Dobrý den,
měla jsem zavirovaný laptop, prosím o kontrolu. Nešlo spouštět .exe soubory a když jsem psala do vyhledávacího pole (u prohlížeče) tak se nic nezobrazovalo. Eset to vyřešil, vše se zdá již OK. Nicméně ráda bych to ještě nechala prozkoumat od Vás.
Děkuji.
Logfile of random's system information tool 1.09 (written by random/random)
Run by Štěpánka at 2013-07-25 19:05:37
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 176 GB (41%) free of 432 GB
Total RAM: 4040 MB (70% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:05:41, on 25.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\VirtuaWin\VirtuaWin.exe
C:\Program Files (x86)\VirtuaWin\modules\WinList.exe
C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
C:\Program Files\trend micro\Štěpánka.exe
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 4191 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k GPSvcGroup
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 4085920
\??\C:\windows\system32\conhost.exe "-286275535-477232695-12259259441832299942-986763529-606027043884532482-80052508
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
taskeng.exe {B41695B3-EF26-44DD-A665-B23B14451514}
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
C:\windows\system32\svchost.exe -k imgsvc
C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\Explorer.EXE
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
"C:\Program Files (x86)\VirtuaWin\VirtuaWin.exe"
C:\windows\servicing\TrustedInstaller.exe
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\VirtuaWin\modules\WinList.exe" -module
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
taskeng.exe {AD27AA6C-3C3D-42C0-A61C-3A7DFBBED1BE}
"C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe"
"C:\Users\Štěpánka\Documents\Domča\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe
C:\windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
=========Mozilla firefox=========
ProfilePath - C:\Users\Štěpánka\AppData\Roaming\Mozilla\Firefox\Profiles\w7wmun8q.default
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.94 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-02-25 3023600]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-07-16 9771568]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-07-16 5908928]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-03-21 6330568]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Energy Management]
C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2013-07-16 9771568]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EnergyUtility]
C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [2013-07-16 5908928]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-02-25 3023600]
C:\Users\Štěpánka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp
VirtuaWin.lnk - C:\Program Files (x86)\VirtuaWin\VirtuaWin.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2012-12-14 442880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 6670496]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableTaskMgr"=0
"SynchronousMachineGroupPolicy"=0
"SynchronousUserGroupPolicy"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x99000000
"NoRecentDocsNetHood"=1
"NoInstrumentation"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktopChanges"=1
"NoRun"=0
"NoDriveTypeAutoRun"=153
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2013-07-25 19:05:37 ----D---- C:\rsit
2013-07-25 19:00:11 ----A---- C:\windows\system32\FNTCACHE.DAT
2013-07-25 18:16:42 ----A---- C:\windows\SYSWOW64\GDIPFONTCACHEV1.DAT
2013-07-25 18:14:18 ----A---- C:\windows\system32\GDIPFONTCACHEV1.DAT
2013-07-25 17:47:00 ----D---- C:\Program Files\WinRAR
2013-07-25 17:29:58 ----D---- C:\ProgramData\ESET
2013-07-25 15:29:45 ----D---- C:\windows\SYSWOW64\directx
2013-07-16 22:45:23 ----D---- C:\Program Files (x86)\World of Warcraft
2013-07-16 21:45:53 ----D---- C:\Program Files (x86)\Diablo III
2013-07-16 19:53:21 ----A---- C:\windows\system32\drivers\LhdX64.sys
2013-07-16 19:45:39 ----D---- C:\ProgramData\Downloaded Installations
2013-07-16 19:45:05 ----D---- C:\drivers
2013-07-15 16:49:23 ----D---- C:\Users\Štěpánka\AppData\Roaming\VirtuaWin
2013-07-15 16:49:20 ----D---- C:\Program Files (x86)\VirtuaWin
2013-07-12 19:20:41 ----D---- C:\ProgramData\Synaptics
2013-07-12 19:17:20 ----D---- C:\Users\Štěpánka\AppData\Roaming\Synaptics
2013-07-12 18:32:37 ----A---- C:\windows\SYSWOW64\SynTPCOM.dll
2013-07-12 18:32:37 ----A---- C:\windows\SYSWOW64\SynCOM.dll
2013-07-12 18:32:37 ----A---- C:\windows\system32\WdfCoInstaller01009.dll
2013-07-12 18:32:36 ----A---- C:\windows\system32\SynTPCo16.dll
2013-07-12 18:32:35 ----A---- C:\windows\system32\SynCOM.dll
2013-07-12 18:32:30 ----A---- C:\windows\system32\SynTPAPI.dll
2013-07-12 18:32:28 ----A---- C:\windows\system32\drivers\SynTP.sys
2013-07-11 19:14:28 ----D---- C:\Program Files\ESET
2013-07-11 00:27:27 ----D---- C:\Program Files\Yamicsoft
2013-07-10 23:47:49 ----AD---- C:\windows\rundll16.exe
2013-07-10 23:47:49 ----AD---- C:\windows\logo1_.exe
2013-07-10 23:02:12 ----D---- C:\Program Files\CS 1.6
2013-07-10 22:49:18 ----AD---- C:\windows\VDLL.DLL
2013-07-10 22:49:18 ----AD---- C:\windows\SYSWOW64\runouce.exe
2013-07-10 22:49:18 ----AD---- C:\windows\RUNDL132.EXE
2013-07-10 22:49:18 ----AD---- C:\windows\logo_1.exe
2013-07-10 22:29:42 ----A---- C:\windows\system32\drivers\trufos.sys
2013-07-10 22:29:35 ----A---- C:\windows\SYSWOW64\msvcr80.dll
2013-07-10 22:29:34 ----A---- C:\windows\SYSWOW64\msvcp80.dll
2013-07-10 22:29:33 ----A---- C:\windows\SYSWOW64\msvcp90.dll
2013-07-10 22:29:32 ----A---- C:\windows\SYSWOW64\msvcr90.dll
2013-07-10 22:29:31 ----A---- C:\windows\SYSWOW64\eEmpty.exe
2013-07-10 22:29:08 ----D---- C:\ProgramData\MicroWorld
2013-07-10 21:48:45 ----D---- C:\Program Files\Stronghold Crusader Extreme HD
2013-07-10 21:10:54 ----D---- C:\windows\system32\MRT
2013-07-10 21:10:05 ----D---- C:\Program Files\Microsoft Security Client
2013-07-10 09:49:23 ----A---- C:\windows\SYSWOW64\ieui.dll
2013-07-10 09:49:23 ----A---- C:\windows\system32\ieui.dll
2013-07-10 09:49:22 ----A---- C:\windows\SYSWOW64\iesetup.dll
2013-07-10 09:49:22 ----A---- C:\windows\SYSWOW64\iernonce.dll
2013-07-10 09:49:22 ----A---- C:\windows\system32\iesetup.dll
2013-07-10 09:49:22 ----A---- C:\windows\system32\iernonce.dll
2013-07-10 09:49:22 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-10 09:49:21 ----A---- C:\windows\SYSWOW64\RegisterIEPKEYs.exe
2013-07-10 09:49:21 ----A---- C:\windows\SYSWOW64\iesysprep.dll
2013-07-10 09:49:21 ----A---- C:\windows\SYSWOW64\iertutil.dll
2013-07-10 09:49:21 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-10 09:49:21 ----A---- C:\windows\system32\iesysprep.dll
2013-07-10 09:49:21 ----A---- C:\windows\system32\iertutil.dll
2013-07-10 09:49:20 ----A---- C:\windows\SYSWOW64\msfeeds.dll
2013-07-10 09:49:20 ----A---- C:\windows\SYSWOW64\jscript.dll
2013-07-10 09:49:20 ----A---- C:\windows\system32\msfeeds.dll
2013-07-10 09:49:20 ----A---- C:\windows\system32\jscript.dll
2013-07-10 09:49:19 ----A---- C:\windows\SYSWOW64\jscript9.dll
2013-07-10 09:49:19 ----A---- C:\windows\system32\jscript9.dll
2013-07-10 09:49:18 ----A---- C:\windows\SYSWOW64\urlmon.dll
2013-07-10 09:49:18 ----A---- C:\windows\system32\urlmon.dll
2013-07-10 09:49:17 ----A---- C:\windows\SYSWOW64\jsproxy.dll
2013-07-10 09:49:17 ----A---- C:\windows\system32\jsproxy.dll
2013-07-10 09:49:16 ----A---- C:\windows\SYSWOW64\wininet.dll
2013-07-10 09:49:16 ----A---- C:\windows\system32\wininet.dll
2013-07-10 09:49:15 ----A---- C:\windows\SYSWOW64\ieframe.dll
2013-07-10 09:49:14 ----A---- C:\windows\system32\ieframe.dll
2013-07-10 09:49:13 ----A---- C:\windows\system32\mshtml.dll
2013-07-10 09:49:10 ----A---- C:\windows\SYSWOW64\mshtml.dll
2013-07-09 22:35:00 ----A---- C:\windows\SYSWOW64\qedit.dll
2013-07-09 22:35:00 ----A---- C:\windows\system32\WMVDECOD.DLL
2013-07-09 22:35:00 ----A---- C:\windows\system32\qedit.dll
2013-07-09 22:34:59 ----A---- C:\windows\SYSWOW64\WMVDECOD.DLL
2013-07-09 22:34:43 ----A---- C:\windows\system32\win32k.sys
2013-07-09 22:30:40 ----A---- C:\windows\SYSWOW64\DWrite.dll
2013-07-09 22:30:40 ----A---- C:\windows\system32\DWrite.dll
2013-07-09 22:06:38 ----D---- C:\Program Files\trend micro
2013-07-09 18:20:55 ----D---- C:\Program Files (x86)\CCleaner
2013-07-09 18:03:12 ----D---- C:\Users\Štěpánka\AppData\Roaming\Malwarebytes
2013-07-09 18:03:01 ----D---- C:\ProgramData\Malwarebytes
2013-07-09 18:03:00 ----A---- C:\windows\system32\drivers\mbam.sys
2013-07-09 18:02:59 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-07-03 00:13:37 ----D---- C:\Program Files (x86)\Mozilla Firefox
======List of files/folders modified in the last 1 month======
2013-07-26 02:43:25 ----D---- C:\windows\system32\wfp
2013-07-26 02:43:25 ----D---- C:\windows\system32\wbem
2013-07-26 02:43:25 ----D---- C:\windows\system32\drivers\UMDF
2013-07-26 02:43:25 ----D---- C:\windows\system32\CodeIntegrity
2013-07-26 02:43:24 ----D---- C:\Users\Štěpánka\AppData\Roaming\vlc
2013-07-26 02:43:21 ----D---- C:\windows\registration
2013-07-25 19:05:14 ----D---- C:\windows\Temp
2013-07-25 19:05:14 ----D---- C:\windows\system32\config
2013-07-25 19:04:10 ----A---- C:\windows\SYSWOW64\log.txt
2013-07-25 19:02:00 ----D---- C:\windows\system32\catroot2
2013-07-25 19:01:01 ----D---- C:\Users\Štěpánka\AppData\Roaming\ESET
2013-07-25 19:00:37 ----D---- C:\Windows
2013-07-25 19:00:11 ----D---- C:\windows\System32
2013-07-25 18:59:45 ----D---- C:\windows\system32\LogFiles
2013-07-25 18:58:58 ----D---- C:\windows\Microsoft.NET
2013-07-25 18:55:48 ----D---- C:\windows\inf
2013-07-25 18:55:48 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-25 18:55:10 ----D---- C:\Users\Štěpánka\AppData\Roaming\Ancestry
2013-07-25 18:55:10 ----D---- C:\Users\Štěpánka\AppData\Roaming\Adobe
2013-07-25 18:55:04 ----SD---- C:\ProgramData\Microsoft
2013-07-25 18:55:04 ----HD---- C:\ProgramData
2013-07-25 18:55:04 ----D---- C:\ProgramData\McAfee
2013-07-25 18:55:04 ----D---- C:\ProgramData\Adobe
2013-07-25 18:55:04 ----D---- C:\Program Files (x86)\McAfee
2013-07-25 18:55:04 ----D---- C:\Program Files (x86)\Lenovo
2013-07-25 18:55:04 ----D---- C:\Program Files (x86)\JDownloader
2013-07-25 18:55:04 ----D---- C:\Program Files (x86)
2013-07-25 18:51:33 ----D---- C:\Users\Štěpánka\AppData\Roaming\Macromedia
2013-07-25 18:45:05 ----RD---- C:\Program Files
2013-07-25 18:45:03 ----D---- C:\windows\SYSWOW64\drivers
2013-07-25 18:45:03 ----D---- C:\windows\SysWOW64
2013-07-25 18:44:57 ----D---- C:\Users\Štěpánka\AppData\Roaming\uTorrent
2013-07-25 18:44:57 ----D---- C:\Users\Štěpánka\AppData\Roaming\SoftGrid Client
2013-07-25 18:44:57 ----D---- C:\Users\Štěpánka\AppData\Roaming\OpenCandy
2013-07-25 18:44:56 ----D---- C:\Users\Štěpánka\AppData\Roaming\Mozilla
2013-07-25 18:44:54 ----SD---- C:\Users\Štěpánka\AppData\Roaming\Microsoft
2013-07-25 18:44:51 ----D---- C:\Users\Štěpánka\AppData\Roaming\BSplayer Pro
2013-07-25 18:44:51 ----D---- C:\Users\Štěpánka\AppData\Roaming\Audacity
2013-07-25 18:44:18 ----D---- C:\Program Files (x86)\StarCraft II
2013-07-25 18:44:18 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2013-07-25 18:44:18 ----D---- C:\Program Files (x86)\Google
2013-07-25 18:44:17 ----D---- C:\Program Files\DVD Maker
2013-07-25 18:43:21 ----D---- C:\windows\SoftwareDistribution
2013-07-25 18:26:26 ----D---- C:\windows\winsxs
2013-07-25 18:16:29 ----D---- C:\Program Files (x86)\Windows Live
2013-07-25 18:16:27 ----SHD---- C:\windows\Installer
2013-07-25 18:15:19 ----RSD---- C:\windows\assembly
2013-07-25 18:15:18 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-07-25 18:13:26 ----D---- C:\windows\SYSWOW64\LogFiles
2013-07-25 18:13:19 ----D---- C:\windows\Panther
2013-07-25 18:13:18 ----D---- C:\windows\Logs
2013-07-25 18:12:29 ----SHD---- C:\System Volume Information
2013-07-25 18:12:18 ----D---- C:\Program Files (x86)\Adobe
2013-07-25 18:11:46 ----D---- C:\Program Files (x86)\Common Files
2013-07-25 18:08:22 ----D---- C:\windows\system32\Tasks
2013-07-25 18:07:45 ----D---- C:\windows\Tasks
2013-07-25 17:30:24 ----D---- C:\windows\system32\drivers
2013-07-25 17:30:24 ----D---- C:\windows\system32\catroot
2013-07-25 17:30:23 ----D---- C:\windows\system32\DriverStore
2013-07-25 16:50:08 ----D---- C:\windows\Prefetch
2013-07-21 21:56:37 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2013-07-20 18:28:04 ----SHD---- C:\$Recycle.Bin
2013-07-20 18:27:57 ----RD---- C:\Users
2013-07-18 10:07:17 ----D---- C:\windows\system32\NDF
2013-07-16 23:37:43 ----A---- C:\windows\system32\LenovoSDKEmSubSystem.dll
2013-07-16 19:53:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2013-07-15 17:05:14 ----RSD---- C:\windows\Fonts
2013-07-11 18:08:23 ----D---- C:\windows\rescache
2013-07-11 00:21:41 ----A---- C:\windows\system.ini
2013-07-11 00:17:19 ----RSD---- C:\windows\Media
2013-07-11 00:17:19 ----D---- C:\windows\Offline Web Pages
2013-07-11 00:17:19 ----D---- C:\windows\Downloaded Program Files
2013-07-10 23:30:10 ----A---- C:\windows\win.ini
2013-07-10 22:31:35 ----A---- C:\windows\SYSWOW64\FlashPlayerApp.exe
2013-07-10 22:06:19 ----D---- C:\windows\SYSWOW64\migration
2013-07-10 22:06:19 ----D---- C:\windows\SYSWOW64\cs-CZ
2013-07-10 22:06:19 ----D---- C:\windows\system32\migration
2013-07-10 22:06:19 ----D---- C:\windows\system32\cs-CZ
2013-07-10 22:06:19 ----D---- C:\windows\PolicyDefinitions
2013-07-10 21:44:24 ----D---- C:\ProgramData\Microsoft Help
2013-07-10 21:27:21 ----D---- C:\windows\debug
2013-07-10 21:19:38 ----D---- C:\Program Files (x86)\uTorrent
2013-07-10 21:18:23 ----D---- C:\windows\SYSWOW64\en-US
2013-07-10 21:18:23 ----D---- C:\windows\system32\spool
2013-07-10 21:18:23 ----D---- C:\windows\system32\en-US
2013-07-10 21:18:23 ----D---- C:\windows\ShellNew
2013-07-10 09:59:52 ----D---- C:\Program Files\Windows Defender
2013-07-10 09:59:52 ----D---- C:\Program Files (x86)\Windows Defender
2013-07-10 09:59:52 ----D---- C:\Program Files (x86)\Internet Explorer
2013-07-10 09:59:49 ----D---- C:\Program Files\Internet Explorer
2013-07-09 18:27:18 ----D---- C:\windows\Minidump
2013-07-09 18:26:45 ----D---- C:\ProgramData\Google
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 epfwwfp;epfwwfp; C:\windows\system32\DRIVERS\epfwwfp.sys [2013-02-14 58416]
R0 fbfmon;fbfmon; C:\windows\system32\drivers\fbfmon.sys [2011-11-11 57952]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2011-02-18 439320]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2013-07-16 39008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-06-18 247216]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 BPntDrv;BPntDrv; C:\windows\system32\drivers\BPntDrv.sys [2011-11-11 13408]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2013-02-14 213416]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2013-01-10 150616]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\windows\system32\DRIVERS\EpfwLWF.sys [2013-01-10 59440]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 epfw;epfw; C:\windows\system32\DRIVERS\epfw.sys [2013-01-10 190232]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2011-11-11 29792]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-10-28 4716608]
R3 clwvd;CyberLink WebCam Virtual Driver; C:\windows\system32\DRIVERS\clwvd.sys [2011-01-29 31088]
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys [2011-02-14 1581184]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2012-12-14 5353888]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-10-21 76912]
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2013-02-25 470256]
R3 vm2uvcflt;Vimicro USB Camera Filter 2; C:\windows\System32\Drivers\vm2uvcflt.sys [2010-09-22 15056]
R3 vm332avs;Lenovo Camera2; C:\windows\System32\Drivers\vm332avs.sys [2010-12-10 234960]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AndNetDiag;LGE AndroidNet USB Serial Port; C:\windows\system32\DRIVERS\lgandnetdiag64.sys [2012-03-06 29184]
S3 ANDNetModem;LGE AndroidNet USB Modem; C:\windows\system32\DRIVERS\lgandnetmodem64.sys [2012-03-06 36352]
S3 andnetndis;LGE AndroidNet NDIS Ethernet Adapter; C:\windows\system32\DRIVERS\lgandnetndis64.sys [2012-03-06 93184]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUVStor.sys [2010-09-30 299520]
S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S3 trufos;trufos; C:\windows\system32\drivers\trufos.sys [2013-07-10 350160]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-03-21 1341664]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-02-18 13336]
S2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-12-21 325656]
S2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-06-20 23808]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-21 2656280]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2012-02-26 1255736]
S4 cphs;Intel(R) Content Protection HECI Service; C:\windows\SysWow64\IntelCpHeciSvc.exe [2012-12-14 277616]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Dříve zavirovaný laptop, prosím o kontrolu
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119528
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Dříve zavirovaný laptop, prosím o kontrolu
Zdravím!
Log vypadá OK. Funguje nyní korektně?
Log vypadá OK. Funguje nyní korektně?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Dříve zavirovaný laptop, prosím o kontrolu
Zdravím,Rudy píše:Zdravím!
Log vypadá OK. Funguje nyní korektně?
ano, zdá se, že ano. Nicméně raději sem ještě ten log připojila pro kotrolu. Zároveń jsem měla zavirovaný i stolní PC, tak jsem založila nové vlákno ohledně toho.
Děkuji moc.
- Rudy
- Site Admin
- Příspěvky: 119528
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Dříve zavirovaný laptop, prosím o kontrolu
Nemáte zač! 

Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.