Eset opět hlásí šmejdy,prosím o kontrolu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 Led 2007 12:37
Místo/Bydliště: Louny

Eset opět hlásí šmejdy,prosím o kontrolu

#1 Příspěvek od jindra.paryzek »

Logfile of random's system information tool 1.10 (written by random/random)
Run by Jindra M 5010 at 2014-09-03 11:51:01
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 532 GB (87%) free of 610 GB
Total RAM: 3068 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:51:07, on 3.9.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Jindra M 5010.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: DW WLAN Tray Service (wltrysvc) - Dell Inc. - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6183 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE" "C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe"
C:\Windows\system32\WLANExt.exe 2092432
\??\C:\Windows\system32\conhost.exe "1380676673333788394-1010868313-1008943000-1331448780-1986791668-897153145-1266647562
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService
"taskhost.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe"
"C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"
{461D2DF8-05BD-47E0-88E6-0F3E8600FD2A}
{AF8808FD-FBE1-494F-9A0E-3F1BD4F47D87}
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe" lng=1029
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe" "/base-dir=C:\Program Files (x86)\ESET\ESET Online Scanner" /lang=1029 /as
\??\C:\Windows\system32\conhost.exe "-86713811-216117182-16501707191157151298262015092-1805982510-8018911531761512999
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe28_ Global\UsGthrCtrlFltPipeMssGthrPipe28 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Users\Jindra M 5010\Desktop\Stažené soubory\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Jindra M 5010\AppData\Roaming\Mozilla\Firefox\Profiles\i22x2yqk.default-1409051676715

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=Quicksearch_1&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.179 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 14.0.0.179 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll


C:\Users\Jindra M 5010\AppData\Roaming\Mozilla\Firefox\Profiles\i22x2yqk.default-1409051676715\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19 433944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}]
Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19 364824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"=C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Jindra M 5010\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Jindra M 5010\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
C:\Program Files\Logitech\SetPointP\SetPoint.exe [2014-05-19 3100440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-08-01 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncaiknSrv]
C:\Windows\system32\mncaikn.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mncqtuaSrv]
C:\Windows\system32\mncqtua.vbe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSStp]
C:\Windows\inf\msstp.vbe [2014-03-05 1584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSU_agent]
C:\Program Files (x86)\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2012-02-28 190768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe [2013-06-20 1219]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe [2012-06-26 1516632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-07-15 2247976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~2\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Jindra M 5010^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
C:\PROGRA~2\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2014-03-25 66328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableLockWorkstation"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw64.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.l3codecp"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-09-03 09:26:31 ----D---- C:\Program Files (x86)\ESET
2014-09-03 08:41:52 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-03 00:12:44 ----D---- C:\Program Files (x86)\AMD AVT
2014-09-03 00:12:35 ----D---- C:\Program Files (x86)\AMD APP
2014-09-03 00:12:26 ----D---- C:\Program Files\Common Files\ATI Technologies
2014-09-02 23:51:14 ----AS---- C:\Windows\SYSWOW64\lcpmncaikn.exe
2014-09-02 23:51:14 ----AS---- C:\Windows\SYSWOW64\dcgmncaikn.exe
2014-09-02 23:51:12 ----AS---- C:\Windows\SYSWOW64\acumncaikn.exe
2014-09-02 12:04:12 ----D---- C:\Program Files (x86)\Microsoft Security Client
2014-09-02 12:04:03 ----D---- C:\Program Files\Microsoft Security Client
2014-09-02 10:08:47 ----D---- C:\Program Files\Logitech
2014-09-02 10:04:51 ----D---- C:\ProgramData\Logitech
2014-09-02 09:58:18 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Leadertech
2014-09-02 09:57:47 ----A---- C:\Windows\system32\drivers\LNonPnP.sys
2014-09-02 09:56:22 ----D---- C:\ProgramData\Logishrd
2014-09-02 09:56:01 ----D---- C:\Program Files\Common Files\LogiShrd
2014-09-02 09:55:40 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Logitech
2014-09-02 09:55:39 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Logishrd
2014-09-02 09:54:27 ----D---- C:\Program Files\Synaptics
2014-08-30 19:14:18 ----D---- C:\Program Files\iPod
2014-08-30 19:14:16 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-08-30 19:14:16 ----D---- C:\Program Files\iTunes
2014-08-30 19:14:16 ----D---- C:\Program Files (x86)\iTunes
2014-08-30 18:34:33 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Apple Computer
2014-08-30 18:34:27 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2014-08-30 18:33:01 ----D---- C:\ProgramData\Apple Computer
2014-08-30 18:30:12 ----D---- C:\ProgramData\Apple
2014-08-28 08:43:38 ----A---- C:\Windows\SYSWOW64\gdi32.dll
2014-08-28 08:43:38 ----A---- C:\Windows\system32\win32k.sys
2014-08-28 08:43:38 ----A---- C:\Windows\system32\gdi32.dll
2014-08-26 22:02:26 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Seznam.cz
2014-08-26 22:02:19 ----D---- C:\Program Files (x86)\Seznam.cz
2014-08-26 22:02:05 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-26 22:01:16 ----A---- C:\Windows\SYSWOW64\ssinstall-uninstall.bat
2014-08-26 22:01:14 ----A---- C:\Windows\SYSWOW64\ssins.exe
2014-08-14 08:58:58 ----A---- C:\Windows\system32\aepdu.dll
2014-08-14 08:58:57 ----A---- C:\Windows\system32\aeinv.dll
2014-08-14 08:30:23 ----A---- C:\Windows\SYSWOW64\infocardapi.dll
2014-08-14 08:30:23 ----A---- C:\Windows\SYSWOW64\icardagt.exe
2014-08-14 08:30:23 ----A---- C:\Windows\system32\infocardapi.dll
2014-08-14 08:30:23 ----A---- C:\Windows\system32\icardagt.exe
2014-08-14 08:30:19 ----A---- C:\Windows\SYSWOW64\icardres.dll
2014-08-14 08:30:19 ----A---- C:\Windows\system32\icardres.dll
2014-08-14 08:29:51 ----A---- C:\Windows\SYSWOW64\TsWpfWrp.exe
2014-08-14 08:29:51 ----A---- C:\Windows\system32\TsWpfWrp.exe
2014-08-14 08:26:12 ----A---- C:\Windows\SYSWOW64\KBDTAT.DLL
2014-08-14 08:26:12 ----A---- C:\Windows\system32\KBDTAT.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\SYSWOW64\KBDYAK.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\SYSWOW64\KBDRU1.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\SYSWOW64\KBDRU.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\SYSWOW64\KBDBASH.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\system32\KBDYAK.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\system32\KBDRU1.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\system32\KBDRU.DLL
2014-08-14 08:26:11 ----A---- C:\Windows\system32\KBDBASH.DLL
2014-08-14 08:26:02 ----A---- C:\Windows\system32\msi.dll
2014-08-14 08:26:01 ----A---- C:\Windows\SYSWOW64\msi.dll
2014-08-14 08:26:00 ----A---- C:\Windows\SYSWOW64\authui.dll
2014-08-14 08:26:00 ----A---- C:\Windows\system32\authui.dll
2014-08-14 08:25:59 ----A---- C:\Windows\SYSWOW64\msihnd.dll
2014-08-14 08:25:59 ----A---- C:\Windows\system32\msihnd.dll
2014-08-14 08:25:59 ----A---- C:\Windows\system32\consent.exe
2014-08-14 08:25:52 ----A---- C:\Windows\SYSWOW64\tzres.dll
2014-08-14 08:25:52 ----A---- C:\Windows\system32\tzres.dll
2014-08-14 08:25:46 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2014-08-14 08:25:42 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-08-14 08:25:42 ----A---- C:\Windows\system32\shell32.dll
2014-08-14 08:25:36 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-08-14 08:25:36 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-08-14 08:25:35 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-08-14 08:25:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-08-14 08:25:34 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-08-14 08:25:34 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-08-14 08:25:34 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-08-14 08:25:34 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-08-14 08:25:34 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-14 08:25:34 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-08-14 08:25:33 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-08-14 08:25:32 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-08-14 08:25:31 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-08-14 08:25:31 ----A---- C:\Windows\system32\iernonce.dll
2014-08-14 08:25:31 ----A---- C:\Windows\system32\ie4uinit.exe
2014-08-14 08:25:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-08-14 08:25:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-08-14 08:25:30 ----A---- C:\Windows\system32\urlmon.dll
2014-08-14 08:25:30 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-08-14 08:25:28 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-08-14 08:25:28 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-08-14 08:25:28 ----A---- C:\Windows\system32\msfeeds.dll
2014-08-14 08:25:28 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-08-14 08:25:28 ----A---- C:\Windows\system32\dxtmsft.dll
2014-08-14 08:25:27 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-08-14 08:25:26 ----A---- C:\Windows\system32\iesetup.dll
2014-08-14 08:25:25 ----A---- C:\Windows\system32\iedkcs32.dll
2014-08-14 08:25:22 ----A---- C:\Windows\system32\iertutil.dll
2014-08-14 08:25:21 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-08-14 08:25:21 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-08-14 08:25:20 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-08-14 08:25:19 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-08-14 08:25:19 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-08-14 08:25:19 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-08-14 08:25:18 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-08-14 08:25:18 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2014-08-14 08:25:18 ----A---- C:\Windows\system32\jsproxy.dll
2014-08-14 08:25:16 ----A---- C:\Windows\system32\ieui.dll
2014-08-14 08:25:16 ----A---- C:\Windows\system32\dxtrans.dll
2014-08-14 08:25:15 ----A---- C:\Windows\system32\ieframe.dll
2014-08-14 08:25:14 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-08-14 08:25:14 ----A---- C:\Windows\system32\mshtmled.dll
2014-08-14 08:25:13 ----A---- C:\Windows\system32\jscript9diag.dll
2014-08-14 08:25:13 ----A---- C:\Windows\system32\ieUnatt.exe
2014-08-14 08:25:12 ----A---- C:\Windows\system32\vbscript.dll
2014-08-14 08:25:12 ----A---- C:\Windows\system32\jscript9.dll
2014-08-14 08:25:12 ----A---- C:\Windows\system32\ieapfltr.dll
2014-08-14 08:25:11 ----A---- C:\Windows\system32\wininet.dll
2014-08-14 08:25:09 ----A---- C:\Windows\system32\msrating.dll
2014-08-14 08:25:09 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-08-14 08:25:06 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-14 08:25:06 ----A---- C:\Windows\system32\mshtml.dll
2014-08-14 08:23:43 ----A---- C:\Windows\system32\rpcrt4.dll
2014-08-14 08:23:42 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll
2014-08-12 10:25:34 ----SHD---- C:\$RECYCLE.BIN
2014-08-12 09:22:53 ----D---- C:\Windows\temp
2014-08-12 09:22:50 ----A---- C:\ComboFix.txt
2014-08-12 08:30:24 ----D---- C:\Windows\erdnt
2014-08-12 00:55:57 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2014-09-03 11:51:05 ----D---- C:\Program Files\trend micro
2014-09-03 09:26:31 ----RD---- C:\Program Files (x86)
2014-09-03 09:22:37 ----D---- C:\Windows\System32
2014-09-03 09:22:37 ----D---- C:\Windows\inf
2014-09-03 09:22:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-09-03 09:19:17 ----D---- C:\Windows
2014-09-03 08:20:41 ----D---- C:\Windows\system32\config
2014-09-03 08:13:19 ----D---- C:\Windows\SoftwareDistribution
2014-09-03 00:20:12 ----D---- C:\Windows\debug
2014-09-03 00:19:33 ----D---- C:\Windows\system32\catroot2
2014-09-03 00:19:17 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\Wise Care 365
2014-09-03 00:18:21 ----D---- C:\Windows\SysWOW64
2014-09-03 00:18:21 ----D---- C:\Windows\system32\catroot
2014-09-03 00:16:56 ----D---- C:\Windows\system32\drivers
2014-09-03 00:12:48 ----SHD---- C:\Windows\Installer
2014-09-03 00:12:48 ----D---- C:\Config.Msi
2014-09-03 00:12:47 ----D---- C:\ProgramData\AMD
2014-09-03 00:12:26 ----D---- C:\Program Files\Common Files
2014-09-03 00:12:26 ----D---- C:\Program Files (x86)\Common Files
2014-09-03 00:11:34 ----D---- C:\Windows\system32\DriverStore
2014-09-02 23:51:12 ----D---- C:\Windows\SYSWOW64\bitstreams
2014-09-02 12:55:30 ----D---- C:\Windows\system32\Tasks
2014-09-02 12:04:03 ----RD---- C:\Program Files
2014-09-02 10:11:48 ----D---- C:\Windows\pss
2014-09-02 10:04:51 ----D---- C:\ProgramData
2014-09-02 10:01:24 ----SHD---- C:\System Volume Information
2014-08-30 18:34:27 ----DC---- C:\Windows\system32\DRVSTORE
2014-08-29 09:40:50 ----D---- C:\Users\Jindra M 5010\AppData\Roaming\WiseUpdate
2014-08-28 09:01:42 ----D---- C:\Windows\winsxs
2014-08-27 15:12:41 ----D---- C:\Program Files\CCleaner
2014-08-26 14:47:04 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-08-25 06:53:42 ----N---- C:\Windows\system32\MpSigStub.exe
2014-08-22 13:01:03 ----D---- C:\Windows\system32\NDF
2014-08-15 13:33:11 ----D---- C:\Windows\rescache
2014-08-14 23:06:16 ----D---- C:\Windows\Microsoft.NET
2014-08-14 23:03:54 ----RSD---- C:\Windows\assembly
2014-08-14 09:02:14 ----SD---- C:\Windows\system32\CompatTel
2014-08-14 08:49:25 ----RSD---- C:\Windows\Fonts
2014-08-14 08:49:25 ----D---- C:\Windows\ehome
2014-08-14 08:49:21 ----D---- C:\Windows\SYSWOW64\en-US
2014-08-14 08:49:21 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-08-14 08:49:21 ----D---- C:\Windows\system32\cs-CZ
2014-08-14 08:49:21 ----D---- C:\Program Files\Internet Explorer
2014-08-14 08:49:20 ----D---- C:\Windows\system32\en-US
2014-08-14 08:49:20 ----D---- C:\Windows\PolicyDefinitions
2014-08-14 08:49:20 ----D---- C:\Program Files (x86)\Internet Explorer
2014-08-14 08:38:49 ----D---- C:\Windows\system32\MRT
2014-08-14 08:35:51 ----A---- C:\Windows\system32\MRT.exe
2014-08-12 09:18:53 ----A---- C:\Windows\system.ini
2014-08-12 09:18:48 ----D---- C:\Windows\system32\drivers\etc
2014-08-12 09:16:58 ----D---- C:\Windows\SYSWOW64\drivers
2014-08-12 09:14:08 ----D---- C:\Windows\AppPatch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 AODDriver4.2.0;AODDriver4.2.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [2013-09-19 59648]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-27 6790144]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-27 220672]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-24 94208]
R3 BCM43XX;Ovladač pro bezdrátovou síťovou kartu DW WLAN; C:\Windows\system32\DRIVERS\bcmwl664.sys [2014-05-21 4716608]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2014-03-19 77592]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2014-03-19 13080]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2014-03-19 76568]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2014-03-19 59160]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-06-17 515584]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-07-15 1381936]
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-04-08 124944]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-27 6790144]
S3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys [2014-05-21 22592]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2010-09-30 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2010-09-30 180736]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2014-06-10 54784]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 WinUsb;YunOS USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 WiseHDInfo;WiseHDInfo; \??\C:\Program Files (x86)\Wise\Wise Care 365\WiseHDInfo64.dll [2014-06-04 11304]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-27 202752]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-12-06 344064]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-17 258048]
R2 wltrysvc;DW WLAN Tray Service; C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE [2014-05-21 48128]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-08-26 262320]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-07-25 111616]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-08-01 641352]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2014-03-25 357144]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-03 114288]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-05-21 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Přílohy
trojan.png
trojan.png (77.96 KiB) Zobrazeno 879 x

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Eset opět hlásí šmejdy,prosím o kontrolu

#2 Příspěvek od JaRon »

ahoj,
zaujimalo by ma aky tam bol antivir doteraz a preco na BCM nereagoval :???:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 Led 2007 12:37
Místo/Bydliště: Louny

Re: Eset opět hlásí šmejdy,prosím o kontrolu

#3 Příspěvek od jindra.paryzek »

Mám Microsoft Security essentials a proč nereagoval...nevím :(
Ale všiml jsem si,že mi nenajížděl se systémem a tak jsem jej odinstaloval a znovu nainstaloval...teď už startuje

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Eset opět hlásí šmejdy,prosím o kontrolu

#4 Příspěvek od JaRon »

1. MSE - antivir, ktory nereaguje na jednu z najviac rozsirenych smejdov - BCM - je s prepacenim "na rit antivir"
2. co vie ESET odstranit, nechaj odstranit
3. vycisti PC s MBAM
4. vypni obnovu systemu - restart - zapni obnovu systemu
5. nainstaluj nejaky normalny AV a prescanuj nim PC
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

jindra.paryzek
Návštěvník
Návštěvník
Příspěvky: 469
Registrován: 04 Led 2007 12:37
Místo/Bydliště: Louny

Re: Eset opět hlásí šmejdy,prosím o kontrolu

#5 Příspěvek od jindra.paryzek »

Poradíš mi nějaký dobrý antivir?

Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Eset opět hlásí šmejdy,prosím o kontrolu

#6 Příspěvek od JaRon »

z free >> Avast, Bitdefender, Avira
ostatne z http://forum.viry.cz/viewtopic.php?f=29&t=6152
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum
https://platba.viry.cz/payment/

Odpovědět