Viry v pc a nefunkcni pripojeni pres wifi

[denda79]

Zdravím:-) opět ... Bohužel jsem tu byla nedávno a řešila nefunkční start pc dnes jsem po delší doběsedla k pc, kkterýokupuje převážně dcera a objevila nález dvou viru dnes jsem projela pc znovu kopletnim testem a nic nenasel je opravdu ten bordel pryc? A dnes navic po aktualizaci avastu a naslednem restartu mi nefunguje net pres wifi pripojeni pripojeny je ale internet nejde ( k pevné mu pripojeni pc nedostanu) do te doby sel... Vlastne to je jasne kdyz aktualizace probehla.. nyni pisu z mobilu a log Rsit vlozim jako prilohu nevim jak jinak to udelat + dve fotky nalezu.... Tedy jestli se mi to podari, pokud bude mozna nejaka pomoc moc diky 


Logfile of random's system information tool 1.09 (written by random/random)
Run by Denda at 2013-11-19 17:11:50
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 34 GB (37%) free of 92 GB
Total RAM: 3071 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:11:53, on 19.11.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16520)
Boot mode: Normal

Running processes:
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Mouse Driver\StartAutorun.exe
C:\Windows\mHotkey.exe
C:\Windows\OSDShow.exe
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Windows\Pixart\Pac7302\Monitor.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
C:\Windows\System32\wpcumi.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Users\Denda\AppData\Local\Viber\Viber.exe
C:\Program Files\USB TV\EM28XX\BDARemote.exe
C:\PROGRA~1\WinTV\HCWCITray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mouse Driver\KMConfig.exe
C:\Windows\modps2key.exe
C:\Program Files\Mouse Driver\KMProcess.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Denda\Desktop\programy VIRY.CZ\RSIT.exe
C:\Program Files\trend micro\Denda.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [KMCONFIG] C:\Program Files\Mouse Driver\StartAutorun.exe KMConfig.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ShowOSD] OSDShow.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Viber] "C:\Users\Denda\AppData\Local\Viber\Viber.exe" StartMinimized
O4 - Startup: WinTV-CI CAM Menu.lnk = ?
O4 - Global Startup: BDARemote.lnk = ?
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (file missing)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Mouse Driver\KMWDSrv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--End of file - 6508 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Denda\AppData\Roaming\Mozilla\Firefox\Profiles\7z54i36k.default

prefs.js - "browser.startup.homepage" - "http://www.facebook.com/?ref=hp|http://www.seznam.cz/"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.117 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.0.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
npqtplugin6.dll
QuickTimePlugin.class

C:\Users\Denda\AppData\Roaming\Mozilla\Firefox\Profiles\7z54i36k.default\extensions\
{20a82645-c095-46ed-80e3-08825760534b}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-11-19 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2013-11-19 606544]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KMCONFIG"=C:\Program Files\Mouse Driver\StartAutorun.exe [2008-05-30 212992]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-09-29 61440]
"CHotkey"=C:\Windows\mHotkey.exe [2007-01-15 550912]
"ShowOSD"=C:\Windows\OSDShow.exe [2007-01-15 28672]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"PAC7302_Monitor"=C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"WPCUMI"=C:\Windows\system32\WpcUmi.exe [2006-11-02 176128]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2013-11-19 3568312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"Viber"=C:\Users\Denda\AppData\Local\Viber\Viber.exe [2013-07-31 912904]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
BDARemote.lnk - C:\Program Files\USB TV\EM28XX\BDARemote.exe

C:\Users\Denda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
WinTV-CI CAM Menu.lnk - C:\PROGRA~1\WinTV\HCWCITray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-11-19 17:06:29 ----D---- C:\rsit
2013-11-19 16:15:28 ----D---- C:\Users\Denda\AppData\Roaming\AVAST Software
2013-11-15 22:40:27 ----D---- C:\ProgramData\AVAST Software
2013-11-14 14:39:43 ----A---- C:\Windows\system32\vbscript.dll
2013-11-14 14:39:43 ----A---- C:\Windows\system32\mshtmled.dll
2013-11-14 14:39:41 ----A---- C:\Windows\system32\jsproxy.dll
2013-11-14 14:39:41 ----A---- C:\Windows\system32\ieUnatt.exe
2013-11-14 14:39:41 ----A---- C:\Windows\system32\ieui.dll
2013-11-14 14:39:40 ----A---- C:\Windows\system32\msfeeds.dll
2013-11-14 14:39:39 ----A---- C:\Windows\system32\wininet.dll
2013-11-14 14:39:39 ----A---- C:\Windows\system32\jscript.dll
2013-11-14 14:39:38 ----A---- C:\Windows\system32\url.dll
2013-11-14 14:39:38 ----A---- C:\Windows\system32\jscript9.dll
2013-11-14 14:39:37 ----A---- C:\Windows\system32\iertutil.dll
2013-11-14 14:39:35 ----A---- C:\Windows\system32\urlmon.dll
2013-11-14 14:39:32 ----A---- C:\Windows\system32\ieframe.dll
2013-11-14 14:39:31 ----A---- C:\Windows\system32\mshtml.dll
2013-11-13 12:37:21 ----A---- C:\Windows\system32\crypt32.dll
2013-11-13 12:24:07 ----A---- C:\Windows\system32\gdi32.dll
2013-11-13 12:10:42 ----A---- C:\Windows\system32\IKEEXT.DLL
2013-11-13 12:10:41 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2013-11-09 18:24:39 ----D---- C:\Program Files\Mozilla Firefox
2013-11-07 18:42:36 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2013-11-05 18:51:51 ----D---- C:\Users\Denda\AppData\Roaming\ViberPC
2013-11-04 19:24:19 ----D---- C:\Program Files\Defraggler
2013-11-04 18:50:05 ----SHD---- C:\$RECYCLE.BIN
2013-11-04 18:45:41 ----SD---- C:\32788R22FWJFW
2013-11-03 19:16:39 ----D---- C:\Windows\temp
2013-11-03 14:16:03 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys

======List of files/folders modified in the last 1 month======

2013-11-19 17:11:51 ----D---- C:\Program Files\trend micro
2013-11-19 16:43:47 ----D---- C:\Windows\System32
2013-11-19 16:43:47 ----D---- C:\Windows\inf
2013-11-19 16:43:47 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-11-19 16:12:25 ----D---- C:\Windows\system32\drivers
2013-11-19 16:04:33 ----D---- C:\Windows\Prefetch
2013-11-19 16:04:14 ----D---- C:\Windows\system32\Tasks
2013-11-19 16:03:49 ----D---- C:\Windows\winsxs
2013-11-19 16:03:28 ----D---- C:\Windows
2013-11-19 16:03:15 ----SHD---- C:\System Volume Information
2013-11-19 16:03:00 ----A---- C:\Windows\system32\aswBoot.exe
2013-11-19 15:53:04 ----D---- C:\Windows\system32\catroot2
2013-11-15 22:40:27 ----D---- C:\ProgramData
2013-11-14 15:05:00 ----D---- C:\Windows\rescache
2013-11-14 14:46:42 ----D---- C:\Windows\system32\migration
2013-11-14 14:46:42 ----D---- C:\Program Files\Internet Explorer
2013-11-14 14:46:41 ----D---- C:\Windows\system32\cs-CZ
2013-11-14 14:40:47 ----D---- C:\Windows\system32\catroot
2013-11-14 14:38:02 ----D---- C:\Windows\system32\MRT
2013-11-14 14:33:33 ----D---- C:\Windows\Debug
2013-11-14 14:33:27 ----A---- C:\Windows\system32\mrt.exe
2013-11-13 21:27:13 ----D---- C:\Users\Denda\AppData\Roaming\Skype
2013-11-13 20:22:55 ----D---- C:\Users\Denda\AppData\Roaming\vlc
2013-11-10 10:45:19 ----D---- C:\Windows\Minidump
2013-11-10 09:31:34 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-11-09 18:40:20 ----D---- C:\Program Files\SUPERAntiSpyware
2013-11-09 18:25:16 ----D---- C:\Program Files
2013-11-07 18:42:39 ----SHD---- C:\Windows\Installer
2013-11-07 18:42:39 ----D---- C:\Config.Msi
2013-11-04 19:17:13 ----D---- C:\Users\Denda\AppData\Roaming\Vso
2013-11-04 19:17:11 ----D---- C:\Windows\Panther
2013-11-04 19:17:11 ----D---- C:\Windows\Logs
2013-11-04 19:12:47 ----D---- C:\Program Files\CCleaner
2013-11-04 17:48:44 ----D---- C:\Windows\system32\drivers\etc
2013-11-03 19:19:26 ----A---- C:\Windows\system.ini
2013-11-03 19:17:01 ----D---- C:\Windows\system32\config
2013-11-03 19:15:52 ----D---- C:\Windows\Tasks
2013-11-03 19:12:50 ----D---- C:\Windows\AppPatch
2013-11-03 19:12:49 ----D---- C:\Program Files\Common Files
2013-11-03 18:45:51 ----D---- C:\Windows\system32\System32
2013-11-03 11:53:56 ----D---- C:\Users\Denda\AppData\Roaming\Adobe
2013-10-28 15:39:32 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdis;avast! Firewall NDIS Filter Service; C:\Windows\system32\DRIVERS\aswNdis.sys [2013-03-07 12112]
R0 aswNdis2;avast! Firewall NDIS Driver; C:\Windows\system32\drivers\aswNdis2.sys [2013-11-19 247192]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-11-19 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-11-19 178304]
R1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [2013-11-19 26136]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr.sys [2013-11-19 54832]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2013-11-19 774392]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2013-11-19 403440]
R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2013-11-19 57672]
R2 aswFsBlk;aswFsBlk; \??\C:\Windows\system32\drivers\aswFsBlk.sys [2013-11-19 35656]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-11-19 70384]
R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-09-30 4450816]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2010-06-14 36608]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture; C:\Windows\system32\drivers\HCW85BDA.sys [2009-09-11 1440384]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 PAC7302;PAC7302 VGA USB Camera; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 461824]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-07-12 73344]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
R3 ZY272NV32;ZyXEL 802.11n NWD272N Driver(vista); C:\Windows\system32\DRIVERS\WLANUHN.sys [2010-01-25 475136]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-19 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2011-10-27 78136]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 KMWDFILTERx86;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 25088]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\mbamswissarmy.sys [2013-11-03 40776]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-09-30 4450816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2010-04-27 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2010-04-27 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\Windows\system32\DRIVERS\ss_bserd.sys [2010-04-27 100224]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2011-10-27 181432]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2011-10-27 181432]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]
S3 WinUSB;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2009-07-14 34944]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 ZY271NV32;ZyXEL 802.11n NWD271N Driver(vista); C:\Windows\system32\DRIVERS\WLANUHN.sys [2010-01-25 475136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2009-09-30 733184]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2013-11-19 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [2013-11-19 116776]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2010-07-04 238952]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Mouse Driver\KMWDSrv.exe [2009-08-31 1821184]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-09 119408]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[denda79]

Jelikoz . txt vlozit nejde tak jsem zkoumala a vyzkoumala vlozeni pres mobil a ted ty dva nalezy..

[denda79]

Jeden ze 4.11. Druhy z 15.11.

[Márty84]

Zdravim

V nouzovem rezimu s praci v siti internet bezi?

Nastaveni site mate sptavne? (mohlo se treba resetovat)

Mobilem (pripadne, pokud doma mate, dalsim pc) se na tu wifi pripojite?

Zkuste obnovu systemu k datu, kdy net jeste sel.

Dejte vedet jak to vypada a podle toho budeme pokracovat. To co predtim Avast nasel by melo byt pryc.

[denda79]

teď jsem zkusila zrušit pripojení wifi a znovu a nic nepomohlo bylo mi podezřelé že to nejde až po aktualizaci avastu... nyní tu jsem a avast a veškeré jeho štíty mám prozatím na 10 min vypnuté a net mi jde ... asi to fakt je tou aktualizací

[denda79]

další poznatek avast se při vypnutí štítů seká jak šílený, dala jsem vypnout na 10 min a po 10 min se nezapnul, když jsem se chtěla kouknout jestli je aktivní tak se sekl a "neodpovídá" ani pokus vypnutí ve správci úloh nebyl úspěšný. Podařilo se až po odhlášení uživatele, a opětovném startu... ikona avastu byla na liště s trojúhelníkem s vykřičníkem všechny štíty zapnuté krom webového - internet šel pri pokusu zapnout i ten se opět seknul ... pomohl až tvrdý restart ... naběhl s plnou ochranou ale opět nešel net ... nyní při pokusu o vypnutí jen webového štítu opět sekanec, ale pravděpodobně je vypnutý výstražný trojúhelník u ikony a net mi funguje ....
chjo ta aktualizace asi nic moc

[Márty84]

Zkuste Avast preinstalovat. Kdyz to nezabere, pouzijte ten bod obnovy. Dejte vedet, jestli to pomohlo a podle toho se zaridime dal

[denda79]

tak přeinstalováno a vše je ok aspoň to tak vypadá ...

teď během psaní odpovědi mi opět Avast zamrznul, musela jsem natvrdo restartovat celý pc, všimla jsem si, že mi oproti včerejšku naskákalo spoustu Avast-doplňků co aktualizace přinesla (miniapp do postraního panelu, integrace do firefoxu) tak snad to už bude ok
opravdu tu neplechu dělá asi on a jeho aktualizace

jestli je pc tedy i čistý od toho dříve nalezeného bordýlku a v logu není nic co by se Vám nelíbilo, tak to můžem asi ukončit že?

[Márty84]

Takze ted to tedy uz jde vsechno jak ma? Jinak jste si asi aktivovala zkusebni verzi Avast Internet Security, ze? Protoze v logu vidim i Firewall od Avastu.


Precejen bych tam pustil uplnou kontrolu s MBAM.

[denda79]

Nee, neni to zkušební, mam koupenou licenci na Avast internet security. Snad by mel fungovat vcera jak se mi sekl tak uz jsem to nepokousela.... Prozkoumam to a projedu MBAMem az budu vecer doma.

[Márty84]

Ahaaa, tak to jo Moc se s tim nesetkavam, ze by to mel nekdo koupene OK, prozkoumavejte a dejte vedet

[denda79]

moooc se omlouvám za neaktivitu ale práce mě pohltila ... jdu konečně na to

[denda79]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.29.04

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Denda :: DENDA-PC [administrátor]

Ochrana: Povolena

29.11.2013 17:54:41
mbam-log-2013-11-29 (17-54-41).txt

Typ: Kompletní kontrola (C:\|H:\|K:\|M:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 465602
Uplynulý čas: 2 hodin, 25 minut, 41 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[Márty84]

Ach ta prace, neda pokoj, ze? To znam


MBAM odinstalujte


Vypada to v poradku, ani RSIT neukazuje nic podezreleho. Jak to tedy vypada s pc? Chcete hlubsi kontrolu, nebo vse bezi jak ma a muzem to uzavrit?



25.12. pro neaktivitu http://forum.viry.cz/viewtopic.php?f=12&t=123975