:\Windows\system32\CodeIntegrity
2012-02-03 14:08:44 ----D---- C:\Windows\security
2012-02-03 14:08:27 ----D---- C:\Windows\system32\RTCOM
2012-02-03 10:07:05 ----D---- C:\Windows\Downloaded Program Files
2012-02-02 20:46:30 ----D---- C:\Program Files\Google
2012-02-02 17:40:11 ----D---- C:\WinFast WorkArea
2012-01-31 22:24:00 ----D---- C:\Users\X\AppData\Roaming\Vso

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2010-04-08 215656]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-02-11 473656]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-02-23 44376]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-02-23 610648]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-02-23 337112]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-02-23 53848]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-02-23 20696]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-02-23 57688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-12-13 3921448]
R3 NVNET;NVIDIA nForce Ethernet Driver; C:\Windows\system32\DRIVERS\nvmf6232.sys [2010-03-04 296936]
R3 ULCDRHlp;ULCDRHlp; C:\Windows\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 WFLR6654;WinFast DTV1800 H (XC3028); C:\Windows\system32\drivers\wfeaglxt.sys [2009-10-21 433920]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\Windows\system32\drivers\WmBEnum.sys [2010-04-27 22856]
R3 WmXlCore;Logitech Translation Layer Driver; C:\Windows\system32\drivers\WmXlCore.sys [2010-04-27 66632]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\drivers\AmdLLD.sys []
S3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\drivers\ApfiltrService.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 CrystalSysInfo;CrystalSysInfo; C:\Windows\system32\drivers\CrystalSysInfo.sys []
S3 DrvAgent32;DrvAgent32; \??\C:\Windows\system32\Drivers\DrvAgent32.sys [2011-12-09 23456]
S3 EagleNT;EagleNT; C:\Windows\system32\drivers\EagleNT.sys []
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2007-09-07 27672]
S3 gdrv;gdrv; C:\Windows\system32\drivers\gdrv.sys []
S3 hcdriver;EHCI Compliance Test Tool Device Driver; C:\Windows\system32\DRIVERS\hcdriver.sys [2012-01-27 50688]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-08-17 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2011-08-17 23168]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-13 347264]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys []
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-04-04 47360]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2011-08-17 8192]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-08-17 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\Windows\system32\drivers\WmVirHid.sys [2010-04-27 15048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-02-23 44768]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1136448]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2004-12-13 49152]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-05-16 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
S4 NetPipeActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
S4 NetTcpActivator;@%SystemRoot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2009-06-10 128848]
S4 nlsX86cc;NLS Service; C:\Windows\system32\NLSSRV32.EXE [2011-03-21 68928]
S4 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

[Rudy]

Popravdě řečeno tento soubor je někdy virus (combofix ho maže), ale zároveň ho někdy nechá napokoji. Stáhněte nový soubor odtud: http://translate.google.cz/translate?hl ... %3Dimvnsfd a rozbalte ho do C:\Windows\System32 . Potvrďte přepsání a restartujte PC. Tím by měla být jistota, že je tam nenakažený a nepoškozený soubor. Log jinak vypadá OK.

[Milan12300]

Takže abych to vzal popořádku... Nejprve jsem si stáhnul aplikaci z té stránky co jste psal: http://www.how-to-fix-errors.com/errors ... r-fix.html ..ta aplikace se jmenuje „SpeedyPC Pro“ nic jiného jsem tam ke stažení neobjevil. Ta aplikace co mi našla chyby tak jsem opravil a musim říct že to je docela užitěčná aplikace. No nic méně ten soubor se nezměnil pořád tam je tak jak tam byl předtím. V tom odkazu jsem opravdu žádný jiný soubor ke stažení nenašel. Hledal jsem to tam asi 2 minuty a nic... Poraďte mi prosím kde mám stáhnout ten nový soubor ve kterém ten vir neni? Díky

[Rudy]

http://www.advancedpctweaker.com/dll-er ... 5.dll.html . Klikněte na File name mfc45.dll .

[Milan12300]

Aplikaci jsem si stáhnul. Když mi projela registry - bylo tam 2500 chyb, pak jsem ještě si vyčistil... Nevim jestli sem tak blbej ale ten soubor se opět nezměnil Pořád je ten soubor stejnej. Proč tam na tom webu píšou že to umí opravit když to ještě neopravil. Nějaký další nápad ? Díky

[Rudy]

Pokud jste tím souborem překopíroval ten původní, neměl by už být problém. Byla to preventivní akce, kdyby ten soubor byl opravdu vir (i když o tom pochybuji - světové antiviry mlčely). Nedělejte nic jiného, než nakopírujte ten sražený na místo toho původního. Tím by měla být akce skončena.

[Milan12300]

Myslím že mi asi nerozumíte takže jinak. Když kliknu na File name mfc45.dll - tak se stahuje ta aplikace, ne žádný soubor ale ta aplikace (Advanced PC Tweaker. A v tý aplikaci ten soubor nijak změnit nebo upravit nejde.

[Rudy]

OK. Ve verzi pro Win7 opravdu tu knihovnu nelze stáhnout. Zkuste ji sehnat v jiném systému stejné verze a překopírujte. Já jsem sice přesvědčen o tom, že je soubor čistý, ale jistota je jistota.

[Milan12300]

Tak OK. Zkusím to. Já mám tenhle PC Win7 Professional - 32bit. Nevadí když to Zkopíruju ze svýho notebooku? Tam mam totiž Win7 Home Premium 64 bit. Myslíte že to vadit nebude ?

[Milan12300]

Tak jsem se kouknul na notebook a ten soubor tam nebyl jak to ?

[Rudy]

Tak jsem se kouknul na notebook a ten soubor tam nebyl jak to ?

On tam být nemusí, Záleží na konfiguraci.

[Milan12300]

Teď mě napadla jedna věc. Musí tam vůbec být ten soubor? Napadlo mě že bych ho smazal ale nebudu riskovat že mi pak počítač nenastartuje.. No napadlo mě že se ještě kouknu ve škole tam taky máme Win7 tak když to tam bude a to doufám že jo tak si to skopčim otamtut. Jinak díky moc za rady

[Rudy]

Předpokládám, že by naběhl, není to soubor jádra systému, možná by byla jen nějaká chybová hláška. Zrovna tak si myslím, že v něm virus nebude, antiviry světového významu ho pustily jako čistý. Navíc CF ho maže bez náhrady a nic zvláštního se neděje.

[Milan12300]

Ok děkuju moc

[Rudy]

Nemáte zač!