Microsoft Security Essentials - Ochrana v reálném čase

Zpráva

maruse1994 · #1 Příspěvek od **maruse1994** » 26 srp 2012 22:56

Dobrý večer,

Prosím pomozte mi.. Provedla jsem vlastní kontrolu v Microsoft Security Essentials disku C a D a ke konci mi to napsalo, že je nějaký problém, odklikla jsem to a kontrola pokračovala dál až do konce. Žádnou hrozbu to nenašlo. Ale najednou mi antivir zčervenal a píše, že není zapnuta ochrana v reálném čase. Přitom v nastavení zaplá je. Zkoušela jsem jí tedy vypnout zapnout ale nic se nezměnilo. Aktualizace spywaru a virů mám aktuální (tu dělám každej den). Nevím co s tím mám dělat. Teď mám stáhle bějaké hry a chtěla bych je nainstalovat, ale nevim jestli je to dobré, když nemám funkční antivir.
Na internetu jsem vyhledala program appremover, stáhla jsem si ho na plochu a spustila. Má to být jen pro kontrolu, jestli v PC nemám náhodou ještě nějaké antiviry. Klikla jsem na Remove Security Application. Chvilku jsem čekala a pak mi to našlo jen ten Microsoft Security Essentials. Ten odstranit nechci.
Nevim si s tím rady

.. Pomůže mi prosím rychle někdo??

Přikládám obrázek co mi Microsoft Security Essentials ukazuje (mám problém ho vložit sem, tak ho dám na leteckou poštu, doufám, že to nevadí).
http://leteckaposta.cz/340148524

Marek-26 · #2 Příspěvek od **Marek-26** » 27 srp 2012 00:45

Dobrý večer,

přetrvává problém i po restartu počítače?

maruse1994 · #3 Příspěvek od **maruse1994** » 27 srp 2012 01:03

Problém vyřešen!

Chtěla jsem ho restartovat, ale měla jsem tady ještě rozdělanou práci.
Děkuji

Marek-26 · #4 Příspěvek od **Marek-26** » 27 srp 2012 01:07

Není zač

patrně jen spadla služba MSE

pokud budete chtít, můžete vložil log z RSIT pro kontrolu

maruse1994 · #5 Příspěvek od **maruse1994** » 27 srp 2012 01:11

Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr Neuwirth at 2012-08-27 02:10:34
Microsoft Windows 7 Ultimate Service Pack 1
System drive C: has 358 GB (75%) free of 477 GB
Total RAM: 8191 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:10:37, on 27.8.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Petr Neuwirth.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Petr Neuwirth\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--
End of file - 6026 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe"
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {2331A0B6-03C3-4AC9-8A77-CB8553F3EEAE}
C:\Windows\Explorer.EXE
"C:\Program Files\CoreTemp64\Core Temp.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\nvvsvc.exe
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
taskhost.exe $(Arg0)
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Users\Petr Neuwirth\Documents\RSITx64-VIRY_CZ.exe"
C:\Windows\system32\wbem\wmiprvse.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Petr Neuwirth\AppData\Roaming\Mozilla\Firefox\Profiles\0lsw7byp.default

prefs.js - "browser.search.useDBForOrder" - ""
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.265 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Petr Neuwirth\AppData\Roaming\Mozilla\Firefox\Profiles\0lsw7byp.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-07-05 453544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-07-05 157616]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 1271168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\Program Files (x86)\uTorrent\uTorrent.exe [2012-07-03 895376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
C:\Windows\UpdReg.EXE [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-08-27 02:10:34 ----D---- C:\rsit
2012-08-25 14:00:05 ----D---- C:\Windows\Minidump
2012-08-17 02:32:19 ----D---- C:\Program Files (x86)\ConvertHelper
2012-08-16 20:46:28 ----D---- C:\ProgramData\Readon
2012-08-15 09:38:00 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-08-15 09:38:00 ----A---- C:\Windows\system32\mshtmled.dll
2012-08-15 09:37:59 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-08-15 09:37:59 ----A---- C:\Windows\SYSWOW64\url.dll
2012-08-15 09:37:59 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-08-15 09:37:59 ----A---- C:\Windows\system32\url.dll
2012-08-15 09:37:59 ----A---- C:\Windows\system32\iertutil.dll
2012-08-15 09:37:58 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-08-15 09:37:58 ----A---- C:\Windows\system32\urlmon.dll
2012-08-15 09:37:57 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2012-08-15 09:37:57 ----A---- C:\Windows\system32\ieUnatt.exe
2012-08-15 09:37:57 ----A---- C:\Windows\system32\ieui.dll
2012-08-15 09:37:56 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-08-15 09:37:56 ----A---- C:\Windows\system32\jscript9.dll
2012-08-15 09:37:55 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-08-15 09:37:55 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-08-15 09:37:55 ----A---- C:\Windows\system32\wininet.dll
2012-08-15 09:37:55 ----A---- C:\Windows\system32\jsproxy.dll
2012-08-15 09:37:54 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-08-15 09:37:54 ----A---- C:\Windows\system32\jscript.dll
2012-08-15 09:37:53 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-08-15 09:37:52 ----A---- C:\Windows\system32\mshtml.dll
2012-08-15 09:37:50 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-08-15 09:37:50 ----A---- C:\Windows\system32\ieframe.dll
2012-08-15 01:16:27 ----A---- C:\Windows\system32\win32spl.dll
2012-08-15 01:16:27 ----A---- C:\Windows\system32\spoolsv.exe
2012-08-15 01:16:26 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2012-08-15 01:16:26 ----A---- C:\Windows\splwow64.exe
2012-08-15 01:00:16 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\vlc
2012-08-15 00:56:09 ----D---- C:\Program Files (x86)\VideoLAN
2012-08-14 22:07:14 ----A---- C:\Windows\SYSWOW64\srclient.dll
2012-08-14 22:07:14 ----A---- C:\Windows\system32\srcore.dll
2012-08-14 22:07:13 ----A---- C:\Windows\SYSWOW64\netapi32.dll
2012-08-14 22:07:13 ----A---- C:\Windows\SYSWOW64\browcli.dll
2012-08-14 22:07:13 ----A---- C:\Windows\system32\netapi32.dll
2012-08-14 22:07:13 ----A---- C:\Windows\system32\browser.dll
2012-08-14 22:07:13 ----A---- C:\Windows\system32\browcli.dll
2012-08-14 22:07:12 ----A---- C:\Windows\system32\win32k.sys
2012-08-14 22:07:12 ----A---- C:\Windows\system32\localspl.dll
2012-08-12 00:40:56 ----D---- C:\Program Files (x86)\VS Revo Group
2012-08-11 02:10:30 ----A---- C:\Windows\SYSWOW64\ubiorbitapi_r2.dll
2012-08-11 01:30:11 ----D---- C:\ProgramData\Ubisoft
2012-08-09 12:36:44 ----D---- C:\Program Files (x86)\ICQ7M
2012-08-09 12:30:15 ----D---- C:\Program Files (x86)\FileHippo.com
2012-08-09 00:49:28 ----D---- C:\Program Files\trend micro
2012-08-09 00:00:12 ----SHD---- C:\$RECYCLE.BIN
2012-08-08 23:50:24 ----D---- C:\Windows\temp
2012-08-04 23:00:34 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\YourFileDownloader
2012-08-04 22:48:22 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\Ubisoft
2012-08-04 01:26:08 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2012-08-04 01:26:08 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\Adobe Mini Bridge CS5
2012-07-30 15:15:22 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2012-07-30 15:15:22 ----A---- C:\Windows\SYSWOW64\PnkBstrA.exe
2012-07-30 15:15:21 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\PunkBuster
2012-07-30 15:14:32 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2012-07-30 15:14:32 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2012-07-30 15:14:32 ----A---- C:\Windows\system32\d3dx10_40.dll
2012-07-30 15:14:32 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2012-07-30 15:14:31 ----A---- C:\Windows\system32\D3DX9_40.dll
2012-07-30 13:22:09 ----D---- C:\Program Files (x86)\Machinarium

======List of files/folders modified in the last 1 month======

2012-08-27 02:10:37 ----D---- C:\Windows\Prefetch
2012-08-27 02:09:54 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\uTorrent
2012-08-27 02:07:23 ----D---- C:\Windows\Tasks
2012-08-27 02:07:23 ----D---- C:\Windows\system32\Tasks
2012-08-27 02:07:19 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2012-08-27 02:02:57 ----D---- C:\Windows\system32\config
2012-08-27 02:01:39 ----AD---- C:\Windows
2012-08-27 01:59:36 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\Media Player Classic
2012-08-27 00:26:29 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\Skype
2012-08-27 00:13:05 ----D---- C:\Users\Petr Neuwirth\AppData\Roaming\ICQ
2012-08-26 20:21:26 ----SHD---- C:\System Volume Information
2012-08-26 18:13:10 ----RD---- C:\Program Files (x86)
2012-08-26 18:13:10 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-08-26 02:07:15 ----D---- C:\Windows\inf
2012-08-23 14:45:16 ----D---- C:\Windows\System32
2012-08-23 14:45:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-08-18 22:10:25 ----SHD---- C:\Windows\Installer
2012-08-16 20:46:28 ----D---- C:\ProgramData
2012-08-15 19:27:43 ----D---- C:\Windows\system32\catroot2
2012-08-15 11:19:19 ----D---- C:\Windows\SysWOW64
2012-08-15 10:19:22 ----D---- C:\Windows\debug
2012-08-15 09:45:38 ----D---- C:\Windows\winsxs
2012-08-15 09:44:19 ----RSD---- C:\Windows\Fonts
2012-08-15 09:44:19 ----D---- C:\Windows\SYSWOW64\migration
2012-08-15 09:44:19 ----D---- C:\Windows\system32\migration
2012-08-15 09:44:19 ----D---- C:\Program Files\Internet Explorer
2012-08-15 09:44:19 ----D---- C:\Program Files (x86)\Internet Explorer
2012-08-15 09:44:18 ----D---- C:\Windows\system32\DriverStore
2012-08-15 09:39:17 ----D---- C:\Windows\system32\catroot
2012-08-15 09:39:02 ----D---- C:\ProgramData\Microsoft Help
2012-08-15 09:35:33 ----A---- C:\Windows\system32\MRT.exe
2012-08-14 01:03:43 ----D---- C:\Windows\SoftwareDistribution
2012-08-12 01:17:07 ----D---- C:\Windows\Logs
2012-08-12 00:38:01 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-08-11 23:26:03 ----D---- C:\Windows\system32\drivers\etc
2012-08-11 02:24:23 ----D---- C:\Windows\SYSWOW64\directx
2012-08-11 01:59:48 ----RSD---- C:\Windows\assembly
2012-08-09 19:42:02 ----RD---- C:\Program Files
2012-08-08 23:50:25 ----D---- C:\Windows\system32\drivers
2012-08-08 23:48:00 ----A---- C:\Windows\system.ini
2012-08-08 23:45:06 ----D---- C:\Windows\SYSWOW64\drivers
2012-08-08 23:45:06 ----D---- C:\Windows\AppPatch
2012-08-08 23:45:05 ----D---- C:\Program Files (x86)\Common Files
2012-08-05 23:59:20 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2012-08-05 01:04:34 ----RD---- C:\Program Files (x86)\Skype
2012-08-04 03:32:32 ----D---- C:\Program Files (x86)\AIDA64 Extreme 2.50.2000
2012-08-04 02:33:36 ----D---- C:\Windows\system32\NDF
2012-07-30 15:15:21 ----D---- C:\Windows\system32\LogFiles

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-10-02 537112]
R0 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2009-07-18 109480]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 203888]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R3 ALSysIO;ALSysIO; \??\C:\Users\PETRNE~1\AppData\Local\Temp\ALSysIO64.sys []
R3 CT20XUT.SYS;CT20XUT.SYS; C:\Windows\System32\drivers\CT20XUT.SYS [2010-07-07 230488]
R3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2010-07-07 697816]
R3 CTEXFIFX.SYS;CTEXFIFX.SYS; C:\Windows\System32\drivers\CTEXFIFX.SYS [2010-07-07 1445976]
R3 CTHWIUT.SYS;CTHWIUT.SYS; C:\Windows\System32\drivers\CTHWIUT.SYS [2010-07-07 95320]
R3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2010-07-07 15960]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2010-07-07 213080]
R3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2010-07-07 118360]
R3 ha20x22k;Creative 20X2 HAL Driver; C:\Windows\system32\drivers\ha20x22k.sys [2010-07-07 1612888]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2010-07-07 179288]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2012-07-26 303616]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2012-07-26 35328]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 CT20XUT;CT20XUT; C:\Windows\system32\drivers\CT20XUT.SYS [2010-07-07 230488]
S3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2010-07-07 580696]
S3 CTEXFIFX;CTEXFIFX; C:\Windows\system32\drivers\CTEXFIFX.SYS [2010-07-07 1445976]
S3 CTHWIUT;CTHWIUT; C:\Windows\system32\drivers\CTHWIUT.SYS [2010-07-07 95320]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 ha20x2k;Creative 20X HAL Driver; C:\Windows\system32\drivers\ha20x2k.sys [2010-07-07 1567832]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 98688]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-21 20992]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [2010-11-21 88960]
S3 terminpt;Microsoft Remote Desktop Input Driver; C:\Windows\system32\drivers\terminpt.sys [2010-11-21 34816]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [2010-11-21 117248]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-01-19 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-02-12 286720]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 12600]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-07-30 75136]
R3 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-05-15 889664]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-05-30 79360]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-06-13 654848]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 291696]
S3 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\SysWOW64\nlssrv32.exe [2011-01-31 66560]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 31125880]
S4 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2012-04-24 390632]

-----------------EOF-----------------

Marek-26 · #6 Příspěvek od **Marek-26** » 27 srp 2012 10:08

Log je čistý, antivir běží

maruse1994 · #7 Příspěvek od **maruse1994** » 27 srp 2012 12:00

Super, děkuji mockrát

Marek-26 · #8 Příspěvek od **Marek-26** » 27 srp 2012 15:44

Není zač

VIRY.CZ

Microsoft Security Essentials - Ochrana v reálném čase

Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase

Re: Microsoft Security Essentials - Ochrana v reálném čase