Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosim o kontrolu logu

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
majjki
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 155
Registrován: 27 úno 2011 16:14
Bydliště: Bratislava

Prosim o kontrolu logu

#1 Příspěvek od majjki »

Zdravím :) Prosim o kontrolu logu:
Logfile of random's system information tool 1.09 (written by random/random)
Run by rodina at 2013-11-14 14:38:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 132 GB (85%) free of 155 GB
Total RAM: 1976 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:39:22, on 14. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
C:\Users\rodina\Downloads\RSIT.exe
C:\Program Files\trend micro\rodina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Přidat do součásti Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
O9 - Extra button: Virtuální klávesnice - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{EED3A478-930D-4A98-B4D9-EA8C3B0B3837}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 4805 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\rodina\AppData\Roaming\Mozilla\Firefox\Profiles\0mou9sl2.default

"url_advisor@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
"virtual_keyboard@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
"content_blocker@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
"anti_banner@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
"online_banking@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-11-06 655040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-11-06 1179840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2013-11-06 434368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2013-11-06 793280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2011-02-11 171032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2011-02-11 137752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-14 14:38:38 ----D---- C:\rsit
2013-11-14 14:38:38 ----D---- C:\Program Files\trend micro
2013-11-14 11:56:14 ----D---- C:\Users\rodina\AppData\Roaming\Malwarebytes
2013-11-14 11:53:31 ----D---- C:\ProgramData\Malwarebytes
2013-11-14 11:53:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-11-14 11:53:30 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-11-14 08:28:28 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 08:28:26 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\wksprtPS.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\wksprt.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\tsgqec.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\rdvidcrl.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-11-14 08:28:24 ----A---- C:\Windows\system32\mstscax.dll
2013-11-14 08:28:24 ----A---- C:\Windows\system32\mstsc.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\wininet.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\urlmon.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\msrating.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\msls31.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\jsIntl.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\iertutil.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\elshyph.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\wextract.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\webcheck.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\vbscript.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\url.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\pngfilt.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\occache.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmler.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmled.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtml.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshta.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeedssync.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\licmgr10.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript9diag.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript9.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\inseng.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\imgutil.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iexpress.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieui.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iesysprep.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iesetup.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iernonce.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iepeers.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieframe.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iedkcs32.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieapfltr.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieapfltr.dat
2013-11-14 08:25:26 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ie4uinit.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\icardie.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\dxtrans.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\dxtmsft.dll
2013-11-14 08:23:21 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-11-13 15:43:00 ----A---- C:\Windows\system32\authui.dll
2013-11-13 15:42:59 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 15:42:59 ----A---- C:\Windows\system32\credui.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\sspicli.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\schannel.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-13 15:42:52 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\secur32.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\lsass.exe
2013-11-13 15:42:51 ----A---- C:\Windows\system32\gdi32.dll
2013-11-13 15:42:50 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-13 15:42:50 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 15:42:50 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 15:42:48 ----A---- C:\Windows\system32\crypt32.dll
2013-11-02 17:43:16 ----D---- C:\ProgramData\WinterSoft
2013-11-02 17:42:56 ----D---- C:\ProgramData\InstallMate
2013-10-18 14:16:06 ----D---- C:\Users\rodina\AppData\Roaming\Macromedia
2013-10-18 10:58:45 ----D---- C:\ProgramData\McAfee
2013-10-18 10:58:41 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-10-18 10:58:40 ----D---- C:\Windows\system32\Macromed

======List of files/folders modified in the last 1 month======

2013-11-14 14:38:51 ----D---- C:\Windows\Prefetch
2013-11-14 14:38:38 ----RD---- C:\Program Files
2013-11-14 14:31:35 ----D---- C:\Windows\System32
2013-11-14 14:31:35 ----D---- C:\Windows\inf
2013-11-14 14:31:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-14 14:29:42 ----D---- C:\Windows\SoftwareDistribution
2013-11-14 14:29:38 ----D---- C:\ProgramData\Kaspersky Lab
2013-11-14 14:28:53 ----D---- C:\Windows
2013-11-14 14:27:35 ----D---- C:\Windows\Temp
2013-11-14 14:26:46 ----SHD---- C:\System Volume Information
2013-11-14 14:26:10 ----D---- C:\Windows\system32\config
2013-11-14 14:10:25 ----D---- C:\Windows\system32\drivers
2013-11-14 14:09:01 ----D---- C:\Windows\sk-SK
2013-11-14 12:08:30 ----D---- C:\Windows\Panther
2013-11-14 12:08:29 ----D---- C:\Windows\Logs
2013-11-14 12:08:29 ----D---- C:\Windows\debug
2013-11-14 11:53:31 ----HD---- C:\ProgramData
2013-11-14 08:34:15 ----D---- C:\Windows\winsxs
2013-11-14 08:32:20 ----D---- C:\Windows\system32\wbem
2013-11-14 08:32:20 ----D---- C:\Windows\system32\sk-SK
2013-11-14 08:32:20 ----D---- C:\Windows\system32\en-US
2013-11-14 08:32:20 ----D---- C:\Windows\system32\drivers\en-US
2013-11-14 08:32:20 ----D---- C:\Program Files\Internet Explorer
2013-11-14 08:32:19 ----D---- C:\Windows\system32\migration
2013-11-14 08:32:19 ----D---- C:\Windows\PolicyDefinitions
2013-11-14 08:32:17 ----D---- C:\Windows\system32\DriverStore
2013-11-14 08:28:40 ----D---- C:\Windows\system32\catroot2
2013-11-14 08:28:40 ----D---- C:\Windows\system32\catroot
2013-11-13 17:17:51 ----D---- C:\Windows\system32\MRT
2013-11-13 17:16:37 ----A---- C:\Windows\system32\MRT.exe
2013-11-10 18:20:27 ----D---- C:\Windows\system32\wdi
2013-11-10 18:03:17 ----D---- C:\Users\rodina\AppData\Roaming\vlc
2013-11-10 13:02:12 ----D---- C:\Windows\system32\NDF
2013-11-06 17:31:55 ----D---- C:\Users\rodina\AppData\Roaming\Skype
2013-11-06 16:57:30 ----SHD---- C:\Windows\Installer
2013-10-27 16:38:18 ----D---- C:\Program Files\CCleaner
2013-10-25 16:18:18 ----SD---- C:\ProgramData\Microsoft
2013-10-25 16:18:15 ----D---- C:\Windows\system32\drivers\UMDF
2013-10-18 16:19:29 ----D---- C:\Windows\system32\LogFiles
2013-10-18 14:16:06 ----SD---- C:\Users\rodina\AppData\Roaming\Microsoft
2013-10-18 10:58:43 ----D---- C:\Windows\system32\Tasks
2013-10-18 10:58:42 ----D---- C:\Windows\Tasks
2013-10-16 12:58:00 ----RD---- C:\Program Files\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2013-11-06 135776]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2013-11-06 575584]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2013-10-07 25696]
R1 klpd;klpd; C:\Windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2013-05-14 45024]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2013-06-06 145120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2013-10-07 25696]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2013-10-07 25696]
R3 netr28;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S4 klflt;klflt; C:\Windows\system32\DRIVERS\klflt.sys [2013-06-08 94304]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [2013-10-07 214512]
R2 Skype C2C Service;Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-10-09 3275136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-07 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-18 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-14 108032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-09-11 118680]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-07 1343400]

-----------------EOF-----------------
Používam: Obrázek___ Obrázek___Obrázek____Obrázek

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#2 Příspěvek od Rudy »

Zdravím!
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\ProgramData\Skype\Toolbars
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:services
Skype C2C Service

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

majjki
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 155
Registrován: 27 úno 2011 16:14
Bydliště: Bratislava

Re: Prosim o kontrolu logu

#3 Příspěvek od majjki »

neviem či som to spravne spravil,tu je log RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by rodina at 2013-11-16 12:42:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 131 GB (84%) free of 155 GB
Total RAM: 1976 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:43:26, on 16. 11. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Users\rodina\Downloads\RSIT.exe
C:\Program Files\trend micro\rodina.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ContentBlockerBrowserHelperObject - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll
O2 - BHO: VirtualKeyboardBrowserHelperObject - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O2 - BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Přidat do součásti Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ie_banner_deny.htm
O9 - Extra button: Virtuální klávesnice - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{EED3A478-930D-4A98-B4D9-EA8C3B0B3837}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 4712 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Users\rodina\AppData\Roaming\Mozilla\Firefox\Profiles\0mou9sl2.default

"url_advisor@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
"virtual_keyboard@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
"content_blocker@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
"anti_banner@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
"online_banking@kaspersky.com"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}]
Content Blocker Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll [2013-11-06 655040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73455575-E40C-433C-9784-C78DC7761455}]
Virtual Keyboard Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll [2013-11-06 1179840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}]
Safe Money Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll [2013-11-06 434368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
URL Advisor Plugin - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll [2013-11-06 793280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2011-02-11 171032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2011-02-11 137752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2011-02-11 172568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-16 12:27:36 ----D---- C:\_OTM
2013-11-16 12:22:16 ----D---- C:\Program Files\Mozilla Firefox
2013-11-14 14:38:38 ----D---- C:\rsit
2013-11-14 14:38:38 ----D---- C:\Program Files\trend micro
2013-11-14 11:56:14 ----D---- C:\Users\rodina\AppData\Roaming\Malwarebytes
2013-11-14 11:53:31 ----D---- C:\ProgramData\Malwarebytes
2013-11-14 11:53:30 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2013-11-14 11:53:30 ----A---- C:\Windows\system32\drivers\mbam.sys
2013-11-14 08:28:28 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-11-14 08:28:26 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\wksprtPS.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\wksprt.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\TSWbPrxy.exe
2013-11-14 08:28:25 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\tsgqec.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\rdvidcrl.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\MsRdpWebAccess.dll
2013-11-14 08:28:25 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys
2013-11-14 08:28:24 ----A---- C:\Windows\system32\mstscax.dll
2013-11-14 08:28:24 ----A---- C:\Windows\system32\mstsc.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\wininet.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\urlmon.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-14 08:25:27 ----A---- C:\Windows\system32\msrating.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\msls31.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\jsIntl.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\iertutil.dll
2013-11-14 08:25:27 ----A---- C:\Windows\system32\elshyph.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\wextract.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\webcheck.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\vbscript.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\url.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\pngfilt.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\occache.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmler.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtmled.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshtml.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\mshta.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeedssync.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\licmgr10.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript9diag.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript9.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\jscript.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\inseng.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\imgutil.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iexpress.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieui.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iesysprep.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iesetup.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iernonce.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iepeers.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieframe.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\iedkcs32.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieapfltr.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ieapfltr.dat
2013-11-14 08:25:26 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\ie4uinit.exe
2013-11-14 08:25:26 ----A---- C:\Windows\system32\icardie.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\dxtrans.dll
2013-11-14 08:25:26 ----A---- C:\Windows\system32\dxtmsft.dll
2013-11-14 08:23:21 ----A---- C:\Windows\system32\TSWorkspace.dll
2013-11-13 15:43:00 ----A---- C:\Windows\system32\authui.dll
2013-11-13 15:42:59 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2013-11-13 15:42:59 ----A---- C:\Windows\system32\credui.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\sspicli.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\schannel.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\lsasrv.dll
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2013-11-13 15:42:53 ----A---- C:\Windows\system32\drivers\cng.sys
2013-11-13 15:42:52 ----A---- C:\Windows\system32\sspisrv.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\secur32.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\ncrypt.dll
2013-11-13 15:42:52 ----A---- C:\Windows\system32\lsass.exe
2013-11-13 15:42:51 ----A---- C:\Windows\system32\gdi32.dll
2013-11-13 15:42:50 ----A---- C:\Windows\system32\nshwfp.dll
2013-11-13 15:42:50 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 15:42:50 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-13 15:42:48 ----A---- C:\Windows\system32\crypt32.dll
2013-11-02 17:43:16 ----D---- C:\ProgramData\WinterSoft
2013-11-02 17:42:56 ----D---- C:\ProgramData\InstallMate
2013-10-18 14:16:06 ----D---- C:\Users\rodina\AppData\Roaming\Macromedia
2013-10-18 10:58:45 ----D---- C:\ProgramData\McAfee
2013-10-18 10:58:41 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2013-10-18 10:58:40 ----D---- C:\Windows\system32\Macromed

======List of files/folders modified in the last 1 month======

2013-11-16 12:42:09 ----D---- C:\Windows\System32
2013-11-16 12:42:09 ----D---- C:\Windows\inf
2013-11-16 12:42:09 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-16 12:40:20 ----D---- C:\Windows\system32\config
2013-11-16 12:37:08 ----D---- C:\ProgramData\Kaspersky Lab
2013-11-16 12:36:59 ----SHD---- C:\System Volume Information
2013-11-16 12:36:50 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-11-16 12:27:37 ----D---- C:\Windows\Tasks
2013-11-16 12:27:37 ----D---- C:\ProgramData\Skype
2013-11-16 12:27:13 ----D---- C:\Windows\Prefetch
2013-11-16 12:25:05 ----D---- C:\Users\rodina\AppData\Roaming\Skype
2013-11-16 12:23:56 ----D---- C:\Windows\Temp
2013-11-16 12:23:48 ----RD---- C:\Program Files
2013-11-15 15:13:33 ----D---- C:\Windows
2013-11-14 19:00:57 ----D---- C:\Windows\system32\drivers
2013-11-14 15:50:16 ----D---- C:\Windows\rescache
2013-11-14 14:29:42 ----D---- C:\Windows\SoftwareDistribution
2013-11-14 14:09:01 ----D---- C:\Windows\sk-SK
2013-11-14 12:08:30 ----D---- C:\Windows\Panther
2013-11-14 12:08:29 ----D---- C:\Windows\Logs
2013-11-14 12:08:29 ----D---- C:\Windows\debug
2013-11-14 11:53:31 ----HD---- C:\ProgramData
2013-11-14 08:34:15 ----D---- C:\Windows\winsxs
2013-11-14 08:32:20 ----D---- C:\Windows\system32\wbem
2013-11-14 08:32:20 ----D---- C:\Windows\system32\sk-SK
2013-11-14 08:32:20 ----D---- C:\Windows\system32\en-US
2013-11-14 08:32:20 ----D---- C:\Windows\system32\drivers\en-US
2013-11-14 08:32:20 ----D---- C:\Program Files\Internet Explorer
2013-11-14 08:32:19 ----D---- C:\Windows\system32\migration
2013-11-14 08:32:19 ----D---- C:\Windows\PolicyDefinitions
2013-11-14 08:32:17 ----D---- C:\Windows\system32\DriverStore
2013-11-14 08:28:40 ----D---- C:\Windows\system32\catroot2
2013-11-14 08:28:40 ----D---- C:\Windows\system32\catroot
2013-11-13 17:17:51 ----D---- C:\Windows\system32\MRT
2013-11-13 17:16:37 ----A---- C:\Windows\system32\MRT.exe
2013-11-10 18:20:27 ----D---- C:\Windows\system32\wdi
2013-11-10 18:03:17 ----D---- C:\Users\rodina\AppData\Roaming\vlc
2013-11-10 13:02:12 ----D---- C:\Windows\system32\NDF
2013-11-06 16:57:30 ----SHD---- C:\Windows\Installer
2013-10-27 16:38:18 ----D---- C:\Program Files\CCleaner
2013-10-25 16:18:18 ----SD---- C:\ProgramData\Microsoft
2013-10-25 16:18:15 ----D---- C:\Windows\system32\drivers\UMDF
2013-10-18 16:19:29 ----D---- C:\Windows\system32\LogFiles
2013-10-18 14:16:06 ----SD---- C:\Users\rodina\AppData\Roaming\Microsoft
2013-10-18 10:58:43 ----D---- C:\Windows\system32\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2013-11-06 135776]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2013-11-06 575584]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2013-10-07 25696]
R1 klpd;klpd; C:\Windows\system32\DRIVERS\klpd.sys [2013-04-12 14432]
R1 kltdi;kltdi; C:\Windows\system32\DRIVERS\kltdi.sys [2013-05-14 45024]
R1 kneps;kneps; C:\Windows\system32\DRIVERS\kneps.sys [2013-06-06 145120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 klkbdflt;Kaspersky Lab KLKBDFLT; C:\Windows\system32\DRIVERS\klkbdflt.sys [2013-10-07 25696]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2013-10-07 25696]
R3 netr28;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28.sys [2012-12-06 2046560]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2011-06-10 394856]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S4 klflt;klflt; C:\Windows\system32\DRIVERS\klflt.sys [2013-06-08 94304]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [2013-10-07 214512]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-07 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-18 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-07 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-14 108032]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-16 119408]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-07 1343400]

-----------------EOF-----------------
Používam: Obrázek___ Obrázek___Obrázek____Obrázek

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#4 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

majjki
Vzorný návštěvník
Vzorný návštěvník
Příspěvky: 155
Registrován: 27 úno 2011 16:14
Bydliště: Bratislava

Re: Prosim o kontrolu logu

#5 Příspěvek od majjki »

Vybavene,vdaka Rudy :) Pekny víkend :)
Používam: Obrázek___ Obrázek___Obrázek____Obrázek

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119320
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosim o kontrolu logu

#6 Příspěvek od Rudy »

Hezký víkend i vám a nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno