Prosím o kontrolu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
LEON659
Návštěvník
Návštěvník
Příspěvky: 108
Registrován: 10 Srp 2009 10:15

Prosím o kontrolu

#1 Příspěvek od LEON659 »

Dobrý den,

občas při otevření stránky v IE10 se mi místo požadované stránky otevře stránka ad.fly, aniž bych to chtěl !!!
a google Chrome mi začal hlásit "nelze načíst plugin Shockwave Flash"

něco asi není vpořádku :-(

prosím o kontrolu:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Pittermann at 2013-06-19 09:01:15
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 393 GB (82%) free of 477 GB
Total RAM: 3977 MB (40% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:01:17, on 19.6.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16611)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Iomega Storage Manager\IomegaStorageManager.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.DesktopHelper.exe
C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.AutoUpdate.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files\trend micro\Pittermann.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Pittermann\AppData\Roaming\Complitly\Complitly.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: HelloWorldBHO - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - C:\Program Files (x86)\OApps\SelectionLinks.dll
O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Pittermann\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HPUsageTracking] "C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT\"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_484301EB25F1F2E714D09F5F92FF69D8] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
O4 - HKCU\..\Run: [Zoner Photo Studio Autoupdate] C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Iomega Storage Manager.lnk = C:\Program Files (x86)\Iomega Storage Manager\IomegaStorageManager.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/4.0 ... rol_32.CAB
O16 - DPF: {960DC750-7447-4CDE-BF1C-FB33F9129654} (SSObject3 Control) - http://10.0.0.150:5000/webman/3rdparty/ ... b?6.0-2383
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = bcconsult.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = bcconsult.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = bcconsult.local
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Computer Backup (MyPC Backup) (BackupStack) - Just Develop It - C:\Program Files (x86)\MyPC Backup\BackupStack.exe
O23 - Service: BlackBerry Device Manager (Blackberry Device Manager) - Research In Motion Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: DefaultTabSearch - Unknown owner - C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe
O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Pittermann\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing)
O23 - Service: PCloudd - Iomega Corp - C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12655 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Users\Pittermann\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe"
"C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe"
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\system32\DRIVERS\o2flash.exe
"C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-f5c6d958-6fb9-4629-b71d-b286d740cce7 -SystemEventPortName:HostProcess-35514b30-47f3-4a13-8414-13b627b91188 -IoCancelEventPortName:HostProcess-d7f876df-d4e0-4193-9010-ccd9834c70ce -NonStateChangingEventPortName:HostProcess-213849e8-fc3c-45fd-99bf-e660b86a1cfe -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:1c6ebf03-0afb-4e1e-9639-b38135b74e1d -DeviceGroupId:
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.21.145\GoogleCrashHandler64.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe"
"C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe" /hide /waitservice
"C:\Program Files (x86)\HP\HP Color LaserJet CM2320 MFP Series\hppfaxprintersrv.exe" "HP Color LaserJet CM2320 MFP Series Fax"
"C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
"C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe"
"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"
"C:\Program Files (x86)\Iomega Storage Manager\IomegaStorageManager.exe" -s
"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe"
"C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3428.0.1430497261\1816991279" --supports-dual-gpus=false --gpu-vendor-id=0x8086 --gpu-device-id=0x0126 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=9.17.10.2867 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxSearchSuggestTrialStarted2013Q1/2/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_60/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3428.1.448711266\1317238533" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxSearchSuggestTrialStarted2013Q1/2/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_60/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3428.2.1197632439\1771019009" /prefetch:673131151
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials="AutocompleteDynamicTrial_1/DefaultControl/ForceCompositingMode/thread/InfiniteCache/No/InstantDummy/DummyPadding channel:stable/InstantExtended/Padding1 channel:stable/OmniboxSearchSuggestTrialStarted2013Q1/2/OneClickSignIn/Standard/OverlappedReadImpact/OverlappedReadDisabled/Prerender/PrerenderEnabled/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-Percent/group_60/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_11/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --channel="3428.3.366560903\587928390" /prefetch:673131151
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\MyPC Backup\BackupStack.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="3428.6.1114018473\1216958977" --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" /RunServer
"C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.DesktopHelper.exe" /dts
"C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.AutoUpdate.exe" /noprogress
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Internet Explorer\iexplore.exe"
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5824 CREDAT:267521 /prefetch:2
"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"
C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe -Embedding
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5824 CREDAT:3609878 /prefetch:2
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:5824 CREDAT:4134157 /prefetch:2
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-cdc07e03-7282-428a-8cbe-9ebb91058d9c -SystemEventPortName:HostProcess-d4f1477f-d004-487d-9e7d-78c83997ff82 -IoCancelEventPortName:HostProcess-b11233be-2ebb-46cc-940b-76f4f6d10f37 -NonStateChangingEventPortName:HostProcess-9919d01f-67da-40ae-a7d5-f98191fd7ef7 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:af81d805-1324-48cc-9952-8bdd5b24d7f2 -DeviceGroupId:WpdFsGroup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe75_ Global\UsGthrCtrlFltPipeMssGthrPipe75 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\igfxsrvc.exe -Embedding
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Pittermann\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
Complitly - C:\Users\Pittermann\AppData\Roaming\Complitly\64\Complitly64.dll [2012-11-30 169688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]
Complitly - C:\Users\Pittermann\AppData\Roaming\Complitly\Complitly.dll [2012-11-30 142040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-06-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}]
SelectionLinks - C:\Program Files (x86)\OApps\SelectionLinks.dll [2013-06-07 483840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
DefaultTab Browser Helper - C:\Users\Pittermann\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-06-07 433272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-06-04 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-10-10 171040]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-10-10 399392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2012-10-10 441888]
"FreeFallProtection"=C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [2011-07-25 686704]
"egui"=C:\Program Files\ESET\ESET Endpoint Antivirus\egui.exe [2012-07-04 4133072]
"HP Color LaserJet CM2320 MFP Series Fax"=C:\Program Files (x86)\HP\HP Color LaserJet CM2320 MFP Series\hppfaxprintersrv.exe [2009-09-22 3700736]
"Logitech Download Assistant"=C:\Windows\System32\LogiLDA.dll [2012-09-20 1832760]
"ACPW06EN"=C:\Program Files\ACD Systems\ACDSee Pro\6.0\ACDSeePro6InTouch2.exe [2012-12-18 1234120]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-06-16 221184]
"GarminExpressTrayApp"=C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [2013-03-27 1098072]
"GoogleChromeAutoLaunch_484301EB25F1F2E714D09F5F92FF69D8"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2013-05-29 825808]
"Zoner Photo Studio Autoupdate"=C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-02-18 774168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"HPUsageTracking"=C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [2009-05-11 24576]
"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]
"RIMBBLaunchAgent.exe"=C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2013-01-17 267792]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-05-31 152392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
Iomega Storage Manager.lnk - C:\Program Files (x86)\Iomega Storage Manager\IomegaStorageManager.exe

C:\Users\Pittermann\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2010.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2012-10-10 441856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-06-19 09:01:15 ----D---- C:\rsit
2013-06-17 21:15:36 ----D---- C:\Program Files\iPod
2013-06-17 21:15:35 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-17 21:15:35 ----D---- C:\Program Files\iTunes
2013-06-17 21:15:35 ----D---- C:\Program Files (x86)\iTunes
2013-06-16 12:54:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2013-06-16 12:54:31 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2013-06-16 12:54:31 ----A---- C:\Windows\system32\urlmon.dll
2013-06-16 12:54:30 ----A---- C:\Windows\SYSWOW64\ieui.dll
2013-06-16 12:54:30 ----A---- C:\Windows\system32\iertutil.dll
2013-06-16 12:54:29 ----A---- C:\Windows\system32\ieui.dll
2013-06-16 12:54:26 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2013-06-16 12:54:26 ----A---- C:\Windows\system32\ieframe.dll
2013-06-16 12:54:23 ----A---- C:\Windows\system32\mshtml.dll
2013-06-16 12:54:19 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2013-06-13 09:00:55 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2013-06-13 09:00:55 ----A---- C:\Windows\system32\iesetup.dll
2013-06-13 09:00:55 ----A---- C:\Windows\system32\iernonce.dll
2013-06-13 09:00:54 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2013-06-13 09:00:54 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2013-06-13 09:00:54 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2013-06-13 09:00:54 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-06-13 09:00:54 ----A---- C:\Windows\system32\iesysprep.dll
2013-06-13 09:00:54 ----A---- C:\Windows\system32\ie4uinit.exe
2013-06-13 09:00:53 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2013-06-13 09:00:52 ----A---- C:\Windows\SYSWOW64\jscript.dll
2013-06-13 09:00:52 ----A---- C:\Windows\system32\msfeeds.dll
2013-06-13 09:00:52 ----A---- C:\Windows\system32\jscript.dll
2013-06-13 09:00:51 ----A---- C:\Windows\system32\jscript9.dll
2013-06-13 09:00:50 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2013-06-13 09:00:48 ----A---- C:\Windows\SYSWOW64\wininet.dll
2013-06-13 09:00:48 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2013-06-13 09:00:48 ----A---- C:\Windows\system32\jsproxy.dll
2013-06-13 09:00:47 ----A---- C:\Windows\system32\wininet.dll
2013-06-12 22:03:10 ----A---- C:\Windows\system32\drivers\tcpip.sys
2013-06-12 22:03:08 ----A---- C:\Windows\SYSWOW64\win32spl.dll
2013-06-12 22:03:08 ----A---- C:\Windows\system32\win32spl.dll
2013-06-12 22:03:01 ----A---- C:\Windows\SYSWOW64\cryptdlg.dll
2013-06-12 22:03:01 ----A---- C:\Windows\system32\cryptdlg.dll
2013-06-12 22:02:54 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2013-06-12 22:02:54 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-06-12 22:02:51 ----A---- C:\Windows\SYSWOW64\certutil.exe
2013-06-12 22:02:51 ----A---- C:\Windows\system32\certutil.exe
2013-06-12 22:02:50 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2013-06-12 22:02:50 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2013-06-12 22:02:50 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2013-06-12 22:02:50 ----A---- C:\Windows\system32\cryptsvc.dll
2013-06-12 22:02:50 ----A---- C:\Windows\system32\cryptnet.dll
2013-06-12 22:02:50 ----A---- C:\Windows\system32\crypt32.dll
2013-06-12 22:02:50 ----A---- C:\Windows\system32\certenc.dll
2013-06-12 22:02:49 ----A---- C:\Windows\SYSWOW64\certenc.dll
2013-06-12 22:02:44 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2013-06-12 22:02:44 ----A---- C:\Windows\system32\d3d11.dll
2013-06-07 08:15:22 ----D---- C:\Program Files (x86)\SWF Decompiler Premium
2013-06-07 08:15:04 ----D---- C:\Program Files (x86)\DefaultTab
2013-06-07 08:14:59 ----D---- C:\Users\Pittermann\AppData\Roaming\DefaultTab
2013-06-07 08:14:46 ----D---- C:\Program Files (x86)\OApps
2013-06-06 16:25:30 ----D---- C:\Program Files (x86)\Decompile Flash
2013-06-04 23:12:23 ----D---- C:\Program Files (x86)\SWFRIP
2013-06-04 22:59:36 ----D---- C:\Program Files (x86)\SwfModify
2013-06-04 22:57:17 ----A---- C:\Windows\FlashDecompiler.INI
2013-06-04 22:56:53 ----D---- C:\ProgramData\AutoUpdate
2013-06-04 22:56:52 ----D---- C:\ProgramData\TEMP
2013-06-04 22:23:28 ----D---- C:\Program Files (x86)\SWF2EXEConverter
2013-06-04 21:40:16 ----D---- C:\Users\Pittermann\AppData\Roaming\JPEXS
2013-06-04 21:40:06 ----D---- C:\ProgramData\Sun
2013-06-04 21:39:55 ----A---- C:\Windows\SYSWOW64\npDeployJava1.dll
2013-06-04 21:39:55 ----A---- C:\Windows\SYSWOW64\javaws.exe
2013-06-04 21:39:55 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2013-06-04 21:39:53 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2013-06-04 21:39:53 ----A---- C:\Windows\SYSWOW64\javaw.exe
2013-06-04 21:39:53 ----A---- C:\Windows\SYSWOW64\java.exe
2013-06-04 21:39:42 ----D---- C:\Program Files (x86)\Java
2013-06-04 21:37:28 ----D---- C:\Program Files (x86)\FFDec
2013-06-04 21:10:51 ----D---- C:\Program Files (x86)\SourceTec
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\wextract.exe
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\msrating.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\msls31.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\inseng.dll
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2013-05-31 08:09:22 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2013-05-31 08:09:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-05-31 08:09:22 ----A---- C:\Windows\system32\elshyph.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\url.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\occache.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\mshta.exe
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\icardie.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2013-05-31 08:09:21 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\url.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\msrating.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\msls31.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\iedkcs32.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\ieapfltr.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\icardie.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\dxtrans.dll
2013-05-31 08:09:20 ----A---- C:\Windows\system32\dxtmsft.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\wextract.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\webcheck.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\vbscript.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\pngfilt.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\occache.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\mshtmler.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\mshtmled.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\mshta.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\msfeedssync.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\licmgr10.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\inseng.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\imgutil.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\iexpress.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\ieUnatt.exe
2013-05-31 08:09:19 ----A---- C:\Windows\system32\iepeers.dll
2013-05-31 08:09:19 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-05-24 03:00:35 ----D---- C:\Program Files (x86)\MSXML 4.0
2013-05-24 00:05:22 ----D---- C:\Users\Pittermann\AppData\Roaming\Garmin
2013-05-24 00:04:09 ----D---- C:\ProgramData\Garmin
2013-05-24 00:04:04 ----D---- C:\Program Files (x86)\Garmin
2013-05-24 00:04:00 ----D---- C:\ProgramData\Package Cache
2013-05-22 22:02:59 ----D---- C:\Users\Pittermann\AppData\Roaming\Corel
2013-05-22 22:01:33 ----D---- C:\ProgramData\InstallShield
2013-05-22 22:00:38 ----D---- C:\Program Files (x86)\Corel

======List of files/folders modified in the last 1 months======

2013-06-19 09:01:17 ----D---- C:\Windows\Prefetch
2013-06-19 09:01:16 ----D---- C:\Windows\Temp
2013-06-19 09:01:16 ----D---- C:\Program Files\trend micro
2013-06-19 08:40:50 ----D---- C:\Windows\system32\config
2013-06-18 20:32:34 ----D---- C:\Users\Pittermann\AppData\Roaming\vlc
2013-06-18 15:20:26 ----D---- C:\Windows\System32
2013-06-18 15:20:26 ----D---- C:\Windows\inf
2013-06-18 15:20:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-06-18 13:57:18 ----SHD---- C:\Windows\Installer
2013-06-18 13:57:17 ----HD---- C:\Config.Msi
2013-06-18 13:56:46 ----D---- C:\ProgramData\Adobe
2013-06-18 13:56:46 ----D---- C:\Program Files (x86)\Adobe
2013-06-18 13:55:58 ----D---- C:\Windows\SysWOW64
2013-06-18 13:55:53 ----RSD---- C:\Windows\Fonts
2013-06-18 13:52:21 ----SHD---- C:\System Volume Information
2013-06-18 13:49:57 ----D---- C:\Program Files\CCleaner
2013-06-18 13:26:22 ----D---- C:\Program Files (x86)\VideoLAN
2013-06-18 12:41:22 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2013-06-18 08:35:05 ----D---- C:\Windows\Microsoft.NET
2013-06-18 08:34:38 ----RSD---- C:\Windows\assembly
2013-06-18 08:29:26 ----D---- C:\Windows\system32\catroot2
2013-06-18 08:28:08 ----D---- C:\Windows\winsxs
2013-06-17 21:15:36 ----RD---- C:\Program Files
2013-06-17 21:15:35 ----RD---- C:\Program Files (x86)
2013-06-17 21:15:35 ----HD---- C:\ProgramData
2013-06-17 06:59:57 ----D---- C:\Windows\system32\catroot
2013-06-16 13:20:50 ----D---- C:\Program Files\Internet Explorer
2013-06-16 13:20:50 ----D---- C:\Program Files (x86)\Internet Explorer
2013-06-13 10:12:47 ----D---- C:\Windows\rescache
2013-06-13 09:09:13 ----D---- C:\Windows\system32\drivers
2013-06-13 09:09:12 ----D---- C:\Windows\SYSWOW64\cs-CZ
2013-06-13 09:09:12 ----D---- C:\Windows\system32\cs-CZ
2013-06-13 09:01:41 ----D---- C:\Windows\debug
2013-06-13 09:01:37 ----A---- C:\Windows\system32\MRT.exe
2013-06-07 08:15:01 ----HD---- C:\Windows\system32\GroupPolicy
2013-06-07 08:15:01 ----D---- C:\Windows\SYSWOW64\GroupPolicy
2013-06-07 08:14:19 ----D---- C:\Windows\Resources
2013-06-04 22:57:17 ----D---- C:\Windows
2013-06-04 22:20:54 ----D---- C:\Program Files (x86)\Common Files
2013-06-03 22:07:49 ----D---- C:\Windows\system32\NDF
2013-05-31 09:11:11 ----SD---- C:\Users\Pittermann\AppData\Roaming\Microsoft
2013-05-31 08:19:44 ----D---- C:\Windows\Panther
2013-05-31 08:16:34 ----D---- C:\Windows\SYSWOW64\migration
2013-05-31 08:16:34 ----D---- C:\Windows\SYSWOW64\en-US
2013-05-31 08:16:33 ----D---- C:\Windows\system32\migration
2013-05-31 08:16:33 ----D---- C:\Windows\system32\en-US
2013-05-31 08:16:33 ----D---- C:\Windows\PolicyDefinitions
2013-05-31 08:13:29 ----D---- C:\Windows\Logs
2013-05-29 11:44:52 ----D---- C:\Program Files (x86)\MyPC Backup
2013-05-29 11:25:45 ----D---- C:\Users\Pittermann\AppData\Roaming\uTorrent
2013-05-23 23:51:51 ----D---- C:\Windows\Downloaded Program Files

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2012-10-08 30056]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer; C:\Windows\system32\DRIVERS\stdcfltn.sys [2011-07-15 22128]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-07-10 213416]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-03-29 152136]
R1 nvkflt;nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [2012-10-08 284008]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2012-03-29 140752]
R3 Acceler;Accelerometer Service; C:\Windows\system32\DRIVERS\accelern.sys [2011-07-22 27760]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 cvusbdrv;Dell ControlVault; C:\Windows\System32\Drivers\cvusbdrv.sys [2010-08-25 38440]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-10-28 315568]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-10-10 5343584]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 NETwNs64;___ Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows 7 64 Bit; C:\Windows\system32\DRIVERS\NETwNs64.sys [2010-12-21 8505856]
R3 O2MDRRDR;O2MDRRDR; C:\Windows\system32\DRIVERS\O2MDRw7x64.sys [2011-01-04 74984]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
R3 WinUsb;Ovladač WinUSB; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2013-01-03 78336]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-09-28 53760]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 vNICdrv;Iomega Virtual Miniport; C:\Windows\system32\DRIVERS\vNICdrv.sys [2012-09-09 20048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]
R2 BackupStack;Computer Backup (MyPC Backup); C:\Program Files (x86)\MyPC Backup\BackupStack.exe [2013-05-21 32808]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Pittermann\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-06-07 107520]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Endpoint Antivirus\x86\ekrn.exe [2012-07-04 999704]
R2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2013-03-27 185688]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 O2FLASH;O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [2010-02-11 72296]
R2 PCloudd;PCloudd; C:\Program Files (x86)\Iomega Storage Manager\pCloudd.exe [2012-09-09 213504]
R3 Blackberry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2013-01-18 577536]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-31 641352]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 DefaultTabSearch;DefaultTabSearch; C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe [2013-02-11 572928]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-01 116648]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-10-10 277024]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Endpoint Antivirus\EHttpSrv.exe [2012-07-04 35720]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Endpoint Antivirus\EShaSrv.exe [2012-07-04 190208]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-01-01 116648]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-01-01 1255736]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu

#2 Příspěvek od vyosek »

Zdravim :)

Jedna se o domaci PC nebo nejaky firemni\pracovni :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

LEON659
Návštěvník
Návštěvník
Příspěvky: 108
Registrován: 10 Srp 2009 10:15

Re: Prosím o kontrolu

#3 Příspěvek od LEON659 »

firemní , pracovní

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu

#4 Příspěvek od vyosek »

Pravidla fora jste si pred polozenim dotazu neprecetl ze :?:

Ono se to tema nejmenuje jen tak pro nic za nic Pravidla a skutečnosti - čtěte před položením dotazu
6. Fórum viry.cz se nezabývá odvirováním firemních PC - na toto jsou ve firmách placení (a někdy až hodně nadstandardně) IT technici, případně si je firma může najmout. My jsme tu zdarma a ve svém volném čase, nehodláme dělat práci za někoho jiného, kdo si pak jen slízne smetánku a plat. Taktéž ani neposkytujeme poradenství v oblasti zabezpečení firemních sítí či nastavení firemních sítí. Zkrátka a jednoduše, naše fórum poskytuje podporu pouze domácím uživatelům.
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

LEON659
Návštěvník
Návštěvník
Příspěvky: 108
Registrován: 10 Srp 2009 10:15

Re: Prosím o kontrolu

#5 Příspěvek od LEON659 »

Tak děkuji za ochotu.

Ve firmě máme 2 PC a vše si spravujeme sami, popřípadě si musíme najímat na speciální nastavení specialisty :-(

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu

#6 Příspěvek od vyosek »

Neni zac...

Tak si ty specialisty najmenete znovu - faktura se da normalne preci uplatnit jako vydaje...

My si tu nevezmeme na triko unik dat a bezpecnostni incident s firemnimi PC a daty
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu

#7 Příspěvek od vyosek »

"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Zamčeno