Preventivka

[hannah3]

Dobrý den, prosím o preventivku, dík. H.
Logfile of random's system information tool 1.08 (written by random/random)
Run by uživatel at 2015-03-27 10:00:38
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 56 GB (47%) free of 119 GB
Total RAM: 4061 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:00:41, on 27.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe
C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files\trend micro\uživatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1427440364
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7209 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\SmartLogon\smartlogon.exe" -switch-3be2f036c43042cdb03588591c9325c3
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files\ATKGFNEX\GFNEXSrv.exe"
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {C1CCF7B4-DE8B-4E30-BB28-9CC5B3711618}
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe"
"C:\Program Files (x86)\ASUS\ControlDeck\ControlDeckStartUp.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe"
"C:\Program Files (x86)\ASUS\ASUS CopyProtect\aspg.exe"
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe"
Atouch64.exe
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Windows\AsScrPro.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
ATKOSD.exe
KBFiltr.exe
WDC.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe"
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe32_ Global\UsGthrCtrlFltPipeMssGthrPipe32 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516
C:\Windows\system32\AUDIODG.EXE 0x7a0
"C:\Users\uživatel\Documents\INSTALAČKY\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac}]
Windows Live Family Safety Browser Helper Class - C:\Program Files\Windows Live\Family Safety\fssbho.dll [2008-12-08 68960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-01-07 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-01-11 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-11-18 2919168]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-08-25 415256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=1427440364 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADSMTray]
C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMTray.exe [2009-06-24 272952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AmIcoSinglun64]
C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2009-09-01 323584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2010-10-11 3058304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS WebStorage]
C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe [2010-03-16 1754448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe [2009-08-20 170624]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]
C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe [2009-08-17 6859392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boingo Wi-Fi]
C:\Program Files (x86)\Boingo\Boingo Wi-Fi\Boingo.lnk [2010-10-11 2429]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-11 689488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ETDWare]
C:\Program Files\Elantech\ETDCtrl.exe [2009-09-30 621440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HControlUser]
C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe [2009-06-19 105016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HDAudDeck]
C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2009-09-17 2245120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
C:\Windows\system32\hkcmd.exe [2010-08-25 386584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
C:\Windows\system32\igfxtray.exe [2010-08-25 161304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
C:\Windows\system32\igfxpers.exe [2010-08-25 415256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Setwallpaper]
c:\programdata\SetWallpaper.cmd []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]
C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]
C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe [2010-10-11 12862]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SRS Premium Sound.lnk]
C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe [2010-10-11 156952]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-11-20 1021128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2015-03-27 10:00:38 ----D---- C:\rsit
2015-03-26 12:52:39 ----D---- C:\ProgramData\GRETECH
2015-03-25 08:46:41 ----A---- C:\Windows\system32\generaltel.dll
2015-03-25 08:46:41 ----A---- C:\Windows\system32\appraiser.dll
2015-03-25 08:46:41 ----A---- C:\Windows\system32\acmigration.dll
2015-03-25 08:46:40 ----A---- C:\Windows\system32\invagent.dll
2015-03-25 08:46:40 ----A---- C:\Windows\system32\devinv.dll
2015-03-25 08:46:40 ----A---- C:\Windows\system32\aepic.dll
2015-03-25 08:46:40 ----A---- C:\Windows\system32\aepdu.dll
2015-03-25 08:46:40 ----A---- C:\Windows\system32\aeinv.dll
2015-03-11 08:49:45 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 08:49:45 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 08:49:45 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 08:49:45 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 08:49:45 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 08:49:45 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 08:49:45 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 08:49:45 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 08:49:45 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 08:49:45 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 08:49:35 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 08:49:35 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 08:49:35 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 08:49:34 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 08:49:32 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 08:49:30 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 08:49:30 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 08:49:29 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 08:49:29 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 08:49:28 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 08:49:26 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 08:49:26 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 08:49:25 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 08:49:25 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 08:49:25 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 08:49:25 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 08:49:23 ----A---- C:\Windows\system32\evr.dll
2015-03-11 08:49:22 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 08:49:20 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 08:49:20 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 08:49:19 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 08:49:19 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 08:49:19 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 08:49:18 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 08:49:18 ----A---- C:\Windows\system32\winresume.exe
2015-03-11 08:49:17 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 08:49:17 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 08:49:17 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 08:49:17 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 08:49:17 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 08:49:16 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 08:49:16 ----A---- C:\Windows\system32\mf.dll
2015-03-11 08:49:15 ----A---- C:\Windows\system32\winload.exe
2015-03-11 08:49:12 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 08:49:12 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 08:49:12 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 08:49:12 ----A---- C:\Windows\system32\ci.dll
2015-03-11 08:49:12 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 08:49:11 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 08:49:11 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 08:49:11 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 08:49:11 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 08:49:11 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 08:49:11 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 08:49:10 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 08:49:10 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 08:49:10 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 08:49:10 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 08:49:10 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 08:49:10 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 08:49:09 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 08:49:09 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 08:49:08 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 08:49:07 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 08:49:07 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 08:49:07 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 08:49:05 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 08:49:05 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 08:49:05 ----A---- C:\Windows\system32\smss.exe
2015-03-11 08:49:05 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 08:49:05 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 08:49:04 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 08:49:03 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 08:49:03 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 08:49:03 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 08:49:03 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 08:49:03 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 08:49:03 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 08:49:03 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 08:49:03 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 08:49:03 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 08:49:02 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 08:49:02 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 08:49:02 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 08:49:02 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 08:49:02 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 08:49:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 08:49:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 08:49:01 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 08:49:01 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 08:49:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 08:49:00 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 08:48:19 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 08:48:19 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 08:48:18 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 08:48:17 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 08:48:11 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 08:48:11 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 08:48:11 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 08:48:11 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 08:48:11 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 08:48:11 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 08:48:11 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 08:48:10 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 08:48:10 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 08:48:10 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 08:48:09 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 08:48:09 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 08:48:09 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 08:48:09 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 08:48:08 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 08:48:08 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 08:48:08 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 08:48:08 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 08:48:08 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 08:48:08 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 08:48:07 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 08:48:07 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 08:48:03 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 08:48:02 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 08:48:02 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 08:48:01 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 08:47:59 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 08:47:58 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 08:47:57 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 08:47:57 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 08:47:57 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 08:47:57 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 08:47:57 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 08:47:56 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 08:47:56 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 08:47:56 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 08:47:56 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 08:47:55 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 08:47:55 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 08:47:55 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 08:47:55 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 08:47:54 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 08:47:51 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 08:47:51 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 08:47:51 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 08:47:51 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 08:47:51 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 08:47:50 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 08:47:50 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 08:47:50 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 08:47:50 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 08:47:49 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 08:47:49 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 08:47:49 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 08:47:49 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 08:47:49 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 08:47:48 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 08:47:47 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 08:47:47 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 08:47:46 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 08:47:45 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 08:47:45 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 08:47:45 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 08:47:45 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 08:47:44 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 08:47:44 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 08:47:44 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 08:47:43 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 08:47:43 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 08:47:42 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 08:47:41 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 08:47:41 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 08:47:41 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 08:47:40 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 08:47:40 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 08:47:40 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 08:47:39 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 08:47:39 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 08:47:37 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 08:47:35 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 08:47:35 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-04 08:22:01 ----A---- C:\Windows\SYSWOW64\wdi.dll
2015-03-04 08:22:01 ----A---- C:\Windows\system32\wdi.dll
2015-03-04 08:22:01 ----A---- C:\Windows\system32\powertracker.dll
2015-03-04 08:22:01 ----A---- C:\Windows\system32\perftrack.dll

======List of files/folders modified in the last 1 months======

2015-03-27 10:00:41 ----D---- C:\Windows\Temp
2015-03-27 10:00:41 ----D---- C:\Windows\Prefetch
2015-03-27 10:00:41 ----D---- C:\Program Files\Trend Micro
2015-03-27 08:33:43 ----D---- C:\Windows\system32\config
2015-03-27 08:12:42 ----D---- C:\Windows\system32\Tasks
2015-03-27 08:12:28 ----D---- C:\Windows
2015-03-26 21:34:55 ----D---- C:\Users\uživatel\AppData\Roaming\SoftGrid Client
2015-03-26 16:49:04 ----D---- C:\Windows\debug
2015-03-26 16:49:04 ----D---- C:\Users\uživatel\AppData\Roaming\Media Player Classic
2015-03-26 13:27:58 ----D---- C:\Windows\System32
2015-03-26 13:27:58 ----D---- C:\Windows\inf
2015-03-26 13:27:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-26 12:52:39 ----HD---- C:\ProgramData
2015-03-25 16:51:41 ----D---- C:\Windows\winsxs
2015-03-25 16:50:07 ----SD---- C:\Windows\system32\CompatTel
2015-03-25 16:50:07 ----D---- C:\Windows\system32\wbem
2015-03-25 16:50:07 ----D---- C:\Windows\system32\appraiser
2015-03-25 16:50:07 ----D---- C:\Windows\AppPatch
2015-03-25 16:48:18 ----SHD---- C:\System Volume Information
2015-03-24 18:01:02 ----D---- C:\Users\uživatel\AppData\Roaming\Skype
2015-03-18 08:15:02 ----D---- C:\Windows\system32\catroot2
2015-03-12 16:51:26 ----D---- C:\Windows\rescache
2015-03-11 09:48:21 ----SHD---- C:\Boot
2015-03-11 09:44:52 ----D---- C:\Windows\SysWOW64
2015-03-11 09:44:50 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-11 09:44:50 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-11 09:44:50 ----D---- C:\Windows\system32\en-US
2015-03-11 09:44:50 ----D---- C:\Windows\system32\drivers
2015-03-11 09:44:50 ----D---- C:\Windows\system32\Dism
2015-03-11 09:44:50 ----D---- C:\Windows\system32\cs-CZ
2015-03-11 09:44:50 ----D---- C:\Program Files\Windows Media Player
2015-03-11 09:44:50 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-11 09:44:49 ----D---- C:\Windows\system32\CodeIntegrity
2015-03-11 09:44:49 ----D---- C:\Windows\system32\Boot
2015-03-11 09:44:46 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-11 09:44:46 ----D---- C:\Program Files\Internet Explorer
2015-03-11 09:44:45 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 09:42:30 ----SHD---- C:\Windows\Installer
2015-03-11 09:37:26 ----D---- C:\Windows\system32\MRT
2015-03-11 09:33:56 ----A---- C:\Windows\system32\MRT.exe
2015-03-05 08:24:32 ----D---- C:\Windows\tracing

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AsDsm;AsDsm; C:\Windows\system32\drivers\AsDsm.sys [2010-10-11 35384]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-08-06 408600]
R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2009-06-18 15928]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-07-29 141264]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files\ATKGFNEX\ASMMAP64.sys [2007-07-24 14904]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-09-03 170104]
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2010-07-29 126320]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2009-10-15 117760]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-08-23 56320]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATK64AMD.sys [2009-05-13 15928]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-08-12 1799680]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2009-07-09 1222144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2009-08-21 44032]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2008-12-08 61792]
S3 IT9135BDA;IT9135 BDA Devices; C:\Windows\System32\Drivers\IT9135BDA.sys [2010-02-03 113280]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2008-08-28 25600]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2011-08-17 9216]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]
S3 WimFltr;WimFltr; C:\Windows\system32\DRIVERS\wimfltr.sys [2008-05-24 154168]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2009-12-08 379520]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2010-11-18 810144]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2011-05-24 1840128]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R3 ADSMService;ADSM Service; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2008-03-31 225280]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-11-18 42360]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2011-04-26 2702848]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2008-12-08 533344]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26 107912]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-01-07 1255736]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

[Márty84]

Zdravim


Neni to nahodou stejny pocitac, jako zde? http://forum.viry.cz/viewtopic.php?f=30 ... 9#p1290051


Stahnete AdwCleaner https://toolslib.net/downloads/finish/1/ a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Cleaning
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.

[hannah3]

Ahoj Márty84, ano je to ten samý počítač, nepřijalo mi to heslo (x), pak jsem změnila emailovou adresu, takže jsem se musela znovu zaregistrovat na nové emailové adrese, snad to nebude problém.
Tady ti zasílám log:

# AdwCleaner v4.113 - Logfile created 27/03/2015 at 17:40:55
# Updated 22/03/2015 by Xplode
# Database : 2015-03-27.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : uživatel - USERPVC
# Running from : C:\Users\uživatel\Downloads\adwcleaner_4.113.exe
# Option : Cleaning

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17689


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [2915 bytes] - [23/01/2014 08:59:06]
AdwCleaner[R3].txt - [2975 bytes] - [24/01/2014 12:10:39]
AdwCleaner[R4].txt - [921 bytes] - [27/03/2015 17:31:09]
AdwCleaner[R5].txt - [979 bytes] - [27/03/2015 17:35:13]
AdwCleaner[S0].txt - [3033 bytes] - [24/01/2014 12:17:54]
AdwCleaner[S1].txt - [907 bytes] - [27/03/2015 17:40:55]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [965 bytes] ##########

[Márty84]

Mit vice uctu je proti pravidlum fora. Vyberte si tedy, ktery si chcete ponechat a dalsi zrusime


Je s tim pc nejaky konkretni problem, nebo jde ciste jen o prevenci?


Vypnete antivir, at nebrani programu v praci.
Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe a ulozte nejlepe na plochu.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Do leveho okna zkopirujte tento skript (vcetne te dvojtecky pred slovem commands)

Kód: Vybrat vše

:commands
[EMPTYTEMP]
[EMPTYFLASH]
[Purity]
[CreateRestorePoint]

:services
AdobeARMservice
gupdate
SkypeUpdate
AdobeFlashPlayerUpdateSvc
gupdatem

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Adobe Speed Launcher"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Setwallpaper]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-

Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery na vas vyskoci, nebo bude zde C:\_OTM\MovedFiles\xxxxxxxx_xxxxxx (misto tech x budou cisla, predstavujici datum a cas spusteni)

[hannah3]

Víc účtů nemám, protože na dřívější (hannah2) se nedostanu, jelikož mi to nebere heslo, které jsem se sice snažila aktivovat, ale protože jsem vloni změnila jsem emailovou adresu a registrace na ni byla vázána, byla jsem nucena provést novou registraci s novou emailovou adresou, budu používat hannah3.

Jde o preventivku.
Opět jako vloni se mi na ploše objevily ikony desktop.ini a nejen na ploše, jsou všude, kam se podívám, co s tím mám dělat?


tady zasílám log:
All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: uživatel
->Temp folder emptied: 2707514 bytes
->Temporary Internet Files folder emptied: 209998891 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 5513158 bytes
->Flash cache emptied: 2184 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3092116 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 37999 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 128 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 211,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: uživatel
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTM Restore Point
========== SERVICES/DRIVERS ==========
Service AdobeARMservice stopped successfully!
Service AdobeARMservice deleted successfully!
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
File/Folder C:\Windows\*.tmp not found.
C:\Windows\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Adobe Speed Launcher deleted successfully.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Setwallpaper\ not found.
Registry key HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^FancyStart daemon.lnk\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.

OTM by OldTimer - Version 3.1.21.0 log created on 03272015_190208

[Márty84]

OK, pokud budete pouzivat jen ten jeden ucet, je to v poradku.

desktop.ini

Odkryly se skryte a systemove soubory a slozky
http://www.tipypropc.cz/jak-v-pruzkumni ... e-soubory/
Akorat vy je samozrejme misto zobrazeni nechate skryt.
Dejte vedet, jestli to zabralo.

DelFix https://toolslib.net/downloads/finish/2/

• Stahnete a spustte jako spravce
• Ponechte zatrzitkou pouze u volby Remove disinfection tools
• Kliknete na Run

Pouzijte CCleaner, vcetne opravy registru.


Pokud vse bezi jak ma, neni potreba dalsich kroku

[hannah3]

Díky, vše jsem provedla. Co se týče konfig. souborů desktop.ini, v Možnostech složky jsem dala Obnovit výchozí a zmizelo.
Ještě jednou dík a posílám na účet kilo.
Hanka

[Márty84]

Co se týče konfig. souborů desktop.ini, v Možnostech složky jsem dala Obnovit výchozí a zmizelo.

Super, taky jedna z moznosti, sikulka


Nemate vubec zac, rado se stalo!

Za prispevek dekujeme

Mejte se krasne a treba zase nekdy