zde je log z Rsit
Logfile of random's system information tool 1.09 (written by random/random)
Run by Lucinka at 2013-01-06 23:03:58
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 41 GB (51%) free of 81 GB
Total RAM: 1022 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:04:11, on 6.1.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\AVC Finger-sensing Pad Driver\FsCp.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\Explorer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Lucinka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5HZBX7J2\RSIT.exe
C:\Program Files\trend micro\Lucinka.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://start.alawarhry.cz/?pid=6
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\toolbar\toolbar.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [fscp] "C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll (HKCU)
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll (HKCU)
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll (HKCU)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {444785F1-DE89-4295-863A-D46C3A781394} (UnityWebPlayer Control) -
http://webplayer.unity3d.com/download_w ... Player.cab
O16 - DPF: {AAD68411-5B98-11D3-9B52-00001C0007B3} (EonX 4.0.1) -
http://download.eonreality.com/eonx/4_0_1/eonx.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (file missing)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: FspadSvc - Unknown owner - C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 6035 bytes
=========Mozilla firefox=========
ProfilePath - C:\Users\Lucinka\AppData\Roaming\Mozilla\Firefox\Profiles\xz6mo8fh.default
prefs.js - "extensions.enabledItems" - "{23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.1.94, {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.1.94, {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1319, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.1"
prefs.js - "browser.startup.homepage" - "
http://start.alawarhry.cz/?pid=6"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"=C:\Program Files\AVG\AVG10\Firefox4\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.135 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_135.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\Lucinka\AppData\Roaming\Mozilla\Firefox\Profiles\xz6mo8fh.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\listicka.dll [2012-09-19 1453624]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Users\Lucinka\AppData\Roaming\Seznam.cz\bin\toolbar\toolbar.dll [2012-09-19 182840]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2006-11-09 3784704]
"fscp"=C:\Program Files\AVC Finger-sensing Pad Driver\fscp.exe [2006-11-11 1006592]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-09-12 947176]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2012-09-13 1009288]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-05-08 13605408]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Seznam Postak"=C:\Program Files\Seznam.cz\bin\postak.exe [2012-01-10 491040]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\Windows\system32\NvCpl.dll [2009-05-08 13605408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]
C:\Windows\system32\nvsvc.dll [2009-05-08 735776]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerManager]
C:\Program Files\Power Manager\PM.exe [2006-11-06 26112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2013-01-06 21:32:10 ----D---- C:\Windows\temp
2013-01-06 21:32:08 ----A---- C:\ComboFix.txt
2013-01-06 21:27:30 ----SHD---- C:\$RECYCLE.BIN
2013-01-06 21:25:37 ----ASH---- C:\hiberfil.sys
2013-01-06 13:18:40 ----A---- C:\Windows\ntbtlog.txt
2013-01-06 10:49:01 ----A---- C:\AdwCleaner[R1].txt
2013-01-05 23:41:37 ----D---- C:\Users\Lucinka\AppData\Roaming\Apple Computer
2013-01-05 23:34:24 ----D---- C:\Users\Lucinka\AppData\Roaming\Malwarebytes
2013-01-05 23:33:22 ----D---- C:\ProgramData\Malwarebytes
2013-01-05 22:05:46 ----D---- C:\Windows\cs
2013-01-05 22:04:48 ----DC---- C:\Windows\system32\DRVSTORE
2013-01-05 22:04:48 ----A---- C:\Windows\system32\drivers\fssfltr.sys
2013-01-05 22:02:48 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-01-05 21:59:39 ----D---- C:\Program Files\Windows Live
2013-01-05 21:57:23 ----D---- C:\Program Files\Microsoft
2013-01-05 21:57:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2013-01-05 21:57:04 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2013-01-05 21:57:03 ----A---- C:\Windows\system32\d3dx10_42.dll
2013-01-05 21:49:21 ----A---- C:\Windows\system32\webservices.dll
2013-01-05 21:48:17 ----D---- C:\Program Files\Microsoft Silverlight
2013-01-05 21:47:18 ----A---- C:\ProgramData\nvModes.dat
2013-01-04 22:18:21 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-12-22 22:09:38 ----A---- C:\Windows\system32\atmlib.dll
2012-12-22 22:09:38 ----A---- C:\Windows\system32\atmfd.dll
2012-12-13 21:17:08 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-13 21:17:07 ----A---- C:\Windows\system32\vbscript.dll
2012-12-13 21:17:05 ----A---- C:\Windows\system32\ieui.dll
2012-12-13 21:17:04 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-13 21:17:02 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-13 21:17:02 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-13 21:17:01 ----A---- C:\Windows\system32\wininet.dll
2012-12-13 21:17:00 ----A---- C:\Windows\system32\jscript.dll
2012-12-13 21:16:59 ----A---- C:\Windows\system32\url.dll
2012-12-13 21:16:59 ----A---- C:\Windows\system32\jscript9.dll
2012-12-13 21:16:58 ----A---- C:\Windows\system32\iertutil.dll
2012-12-13 21:16:55 ----A---- C:\Windows\system32\urlmon.dll
2012-12-13 21:16:50 ----A---- C:\Windows\system32\ieframe.dll
2012-12-13 21:16:45 ----A---- C:\Windows\system32\mshtml.dll
2012-12-13 21:01:05 ----A---- C:\Windows\system32\Wdfres.dll
2012-12-13 21:00:46 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-12-13 21:00:45 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-12-13 21:00:44 ----A---- C:\Windows\system32\winusb.dll
2012-12-13 21:00:42 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-12-13 21:00:41 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-12-13 21:00:37 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2012-12-13 21:00:36 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2012-12-13 21:00:19 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-12-13 21:00:15 ----A---- C:\Windows\system32\WUDFHost.exe
2012-12-13 20:59:39 ----A---- C:\Windows\system32\WUDFx.dll
2012-12-13 20:37:10 ----D---- C:\8cf8da9cf59c2ae84d91bbe17c
2012-12-12 12:38:59 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-12-12 12:38:53 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 12:38:51 ----A---- C:\Windows\system32\dpnsvr.exe
2012-12-12 12:38:51 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 12:38:46 ----A---- C:\Windows\system32\kernel32.dll
2012-12-12 12:38:05 ----A---- C:\Windows\system32\tzres.dll
======List of files/folders modified in the last 1 month======
2013-01-06 23:04:02 ----D---- C:\Program Files\trend micro
2013-01-06 21:32:11 ----D---- C:\Windows\system32\drivers
2013-01-06 21:32:11 ----D---- C:\Qoobox
2013-01-06 21:32:10 ----D---- C:\Windows
2013-01-06 21:27:59 ----D---- C:\Windows\Prefetch
2013-01-06 21:27:35 ----A---- C:\Windows\system.ini
2013-01-06 21:27:25 ----D---- C:\Windows\system32\drivers\etc
2013-01-06 21:24:31 ----D---- C:\Windows\ERDNT
2013-01-06 21:14:01 ----D---- C:\Windows\System32
2013-01-06 21:14:01 ----D---- C:\Windows\AppPatch
2013-01-06 21:13:59 ----D---- C:\Program Files\Common Files
2013-01-06 20:15:22 ----RD---- C:\Program Files
2013-01-06 20:15:21 ----D---- C:\Windows\Tasks
2013-01-06 17:57:14 ----RD---- C:\MANUAL
2013-01-06 14:53:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-06 14:53:58 ----D---- C:\Windows\inf
2013-01-06 13:37:29 ----D---- C:\Users\Lucinka\AppData\Roaming\Seznam.cz
2013-01-05 23:33:22 ----D---- C:\ProgramData
2013-01-05 22:43:53 ----D---- C:\Windows\rescache
2013-01-05 22:16:57 ----D---- C:\ProgramData\NVIDIA
2013-01-05 22:14:01 ----D---- C:\Windows\Debug
2013-01-05 22:08:51 ----D---- C:\Windows\Microsoft.NET
2013-01-05 22:07:30 ----RSD---- C:\Windows\assembly
2013-01-05 22:06:56 ----SHD---- C:\Windows\Installer
2013-01-05 22:00:30 ----SD---- C:\ProgramData\Microsoft
2013-01-05 22:00:27 ----D---- C:\Windows\winsxs
2013-01-05 22:00:12 ----RSD---- C:\Windows\Fonts
2013-01-05 21:59:17 ----D---- C:\Program Files\Common Files\microsoft shared
2013-01-05 21:56:46 ----D---- C:\Windows\Logs
2013-01-05 21:50:08 ----SHD---- C:\System Volume Information
2013-01-05 21:49:43 ----D---- C:\Windows\system32\cs-CZ
2013-01-05 21:49:37 ----D---- C:\Windows\system32\catroot
2013-01-05 21:42:25 ----D---- C:\Program Files\CONEXANT
2013-01-05 21:39:47 ----D---- C:\Windows\system32\catroot2
2013-01-05 18:00:01 ----D---- C:\Windows\system32\LogFiles
2013-01-04 22:58:09 ----RD---- C:\DRIVER
2013-01-04 22:03:56 ----D---- C:\Windows\system32\config
2013-01-04 19:28:00 ----SD---- C:\Users\Lucinka\AppData\Roaming\Microsoft
2013-01-04 19:20:03 ----D---- C:\Windows\system32\Msdtc
2013-01-04 19:19:59 ----D---- C:\Windows\system32\wbem
2013-01-04 19:18:55 ----D---- C:\Windows\system32\Tasks
2013-01-04 19:18:55 ----D---- C:\Windows\system32\spool
2013-01-04 19:18:55 ----D---- C:\Windows\system32\CodeIntegrity
2013-01-04 19:18:53 ----D---- C:\Windows\registration
2013-01-04 19:16:09 ----D---- C:\Windows\tracing
2013-01-04 18:01:47 ----D---- C:\Boot
2013-01-04 17:02:16 ----D---- C:\Program Files\Google
2012-12-13 21:27:02 ----D---- C:\Windows\system32\migration
2012-12-13 21:26:55 ----D---- C:\Program Files\Internet Explorer
2012-12-13 21:26:48 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-12-13 21:21:17 ----A---- C:\Windows\win.ini
2012-12-13 20:40:14 ----A---- C:\Windows\system32\mrt.exe
2012-12-12 01:05:44 ----A---- C:\Windows\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-08-30 193552]
R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2007-08-09 110624]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-08-30 99272]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\XAudio32.sys [2008-11-04 8704]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
R3 fspad_wlh32;AVC Finger-sensing Pad Driver for Windows 2000/XP/Vista_wlh32; C:\Windows\system32\DRIVERS\fspad_wlh32.sys [2006-11-10 22528]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2008-10-15 980992]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2008-10-15 207360]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2006-11-08 1647976]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-05-08 7551200]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2006-09-15 11520]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-10 73216]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2008-10-15 661504]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 mbr;mbr; \??\C:\Users\Lucinka\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iastor.sys [2006-05-11 247808]
S4 nvatabus;nvatabus; C:\Windows\system32\drivers\nvatabus.sys [2006-07-14 105088]
S4 viamraid;viamraid; C:\Windows\system32\drivers\viamraid.sys [2006-03-31 100992]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 FspadSvc;FspadSvc; C:\Program Files\AVC Finger-sensing Pad Driver\FspadSvr.exe [2006-11-10 522752]
R2 HsfXAudioService;HsfXAudioService; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 20472]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-05-08 203296]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 287824]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-09-06 114144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
-----------------EOF-----------------
Dejte novy log z RSIT
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
http://forum.viry.cz/viewtopic.php?f=12&t=123975
Přispějete na provoz fóra?