Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Pada mi proces explorer.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Pada mi proces explorer.exe

#1 Příspěvek od branno »

Zdravim neviete mi pomoct tak 2x za den mi stalre restartuje proces v spravca uloh explorer.exe z nicoho nic nechapem tomu, predtym mi to nerobilo iba posledne 2 tyzdne. Mam Windows 7 home premium. Za pomoc budem vdacny . Pridavam log
Logfile of random's system information tool 1.10 (written by random/random)
Run by Brano at 2014-07-08 09:01:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 530 GB (56%) free of 954 GB
Total RAM: 8144 MB (75% free)


======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
atieclxx
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1796
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\inf\msprcph\msprcph.exe -o stratum+tcp://mint.bitminter.com:3333 -u vickyya_girlbtc -p minethat
\??\C:\Windows\system32\conhost.exe "222690257-14923598711323827573-1284452280-54044237-1178729158449130690910581001
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-dd11e516-5d9f-43e0-b150-9c68455924a6 -SystemEventPortName:HostProcess-259eef15-946e-453e-90be-31b8c264c3d9 -IoCancelEventPortName:HostProcess-48296d5b-06f2-4521-91b9-35b0d4745d9f -NonStateChangingEventPortName:HostProcess-8569c2d9-c4da-4769-a7f2-8459245081eb -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:50a392b5-7345-4a05-9c80-f996cadf382c -DeviceGroupId:WpdFsGroup
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\AUDIODG.EXE 0x514
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3480.1de34790.648653889 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3480 "\\.\pipe\gecko-crash-server-pipe.3480" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash724.68A7A378.3317 --host-broker-channel=Flash724.68A7A378.27337 --host-pid=724 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=2192.0017F26C.1410633474 --proxy-stub-channel=Flash724.68A7A378.3317 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\trend micro\Brano.exe" /silentautolog
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Brano\Downloads\RSITx64(1).exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4ab95ae36ed2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4ab95c120830.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\1jow2vj5.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
npwachk.dll

C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\1jow2vj5.default\extensions\
{746505DC-0E21-4667-97F8-72EA6BCF5EEF}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-06-12 6548112]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader]
C:\Program Files (x86)\VDownloader\VDownloader.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files (x86)\Winamp\winampa.exe [2010-12-02 74752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-08-30 676608]
"NtVdmSrv"=C:\Windows\inf\ntvdm.vbe [2013-06-14 884]
"MSStp"=C:\Windows\system32\msstp.vbe []
"mncmhhgSrv"=C:\Windows\inf\mncmhhg.vbe []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-07-08 08:52:59 ----D---- C:\Program Files\trend micro
2014-07-08 08:52:58 ----D---- C:\rsit
2014-07-06 13:43:14 ----SD---- C:\Windows\system32\CompatTel
2014-07-06 13:36:06 ----SHD---- C:\Config.Msi
2014-07-06 13:22:29 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-07-06 13:22:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-07-06 13:22:29 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-07-06 13:22:28 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-07-06 13:22:28 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-07-06 13:22:28 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-07-06 13:22:28 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-07-06 13:22:28 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-07-06 13:22:28 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-06 13:22:28 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-07-06 13:22:27 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-07-06 13:22:27 ----A---- C:\Windows\system32\urlmon.dll
2014-07-06 13:22:27 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-06 13:22:27 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-06 13:22:27 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-06 13:22:27 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-06 13:22:26 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-07-06 13:22:26 ----A---- C:\Windows\system32\iesetup.dll
2014-07-06 13:22:26 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-07-06 13:22:25 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-07-06 13:22:25 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-06 13:22:25 ----A---- C:\Windows\system32\iertutil.dll
2014-07-06 13:22:25 ----A---- C:\Windows\system32\iernonce.dll
2014-07-06 13:22:24 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-06 13:22:24 ----A---- C:\Windows\system32\ieui.dll
2014-07-06 13:22:24 ----A---- C:\Windows\system32\ieframe.dll
2014-07-06 13:22:24 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\wininet.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\vbscript.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\jscript9.dll
2014-07-06 13:22:23 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-06 13:22:23 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-06 13:22:22 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-06 13:22:22 ----A---- C:\Windows\system32\msrating.dll
2014-07-06 13:22:22 ----A---- C:\Windows\system32\mshtml.dll
2014-07-06 13:18:39 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-07-06 13:18:39 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-07-06 13:18:39 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-07-06 13:18:39 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-06 13:18:39 ----A---- C:\Windows\system32\kerberos.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\winlogon.exe
2014-07-06 13:18:38 ----A---- C:\Windows\system32\wdigest.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\schannel.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\objsel.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-07-06 13:18:38 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\KernelBase.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-07-06 13:18:38 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\dimsroam.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\cngprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\capiprovider.dll
2014-07-06 13:18:38 ----A---- C:\Windows\system32\adprovider.dll
2014-07-06 13:18:37 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-07-06 13:18:37 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-07-06 13:18:37 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-07-06 13:18:37 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-07-06 13:18:37 ----A---- C:\Windows\system32\wincredprovider.dll
2014-07-06 13:18:37 ----A---- C:\Windows\system32\sspisrv.dll
2014-07-06 13:18:37 ----A---- C:\Windows\system32\sspicli.dll
2014-07-06 13:18:37 ----A---- C:\Windows\system32\secur32.dll
2014-07-06 13:18:37 ----A---- C:\Windows\system32\lsass.exe
2014-07-06 13:18:37 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-07-06 13:18:37 ----A---- C:\Windows\system32\credssp.dll
2014-07-06 13:18:18 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-07-06 13:18:18 ----A---- C:\Windows\system32\shell32.dll
2014-07-06 13:18:16 ----A---- C:\Windows\SYSWOW64\iologmsg.dll
2014-07-06 13:18:16 ----A---- C:\Windows\system32\iologmsg.dll
2014-07-06 13:18:16 ----A---- C:\Windows\system32\drivers\storport.sys
2014-07-06 13:18:16 ----A---- C:\Windows\system32\drivers\msiscsi.sys
2014-07-06 13:18:16 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2014-07-06 13:17:30 ----A---- C:\Windows\system32\aepdu.dll
2014-07-06 13:17:29 ----A---- C:\Windows\SYSWOW64\msxml6r.dll
2014-07-06 13:17:29 ----A---- C:\Windows\SYSWOW64\msxml6.dll
2014-07-06 13:17:29 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-07-06 13:17:29 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-07-06 13:17:29 ----A---- C:\Windows\system32\msxml6r.dll
2014-07-06 13:17:29 ----A---- C:\Windows\system32\msxml6.dll
2014-07-06 13:17:29 ----A---- C:\Windows\system32\msxml3r.dll
2014-07-06 13:17:29 ----A---- C:\Windows\system32\msxml3.dll
2014-07-06 13:17:29 ----A---- C:\Windows\system32\aeinv.dll
2014-07-06 13:17:28 ----A---- C:\Windows\system32\drivers\tcpip.sys
2014-07-06 13:17:28 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS
2014-07-06 13:17:26 ----A---- C:\Windows\SYSWOW64\usp10.dll
2014-07-06 13:17:26 ----A---- C:\Windows\system32\usp10.dll
2014-07-06 13:16:04 ----A---- C:\Windows\system32\drivers\ntfs.sys
2014-07-06 13:16:03 ----A---- C:\Windows\SYSWOW64\setup16.exe
2014-07-06 13:16:03 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2014-07-06 13:16:03 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2014-07-06 13:16:03 ----A---- C:\Windows\system32\wow64win.dll
2014-07-06 13:16:03 ----A---- C:\Windows\system32\wow64cpu.dll
2014-07-06 13:16:03 ----A---- C:\Windows\system32\wow64.dll
2014-07-06 13:16:03 ----A---- C:\Windows\system32\ntvdm64.dll
2014-07-06 13:16:03 ----A---- C:\Windows\system32\kernel32.dll
2014-07-06 13:16:02 ----A---- C:\Windows\SYSWOW64\wow32.dll
2014-07-06 13:16:02 ----A---- C:\Windows\SYSWOW64\user.exe
2014-07-06 13:16:02 ----A---- C:\Windows\SYSWOW64\instnm.exe
2014-06-25 21:48:34 ----D---- C:\ProgramData\KONAMI
2014-06-25 12:19:34 ----D---- C:\Program Files (x86)\KONAMI
2014-06-20 16:10:29 ----D---- C:\ProgramData\Origin
2014-06-14 11:19:31 ----D---- C:\Program Files (x86)\Creative
2014-06-14 11:19:31 ----A---- C:\Windows\SYSWOW64\eax.dll
2014-06-14 11:19:30 ----A---- C:\Windows\IsUninst.exe
2014-06-09 11:17:36 ----D---- C:\Program Files (x86)\Innovative Solutions
2014-06-09 11:13:04 ----D---- C:\Users\Brano\AppData\Roaming\DRPSu
2014-06-09 11:13:04 ----D---- C:\Program Files\DriverPack Solution Installer 13

======List of files/folders modified in the last 1 month======

2014-07-08 09:01:03 ----D---- C:\Windows\Temp
2014-07-08 08:52:59 ----RD---- C:\Program Files
2014-07-08 08:34:05 ----D---- C:\Windows\system32\config
2014-07-07 23:07:14 ----D---- C:\Users\Brano\AppData\Roaming\uTorrent
2014-07-07 09:46:18 ----D---- C:\Windows\Microsoft.NET
2014-07-07 08:56:00 ----RSD---- C:\Windows\assembly
2014-07-06 13:59:56 ----D---- C:\Windows\winsxs
2014-07-06 13:43:16 ----D---- C:\Windows\SysWOW64
2014-07-06 13:43:16 ----D---- C:\Windows\system32\drivers
2014-07-06 13:43:16 ----D---- C:\Windows\System32
2014-07-06 13:43:16 ----D---- C:\Program Files\Internet Explorer
2014-07-06 13:43:15 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-06 13:43:15 ----D---- C:\Windows\system32\en-US
2014-07-06 13:43:15 ----D---- C:\Windows\PolicyDefinitions
2014-07-06 13:43:15 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-06 13:43:14 ----D---- C:\Windows\AppPatch
2014-07-06 13:43:13 ----D---- C:\Windows\system32\DriverStore
2014-07-06 13:42:17 ----D---- C:\Windows\system32\catroot
2014-07-06 13:40:31 ----D---- C:\Windows\system32\MRT
2014-07-06 13:38:47 ----SHD---- C:\Windows\Installer
2014-07-06 13:37:48 ----RD---- C:\Program Files (x86)
2014-07-06 13:35:28 ----D---- C:\ProgramData\Microsoft Help
2014-07-06 13:34:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-07-06 13:34:26 ----D---- C:\Windows\inf
2014-07-06 13:34:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-06 13:32:59 ----D---- C:\Windows\Prefetch
2014-07-06 13:31:25 ----D---- C:\Program Files (x86)\Microsoft Works
2014-07-06 13:30:43 ----A---- C:\Windows\win.ini
2014-07-06 13:28:19 ----SHD---- C:\System Volume Information
2014-07-06 13:17:55 ----D---- C:\Windows\system32\catroot2
2014-07-04 14:29:41 ----D---- C:\Users\Brano\AppData\Roaming\vlc
2014-06-25 21:48:34 ----HD---- C:\ProgramData
2014-06-25 12:19:13 ----D---- C:\Hry
2014-06-20 16:09:21 ----D---- C:\Program Files (x86)\Common Files
2014-06-18 15:06:47 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-06-14 11:19:37 ----D---- C:\Windows

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-12-19 381440]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-08-30 11833856]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-08-30 608768]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2012-08-20 138568]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2012-08-20 416072]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-04-24 96768]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-06-12 726160]
S3 a0hcdrto;a0hcdrto; C:\Windows\system32\drivers\a0hcdrto.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-08-30 241152]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-30 361984]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 136176]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 111616]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#2 Příspěvek od Márty84 »

Zdravim :)

Nedavejte prosim logy do Quete, ani Code. Spatne se to pak cte.

Mate zavirovano :boxed:


:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.


:arrow: Udelejte kontrolu s MBAM. Test nastavte podle tohoto navodu http://forum.viry.cz/viewtopic.php?f=29&t=137928 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#3 Příspěvek od branno »

Ahoj, nech sa páči

1. Scan

# AdwCleaner v3.214 - Report created 08/07/2014 at 12:50:08
# Updated 29/06/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Brano - BRANO-PC
# Running from : C:\Users\Brano\Downloads\adwcleaner_3.214.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\ShopperPro
Folder Deleted : C:\Program Files (x86)\ShopperPro
Folder Deleted : C:\Program Files\DCE
Folder Deleted : C:\Users\Brano\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\1jow2vj5.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF}
File Deleted : C:\Users\Brano\AppData\Local\Temp\Uninstall.exe
File Deleted : C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
File Deleted : C:\Windows\System32\Tasks\ShopperPro

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\pokki
Key Deleted : HKLM\SOFTWARE\Classes\AppID\NCTAudioFile3.DLL
Key Deleted : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Key Deleted : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5E50AE1D-BC76-418B-94C4-EFEAC0CEF80C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD5175E2-7CC1-418C-B66C-0AB95DAD4103}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{43B4B831-F41F-4F73-8F14-4FFF0BA75B1B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : [x64] HKLM\SOFTWARE\Goobzo

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (sk)

[ File : C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\1jow2vj5.default\prefs.js ]

Line Deleted : user_pref("extensions.crossrider.bic", "14307617a09d5854306c6e28605ff16a");

[ File : C:\Users\Oco\AppData\Roaming\Mozilla\Firefox\Profiles\yf1a3o2g.default\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Oco\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [3888 octets] - [08/07/2014 12:39:01]
AdwCleaner[S0].txt - [3722 octets] - [08/07/2014 12:50:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3782 octets] ##########


2. SCAN


Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
http://www.malwarebytes.org

Verzia databázy: v2013.04.04.07

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17126
Brano :: BRANO-PC [administrátor]

Ochrana: Zapnuté

8. 7. 2014 13:00:17
MBAM-log-2014-07-08 (13-51-25).txt

Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 458358
Uplynutý čas: 50 min, 46 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 2
C:\Program Files\Adobe\Adobe After Effects CS6\Support Files\amtlib.dll (PUP.RiskwareTool.CK) -> Žiadna úloha nevykonaná.
C:\Program Files\Sony\Vegas Pro 11.0\sony.vegas11_64bit_keygen-patch.exe (PUP.Hacktool.Patcher) -> Žiadna úloha nevykonaná.

(koniec)




Inač pri tom druhom programe som mal asi nejakú inu verziu stiahol som ju od vás len trošku inak mi to zobrazilo tak som dal úplnu kontrolu a výpis sem pridávam, nič som nemazal.
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#4 Příspěvek od Márty84 »

Stahl jste starou verzi MBAM. Ta tu havet nedetekovala. To co MBAM nasel, doporucuji odstranit, pak MBAM odinstalujte.


Takze pritvrdime.


:!: Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.) :!:

:!: Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

:arrow: Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

:!: Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
:!: Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#5 Příspěvek od branno »

a sme pritvrdili ze sa mi pokazil windows ach...

ten vas program spravil vsetko co mal potom restartol a cierna obrazovka... skusal som aj vratit o 4 dni spat windows nepomohlo..

ked zapenm hodinu naciatava vitajte a potom nabehne cierna obrazovka musim dat spravcu uloh vypnut proces explorer.exe a na novo ho spustit mozete mi s tym prosim vas pomoct!! kaslat aj ten predchadzajuci problem toto je horsie a ziadny log mi nedalo...
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#6 Příspěvek od Márty84 »

No ono to mozna souvisi, te haveti tam je dost, tak se asi brani. Zkuste nouzovy rezim.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#7 Příspěvek od branno »

dal som 4 dni dozadu uz je to ok, ale ten program mi len problemy porobil vo windowse radsej ho uz instalovat nebudem to iste aj ten minuli program co som robil scan spravil viac skodi lebo ako som na druhy den zapol pc tak mi ho spustalo asi 5 minut, mam novy pc asi polroka takze zapne mi ho za par sekund ako som vymazal ten program tak uz problem nebol, nemyslim ze to je prave virusom lebo s tymto som nemal v zivote problem jediny problem ze mi par krat do dna tak 1-2x restartne tu listu dolnu teda cely explorer.exe, nenapada vas este nieco? ale bez podobnych programov

// inac ked som instaloval ten program a robil Scan tak mi v tej tabulke aj pisalo asi 5x ze mase subory vo Windowse, ono to samo spustilo, som to chcel prvo vypnut hned lebo sa mi to nepozdavalo..
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#8 Příspěvek od Márty84 »

Jo vam se to nepozdavalo, hm :?: :D A kde myslite, ze ta havet je??? Samozrejme ze ve windows.
C:\Windows\inf\ntvdm.vbe
C:\Windows\system32\msstp.vbe
C:\Windows\inf\mncmhhg.vbe
atd.

Zavery se obvykle delaji az po konecnem vycisteni a ne po prvnim kroku. Ale do toho nehodlam vrtat. Programy pouzit nechcete a bez nich nemuzu sepsat skripty, takze jsme ve slepe ulicce a myslim, ze tema muzem uzavrit :39:
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#9 Příspěvek od branno »

Tak ale nemal som inu moznost ako nahle mi restartlo pc tak zobrazila sa cierna obrazovka a neslo s tym nic robit jedine manualne restartovat explorer a navyse mi nespravilo neviem preco ziadny log hladal som to v ceste ktoru ste mi napisali nebolo to tam a ani kde bol program instalovany, tiez som to skusal cez vyhladac najst vobec nic
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#10 Příspěvek od Márty84 »

Ja vam nevycitam, ze jste dal bod obnovy. Ale nechcete pouzit zadny program, tudiz ja nemam jak cistit a timpadem neni co resit :James008:
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#11 Příspěvek od branno »

v poriadku vyskúšam dalšie programy aké teda navrhujete? ten posledný nevyšiel nespravilo mi záznam z neho neviem prečo
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#12 Příspěvek od Márty84 »

Dejte novy log z RSIT, at vidim, co se tam po te obnove zmenilo.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#13 Příspěvek od branno »

Nech sa páči


Logfile of random's system information tool 1.10 (written by random/random)
Run by Brano at 2014-07-11 09:37:59
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 541 GB (57%) free of 954 GB
Total RAM: 8144 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:38:02, on 11. 7. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Windows\inf\msprcph\msprcph.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
C:\Program Files\trend micro\Brano.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Pomocník pri prihlasovaní v konte Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NtVdmSrv] C:\Windows\inf\ntvdm.vbe
O4 - HKLM\..\Run: [MSStp] C:\Windows\system32\msstp.vbe
O4 - HKLM\..\Run: [mncmhhgSrv] C:\Windows\inf\mncmhhg.vbe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Alcohol Virtual Drive Auto-mount Service (AxAutoMntSrv) - Alcohol Soft Development Team - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7020 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
atieclxx
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"
"C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 1756
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
C:\Windows\inf\msprcph\msprcph.exe -o stratum+tcp://mint.bitminter.com:3333 -u vickyya_girlbtc -p minethat
\??\C:\Windows\system32\conhost.exe "7081353061361937376756797658-13136834421167457942-1180989713192959353-1472169194
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=2756.178f3360.1522432718 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 2756 "\\.\pipe\gecko-crash-server-pipe.2756" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --proxy-stub-channel=Flash2124.6A7BA378.1817 --host-broker-channel=Flash2124.6A7BA378.20292 --host-pid=2124 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe" --channel=1696.001CF454.518784225 --proxy-stub-channel=Flash2124.6A7BA378.1817 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll" --host-npapi-version=27 --type=renderer
C:\Windows\system32\AUDIODG.EXE 0x538
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe5_ Global\UsGthrCtrlFltPipeMssGthrPipe5 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Brano\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4ab95ae36ed2.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4ab95c120830.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\1jow2vj5.default

prefs.js - "browser.startup.homepage" - "www.google.sk"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll


C:\Program Files (x86)\Mozilla Firefox\plugins\
NPOFF12.DLL
nppdf32.dll
npwachk.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-06-12 6548112]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5618456]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04 446392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader]
C:\Program Files (x86)\VDownloader\VDownloader.exe /silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files (x86)\Winamp\winampa.exe [2010-12-02 74752]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-08-30 676608]
"NtVdmSrv"=C:\Windows\inf\ntvdm.vbe [2013-06-14 884]
"MSStp"=C:\Windows\system32\msstp.vbe []
"mncmhhgSrv"=C:\Windows\inf\mncmhhg.vbe []

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"VIDC.FFDS"=ff_vfw.dll
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-07-11 09:37:59 ----D---- C:\rsit
2014-07-09 16:54:22 ----D---- C:\Windows\temp
2014-07-09 16:39:31 ----D---- C:\Qoobox
2014-07-09 16:34:55 ----D---- C:\Windows\erdnt
2014-07-08 12:58:45 ----D---- C:\Users\Brano\AppData\Roaming\Malwarebytes
2014-07-08 12:58:33 ----D---- C:\ProgramData\Malwarebytes
2014-07-08 08:52:59 ----D---- C:\Program Files\trend micro
2014-07-06 13:36:06 ----SHD---- C:\Config.Msi
2014-06-25 21:48:34 ----D---- C:\ProgramData\KONAMI
2014-06-25 12:19:34 ----D---- C:\Program Files (x86)\KONAMI
2014-06-20 16:10:29 ----D---- C:\ProgramData\Origin
2014-06-14 11:19:31 ----D---- C:\Program Files (x86)\Creative
2014-06-14 11:19:31 ----A---- C:\Windows\SYSWOW64\eax.dll
2014-06-14 11:19:30 ----A---- C:\Windows\IsUninst.exe

======List of files/folders modified in the last 1 month======

2014-07-11 09:38:02 ----D---- C:\Windows\Prefetch
2014-07-11 08:28:05 ----D---- C:\Windows\system32\config
2014-07-09 20:11:57 ----D---- C:\Users\Brano\AppData\Roaming\uTorrent
2014-07-09 17:50:57 ----SHD---- C:\System Volume Information
2014-07-09 17:15:05 ----D---- C:\Windows\Tasks
2014-07-09 17:15:05 ----D---- C:\Windows\SYSWOW64\wbem
2014-07-09 17:15:05 ----D---- C:\Windows\SysWOW64
2014-07-09 17:15:05 ----D---- C:\Windows\system32\wfp
2014-07-09 17:15:05 ----D---- C:\Windows\system32\wbem
2014-07-09 17:15:05 ----D---- C:\Windows\system32\en-US
2014-07-09 17:15:05 ----D---- C:\Windows\System32
2014-07-09 17:15:04 ----D---- C:\Program Files\Internet Explorer
2014-07-09 17:15:02 ----D---- C:\Windows\winsxs
2014-07-09 17:15:00 ----D---- C:\Windows
2014-07-09 17:14:08 ----D---- C:\Windows\SYSWOW64\en-US
2014-07-09 17:14:07 ----RSD---- C:\Windows\Media
2014-07-09 17:14:07 ----D---- C:\Windows\system32\DriverStore
2014-07-09 17:14:07 ----D---- C:\Windows\system32\drivers\etc
2014-07-09 17:14:07 ----D---- C:\Windows\system32\drivers
2014-07-09 17:14:07 ----D---- C:\Windows\system32\catroot2
2014-07-09 17:14:07 ----D---- C:\Windows\PolicyDefinitions
2014-07-09 17:14:07 ----D---- C:\Windows\inf
2014-07-09 17:14:07 ----D---- C:\Windows\AppPatch
2014-07-09 17:14:07 ----D---- C:\Program Files (x86)\Internet Explorer
2014-07-09 17:14:06 ----D---- C:\Windows\system32\Tasks
2014-07-09 17:14:06 ----D---- C:\Windows\system32\CodeIntegrity
2014-07-09 17:14:05 ----SHD---- C:\Windows\Installer
2014-07-09 17:14:04 ----RSD---- C:\Windows\assembly
2014-07-09 17:13:55 ----D---- C:\Users\Brano\AppData\Roaming\Winamp
2014-07-09 17:13:55 ----D---- C:\Users\Brano\AppData\Roaming\vlc
2014-07-09 17:13:55 ----D---- C:\Users\Brano\AppData\Roaming\OpenCandy
2014-07-09 17:13:53 ----RD---- C:\Program Files (x86)
2014-07-09 17:13:53 ----D---- C:\ProgramData\Microsoft Help
2014-07-09 17:13:53 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-07-09 17:13:53 ----D---- C:\Program Files (x86)\ShopperPro
2014-07-09 17:13:53 ----D---- C:\Program Files (x86)\Microsoft Works
2014-07-09 17:13:51 ----SHD---- C:\$RECYCLE.BIN
2014-07-09 17:13:16 ----D---- C:\Windows\registration
2014-07-09 17:12:51 ----D---- C:\Windows\system32\catroot
2014-07-09 17:12:41 ----D---- C:\Windows\Microsoft.NET
2014-07-09 17:11:33 ----RD---- C:\Program Files
2014-07-09 17:11:33 ----HD---- C:\ProgramData
2014-07-09 17:11:18 ----D---- C:\Program Files (x86)\Common Files
2014-07-06 13:42:04 ----D---- C:\Windows\system32\MRT
2014-06-25 12:19:13 ----D---- C:\Hry
2014-06-18 15:06:47 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 62136]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-12-19 381440]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 239320]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 168256]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 44120]
R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2012-04-09 57472]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 220232]
R2 npf;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2010-01-27 47632]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-08-30 11833856]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-08-30 608768]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2012-08-20 138568]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2012-08-20 416072]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-04-24 96768]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-06-12 726160]
S3 aztroqlw;aztroqlw; C:\Windows\system32\drivers\aztroqlw.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-08-30 241152]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-30 361984]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2013-09-12 1337752]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]
S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2012-01-05 75624]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-18 136176]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 NMIndexingService;NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Obrázek
Nahoru
Márty84
VIP
VIP
Příspěvky: 21679
Registrován: 05 pro 2009 20:08
Bydliště: Ostrava

Re: Pada mi proces explorer.exe

#14 Příspěvek od Márty84 »

Fuj :arcisit: Porad je to prolezle haveti :boxed:


:!: Vypnete antivir, at nebrani programu v praci.
:arrow: Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
AdobeARMservice
gupdate
gupdatem
NMIndexingService

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\inf\msprcph\msprcph.exe
C:\Windows\inf\ntvdm.vbe
C:\Windows\system32\msstp.vbe
C:\Windows\inf\mncmhhg.vbe
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4ab95ae36ed2.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4ab95c120830.job

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeAAMUpdater-1.0"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader] /64
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] /64
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"NtVdmSrv"=-
"MSStp"=-
"mncmhhgSrv"=-
Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz

Možnost podpořit naše fórum https://platba.viry.cz/payment/

Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Nahoru
branno
Návštěvník
Návštěvník
Příspěvky: 83
Registrován: 08 říj 2008 12:04
Kontaktovat uživatele:
Kontaktovat uživatele branno

Re: Pada mi proces explorer.exe

#15 Příspěvek od branno »

A znova ked som zapol pc dlho nacitavalo a cierna obrazovka uz som myslel ze znova musim obnovit system tak som sa odhlasil z uctu potom znova prihlasil to iste robilo dlho nacitavalo a potom napisalo ze program sa uspesne vykonal a dalo mi log cize ten prvy program som mal asi takto urobit a slo by vsetko v poriadku ospravedlnujem sa ze som robil unahlene zavery s tym ze mi ten program viac uskodil ale zlakol som sa kedze mam vela gb dat o ktore nechcem prist a nemam moznost to ako na rychlo zalohovat...

//inac ako som spustil tento vas program posledny tak tak mi ide po tichu pc ako uz dlho nie, ani nepocut ze je vobec zapnuty :)

nech sa paci log:



All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Brano
->Temp folder emptied: 23428154 bytes
->Temporary Internet Files folder emptied: 10577331 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 403888724 bytes
->Google Chrome cache emptied: 77085870 bytes
->Flash cache emptied: 48908 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 56475 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Oco
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 23239 bytes
->FireFox cache emptied: 383110897 bytes
->Google Chrome cache emptied: 6494931 bytes
->Flash cache emptied: 8392 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 31012 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 41028 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 43276521 bytes
RecycleBin emptied: 796907881 bytes

Total Files Cleaned = 1 664,00 mb


[EMPTYFLASH]

User: All Users

User: Brano
->Flash cache emptied: 0 bytes

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Oco
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTM Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
Service NMIndexingService stopped successfully!
Service NMIndexingService deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\inf\msprcph\msprcph.exe moved successfully.
C:\Windows\inf\ntvdm.vbe moved successfully.
File/Folder C:\Windows\system32\msstp.vbe not found.
File/Folder C:\Windows\inf\mncmhhg.vbe not found.
C:\Windows\tasks\GoogleUpdateTaskMachineCore1cf4ab95ae36ed2.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA1cf4ab95c120830.job moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9030D464-4C02-4ABF-8ECC-5164760863C6}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\MSStp deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\mncmhhgSrv deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 07112014_113113

Files moved on Reboot...
C:\Users\Brano\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
Obrázek
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“